Quest InTrust Preparing for Auditing and Monitoring Solaris

Transcription

1 Quest InTrust 11.3 Preparing fr Auditing and Mnitring Slaris

2 2017 Quest Sftware Inc. ALL RIGHTS RESERVED. This guide cntains prprietary infrmatin prtected by cpyright. The sftware described in this guide is furnished under a sftware license r nndisclsure agreement. This sftware may be used r cpied nly in accrdance with the terms f the applicable agreement. N part f this guide may be reprduced r transmitted in any frm r by any means, electrnic r mechanical, including phtcpying and recrding fr any purpse ther than the purchaser s persnal use withut the written permissin f Quest Sftware Inc. The infrmatin in this dcument is prvided in cnnectin with Quest Sftware prducts. N license, express r implied, by estppel r therwise, t any intellectual prperty right is granted by this dcument r in cnnectin with the sale f Quest Sftware prducts. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Sftware makes n representatins r warranties with respect t the accuracy r cmpleteness f the cntents f this dcument and reserves the right t make changes t specificatins and prduct descriptins at any time withut ntice. Quest Sftware des nt make any cmmitment t update the infrmatin cntained in this dcument. If yu have any questins regarding yur ptential use f this material, cntact: Quest Sftware Inc. Attn: LEGAL Dept 4 Plaris Way Alis Viej, CA Refer t ur Web site ( fr reginal and internatinal ffice infrmatin. Patents Quest Sftware is prud f ur advanced technlgy. Patents and pending patents may apply t this prduct. Fr the mst current infrmatin abut applicable patents fr this prduct, please visit ur website at Trademarks Quest, the Quest lg, and Jin the Innvatin are trademarks and registered trademarks f Quest Sftware Inc. Fr a cmplete list f Quest marks, visit All ther trademarks and registered trademarks are prperty f their respective wners. Legend CAUTION: A CAUTION icn indicates ptential damage t hardware r lss f data if instructins are nt fllwed. IMPORTANT, NOTE, TIP, MOBILE, r VIDEO: An infrmatin icn indicates supprting infrmatin. InTrust Preparing fr Auditing and Mnitring Slaris Updated - May 2017 Versin

3 Cntents Slaris Auditing and Mnitring Overview 6 Requirements 6 Installatin 6 Installing Agents 8 Preparing Audit Trails 8 Cnfiguring Syslg 8 Cnfiguring Basic Security Mdule 9 BSM Cnfiguratin Files 9 InTrust Cnfiguratin 10 Data Surces 10 Slaris Syslg 10 Text File-Mnitring Data Surces 11 External Events Data Surces 12 Script Event Prvider Data Surces 12 Auditing, Reprting, and Real-Time Mnitring 13 Use Scenaris 13 Syslg Cnfiguratin Mnitring 13 Tracking Resurce Access 13 Abut us 15 Cntacting Quest 15 Technical supprt resurces 15 InTrust 11.3 Preparing fr Auditing and Mnitring Slaris 3

