Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

2.6 Managing client security levels

Client security levels are managed in the Client Security Management window of AIM. To open this window, choose the Client Security Management job category in an AIM window.

The Client Security Management job category contains the following job menus:

• PC Security Level Management
  Monitors the client security levels. You can check the details about the security level for each judgment item, judge security levels, and implement actions.
  
• Security Counter-Measure Evaluation
  Displays the points indicating the results of the evaluation of security measures taken on clients. The evaluation points can be used in a security audit.
  
• Statistics
  Displays trends in the results of the evaluation of security measures taken on clients, on a group-by-group basis. This information can be displayed as a graph or output to a CSV file.
  

Users with one of the following roles can use the Client Security Management window:

• Administrator role for JP1/CSC
  A JP1/CSC administrator can use the Security Policy Management window and all the job categories needed to run a client security management system in AIM.
  
• User role for JP1/CSC
  JP1/CSC users can search for information managed by a client security control system in AIM, and can output the information to a file.
  This role does not allow the user to access the Security Policy Management window, to judge security levels, or to implement actions.
  
• Administrator role for Asset Information Manager (optional product)
  When Asset Information Manager (optional) is installed, the Asset Information Manager administrator can use all the job categories in the Security Policy Management window and in AIM. The Asset Information Manager administrator can also create JP1/CSC users. This is the highest user permission among the user roles.
  

For details about administrator roles, see 5.8 Creating CSC administrators and CSC users.

The following explains each job.

Organization of this section

(1) PC Security Level Management

(2) Security Counter-Measure Evaluation

(3) Statistics

(1) PC Security Level Management

This job monitors and manages the client security levels. You can specify a search condition to search for clients with a high security risk level, and can output the search results to a CSV file. You can also judge client security levels and implement actions.

To manage client security levels, use the PC Search window. To display this window, choose Client Security Management, and then PC Security Level Management.

The following figure shows the PC Search window.

Figure 2-13 PC Search window

For details about managing PC security levels, see 8. Monitoring Clients.

The asset information and judgment results of clients whose security levels were judged can be output as PC list information to a CSV file. This file can be used for managing client security levels. You can also output PC list information that contains only the dates of security level judgments. To output the PC list information, use the PC list information output command (cscexportpclist).

Figure 2-14 Outputting PC list information

For details about the PC list information output command (cscexportpclist), see cscexportpclist (outputs PC list information) in 15. Commands. For details about the PC list information file, see 16.10 PC list information file.

(2) Security Counter-Measure Evaluation

This job uses points to evaluate security measures on clients. A client for which all the judgment items have been evaluated as Safe gets 100 points. On the other hand, points are deducted for a client with inadequate security measures, for example, if the latest update program has not been applied or invalid software has been installed. You can search for the evaluation results for a group or user in a window, and output the search result to a CSV file.

Use the Evaluation Condition Input window to evaluate security measures on clients. To display this window, choose Client Security Management, and then Security Counter-Measure Evaluation.

The following figure shows the Evaluation Condition Input window.

Figure 2-15 Evaluation Condition Input window

For details about evaluating security measures, see 10.3 Evaluating the status of security measures on clients.

(3) Statistics

This job allows you to monitor trends in the status of security measures on a group-by-group basis. The following information can be displayed as statistics:

• Trends in the points indicating the results of security measure evaluation
• Trends in the proportion of clients whose security levels are satisfactory for each judgment item (countermeasure usage)
• Trends in the proportion of clients whose security levels are satisfactory for a given set of user-defined judgment items (user-defined countermeasure usage)

You can also check trends in countermeasure usage for individual judgment items. Statistics can be displayed as a graph or output to a CSV file.

To view statistics, use the Statistics Display Condition Input window. To display this window, choose Client Security Management, and then Statistics.

The following figure shows the Statistics Display Condition Input window.

Figure 2-16 Statistics Display Condition Input window

For details about statistics, see 10.4 Gauging trends in security measure evaluation.

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated