EMC Voyence Payment Card Industry Advisor. User s Guide. Version P/N REV A01

Transcription

1 EMC Voyence Payment Card Industry Advisor Version User s Guide P/N REV A01 EMC Corporation Corporate Headquarters Hopkinton, MA

2 COPYRIGHT Copyright 2008 EMC Corporation. All rights reserved. Published August 2008 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED "AS IS." EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners.

3 TABLE OF CONTENTS COPYRIGHT... 2 TABLE OF CONTENTS... 3 PREFACE... 5 Who Should Read this Document?...5 Disclaimer...5 INTRODUCING PCI ADVISOR... 6 PCI Advisor Overview...6 Security and Authorization...6 System Permissions...7 GETTING STARTED USING PCI ADVISOR... 8 Accessing PCI Advisor...8 Accessing Report Advisor...8 Logging Out of PCI Advisor...9 Accessing the User s Guide Using the Launch Page NAVIGATION Navigation Overview Working with Specifications Collapsed View Expanded View Report and Compliance Settings Reports Run Selected Reports Running Status Generate Process Document Compliance Process Items Saving Specifications as Private or Public Managing Specifications Using Tabs within PCI Advisor DASHBOARDS Dashboard Overview Adding and Saving a New Dashboard Adding New Dashboard Components Working with the Dashboard Tool Bar Dashboard Settings Managing Dashboards REPORTS Reports Overview... 39

4 Viewing Reports Working with the Report Tool Bar Report Settings (Filters) and Parameters Saving Reports to Downloads Adding Reports as Favorites ing Reports Scheduling Reports Working with Reports Managing Reports DOWNLOADS Managing Downloads USER PREFERENCES AND SETTINGS WHERE TO GET HELP Where to get help GLOSSARY INDEX... 58

5 PREFACE Who Should Read this Document? The information and procedures contained within this document are intended for those individuals who have the responsibility of addressing Payment Card Industry Data Security Standard (PCI DSS) Specifications, auditing compliance status, and reviewing comments and reports associated with the PCI DSS requirements. Note: The PCI DSS Specification is version 1.1, dated September Related Publications This section lists publications related to the PCI Advisor Installation. Installing Payment Card Industry Advisor on Red Hat Enterprise Linux 4, Windows Server 2003, and Solaris 10, P/N Payment Card Industry Advisor Release Notes, P/N number Payment Card Industry Advisor Requirements and Best Practice, P/N number Disclaimer EMC emphasizes that there is no PCI compliance certification that can be associated to a product. Experience demonstrates that regulatory compliance is achieved through a structured approach to network security and business process continuity. This must be closely aligned with defined and documented best practices and business operations. The included PCI documentation sections describe the PCI Data Security Standard requirements, suggested how to's for optimizing existing VoyenceControl capabilities to meet best practices, associated samples, and reporting options. EMC has responded to the technology requirements. Please note that the application of best practices as outlined by the PCI Standard is a critical component.

6 INTRODUCING PCI ADVISOR PCI Advisor Overview Following is a detailed description of PCI Advisor. PCI Advisor Features Easy access to PCI DSS Specifications and Standards Assistance in tracking your own compliance to the PCI DSS Specifications and Standards using pre-defined reports Viewing, Printing, ing, and Saving Compliance Reports (in Public or Private access) Scheduling reports to run immediately, at a predetermined time, or at recurring intervals to have crucial network information at your fingertips With PCI Advisor, you can: Work with Dashboards to create Public and Private views of reports View and then Save Reports as Favorites Access Best Practices and additional requirements information Run reports, giving you fast Compliance Results, based on individual requirements View the number of out-of-compliance devices -- at any one time Security and Authorization Your access to the PCI Advisor, and therefore to the actual Specifications and reports, as well as the Report information, is limited to the access and permissions granted by the VoyenceControl System Administrator, or the Network Administrator. When you log in to the PCI Advisor, your authorization and authentication levels are checked, and then verified through the security levels within VoyenceControl.

