Administrator s Guide

Transcription

1 Administrator s Guide Version 2.3 LogiTel SecurVue 1

2 LogiTel SecurVue 2

3 Contents Introduction 4 Features 4 Hardware and Software Requirements 4 Installing SecurVue 5 Selecting a Database 6 Creating an ODBC Accounting Data Source 8 Creating Data Source for Funk Steel-Belted RADIUS 8 Creating Data Source for Cisco Secure ACS 10 Creating Data Source for Intel/Shiva Access Manager 14 Viewing User Records 17 Generating User Reports 19 Graphing User Records 22 Printing User Reports and Graphs 24 Software License Agreement 25 LogiTel SecurVue 3

4 Introduction The LogiTel SecurVue is a Microsoft* Access application that generates standardized text and graphic reports and works in conjunction with Funk Steel-Belted RADIUS. The Reporting Tool can retrieve data from RADIUS accounting start and stop records that have been exported by the FUNK Radius software. Administrators can analyze the data from the Reporting Tool for financial accounting purposes, security audits, and capacity planning. Features The following list describes the main features the Accounting Tool: Provides multiple views of accounting records with data summary. Allows reporting of aggregate and individual user and access server statistics, including lists of users by traffic, duration, or number of calls. Provides trend and analysis graphs displaying user and NAS-based statistics, including connect duration, call count, or call summary. Allows preview and print functionality for all reports and graphs. Hardware and Software Requirements The following are the requirements before installing LogiTel SecurVue: 1. PC with 90 Mhz processor minimum, 2. Microsoft Windows 95/98/2000, or NT 4.0 or later, 3. 5 MB of free Hard-disk space to install the software, 4. Microsoft Access 2000, LogiTel SecurVue 4

5 5. One of the following RADIUS servers: 1. FUNK Steel-Belted RADIUS version or higher, 2. Cisco Secure ACS version 2.6 or higher, or 3. Intel Access Manager 5.0. Installing SecurVue To install the SecurVue: 1. Insert the CD-ROM into your CD-ROM drive. 2. Click SETUP.EXE. 3. The installation program guides you through the installation process. 4. Reboot server. LogiTel SecurVue 5

6 Selecting a Database Before you select a database, you must create a database from the.mdb templates provided with the SecurVue and assign the database a data source name. The SecurVue is installed with read-only database template that you can use to create functional database. Before you open SecurVue, you can create a database from this template, Accounting.MDB. To create a database: 1. In Windows* Explorer*, select the database template that you want to copy. Select Accounting.MDB 2. Make a copy of the database template you have selected and rename the new file. 3. You must assign a data source name to the new data file. See Creating an ODBC Accounting Data Source in SecurVue. To select a database: 1. In the Select Database dialog box, select the.mdb file you want SecurVue to collect its data from. LogiTel SecurVue 6

7 Note: This.MDB file must be configured with the same data source name that is configured in the accounting data source. 2. Click OK. LogiTel SecurVue 7

8 Creating an ODBC Accounting Data Source You must create an ODBC accounting data source if you want to do create a new database from a database template and select the copy to use as a database in SecurVue. Creating Data Source for Funk RADIUS To create an ODBC Accounting data source for the FUNK Steel-Belted RADIUS: 1. In the Control Panel, click ODBC icon. 2. Select System Data Source and click Add. 3. Select Microsoft* Access Driver (*.MDB) and click Next. 4. In the ODBC Microsoft Access Setup window, enter a Data Source Name. Note: The Data Source Name configured here must match the data source name configured in the sqlauth.aut file. LogiTel SecurVue 8

9 5. In the Description field, enter a description of the Data Source Name that will appear in the ODBC Data Source Administrator. 6. Click Select. 7. Browse through the file directory for C:\LogitelACC\Accounting.MDB file you have created and click OK. 8. Click Advanced. 9. In the Login name field, enter the user name and password. 10. Click OK. Note: The Login Name and password configured here must match the UID name and password configured in the sqlauth.aut file. LogiTel SecurVue 9

