H3c-technologies H3C Intelligent Management Center User Manual download pdf (Page 53)

5.Managing NAT audit

NAT audit tasks allow you to audit user behaviors according to the IP addresses and the port before

and after translation.

Viewing NAT audit task details

1. Click the Service tab.

2. From the navigation tree, select Traffic Analysis and Audit > Settings.

3. The Settings page appears.

4. Access the Settings page.

5. Click the User Behavior Audit Management link or icon

The User Behavior Audit Management page appears and displays all user behavior audit tasks

that have been added.

6. Click a user behavior task whose type is NAT.

The Custom NAT Audit Detail page appears.

Basic Info area

{ Name—Name of the NAT audit task.

{ Server—Name of the UBA server that audits user behaviors for the NAT audit task.

{ Reader—Operator groups that have the right to view the task.

NAT Condition area

{ NAT IP—Source IP address after translation.

{ NAT Port—Source port number after translation.

{ Operator—Reason why NAT flow records are generated: Unlimited, Reserved, Ended

Normally, Aged upon Timeout, Aged upon Configuration Change, Aged for Resource

Insufficiency, NAT Mapping, Long-lasting, Removed Due to Substitution, Creation Records,

Undefined Flows, or Others.

Audit Condition area

{ Custom Query—Query type for the audit conditions: Meet All or Meet Any.

{ Access User—Account used by the access user that is managed by UAM.

{ Terminal Type—Type of the endpoint used by the access user.

{ Operating System—Operating system of the endpoint used by the access user.

{ Source—Source IP address before translation.

{ Destination—Destination IP address before translation.

{ Source Port—Source port number before translation.

{ Destination Port—Destination port number before translation.

{ Protocol—Protocol type used by the NAT packet: Unlimited, TCP, UDP, ICMP, or IPv6-ICMP.

{ Application—Applications used by the NAT packet.

{ Device—IP address of the device or probe that generates flow records.

1 2 ... 48 49 50 51 52 53 54 55 56 57 58 ... 83 84

No comments

H3c-technologies H3C Intelligent Management Center User Manual Page 53