7 System Permissions Following are the access rules and tasks users and System Administrators can complete when working with Reports, Dashboards, and the PCI DSS specifications. No users cannot complete this action Yes users can complete this action System Administrator Only users cannot complete this action Create Read Update Delete Preset Reports No Yes No No Public Reports Private Reports Yes Preset Dashboards Public Dashboards Private Dashboards System Administrator Only Yes Yes - Only your own Private Reports System Administrator Only Yes - Only your own Private Reports No Yes No No System Administrator Only Yes Yes Yes - Only your own Private Dashboards System Administrator Only Yes - Only your own Private Dashboards Preset Specs No Yes No No Public Specs System Administrator Only - Only from Preset or Public Specs Yes Private Specs Yes Yes - Only your own Private Specs Upload Report Packs System Administrator Only Yes - Only your own Private Specs No No System Administrator Only System Administrator Only Yes - Only your own Private Reports System Administrator Only Yes - Only your own Private Dashboards System Administrator Only Yes - Only your own Private Specs System Administrator Only

8 GETTING STARTED USING PCI ADVISOR Accessing PCI Advisor 1. To access PCI Advisor, you must first access Voyence Report Advisor. Accessing Report Advisor You can access Report Advisor from: The login selections page, select Launch Voyence Report Advisor The Welcome to VoyenceControl launch page, under Report Advisor Within VoyenceControl, through Tools -> Report Advisor By directly going to the following URL: Server IP address>/web

9 2. Once you have accessed Report Advisor, you can enter your USERNAME (if not already present) and PASSWORD into the Login window. This is the same User ID and Password you entered to login to VoyenceControl. Note: The default Username is sysadmin. Passwords can be changed using the VoyenceControl Change Password feature (under Tools). 3. Click Login. 4. At the Voyence Advisor selection window, select PCI Advisor. You can then begin working with PCI Advisor. Logging Out of PCI Advisor 1. To logout of the application, click LOGOUT. 2. This logs you out of the application, but keeps the login page open, allowing other users to login. Enter your Username and Password, then click Login, to log back into the PCI Advisor.

10 Accessing the User s Guide You can only access the User s Guide from Using the Launch Page From this tab, you can then select: Navigation to view, save, and work with PCI DSS specifications Dashboards to view current dashboards or create new dashboards Reports to view and work with available reports Downloads to work with reports you have downloaded

11 NAVIGATION Navigation Overview The first item in the Navigation tree is Compliance Specifications. Once accessed, Specifications options are displayed. From the Compliance Specifications selection, you can work with: Preset - a listing of preset PCI DSS requirements, and pre-defined compliance reports Public - any reports that you want to save in Public, where others can also access and view Private - any reports that you want to save for your eyes only, where others cannot access or view From the Specifications folder, you can expand Preset to view the Payment Card Industry Data Security Standard (PCI DSS) Specifications, Compliance Reports associated with those Specifications, and more!

12 Working with Specifications From the Preset options, you can select to view the PCI DSS Specifications. Once displayed, you can then view each numbered specification. Notice the hierarchy of the PCI-DSS information. You can collapse the folders to have all specifications displayed, or you can expand each specification to view all additional required files pertaining to that individual specification. Collapsed View

13 Expanded View The information displayed within the Compliance Specification section is the actual Payment Card Industry Data Security Standard document. From this section, you can expand the PCI DSS document and have access to each of the PCI DSS requirements, by its designated number. Once a specification is selected (by number), information associated with that specification is also available, including Reports, Compliance, and Process Items.

14 Report and Compliance Settings There are additional sections in the work area when the Preset option is selected from Specifications. Contained within the Specification section is a Configure link. This link is only visible if you are in the PCI DSS requirements that you have previously saved and want to edit. If you are viewing the PCI DSS requirements each time you select a requirement, the corresponding information is displayed (as shown). When this is clicked, the Report and Compliance Settings work page displays. From this form, you make the Report Parameters selections. These filter selections determine the areas where you gather information to include within reports. Note: For larger networks, you may want to filter the Report Parameters before running selected reports. Report information gathered from large or multiple networks may take a good deal of time to complete.

15 1. Click the drop-down to select Network, View, Site, or All, based on the first inquiry. 2. Next, select from the listing (displayed by your selection in step 1). In this example, Network was selected as the first parameter, and a listing of available Networks is displayed. Note that you can select more than one using the shift key. 3. Scroll down, and continue to respond to the questions by making selections to set your Report Parameters. Respond to the next inquiries by selecting either Yes or No to include the secondary networks and secondary sites within the parameters. 4. Finally, select a date option. The date selected includes all reports within the date and time, or date range. 5. When you have made your selections in the Report and Compliance Settings work page, click Ok. Note: These settings are applied to all reports and compliance results from this specification.