4 2017 Quest Sftware Inc. ALL RIGHTS RESERVED. This guide cntains prprietary infrmatin prtected by cpyright. The sftware described in this guide is furnished under a sftware license r nndisclsure agreement. This sftware may be used r cpied nly in accrdance with the terms f the applicable agreement. N part f this guide may be reprduced r transmitted in any frm r by any means, electrnic r mechanical, including phtcpying and recrding fr any purpse ther than the purchaser s persnal use withut the written permissin f Quest Sftware Inc. The infrmatin in this dcument is prvided in cnnectin with Quest Sftware prducts. N license, express r implied, by estppel r therwise, t any intellectual prperty right is granted by this dcument r in cnnectin with the sale f Quest Sftware prducts. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Sftware makes n representatins r warranties with respect t the accuracy r cmpleteness f the cntents f this dcument and reserves the right t make changes t specificatins and prduct descriptins at any time withut ntice. Quest Sftware des nt make any cmmitment t update the infrmatin cntained in this dcument. If yu have any questins regarding yur ptential use f this material, cntact: Quest Sftware Inc. Attn: LEGAL Dept 4 Plaris Way Alis Viej, CA Refer t ur Web site ( fr reginal and internatinal ffice infrmatin. Patents Quest Sftware is prud f ur advanced technlgy. Patents and pending patents may apply t this prduct. Fr the mst current infrmatin abut applicable patents fr this prduct, please visit ur website at Trademarks Quest, the Quest lg, and Jin the Innvatin are trademarks and registered trademarks f Quest Sftware Inc. Fr a cmplete list f Quest marks, visit All ther trademarks and registered trademarks are prperty f their respective wners. Legend CAUTION: A CAUTION icn indicates ptential damage t hardware r lss f data if instructins are nt fllwed. IMPORTANT, NOTE, TIP, MOBILE, r VIDEO: An infrmatin icn indicates supprting infrmatin. InTrust Preparing fr Auditing and Mnitring Slaris Updated - May 2017 Versin

5 Cntents Slaris Auditing and Mnitring Overview 6 Requirements 6 Installatin 6 Installing Agents 8 Preparing Audit Trails 8 Cnfiguring Syslg 8 Cnfiguring Basic Security Mdule 9 BSM Cnfiguratin Files 9 InTrust Cnfiguratin 10 Data Surces 10 Slaris Syslg 10 Text File-Mnitring Data Surces 11 External Events Data Surces 12 Script Event Prvider Data Surces 12 Auditing, Reprting, and Real-Time Mnitring 13 Use Scenaris 13 Syslg Cnfiguratin Mnitring 13 Tracking Resurce Access 13 Abut us 15 Cntacting Quest 15 Technical supprt resurces 15 InTrust 11.3 Preparing fr Auditing and Mnitring Slaris 5

6 Slaris Auditing and Mnitring Overview The Slaris Knwledge Pack expands the auditing and reprting capabilities f InTrust t Oracle (frmerly, Sun) Slaris. The Knwledge Pack enables InTrust t wrk with Syslg, text lgs, and the Slaris Audit lg. The fllwing table shws what yu can audit and mnitr n Slaris: Data Surce Gathering Real Time Mnitring Syslg messages X X Text lgs f any frmat X Cnfiguratin file mdificatin X X Slaris audit lgs generated by Basic Security Mdule (BSM) X Fr Slaris Syslg, there is an agent-free apprach t gathering, which is nt cvered in this guide. It invlves Syslg frwarding t an InTrust server. Fr details abut this methd, see Setting Up Gathering f Syslg Data. Requirements The fllwing Slaris versins are supprted: Sun Slaris 8 with patch : 32-bit and 64-bit (n SPARC v9 architecture) Sun Slaris 9 standard installatin: 32-bit and 64-bit (n SPARC v9 architecture) Sun Slaris 10 standard installatin: 32-bit and 64-bit (n SPARC v9 and AMD-64 architecture) Oracle Slaris 11.1 standard installatin: 32-bit and 64-bit (n SPARC v9 and AMD-64 architecture) IMPORTANT: On Slaris 11, InTrust requires the SUNWicnv-unicde package. Installatin The Slaris Knwledge Pack must be installed n tp f an existing InTrust installatin. The fllwing bjects are included: InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 6

