Application administrators can add or modify host definitions by
selecting Admin -> Hosts from the menu bar. Analysts with rule
definition authority may display but not modify the host window.
The types of hosts are:
- Database: This is the host on which the database runs
- Database Daemon: These are the hosts on which the
database daemon runs
- Sensor: These are the hosts on which the IDS application
runs
A definition for each sensor host is required, and at least
one must be defined for the DBD application to start. The
other definitions are for informational purposes.
The HOME defintions are the networks that a sensor is to monitor.
The fields may be left blank. There is a special Trigger definition
that can be used to include these networks in rule definitions.
|