16 Reports Included within the PCI Advisor is a pre-defined listing of reports (both Audit Preparation and Individual Reports) that enable you to determine your own compliance goals against the PCI DSS requirements. The Audit Preparation link allows you to view all the reports that are applicable for a specific goal (the reports are different with each goal) helping to determine compliance against the actual PCI DSS requirement. Once the Audit Preparation link is selected, the reports that an auditor may want to run to check compliance on the PCI DSS requirements are listed. The Reports section is now in the work area, and the listing of reports is displayed in a navigation tree format. Run Selected Reports 1. From the Reports section, select Prepare Audit Reports to view the reports an auditor would run to view the compliance information that addresses an individual PCI DSS requirement. 2. With the list displayed, determine the reports you want to run. Once you have selected one or more reports (by clicking the check boxes) click the Run Selected Reports link.

17

18 Note: You can select all reports by selecting the main or first requirement number. This automatically includes the reports for that specific requirement.

19 Running Status Reports you select run at the same time, with the running status listing the actual status of each report as either Pending, Completed, or Failed. Once the reports you have selected from the listing are completed running, the Running Status changes. In the Running Status section, you can now click the title of a report in the Completed Reports section to view that report. For example, List of Jobs with Same Approver/Submitter selected from the Completed Report List displays the Jobs Details Report.

20 If Pending Jobs is selected from the Completed Report list, the following Report displays.

21 Generate Process Document The additional link on the Audit Preparation section is Generate Process Document. 1. Once clicked, this takes you to an extended view of the Process Items. From this view you can select to check all the PCI tabbed information, the PCI Audit tabbed information, all the Voyence tabbed information, all the Reports tabbed information, or select any other tabbed information displaying in the Process Items section (without actually going through the tabbed information, one tab at a time). For example, if you had tabbed information on a company name, you would enter the company name in the Check all containing: field. 2. Once your selection is made, click the Generate Document link. The results are the contents of all the PCI (in this example) tabbed information in one document.

22 A separate document displays containing the information selected. For more information on reports, go to Reports Overview on page 39.

23 Compliance In the Compliance section, this information is only displayed if there was a Test (or Policy or Standard) previously created within VoyenceControl, and keywords (Compliance Keywords PCI-DSS.1.1.1) were added in the Keyword section of the Test editor. From a previously created policy (Test-Policy), the results are shown in the Compliance table. Note: For more information on creating a test, go to the VoyenceControl application, and access the Online User's Guide (toolbar -> Help -> Help contents). Use the Search tab, and enter Creating a Test. Read the information for creating a test and entering keywords. This compliance table shows that of all the devices this test has been run against, there are: Totals in Compliance (0) Non-Compliant (6) Other (0) in the Test-Policy parameters. You can view additional information by clicking the numbered link within each section of the table. For example, if the number in the Non-Compliant column is selected, first a Report Summary is displayed. When the Non-Compliant number is once again accessed, the Detail Report is displayed. This details those devices that are non-compliant.

24 Process Items Process Items contain additional information on specifications. For example, if PCI-DSS is selected from the PCI-DSS-1.1 Specification, the following information is displayed. The PCI tab, under the Process Items heading is where you review the Title of the PCI DSS specification, the Author, and the wording for the specification. You can then click the PCI Audit tab, and view the tasks needed to address the actual PCI DSS specification.

25 The Voyence tab gives Best Practices to assist you in meeting your PCI DSS compliance goals. In some instances, a Reports tab can also be available in the Process Items section. For example, in the requirement, the Reports tab section gives information pertaining to the Device Connection Report. When the Reports tab is included, be sure to review the additional information.

26 Saving Specifications as Private or Public 1. You may want to Save the PCI DSS Specifications in another folder to work with while still keeping your original copy of the specifications in Preset. If so, you can save the specifications by selecting the Favorites viewed (as shown in the following graphic). icon when the specifications are being 2. Once selected, the New Favorite work page displays. From here, Select the Type (Public or Private), and make any changes to the remaining information displayed in the fields. 3. Click Submit when you have completed this work page.