7 Data surces: Slaris Syslg Slaris Audit Lg Slaris Accunts Mnitring Slaris Text Files Mnitring Gathering plicies: Slaris: Security: Cmmn Syslg Security Events Slaris: Security: Failed Lgns Slaris: Security: Successful Lgns Slaris: Security: SU Activity Slaris: Security: Rebts Slaris: All Syslg Messages Slaris: lgins/lguts frm Audit Lg Slaris: prcess executin events frm Audit Lg Slaris: filesystem events frm Audit Lg Slaris: All Events frm Audit Lg Slaris: Accunts mnitring Slaris: Text files mnitring Imprt plicies: Slaris: Security: Cmmn Syslg Security Events Slaris: Security: Failed Lgns Slaris: Security: Successful Lgns Slaris: Security: SU Activity Slaris: Security: Rebts Slaris: All Syslg Messages Slaris: lgins/lguts frm Audit Lg Slaris: prcess executin events frm Audit Lg Slaris: filesystem events frm Audit Lg Slaris: All Events frm Audit Lg Slaris: Accunts mnitring Slaris: Text files mnitring Cnslidatin plicies: Slaris Lgs Cnslidatin Slaris Lgs Cnslidatin fr the Last Mnth InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 7

8 Tasks: Slaris Syslg daily cllectin f imprtant security events Slaris audit lg daily cllectin Slaris cnfiguratin changes daily cllectin Slaris weekly reprting "Slaris hsts" site "Slaris: security" Real-time mnitring plicies: Predefined reprts belnging t the fllwing categries (fr cmplete list f reprts and reprt descriptins, refer t the InTrust Reprts fr Sun Slaris dcument): Administrative Activity Frensic Analysis Nrmal User Activity Installing Agents InTrust agents must be installed manually n Slaris hsts. Fr details, see Installing Agents Manually n Slaris Cmputers. Preparing Audit Trails InTrust takes advantage f the fllwing lgging systems available n Slaris: Syslg Basic Security Mdule (BSM) Syslg prvides data fr auditing and real-time mnitring activities. Basic Security Mdule data is used nly fr auditing. This tpic describes the cnfiguratin requirements that InTrust impses n these systems. Cnfiguring Syslg Syslg is an imprtant lgging facility in Slaris. Syslg functinality is prvided by the syslgd daemn, which accepts messages frm varius surces that supprt lgging, and either writes these messages t files r passes them n t ther hsts in the netwrk. The InTrust agent prcesses the message flw befre it arrives at syslgd's input. Hwever, the agent catches nly the lcal messages; it des nt catch messages redirected frm ther cmputers ver the netwrk. Therefre, d nt rely n syslgd s message redirectin feature if yu audit and mnitr Syslg with InTrust. InTrust supprt fr the Slaris Syslg depends n lcal messages. It is up t yu hw yu cnfigure syslgd lgging. This cnfiguratin des nt affect the peratin f the InTrust agent, which prvides all the Syslg data that InTrust accepts. InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 8

9 Cnfiguring Basic Security Mdule Basic Security Mdule (BSM) in Slaris prvides lgging capability and stres system events in the Slaris Audit lg. This sectin describes hw t prepare BSM fr InTrust peratins. T enable Basic Security Mdule Auditing 1. Switch t run level 1 (System Maintenance Mde) using the fllwing cmmand: /usr/sbin/init 1 2. Enable BSM auditing with the fllwing cmmand: /etc/security/bsmcnv When the system prmpts yu fr cnfirmatin, enter Y. If yu want t custmize lgging ptins, edit the Basic Security Mdule cnfiguratin files at this stage. The cnfiguratin files are listed further n. 3. Rebt the system. When the system is rebted, a message similar t the fllwing will be displayed during the startup prcess t indicate that auditing has been enabled: starting audit daemn Cnfigured 233 kernel events. At this pint, auditing is enabled, and a lg file shuld be present in the /var/audit directry. If BSM functinality is n lnger required n a Slaris system, yu can disable it using the bsmuncnv cmmand. NOTE: When the bsmcnv cmmand is run, it disables the Stp-a keybard sequence by adding set abrt_enable = 0 t the /etc/system file. Disabling the ability f a user r administratr t stp a system thrugh a keybard Stp-a r equivalent cmmand ver a serial prt may nt be apprpriate fr all envirnments. BSM Cnfiguratin Files The fllwing table describes the BSM cnfiguratin files. Fr detailed infrmatin abut cnfiguring BSM, visit File audit_class audit_cntrl Descriptin An audit class is a grup f audit events. All audit classes are defined in the /etc/security/audit_class file. All audit events are assigned t audit classes in the/etc/security/audit_event file. Audit classes are recrded in the audit trail if they are turned n glbally in the audit_ cntrl file, r are assigned t a specific user in the audit_ user database. These audit classes are used by the audit_cntrl, audit_ user, and audit_event files, as well as in the audit mask. The /etc/security/audit_cntrl file describes system parameters fr auditing. These parameters include the fllwing: Audit trail strage directry (r directries) InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 9

