Tripwire Enterprise Server Network Nodes, Reports, and DashboardsVincent Fox and Doreen MeyerUC Davis, Information and Educational TechnologyAugust 9, 2006

Network Device NodeA network device node can be any router, switch, firewall, load balancer, or unix-compliant system

Adding a Network Device Node

Adding a Network Device Node

Adding a Network Device Node

Adding a Network Device Node

Adding a Network Device Node

Adding a Network Device Node

Adding a Network Device Node

Network Device RulesSee User Guide p. 79Configuration File Rules check ONLY config files of many common hardware devices.COVR Command Output Validation Rules. Useful to check any runtime aspect of a device.Example: netstat -nr

DemoVincent demo of network device rules applied against a NetScreen firewall and a UNIX system.

ReportsUse reports to identify trends and problem areas.

Report Manager

Report Groups

Report Group PermissionAny user can create a report.System report group: check boxUser report group: do not check boxSystem report group: user must have Manage System Reports permission

New Report

Report TypesChange process complianceChange rateChange varianceChange windowChanged elementsFrequently changed nodes

Changes by node or groupChanges by severityDetailed changesDevice inventoryElementsFrequently changed elements

Report TypesLast node check statusMissing elementsMonitoring policyNodes with changesReference node varianceSystem access controlSystem logUnchanged elementsUser rules

Change Variance Report

Report CriteriaActionsChange typesChartsCompare nodesCurrent versionsElementsFrequencyGeneralLinksMessageMessage filter

Message filterNodePackagesReference NodeRolesRulesSeverity ratingsSortingTasksTime rangeUsersUser names

Change Variance Criteria

Change Variance Criteria

Change Variance Criteria

Change Variance Criteria

Change Variance Criteria

Changes by Severity

Changes by Severity Criteria

Creating a Report Task

Creating a Report Task

Creating a Report Task

Creating a Report Task

DashboardsUse Dashboards to monitor reports.

Creating a New Dashboard

Creating a New Dashboard

Creating a New Dashboard

Creating a New Dashboard

QuestionsQuestionsOngoing discussion formatEvaluation

Contactsucdtripwire@ucdavis.edu - class mailing listVincent Fox - vbfox@ucdavis.eduDoreen Meyer - dimeyer@ucdavis.eduBob Ono - raono@ucdavis.eduPaul Singh - pasingh@ucdavis.eduSoftware - software@ucdavis.edu