27 Managing Specifications 1. When working with Specifications, you can manage the number of specification copies you have by clicking the Manage Saved Specifications link in Navigation. The Saved Compliance Specification Management work page opens, and you can make management selections. For example, to delete the Public copy of the specifications, click the specifications name check box. 2. Now, click the Delete Selected bar. 3. Click Ok when you have made your selections. When you view the Navigation tree, the copy you selected to delete is no longer available. It has been deleted from the Private folder.

28 Using Tabs within PCI Advisor Notice that as you are using the elements within the Specifications, Dashboards, Reports, and Downloads, tabs of what you have accessed and currently have opened are displayed along the header. This allows you to retrace your steps, if needed, and toggle from one view and one set of reports and information to another.

29 DASHBOARDS Dashboard Overview The Dashboard is where you can create your own view of PCI Advisor information by creating any number of dashboards needed. A dashboard in PCI Advisor is just like a folder where you view and save information (in this case, reports and charts) into any of the dashboards you create. Dashboards you create and save can be either Public or Private. You can only work with existing public dashboards, or the dashboards you have created and saved as either public or private. Unless you have System Administration privileges, you cannot access any other private dashboards.

30 Adding and Saving a New Dashboard 1. To add a new dashboard to house charts and reports, click the Dashboard link in the Navigation tree to open Dashboards. 2. Select the Add New Dashboard link. 3. At the Add New Dashboard work page, enter a name for your new dashboard. In the examples, New Reports is used as the Dashboard Title. 4. When you have entered the new dashboard name Click Submit. The new dashboard now has a tab displayed in the work area, with the name you designated.

31 5. You can now use the dashboard to view any report. To access reports, open the Reports section. 6. From the Reports section (with the Add to Dashboard check box checked by default) select any report you want to view and then add to the new dashboard. In this example, the Device Inventory Details Report was selected. Note that the reports are grouped into categories: Core Change Inventory Compliance PCI

32 7. Once the report is opened, you can view the report, and then click the Save or Save As icon to save the Dashboard and the contents (in this case, the report). 8. At the Save Dashboard AS window, select the Type from the drop-down arrow. You can select either Public or Private. In this example, Public is selected. 9. Click Submit to save this dashboard. Note: Once the dashboard is created and saved, you can then add components (reports and charts) to that dashboard by using the Save As icon. The Save or Save As feature can be used to save any future additions, deletions, filtering, or layout changes to the dashboard.

33 Adding New Dashboard Components 1. With the new dashboard (New Reports, for example) open the Reports section. 2. By default, the Add to Dashboard check box is checked. This indicates that the reports you select to view will automatically be added to the dashboard you are currently working in. If the check box is not checked, check it now. 3. The New Reports dashboard contains the Device Inventory Report. Now, select another report (for example, OS Version Inventory Report). 4. After viewing the report, first Save, and then Close the Dashboard, then Open the dashboard again to see that your two reports are now included and saved within the New Reports dashboard. In the following graphic, the Device Inventory Details Report along with the OS Version Inventory Report are both contained within the same (New Reports) dashboard.

34 Working with the Dashboard Tool Bar The following tool bar is available when you are working with dashboards. While working within the dashboard, you can use the tool bar to complete tasks. Icon Action Dashboard Settings, where you can change the number of columns you want displayed on the dashboard. Saves the current dashboard, and any additions, deletions, filtering, or layout changes you make to the Dashboard. You can select either Private or Public when saving. Save As, this saves the dashboard to the Dashboard section. Refreshes any report you are viewing in the dashboard. Opens the Refresh Timer Settings, and allows you to change the time designated to automatically refresh all the dashboard windows within the Dashboard.

35 Dashboard Settings 1. To work with the number of columns you can display on dashboards, click the Dashboard Setting icon. 2. From here you can change the number of columns to allow at least six reports to be stored and viewed from your dashboard, in two rows three reports per row. Click the Number of Columns down arrow, and select Click Submit. Your dashboard now has viewing room for an additional report or chart to be added.

36 In this example, a third report (Duplicate IP Address) has been added to the New Reports Dashboard first row. You can also add three more additional reports for the second row. You can have up to six reports displayed (three columns, on two rows).

37 Managing Dashboards You can manage the number of dashboards you have created by selecting to keep them on the list, or to delete from the list. This allows you to have a manageable number of dashboards at any given time. 1. From the Dashboards section, click Manage Dashboards. 2. With the Dashboard Favorites Management work page opened, expand on the dashboard folders (Public or Private), and then select a dashboard you want removed from the list by clicking within the adjoining check box. You can only delete those dashboards you have created (either Public or Private). You must have System Administrator privileges to delete any other dashboards.