10 File Descriptin Minimum free space warning value Audit flags assigned t user and system prcesses It is pssible t audit nly failed audit events r nly successful audit events. Fr example, yu can specify that a successful attempt t allcate memry shuld nt be recrded but that a failed attempt shuld be recrded. This can be specified in either the audit_cntrl r audit_user files. audit_event audit_user The /etc/security/audit_event file defines the audit events and assigns each event t ne r mre audit classes. Fr additinal infrmatin n the audit_event file, refer t the audit_event man page. The /etc/security/audit_user file enables yu t specify additinal auditing fr individual users. Access t this database fllws the rules fr the passwrd database specified in /etc/nsswitch.cnf. NOTE: The InTrust agent des nt mdify the cntents f tken fields it retrieves frm the Slaris Audit lg. Hwever, infrmatin in these fields is nt sufficient if yu stre Slaris Audit lg data in a centralized way. The agent cmplements this infrmatin by adding InTrust-specific fields t tkens. These fields are filled in by reslving the values f sme fields fr the current Slaris hst. InTrust Cnfiguratin After yu have taken all the necessary cnfiguratin steps n the target Slaris hsts, the InTrust Manager snapin takes ver all auditing and real-time mnitring peratins. This sectin describes Slaris-specific settings that are nt explained in the ther InTrust dcumentatin. Data Surces The Slaris Syslg and Slaris Audit Lg data surces represent the Slaris audit trails Syslg and Basic Security Mdule lg, respectively. The "Slaris text files mnitring" and Slaris accunts mnitring data surces wrk with files that are nt audit trails. Slaris Syslg Syslg auditing and real-time mnitring is based n the flw f data intended fr the syslgd daemn. The Slaris Syslg data surce is used t analyze the data flw and capture nly the necessary prtins f it. InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 10

11 This data surce uses a list f regular expressins. When the data surce is wrking, it applies the expressins, in the rder specified, t each message. The rder f the regular expressins matters because message prcessing stps as sn as the message matches ne f the expressins. When parsing takes place, pairs f parentheses are used in regular expressins t break messages up int numbered fields. Fr example, the fllwing regular expressin: ^(.{15}) ([-[:alnum:]_.]+) (su)(\[[0-9]*\]){0,1}: \[ID ([0-9]+) [a-z]+\.[a-z]+\] ('su (.*)' succeeded fr (.*) n (.*)) matches the fllwing message: Dec 16 07:29:28 r5 su: [ID auth.ntice] 'su rt' succeeded fr jsmith n /dev/pts/1 The result is an event with the fllwing fields: Field Name Field Number Field Cntents Cmputer <2> r5 Descriptin <6> su rt succeeded fr jsmith n /dev/pts/1 Event ID <5> Event Surce <3> su Insertin String #1 <6> su rt succeeded fr jsmith n /dev/pts/1 Insertin String #11 <7> rt Insertin String #12 <8> jsmith The last regular expressin in the predefined data surce is designed t match any message. This ensures that the message is nt lst. The result f this regular expressin is an event where the Descriptin and Insertin String #1 fields bth cntain the descriptive part f the message, if a descriptive part is present. It is nt recmmended that yu mdify predefined regular expressins in the data surce. These expressins are required fr the reprts that cme with the Slaris Knwledge Pack. These reprts will ignre any data resulting frm the use f custm regular expressins. If yu create a custm Syslg data surce with yur wn regular expressins, make sure yu use custmized reprts based n the data that these regular expressins help capture. CAUTION: Including a lt f cmplex regular expressins in the data surce may slw dwn Syslg prcessing significantly. Text File-Mnitring Data Surces The Slaris text files mnitring and Slaris accunts mnitring scripted data surces are designed t parse specified files. Real-time mnitring rules use these data surces t mnitr the files fr changes. CAUTION: These scripted data surces are nt designed fr general-purpse auditing and mnitring f textbased lgs. They shuld be used nly n cnfiguratin files that preferably d nt exceed 100 kilbytes. T cllect large text-based lgs, use Custm Text Lg Events data surces, as described in the Auditing Custm Lgs with InTrust dcument. T specify the file paths, edit the apprpriate parameters f the data surces. Fr example, t mnitr the /etc/hsts.allw and /etc/hsts.deny files, take the fllwing steps: InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 11

