HP-UX Host Intrusion Detection System Version 4.3 administrator guide

Figure 6-1 Host Manager Screen
Closing the Host Manager Screen
To close the Host Manager screen, complete the following steps:
1. On the Host Manager screen, choose one of the following options:
• Select File > Close.
• Press Ctrl+C.
2. If you have modified but not saved the current host list, the Host List Manager Modified
dialog box is displayed. Select Yes to save the current list in the current file. The default host
list file is /etc/opt/ids/gui/config/sentinal.hosts. Select No to discard your
changes without saving.
If the list is not saved, the settings are still retained during the current System Manager session.
The settings are displayed if you reopen the Host Manager screen.
If the list is still unsaved when you exit from the System Manager screen, you are prompted
again. If you select No, the list revisions are lost.
Adding New Hosts
You can add agent hosts in the following ways:
• Manually add a host. For more information, see “Adding a New Host Manually” (page 84).
• Add a host from /etc/hosts. For more information, see “Adding New Hosts from /etc/
hosts” (page 87).
• Add a host from a file. For more information, see “Adding New Hosts from a File” (page 87).
• Add a host by creating X.509 certificates and restarting the System Manager. For more
information, see “Setting Up HP-UX HIDS Secure Communications” (page 29).
NOTE: HP-UX HIDS uses the IP address to identify and communicate with the agent host. The
host name is displayed in the Host fields and is part of the alert and error log file names. As a
result, the final value of the Host field can have any value you choose.
It is possible to have duplicate host names with different IP addresses. If both refer to different
hosts with running agents, their alert and error messages are stored in the same alert and error
log files on the administration system.
Adding a New Host Manually
To add a new host manually, follow these steps:
84 Using the Host Manager Screen