38 3. Once selected, click Delete Selected, then click OK.

39 REPORTS Reports Overview This section of PCI Advisor is where you can select any reports you want to view and work with. While working within Reports, your reports are displayed within the Dashboard viewing area. You can view the reports, and work with the tool bar to complete other tasks. Once the Reports section opens, you can see that the reports are stored within the following categories (under Preset). Core a compilation of reports to gather core information Change reports that detail changes Inventory reports detailing inventory information Compliance reports that include results from Tests, Policies, and Standards PCI Reports created for you that detail devices, job status, job tasks, user permissions and more. Viewing Reports From Reports, you can view each report in this section. Notice that there are folders for Public, Private, and Preset sections (already created and categorized for you). When you open Reports, the Add to dashboard check box is automatically checked if a dashboard is opened. If you are just working with Reports, and there is no dashboard

40 displayed, the check box is not checked. This indicates that any report you open will automatically open in the viewing area. The report will also have a tab. Each report you open will display a tab allowing you to quickly toggle between reports to view valuable information. Note: If you do not want the report you select from the list to be available in a dashboard, (for example, if you want to view this report only once during your session) make sure you uncheck the Add to dashboard checkbox before you select a report from this list. From the Reports navigation tree, you can select any report for viewing. For example, if the Change by User Report is selected (by clicking that report name under the Change category), the following report displays. Note: The chart only is displayed when viewing from the Dashboard. If you are viewing this report from Reports, both the chart and the contents of the chart are displayed in a table format (under the chart) as well. You can open as many reports as needed, and then toggle between the report tabs to view the report results.

41 In this example, the Change By User Report, Device Change Report, and the Test Definition Report were all selected and are now available to be viewed by toggling and clicking the report title tabs. You can display and view as many reports as needed.

42 Working with the Report Tool Bar While working within Reports, you can use the tool bar to complete tasks. Icon Action Opens the Report Setting work page, where you can view your current settings, and make changes. Saves the report to a location on your local disk and in the Downloads section of PCI Advisor. Saves the report as a Favorite in either Public or Private, within the Navigation tree. Allows you to this report. Allows you to schedule a time to run this report, and this report when it completes. Refreshes any report you are viewing in the dashboard. Opens the Refresh Timer Settings, and allows you to change the time designated to automatically refresh all the reports.

43 Report Settings (Filters) and Parameters When the Report Setting icon opens. is selected, the Report Settings & Parameters work page From this work page, you can select the following: Tab and Window Settings Report Parameters 1. From the Report Title section, make any changes to the title that may be needed 2. In the Report Parameters section, select Yes or No to include devices in Secondary Networks, if appropriate. 3. Select Yes or No to include devices in Secondary Sites, if appropriate. 4. Select between Networks, Sites, Views to have reports included on one, or select All in the Scope section. What you select here determines the remainder of the parameters and settings available for your selections. 5. Continue to make the appropriate selections based on your decision of Networks, Sites, Views or All.

44 6. When all your selections for parameters have been selected, click Submit.

45 Saving Reports to Downloads With the Report displayed, you can save this report to the Download section and run the report whenever needed. 1. With the report opened, click the Download icon. 2. Select the format from the Save Format drop-down arrow options. 3. Now, go to the Downloads section, and see that your report has been saved in pdf format. Adding Reports as Favorites To keep a report and view it often, you can save the report as a Favorite. This saves time when you want to view a specific report on a continuing basis. The report is updated continuously, to give you real-time information. In addition, you can select to Refresh the report at any time. 1. With the report displayed, click the Favorites icon. 2. Enter the Favorite Title (if different from the report title). 3. Select a Favorite Type (Public or Private), then click Submit. The report is now in the Reports section of PCI Advisor.

46 ing Reports 1. When you need to a report, make sure the report is displayed in the work area. 2. Click the icon. 3. At the Report work page, enter the information needed to this report. 4. Click Submit to send this report when you have completed entering the information.

47 Scheduling Reports You can select any report from the listing of reports and schedule that report to run. In this example, the Change Detail Report is displayed. 1. To schedule the report, use the tools in the toolbar and select the Schedule icon. The Schedule Panel work page displays. Note: You can also schedule a report using the calendar icon located to the right of the actual report name in Reports. The same information is needed when you select to schedule a report from this position.

