ScriptLogic is now Quest Software

Installation and Configuration of Enterprise Security Reporter and File System Auditor

Introduction
This one day, instructor-led course provides students with the knowledge and skills to Audit File Servers and Domain Information using Enterprise Security Reporter and File System Auditor.

Audience
This course is intended for administrators of File Servers which are responsible for Security and Audits.

Prerequisites
Prior to attending this course, students must have experience with:

• Network Administration using Windows® NT Server
• Network Administration using Windows® Server 2000/2003/2008

Students must also have an understanding of the following concepts:

• Domain Auditing
• NTFS Permissions
• Share Permissions
• File Permissions
• Folder Permissions
• Auditing

Course Materials

Course Outline

Introductions and Course Overview

• Overview
• Introductions
• Facilities
• Course Materials
• Course Prerequisites
• ScriptLogic Information

What is Enterprise Security Reporter?

• Enterprise Security Reporter Overview
• Comprehensive Discovery
• Built-in and Custom Reports
• Review: What is Service Explorer?

Installation of Enterprise Security Reporter  

• Installing Enterprise Security Reporter
• Supported Discovery Console Platforms
• Supported Reporting Console Platforms
• Upgrading Enterprise Security Reporter
• Installing the Discovery Console
• Installing the Reporting Console
• Licensing Enterprise Security Reporter
• Lab: Installing Enterprise Security Reporter
• Review: Installing Enterprise Security Reporter

Database Management

• Database Utilities
• Creating / Removing a Database
• Increasing / Shrinking a Database
• Running a SQL Script
• Viewing Database Statistics
• Attaching / Detaching a Database
• Truncating the Transaction Log
• Saving Connection Information
• Performing Database Maintenance
• Resetting Database Security
• Switching the Server Security Mode
• Setting the “SA” Password
• Moving Database to Another Server
• Using the Command-Line Utility
• Lab: Database Management
• Review: Database Management

Enterprise Security Reporter Discovery Console

• The Discovery Console Overview
• Installing the Discovery Engine
• Setting Discovery Console Options
• Connecting to the Discovery Database
• Setting Global Discovery Options
• Configuring Domains for Discovery
• Configuring Computers for Discovery
• Using Discovery Groups
• Discovery Configurations
• Using Enterprise Scopes
• Scheduling Discovery Jobs
• Launching a Discovery
• Managing the Discovery Server
• Managing Discovery Jobs
• Managing Licenses
• Command-Line Utilities
• Lab: Discovery Console
• Review: Discovery Console

Reporting with Enterprise Security Reporter

• Enterprise Security Reporter Reporting Overview
• Configuring the Reporting Console
• Global Reports Available
• Reporting with Enterprise Security Reporter
• Managing Reports
• Viewing Discovery Logs
• Using the Command Line Utility
• Lab: Reporting with Enterprise Security Reporter
• Review: Reporting with Enterprise Security Reporter

Appendix A: Review Questions and Answers

• Review: What is Enterprise Security Reporter?
• Review: Installing Enterprise Security Reporter
• Review: Database Management
• Review: Discovery Console
• Review: Reporting with Enterprise Security Reporter

Appendix B: Step by Step Lab’s

• Lab: Installing Enterprise Security Reporter
• Lab: Database Management
• Lab: Discovery Console
• Lab: Reporting with Enterprise Security Reporter

Appendix C: Troubleshooting

• Discovery Engine Service Marked for Deletion
• Setting the Frequency of Discovery Status Updates
• Uninstalling the Discovery Engine
• Unlocking the Discovery Console
• Security Problems with the Reporting Database
• The system file is not suitable for running MS-DOS and Microsoft Windows Applications
• Discovery Console.exe application has generated an exception that could not be handled
• How to upgrade directly from ESR 3.0 to ESR 3.02

Appendix D: Glossary

• Glossary

What is File System Auditor?

• File System Auditor Overview
• Native Auditing versus File System Auditor
• File System Auditor Compliance Matrix
• Review: What is File System Auditor?

Installing File System Auditor

• File System Auditor
• Environmental Considerations
• Installing File System Auditor
• Applying a License File
• Lab: Installing File System Auditor
• Review: Installing File System Auditor

Configuring File System Auditor

• Configuring File System Auditor
• Agent Configuration Console
• Adding a File Server
• Installing the Agent
• Setting Path Filters
• Setting Process Exclusion Filters
• Setting User Exclusion Filters
• Changing Database Settings
• Changing Advanced Settings
• Setting Default Filters
• Purging the Audit Database
• Lab: Configuring File System Auditor
• Review: Configuring File System Auditor

Database Management

• Database Utilities
• Creating / Removing a Database
• Increasing / Shrinking a Database
• Running a SQL Script
• Viewing Database Statistics
• Attaching / Detaching a Database
• CheckPoint and Truncate Log
• Saving Connection Information
• Performing Database Maintenance
• Resetting Database Security
• Changing the Security Mode
• Setting the “SA” Password
• Moving Database to Another Server
• Lab: Database Management
• Review: Database Management

Reporting with File System Auditor

• Reporting with File System Auditor
• Examining the Report Configuration Console
• Creating a Report
• Connecting to a Database
• Setting Filters
• Viewing and Sorting Results
• Printing a Report
• Exporting a Report
• Scheduling a Report
• Setting General Options
• Setting the Email Account
• Lab: Configuring File System Auditor
• Review: Configuring File System Auditor

Appendix A: Review Questions and Answers

• Review: What is File System Auditor?
• Review: Installing File System Auditor
• Review: Configuring File System Auditor
• Review: Database Management
• Review: Reporting with File System Auditor

Appendix B: Step by Step Labs

• Lab: Installing File System Auditor
• Lab: Configuring File System Auditor
• Lab: Database Management
• Lab: Reporting with File System Auditor

Appendix C: Troubleshooting

• Audit Database Schema
• Not seeing events in the database
• Auditing Database fills up fast