10 11. Restart Funk SBR service. Creating Data Source for Cisco Secure ACS To create an ODBC Accounting data source for the Cisco Secure ACS: 1. In the Control Panel, click ODBC icon. 2. Select System Data Source and click Add. 3. Select Microsoft* Access Driver (*.MDB) and click Next. LogiTel SecurVue 10

11 4. In the ODBC Microsoft Access Setup window, enter a Data Source Name (SecurVue). 5. In the Description field, enter a description of the Data Source Name that will appear in the ODBC Data Source Administrator. 6. Click Select. 7. Browse through the file directory for the c:\logitelacc\ciscoacs.mdb file you have created and click OK. 8. In Cisco Secure ACS, log in as the Administrator. 9. On the navigation bar, click the Interface Configuration button. 10. Select the Advanced Options link. LogiTel SecurVue 11

12 11. Enable ODBC Logging and click OK. 12. Click the System Configuration button on the navigation bar. 13. Select the Logging link. 14. Select ODBC RADIUS Accounting link. 15. In the Enable Logging section, enable Log to ODBC RADIUS Accounting report. LogiTel SecurVue 12

13 16. In the Select Column to Log section, select the following attributes to log in the order below. Group-Name, User-Name, NAS-IP-Address, NAS-Port Service-Type, Framed-Protocol, Framed-IP-Address, Calling-Station-Id, NAS-Identifier, Acct-Status-Type, Acct-Input-Octets, Acct-Output-Octets, Acct-Session-Id, Acct-Session-Id Acct-Input-Packets, Acct-Output-Packets 17. Under the ODBC Connection Setting, select SecurVue in the Data Source dropdown list (or the Data Source Name you entered in created). 18. In the Table name field, enter AcctTable. 19. Click the SUBMIT button. LogiTel SecurVue 13

14 Creating Data Source for Intel/Shiva Access Manager To create an ODBC Accounting data source for the Intel/Shiva Access Manager: 1. In the Control Panel, click ODBC icon. 2. Select System Data Source and click Add. 3. Select Microsoft* Access Driver (*.MDB) and click Next. 4. In the ODBC Microsoft Access Setup window, enter a Data Source Name (SecurVue). 5. In the Description field, enter a description of the Data Source Name that will appear in the ODBC Data Source Administrator. LogiTel SecurVue 14

15 6. Click Select. 7. Browse through the file directory for C:\LogitelACC\IntelAM.MDB file you have created and click OK. 8. Open Intel/Shiva Access Manager console. 9. On the menu bar, select Options -> Accounting Interface. 10. Put a check mark on Enable ODBC Interface. LogiTel SecurVue 15

16 11. In the Data Source Name field, enter SecurVue. 12. In the Parameter Group to Report field, select Standard Call Accounting. 13. Click OK. 14. Restart Intel/Shiva Access Manager service. LogiTel SecurVue 16

17 Viewing User Records 1. In the Main Menu window, click View Records. The View User Records window opens. 2. In the View User Records window, you must select one of the following sorting options for your view: o View All Records - displays all accounting records in the order they are generated in the database. o Sort Records by Login Date - displays all accounting records in a chronological order by login date, with the earliest date first. o Sort Records by User Name - displays the accounting records sorted alphabetically by user name. o View by Single User - displays the accounting records for only a single user. Select the user records you want to display in the drop-down menu. LogiTel SecurVue 17

18 If you select View Records by Single User, you may also want to view a User Summary; which computes all user fields as well as total connection time and total data transmitted by the user. 3. In the View User Records dialog box, you must specify both of the following time period options: o Starting Date/Time - You must specify the Starting Date and/or Starting Time to generate some reports. Starting Date follows the "dd-mm-yy" format. For example, you would represent October 28, 1998 as "28-oct-98." The two-digit "yy" represents the years from 1930 to For example, 33 represent 1933, and not Starting Time follows the "hh:mm p.m." format. For example, you would represent three o'clock p.m. as "03:00 p.m." You must include a colon between the hours and minutes characters. o Ending Date/Time - You must specify the Ending Date and/or Ending Time to generate some reports. Ending Date follows the "dd-mm-yy" format. For example, you would represent October 28, 1998 as "28-oct-98." The two-digit "yy" represents the years from 1930 to For example, 33 represent 1933, and not Ending Time follows the "hh:mm p.m." format. For example, you would represent three o'clock p.m. as "03:00 p.m." You must include a colon between the hours and minutes characters. 4. Click View to see the user records that you have selected. LogiTel SecurVue 18

