Skip to main content

Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More

Loading...
Loading...

HOWTO: Auditing changes in policies and rules

Expand / Collapse


This article applies to:

  • MailMarshal SEG 

Question:

  • How can I determine who made changes to SEG policies and rules, and when the changes were made?

Procedure:

MailMarshal (SEG) 10

See the Audit History item in the Management Interface.

SEG 8.X

The following information is available in the Configurator for each Policy Group and Rule:

  • Created By (Windows user)
  • Created Time
  • Last Modified By (Windows user)
  • Last Modified Time

Additionally, the Array Manager text log includes a line titled AUDIT for each creation, deletion, or update of a Policy Group or Rule.

Notes:

  • The MailMarshal (SEG) 10 audit information is stored in the Config Service database.
  • The SEG 8.X audit information is stored in the product configuration (Registry) and is included in backups.

To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.