48 When the Schedule icon (or the calendar icon) is selected, the Schedule Panel displays. 2. From the Select Schedule Type section, select a Schedule Type, and the appropriate Time Zone. Options for Schedule Type are: Run Now, Run At, and Recurring.

49 3. From the Select Format section, select a Format Type from the drop-down selection. Note that the Publish Type drop-down is not selectable at this time, and defaults to . Note: Only the Run Now will initiate an immediate run. With the other options, you must also use the Time Zone drop-down to select a time to Run At, or Recurring. Make your selection from the Time Zone, then click Submit. When Run At is selected, additional options are available in the Schedule Panel. Select the appropriate Format from the Select Format section. From the additional options, select the Date, and time (Hour, Minute, and AM or PM) from the Schedule section. When completed, click Submit. The report is now scheduled to run on the date you specified, and at the time you specified. Note: Depending on your selections from the various drop-down options, the Schedule Panel will require additional selections for completing the scheduling of a report.

50 If Recurring is selected, additional options for scheduling a recurring report run are available in the Schedule Panel. You must select the following: Time Zone use the drop-down to see the options and make a selection. Format use to select format and publishing type. Schedule use the drop-down to see the options and make a selection. Time use the drop-down to see the options and make a selection. Hour use the drop-down to see the options and make a selection. 4. After making all the selections to schedule your report for running, click Submit. Note: When scheduling a Report, and selecting the Recurring option with the report to run every hour or every minute, you cannot schedule a recurring (hourly or minute) report to run into the following day (after 11:59 P.M.)

51 Working with Reports When you select a report and display it within the work area, you can then select to view additional information within that report. The following example shows the Inventor Summary Report, selected from the Inventory category in the Reports navigation tree. The upper portion of the report is a graph format, and the lower portion of the report has the same information presented in a different way, and has links to give more inventory information. From this bottom section of the report, you can click the actual numbers in the Devices column for more information. In the following graphic ADTRAN 4 was selected and the Vendor/Model Inventory Report is now displayed.

52 You can go down even further in this report to see the details for the NetVanta 1224 Model by clicking on the Devices 1 link. For each report that you display, you can gather additional information by using the links provided (where appropriate).

53 Managing Reports You can manage the number of reports you have created by selecting to keep them on the list, or to delete from the list. This allows you to have a manageable number of reports at any given time. 1. From the Reports navigation tree, click Manage Reports. 2. Once the Saved Report Management work area displays, select the reports you want to delete by clicking the adjoining checkbox. 3. Click Delete Selected, then click Submit. This allows you to keep only those reports you want to see in the Report section.

54 DOWNLOADS This section of is designed for those reports you want to save as downloads, or want to keep active during a session. You must be working in Reports to save these to the Downloads section. Managing Downloads With the listing of reports that you have saved to the Downloads section, you can manage or view the reports. 1. You can manage the number of reports you have running or stored within Downloads by clicking the Remove File icon. Once clicked, the report is automatically removed as a download. 2. To view the reports you have stored in Downloads, click the report name.

55 USER PREFERENCES AND SETTINGS The Report Packs that have been uploaded during installation are the defaults Report Packs, and contain all current PCI Advisor Reports. From the Versions section, you can view the PCI Advisor version you currently have installed. From the Installed Plugins section, you can review the Report Packs you currently have installed. Note that the following steps are only necessary if you are uploading a new Report Pack or an updated Report Pack. You must have System Administration privileges to upload a Report Pack. 1. Click the Settings link. 2. With the User Preference & Settings work page displayed, first begin by selecting any Report Packs that you need to add. Click the Browse button to locate the Report Pack on the server. 3. Once you have located and selected the Report Pack, click Upload to upload the Report Pack. Repeat this step for any additional Report Packs you need to upload. 4. Click Ok after uploading any needed Report Packs.

