The DSM Explorer › Control Panel › Configuration Folder › Configuration Policy › Default Computer Policy (or User-Defined Policy) Node › Common Components Policy Group › ENC Gateway Policy Group › ENC Gateway and Client Auditing Policy Group › Audit Categories Policy Group

Audit Categories Policy Group

The Audit Categories policy group lets you view or edit the policy for ENC audit message categories.

Audit messages are grouped into categories according to the topic of the message. This allows administrators to enable or disable whole groups of messages. By default, all categories except Error are disabled so that the event log is not overwhelmed with ENC messages. In general, you enable just the particular messages or categories that you need to achieve some purpose. A typical example would be to monitor failed logons by enabling the Authentication and Authorization categories. If there are many of these, it may indicate an attack from somewhere.

You can modify policy parameter values by double-clicking a policy to display the Setting Properties dialog. There is a parameter for each category whose value is either True (enabled) or False (disabled).

The audit message categories are as follows:

(Audit) Authentication

This category contains messages related to the authentication of clients, servers, and machines.

Default: False, <locally managed>

(Audit) Authorization

This category contains messages related to authorization operations carried out by the ENC Gateway.

Default: False, <locally managed>

(Audit) Client messages

This category contains messages about the ENC Client. Note that some client related messages may appear in other categories such as Error, Connection, or Authorization instead of this one.

Default: False, <locally managed>

(Audit) Connection messages

This category contains messages related to connections made by the ENC Client or ENC Gateway.

Default: False, <locally managed>

(Audit) Error messages

This category contains all error messages from all components. This category is usually enabled.

Default: True, <locally managed>

(Audit) Listen

This category contains messages related to listen operations carried out by the ENC Client.

Default: False, <locally managed>

(Audit) Name lookups

This category contains messages related to host name resolution operations carried out by the ENC Client or ENC Gateway.

Default: False, <locally managed>

(Audit) Registration

This category contains messages related to the registration and deregistration of ENC Clients and the ENC Gateway.

Default: False, <locally managed>

(Audit) Server messages

This category contains messages about the ENC Gateway not related to connection, authorization, or errors.

Default: False, <locally managed>