The Impero Connect Host and Guest have a variety of options for logging Impero activity. Session and connection events as well as a variety of configuration changes to the module can be sent to the Impero log.
Log destination options include a local text file, a Impero Security Server (log server), the Windows Event log, or to a third party log server using SNMP traps. Impero activity events can be sent to any or all of these destinations. To locate these settings in the Host or Guest, go to Tools>Log Setup.
At a minimum, it is recommended that the Host module be configured to log to a local text file. In the Host module go to Tools>Log Setup. In the Log Setup tab add a checkmark next to the Log Locally option then proceed to the Impero Local tab and make use of the Select All button to send all log-able events to the local log file.
Most users interested in logging may also want to include additional details about the Guest that is connecting to a Host. This can be achieved through the use of custom name options. In the Host return to the Log Setup tab. Check the box for Custom Guest name for the Connection and Session log events. Then make use of the drop-down menu to add items to the log for additional details. Each time you select an option from this drop-down menu it adds a code to the field that adds the additional detail to the log. For example, if you choose the option Logged on Windows User it will add the custom name code %L. Additional items can be added by making additional selections. If more than one item is added then each item should be separated by a semi-colon and space. For example, the entry for Custom Guest name for Connection and Session log events could look like this:
%C; %A; %L; %I; %U
This entry adds the Guest's computer name, IP address, logged on Windows user name, Guest ID, and the user name that the Guest used to authenticate to the Host for all connection and session events on the Host.
Similarly, additional details about the Host could be added to the Host's log by checking the box to use Custom Hostname for all log events. An example of the Host options could look like this:
%C; %A; %L; %I
This entry would add the Host's computer name, IP address, logged on Windows user name, and the Host ID to log events.
Making use of these custom names adds important information to the logs for organizations that require detailed audit logs. Every log event also includes the Guest ID or Host ID as well as a date and time stamp.
If multiple destinations are desired for the Impero activity log be sure to visit the different tabs in the Log setup and choose the log events that are to be sent to that target.
Comments
0 comments
Please sign in to leave a comment.