56 WHERE TO GET HELP Where to get help EMC support, product, and licensing information can be obtained as follows. Product information For documentation, release notes, software updates, or for information about EMC products, licensing, and service, go to the EMC Powerlink website (registration required) at: Technical support For technical support, go to EMC Customer Service on Powerlink. To open a service request through Powerlink, you must have a valid support agreement. Please contact your EMC sales representative for details about obtaining a valid support agreement or to answer any questions about your account. Sales and customer service contacts For the list of EMC sales locations, please access the EMC home page at:

57 GLOSSARY This section details the terms and acronyms related to PCI Advisor that you may encounter while using this document. Administrator (admin) The person responsible for administrative tasks such as access authorization and content management. Administrators can also grant levels of authority to users. Authentication For validation and access into VoyenceControl, prior to being setup in VoyenceControl each user must be created on the authentication server. When a user is created, the method of authentication is selected. Based on this selection, when the user attempts to log into VoyenceControl, the user's User ID, and if needed, Password are validated via the selected server. Device A piece of equipment. Devices include routers, switches, firewalls, VPN concentrators, and OS images. Device class The generic name for a group of device types. Each device class has a unique name and represents a device type. Device Server The appliance that is responsible for all communications with the network devices. As part of a scalable architecture, a network can employ multiple device servers to isolate overlapping address spaces, limit WAN traffic over slow connections, and balance the device load of a large environment. Permissions Permissions allow Users and Groups access to information and tasks within VoyenceControl. This includes the authority granted to users to give them access to an applications features and functions. System Admin Any user that has global System Management permissions within VoyenceControl. System Admin's can complete any function within the application, including network management and user management.

58 INDEX A Accessing PCI Advisor, 8 Accessing Report Advisor, 8 Accessing the User s Guide, 10 Add to Dashboard check box, 33 Adding New Dashboard Components, 33 Adding Reports as Favorites, 45 Audit Preparation, 16 Auditor s Report, 16 authentication levels, 6 B Best Practices, 25 C Change, 39 change password feature, 9 Collapsed View, 12 Completed Reports, 19 Compliance, 23, 39 Compliance table, 23 Configure link, 14 copyright, 2 Core, 39 Creating a New Dashboard, 30 D Dashboard Overview, 29 Dashboard Settings, 35 dashboards, 29 date option, 15 Delete Selected, 38 Disclaimer, 5 Downloads, 54 E Report work page, 46 ing Reports, 46 Expanded View, 13 F filter the Report Parameters, 14 G Generate Process Document, 21 Getting started using PCI Advisor, 8 glossary, 57 I Installed Plugins, 55 Introducing PCI Avisor, 6 Inventory, 39 K Keyword section, 23 L Logging Out, 9 Login., 9 LOGOUT, 9 M Manage Dashboards, 37, 53 Manage Saved Specifications, 27 Managing Dashboards, 37 Managing Downloads, 54 Managing Reports, 53 Managing Specifications, 27 N navigation, 11 Navigation Overview, 11 New Favorite work page, 26 Non-Compliant, 23 P PCI, 39 PCI Aduit tab, 24 PCI Advisor Feataures, 6 PCI Advisor Overview, 6 PCI DSS, 5 PCI DSS Specification, 5 PCI tab, 24 Policy or Standard, 23 Preface, 5 Prepare Audit Reports, 16 Preset, 11 Preset options, 12 Private, 11 Process Items, 24 Product information, 56 Public, 11 Public or Private, 29 R Recurring, 50 Refresh icon, 38 Related Publications, 5 Report and Compliance Settings, 14 Report and Compliance Settings work page, 15 Report Packs, 55

59 Report Parameters, 14 Report Setting icon, 43 Report Settings and Paramters, 43 Reports, 16, 39 Reports and Charts, 29 Reports Overview, 39 Reports tab, 25 Run At, 49 Run Now, 48 Run Selected Reports, 16 Running Status, 19 S Sales and customer service, 56 Save icon, 45 Save Layou, 32 Saving Reports to Downloads, 45 Saving Specifications, 26 Schedule icon, 47 Schedule Panel work page, 47 Scheduling Reports, 47 Security and Authorization, 6 Support, 56 System Permissions, 7 T Technical support, 56 test, 23 Test-Policy parameters, 23 toggle, 28 U Upload Report Packs, 7 upload the Report Pack, 55 User Preference & Settings work page, 55 user preferences and settings, 55 Using Tabs within PCI Advisor, 28 Using the Launch Page, 10 V Viewing Reports, 39 Voyence tab, 25 W Where to get help, 56 Who Should Read this Document, 5 Working with Reports, 51 Working with Specifications, 12 Working with the Dashboard Tool Bar, 34 Working with the Report Tool Bar, 42