12 1. Open the prperties f the Slaris text files mnitring data surce. 2. On the Parameters tab, select the TextFiles parameter and click Edit. 3. Supply /etc/hsts.allw and /etc/hsts.deny in the dialg bx that appears. Similarly, yu can edit the UsersFile and GrupsFile parameters f the Slaris accunts mnitring data surce if the lcatin f the passwd and grups files differs frm the default n yur Slaris hsts. NOTE: Mnitring the passwd and grups files makes sense if yur Slaris envirnment des nt use a directry slutin. With a directry in place, infrmatin in these files is nt imprtant r representative. External Events Data Surces The External Events data surce type is nt represented by any predefined data surces. It is different frm ther data surce types in that it generates event recrds with fields that yu define and hands them ver t the InTrust agent t prcess. Data surces f this type are represented by a cmmand-line utility n the agent side and an InTrust data surce bject n the InTrust server side. This cmmand-line utility frces special events n the InTrust agent running n the same cmputer. The agent stres the events in its backup cache. Frm there, the events can be captured by the gathering r real-time mnitring engine. T create an External Events data surce 1. Right-click the Cnfiguratin Data Surces nde and select New Data Surce. 2. In the New Data Surce Wizard, select the External Events data surce type. 3. Cmplete the remaining steps. Fr details abut External Events data surce settings, see Cnfiguring Data Surces. Script Event Prvider Data Surces InTrust prvides an additinal ptin t create a custm data surce using the Script Event Prvider. This functinality allws yu t create a script that starts with pre-set frequency. Under sme cnditins that are specified in this script events are generated and then are passed t the InTrust agent. Events are stred in the agent's backup cache. Frm there, the events can be captured by the gathering r real-time mnitring engine. Yu can specify in the certain script: what infrmatin is stred and hw it is rdered in the certain events, what cnditins are required fr event generatin. T create a custm data surce with Script Event Prvider 1. Right-click the Cnfiguratin Data Surces nde and select New Data Surce. 2. In the New Data Surce Wizard, select the Script Event Prvider data surce type. 3. On the Script step select the script language and enter yur script text using XML editr. 4. On the same step specify a frequency f the script running. 5. Cmplete the remaining steps. InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 12

