User guide

8
LCE Manager and SecurityCenter Client Management
Starting with LCE Manager and SecurityCenter versions 4.6, authorization and revocation of client policies can be
performed within the management GUIs. Support for policy creation and change is planned for future releases.
For example, if you have multiple LCE Clients installed on our network, the configuration files were set to point to one LCE
Server when they were initially installed. The following screenshot shows that all LCE Clients have been authorized but
one:
Default LCE policies are included in the LCE content feed. For information on how to customize policies for use within
your organization, see the LCE Client Manager Command Line Options section later in this document.
To authorize a new client, highlight the entry and then click “Authorize”. Once a client has been authorized, the LCE
Server can accept data from that client using the policy listed.
To change a policy or revoke authorization, click on the appropriate buttons after highlighting the client(s) you wish to
configure.
LCE Client Manager
The LCE Client Manger is used to manage clients of version 4.0 and higher to a LCE server 4.0 or higher.
Previous clients may connect to the LCE server 4.0 and higher using the previous configuration method via
the lce.conf configuration file.
The LCE Client Manager is a feature introduced in LCE 4.0 for use with all clients of version 4.0 and higher. This
command line tool is used on the LCE server to manage the LCE Client access to the server and to manage the
configuration files of the attached clients via policy files. The tool may be used in an interactive method or using command
line options to facilitate scripting of some routine tasks that do not require a response.
The configurations are managed through the use of the Policy Map. The Policy Map contains a list of the managed clients
and key information about them such as the IP address, assigned policy, client OS, and client type (log client, NetFlow,
Network Monitor, WMI Monitor, etc.). When changes are made with the LCE Client Manager utility and saved, the Policy
Map is reloaded with the new information and is ready for the LCE server to use without restarting the LCE server
process.