19 Generating User Reports You can generate reports to show user information in an organized format. User reports show which users log on for the longest periods of time, log on the most often, and transmit the most data. 1. In the Main Menu window, click Generate User Reports. The Generate User Reports window appears. 2. In the Report Type area, select one of the following types for your report: o Usage Report - provides a detailed report displaying all user login times, logout times, total time used, total bytes sent/received, NAS address, and the NAS port used. o Individual User Report - provides a detailed report displaying a single user's login time, logout time, total time used, total bytes sent/received, NAS address, and the NAS port used. o NAS Report - provides a detailed report displaying a single Network Access Server (NAS) login times, logout times, total time used, total bytes sent/received, and usernames. LogiTel SecurVue 19

20 o Usage Report by Traffic - provides a detailed report of users sorted by (heaviest) traffic. Traffic is defined as the sum of bytes in and bytes out. This report displays the users' login time, logout time, total time used, total bytes sent/received, NAS Address, and the NAS port. This report is useful for identifying the users who are using the network heavily. o Usage Report by Duration - provides a detailed report of users who call the network most often. The report displays the users' login time, logout time, total time used, total bytes sent/received, NAS Address, and the NAS port. This report is useful for identifying the users who connect the most times to the network. 3. In the Print User Reports window, specify both of the following time period options: o Starting Date/Time - You must specify the Starting Date and/or Starting Time to generate some reports. Starting Date follows the "dd-mm-yy" format. For example, you would represent October 28, 1998 as "28-oct-98." The two-digit "yy" represents the years from 1930 to For example, 33 represents 1933, and not Starting Time follows the "hh:mm p.m." format. For example, you would represent three o'clock p.m. as "03:00 p.m." You must include a colon between the hours and minutes characters. o Ending Date/Time - You must specify the Ending Date and/or Ending Time to generate some reports. Ending Date follows the "dd-mm-yy" format. For example, you would represent October 28, 1998 as "28-oct-98." The two-digit "yy" represents the years from 1930 to For example, 33 represent 1933, and not Ending Time follows the "hh:mm p.m." format. For example, you would represent three o'clock p.m. as "03:00 p.m." You must include a colon between the hours and minutes characters. LogiTel SecurVue 20

21 4. Select Page Break After Each User if you want the report to contain page breaks between each user. ** You can enable Page Break After Each User in the Generate User Reports window. Enabling this feature creates a page break between each user on printed reports. 5. Click Preview to see the user report you have created. LogiTel SecurVue 21

22 Graphing User Records You can graph user reports to show information in a visual format. To graph user reports: 1. In the Main Menu window, click Graphing User Reports. The Graph User Reports window opens. 2. In the Trend/Analysis area, select one of the following types for your graph: o Time Graphs - If you want to create a Time Graph, select either a daily, weekly, or monthly report and specify a Date. SecurVue creates a graph for the time interval that includes the date you specify. o NAS Graphs - If you want to create a NAS graph, select the address of a Network Access Server (NAS) that you want to graph data from and select the month and year that you want to start graphing data from. The SecurVue graphs up to the end of that month. 3. Once you have selected the type of graph, select one of the following types of analysis from the drop-down menu. o Call Count Analysis - shows the number of calls on the y-axis plotted over a configurable time interval on the x-axis. The Call Count Analysis graph also LogiTel SecurVue 22

23 lists the maximum, average, and total number of calls that users make in the specified time period. o Data Traffic Analysis - shows the data traffic on the y-axis plotted over a configurable time interval on the x-axis. The Data Traffic Analysis graph also lists the maximum, average, and total amount of data traffic in the specified time period. o Call Duration Analysis - shows the number of calls on the y-axis plotted over connection time on the x-axis. o Traffic Distribution Analysis - shows the number of calls on the y-axis plotted over data traffic on the x-axis. o Call Duration Report - shows how long calls, on average, are connected to a Network Access Server (NAS) on the y-axis plotted over days of the month on the x-axis. The Connect Duration graph can plot average, minimum, or maximum length of calls on the y-axis. o Call Summary - shows daily, monthly, or yearly summary of the following data fields: Total Number of Calls, Maximum Number of Concurrent Calls, Maximum Duration of Calls, Minimum Duration of Calls, Average Duration of Calls, and Total Duration of Calls. 4. Click Preview to see the user report you have created. LogiTel SecurVue 23