13 Auditing, Reprting, and Real-Time Mnitring Slaris auditing, reprting, and real-time mnitring is similar t wrking with any ther system supprted by InTrust. There is nly ne imprtant difference that refers t active scheduling f the InTrust tasks see the warning nte belw. CAUTION: An active schedule is required t make the agent cache events. If the schedule is disabled, n events are stred. Since all data surces described abve (except "Slaris Audit Lg") use events caching, it is recmmended that yu use at least ne task fr the cache-enabled data surces that run regularly. If yu want t gather data nly n demand, yu must still enable the schedule fr yur task r tasks, but set it t a pint in the future r in the past. The ther Slaris auditing, reprting and real-time mnitring peratins d nt have special requirements, and yu can perfrm them as described in the Auditing Guide and Real-Time Mnitring Guide. Use Scenaris This tpic describes typical situatins in a prductin envirnment and utlines hw InTrust helps handle them: Syslg Cnfiguratin Mnitring Tracking Resurce Access Fr infrmatin abut specific prcedures, such as creating tasks and jbs r activating rules, see the Auditing Guide and Real-Time Mnitring Guide. Syslg Cnfiguratin Mnitring Suppse yu use a finely-tuned Syslg audit plicy in yur envirnment. Yur audit cnfiguratin has prven efficient and reliable, and yu d nt want anyne but a few trusted administratrs t be able t change it. Even s, yu want t knw immediately if the audit plicy is mdified in any way. Use InTrust real-time mnitring capabilities t enable immediate ntificatin. Syslg audit cnfiguratin is defined in the syslg.cnf file, s the slutin in this case is t mnitr this file with InTrust and send an alert whenever the file is mdified. Enable the Syslg.cnf file mdified rule and supply the apprpriate file paths as the rule's parameter. Tracking Resurce Access In this scenari, ne f yur Slaris hsts stres prductin-critical files. Yu want t be ntified whenever these files are accessed. Take the fllwing steps t track access t yur files using InTrust: 1. Make sure that Basic Security Mdule plicy is cnfigured t capture file-related events. 2. Create a weekly InTrust task that includes gathering f relevant Slaris Audit lg events and reprting n them. If yu like, yu can stre the gathered data in an InTrust repsitry. Yu can als include a ntificatin jb t infrm yu f task cmpletin. Include the File access reprt in the reprting jb, and supply the apprpriate paths in the Files filter. The resulting reprts are stred in the lcal flder that is specified during InTrust installatin (fr details see the Deplyment Guide). InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 13

14 Nw yu can use Knwledge Prtal t view a weekly reprt indicating wh accessed yur critical files, when they were accessed, and whether they were mdified. InTrust 11.3 Preparing fr Auditing and Mnitring Slaris Slaris Auditing and Mnitring Overview 14

15 Abut us We are mre than just a name We are n a quest t make yur infrmatin technlgy wrk harder fr yu. That is why we build cmmunity-driven sftware slutins that help yu spend less time n IT administratin and mre time n business innvatin. We help yu mdernize yur data center, get yu t the clud quicker and prvide the expertise, security and accessibility yu need t grw yur data-driven business. Cmbined with Quest s invitatin t the glbal cmmunity t be a part f its innvatin, and ur firm cmmitment t ensuring custmer satisfactin, we cntinue t deliver slutins that have a real impact n ur custmers tday and leave a legacy we are prud f. We are challenging the status qu by transfrming int a new sftware cmpany. And as yur partner, we wrk tirelessly t make sure yur infrmatin technlgy is designed fr yu and by yu. This is ur missin, and we are in this tgether. Welcme t a new Quest. Yu are invited t Jin the Innvatin. Our brand, ur visin. Tgether. Our lg reflects ur stry: innvatin, cmmunity and supprt. An imprtant part f this stry begins with the letter Q. It is a perfect circle, representing ur cmmitment t technlgical precisin and strength. The space in the Q itself symblizes ur need t add the missing piece yu t the cmmunity, t the new Quest. Cntacting Quest Fr sales r ther inquiries, visit r call Technical supprt resurces Technical supprt is available t Quest custmers with a valid maintenance cntract and custmers wh have trial versins. Yu can access the Quest Supprt Prtal at The Supprt Prtal prvides self-help tls yu can use t slve prblems quickly and independently, 24 hurs a day, 365 days a year. The Supprt Prtal enables yu t: Submit and manage a Service Request View Knwledge Base articles Sign up fr prduct ntificatins Dwnlad sftware and technical dcumentatin View hw-t-vides Engage in cmmunity discussins Chat with supprt engineers nline View services t assist yu with yur prduct