SecurTrac Administration Guide

How to configure a scheduled Database ACL Audit Report.

You can receive periodic Database ACL audit reports by using the Database ACL Audit feature of SecurTrac^TM. To configure and schedule the Database ACL Audit feature, you need to open the SecurTrac Configuration Database (SCTCFG.NSF)

To create a Database ACL Audit Report schedule:

Open the SecurTrac Configuration Database (SCTCFG.NSF).
In the left pane, select .
Click the button on the action bar.
Specify the preferred configuration settings and click the button.
Below is a table describing each of the available configurations within the Database ACL Audit reports.

Basics Tab:

Section

Field

Description

Server To Audit

Server(s)

Either select "All in the Domain" or "Only the following" servers.

If you select "All in the Domain", the database ACL Audit report will run on all servers in the current domain.

If you select "Only the following", a list box will be shown for you to select the specific server(s) in the current domain that the database ACL Audit report will run on. Click on the button to choose the server(s).

Description

This is an optional field which allows user to input descriptions or remark for this report.

Schedule

Run Frequency

Select the interval for the report generation. It can be either Daily, Weekly or Monthly.

Run at time

Select the time at which the report will be run.

Days of week

If the Run Frequency is Daily, the report will execute everyday.
If the Run Frequency is Weekly, you can select which day that you want to run the report.
If the Run Frequency is Monthly, you can select which day of the month that you want to run the report.

Log Database

File name

Select

Log to the default database	The corresponding report will be stored in a Central Log Database (SctLog.nsf).
Log to the specified database	The corresponding report will be stored in the database you specified.

Server name

Select

Log to the server where the event occurred	The corresponding report will be created on the same server where the event occurred.
Log to the specified server	The corresponding report will be created on the server you specified. If you select this option, please make sure the originating server has sufficient access to the remote log database on this specified server.

Enablement

Disable this Database ACL Audit Report

If this option is selected, SecurTrac^TM will temporarily disable the report

Audit Tab:

Section	Field	Description
Audit Target	Database Type	Select what database types will be audited: Databases and templates - Any Notes database (NSF) or template (NTF) Databases only - Any Notes database (NSF) Templates only - Any Notes database template (NTF) Notes databases or templates not disabled for replication - Any Notes database or template not disabled for replication (Database Replication Settings)
Directory to audit	Directory to audit	Select the directory/folder that will be audited. Leave it blank if you want to audit all databases.
Conditions to highlight in the report	Conditions	Select the baseline for the audit. Any deviation from the baseline will be highlighted with the preferred color. Enforce ACL - This is the "Enforce a consistent Access Control List across all replicas" option located in the ACL Advanced tab. Internet Level - This is "Maximum Internet name and password" setting in the ACL Advanced tab. Default Access - "Default" ACL entry access level Anonymous - "Anonymous" ACL entry access level Delete documents - "Delete documents" privilege is enabled People that have been delegated access to the mail file - People or groups that have been delegated access to the mail file database. Use this option to highlight ACL entries that have delegation access enabled.
Show Effective Access	Show effective access for the following users or groups	Select user(s) or group(s). Use the option to show the effective access of the specified users or groups in the database.
Full Report	List All Databases	Select Yes - list all databases in the report, no matter if the databases satisfy the above conditions. No - list only databases that satisfy the above conditions. (i.e. those databases which deviated from the baseline.)
Notification List	Mailing Address	Select the person who will receive an e-mail notification immediately when the report has been run.
	Customize E-Mail Notification Message	Select this option if you want to customize the subject and content of the e-mail notification message.

Administration:

Section	Field	Description
Administration	Owner	Specify the owner of the monitor document.
	Administrators	Specify person(s) who can modify the current monitor document.
Settings Modification History	Date	Shows the date of modification for the current monitor document.
	Updated by	Shows the persons who have modified the current monitor document.

Note: The ACL Audit Report can also be manually executed by issuing a Domino console command "tell securtrac report".

-------------------------------------------------------------------------------------------------------------------------------------------