After adding an asset, the system can execute security audits on it. There are two ways to add assets: manual addition and auto-discovery.
Add Assets
Assets can be added one by one or in batches.
1. In the left menu, select Assets > Asset Management to enter the Asset Management page, select the Asset Management tab, and click Add.
2. In the pop-up Add Asset window, edit the relevant information. For the parameter filling rules, see the table below.
Parameter | Parameter Description |
Enable recommended rules when saved | If this option is checked, the rules recommended by the system will apply to the added assets when they are saved; if not, the rules recommended by the system will not apply to the added assets when they are saved. |
Type | Set the asset type, including relational, non-relational, big data, graph, full-text, document, and key-value. |
Asset Group | Set the asset group to which the asset belongs. |
Name | The name of an asset must consist of Chinese characters, letters, numbers, underlines (_), dots (.) or dashes (-), within 64 characters. |
OS | Set the operating system of the server where the asset is located. |
IP Port | Set the IP address and port number of the server where the asset is located. |
Description
Local O&M behavior audit means capturing the actual responding SQL statements in the local database client program by installing Agent locally, so as to audit the database operations of local O&M personnel. It supports mainstream databases such as Oracle, PostgreSQL, MySQL, and SQL Server.
When using the local O&M behavior audit method, you need to add the loopback IP address (127.0.0.1) and the port number. The port number needs to be filled in according to the database type.
If the IP address is in IPv6 format, the IP address needs to be ::1.
3. If you need to configure more information, click More Configurations, select unidirectional audit or bidirectional audit, and set encryption protocol audit. For the parameter filling rules, see the table below.
Parameter | Parameter Description |
Traffic Direction | Unidirectional audit: The audit content includes the request information, client information, and server information, but not the returned result set. Bidirectional auditing: The audit content includes the request information, client information, server information, and the returned result set. |
Number of Rows | Value range: 0 to 999. Where, 0 means not saving the returned result, and the maximum allowed size is 64 KB. |
Maximum Length | Value range: 1 to 64 KB, ensure the whole row is displayed. |
Decryption Key | Decryption keys are imported via encryption protocols. Currently, encryption parsing for MySQL, SQL Server, and HTTPS is supported. Certificates can be imported and edited. |
Certificate Password | Password for a security certificate. |
Edit Assets
1. On the Asset Management page, select the Asset Management tab, select the asset to be edited, and click Edit in the Operation column.
2. When editing on the Asset page, you can modify all configuration items for the asset. For specific field descriptions, see the configuration items and instructions for adding assets.
3. After the configuration is completed, click Save to complete the asset addition.
Query Assets
On the Asset Management page, select the Asset Management tab, select a query condition (including name, IP address/port, type, and asset group), and fill in the query content to query with a single condition.
Delete Assets
1. On the Asset Management page, select the Asset Management tab, select the asset(s) to be deleted, and click Delete in the Operation column.
2. In the pop-up dialog box, click OK to complete the asset deletion.
Enable/Disable Assets
1. On the Asset Management page, select the Asset Management tab, select the asset(s) to be enabled or disabled, and click the Enable Selected Items or Disable Selected Items button below the list.
2. In the pop-up dialog box, click OK to enable or disable the asset(s).
Following Assets
The following assets are assets that the user pays more attention to. On the left side of an asset name, click the icon to follow the asset, which will be pinned to the top. Click the
icon again to unfollow it, and the asset will be displayed in its original position.