24 Printing User Reports and Graphs 1. Configure all of the options in the Generating User Reports window or Graphing User Reports window. 2. Click Print. The Print dialog box appears. 3. In the name drop-down list, select the name of the printer. 4. In the print range area, enter the page range you want to print. 5. In the copies area, enter the number of copies you want to print. 6. Click Print. LogiTel SecurVue 24

25 Software License Agreement IMPORTANT - READ BEFORE COPYING, INSTALLING OR USING THIS PRODUCT. Do not use or load this software and any associated materials (collectively, the "Software") until you have carefully read the following terms and conditions. By loading or using the Software, you agree to the terms of this Agreement. If you do not wish to so agree, do not install or use the Software. LICENSE. You may reproduce, distribute and install an unlimited number of individual copies of the LogiTel SecurVue software ("the Software") for use on computers connecting to your organization's gateway computer containing the LogiTel SecurVue software, and you may make a reasonable number of back-up copies of the Software, subject to these conditions: 1. You may not modify, rent, sell, distribute or transfer any part of the Software except as provided in this Agreement, and you agree to prevent unauthorized copying of the Software. 2. You may not reverse engineer, decompile, or disassemble the Software. 3. You may not sublicense the Software. 4. You may not remove any copyright notices from the Software. OWNERSHIP OF SOFTWARE AND COPYRIGHTS. Title to all copies of the Software remains with LogiTel, USA. You may not remove any copyright notices from the Software. LogiTel, USA may make changes to the Software, or to items referenced therein, at any time without notice, but is not obligated to support or update the Software. Except as otherwise expressly provided, LogiTel, USA grants no express or implied right under copyrights, trademarks, or other intellectual property rights. You may transfer the Software only if the recipient agrees to be fully bound by these terms and if you retain no copies of the Software. LIMITED MEDIA WARRANTY. If the Software has been delivered by LogiTel, USA on physical media, LogiTel, USA warrants the media to be free from material physical defects for a period of ninety days after delivery. If such a defect is found, return the media to LogiTel, USA for replacement or alternate delivery of the Software. This warranty does not apply to any physical media not provided directly by LogiTel, USA. EXCLUSION OF OTHER WARRANTIES. EXCEPT AS PROVIDED ABOVE, THE SOFTWARE IS LogiTel SecurVue 25

26 PROVIDED "AS IS" WITHOUT ANY EXPRESS OR IMPLIED WARRANTY OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT, OR FITNESS FOR A PARTICULAR PURPOSE. LogiTel, USA does not warrant or assume responsibility for the accuracy or completeness of any information, text, graphics, links or other items contained within the Software. LIMITATION OF LIABILITY. IN NO EVENT SHALL LOGITEL, USA BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, LOST PROFITS, BUSINESS INTERRUPTION, OR LOST INFORMATION) ARISING OUT OF THE USE OF OR INABILITY TO USE THE SOFTWARE, EVEN IF LOGITEL, USA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME JURISDICTIONS PROHIBIT EXCLUSION OR LIMITATION OF LIABILITY FOR IMPLIED WARRANTIES OR CONSEQUENTIAL OR INCIDENTAL DAMAGES, SO THE ABOVE LIMITATION MAY NOT APPLY TO YOU. YOU MAY ALSO HAVE OTHER LEGAL RIGHTS THAT VARY FROM JURISDICTION TO JURISDICTION. TERMINATION OF THIS AGREEMENT. LogiTel, USA may terminate this Agreement at any time if you violate its terms. Upon termination, you will immediately destroy the Software or return all copies of the Software to LogiTel, USA. LogiTel SecurVue 26

27 LogiTel SecurVue 27