Auditing the Network

Introduction

Auditing the Network is for administrative staff (auditors, supervisors, administrators, and operators) of NetWare^® Enhanced Security servers. It is not intended for nonadministrative network users.

The purpose of this manual is to

• Show individual auditors, acting independently of network supervisors and others, how to audit network event transactions.
• Show auditors how to audit Novell Directory Services^TM (NDS^TM) events and events specific to a volume's file system or server.

Auditing the Network, when combined with the NetWare Enhanced Security Manual, addresses the recommended content of the Guidelines for Writing Trusted Facility Manuals [NCSC-TG-016] but, as described in Paragraph 1.3 of that manual, presents the information in a different order and format than the recommended outline.

NOTE:  In Novell documentation, an asterisk denotes a trademarked name belonging to a third-party company. Novell trademarks are denoted with specific trademark symbols, such as ^TM.

This manual contains NetWare Enhanced Security information that describes the effective use and administration of the NetWare server's audit mechanisms and the NetWare Enhanced Security AUDITCON (AUDIT CONsole) utility.

Auditing the Network replaces Chapter 8, Auditing NetWork Events, of the NetWare 4.1 Supervising the Network manual. It describes procedures for

• Controlling access to audit data
• Protecting the audit utilities
• Guarding against loss of the audit configuration and audit data
• Maintaining an audit console log

NetWare Enhanced Security