iRecorder Reference Guide for SiteMinder Web Access Manager › eTrust Audit Overview › Audit Policy Manager › How the Policy Manager is Involved in Event Processing

How the Policy Manager is Involved in Event Processing

While default policy rules are provided and available for use after you install eTrust Audit, you must activate and distribute them to make them take effect on the servers where you have installed Clients. Therefore, to begin receiving events on any Client, an administrator must do the following:

1. Create ANs and AN groups.
2. Modify default policy rules (or create new ones) and associate the policy rules with an AN group.
3. Activate the policy rules.
4. Distribute the policy rules to the appropriate Clients.

Based on the rules, events are filtered and routed to the various other components of eTrust Audit.

See the Audit Management Guide for information on how to create a policy, define groups of ANs, and distribute policies to AN groups.