EMC Isilon OneFS can audit system configuration events and SMB protocol access events on the EMC Isilon cluster
Enable Auditing
- In the Settings section, select Enable Configuration Change Auditing and Enable Protocol Access Auditing.
- Protocol Access Auditing currently supports SMB.
- In the Audited Zones section click Add Zones.
- Protocol auditing must be enabled and then configured on a per-Access Zone basis.
Select Access Zone
- In the Select Zones window, select System. Click Add Zones.
- The System Access Zone is the default Access Zone on an Isilon cluster.
Save Changes
- Scroll down. On the right hand side click Save Changes. The Event Forwarding section is used for third-party audit application integration.
- Currently the only third party vendor for auditing supported is Varonis.
Isilon Student Guide Foundations
Useful Link
No comments:
Post a Comment