You can access controls in the console on the menu bar, the toolbar, and the enterprise tree display. Additional controls are available when you right-click the enterprise tree and grid displays.
The console retains your display preferences each time you log on. Console controls include the following:
■ Menu bar
Pull-down menus provide options to connect the console to a new manager, establish a new region for the managers, manage your local summary database, change display options, and request reports, among other functions.
■ Toolbar
The following table displays Symantec ESM toolbar icons.
41 Using the Symantec ESM console
Function Title
Icon
Open and save report files Open a report
View security level and rating of objects from recent policy runs. Click on an object to see greater detail.
Drill down model
View total number of objects at each security level from recent policy runs
Summary model
View security data as it changes over time
Trend model
View or edit summary filter settings
View/edit summary filter setting
Access the Policy Run wizard Policy run wizard
Download summary data from the managers
Synchronize enterprise
Perform a LiveUpdate Live Update
Access help Access Symantec ESM help
■ Enterprise tree
The enterprise tree is located in the upper left pane of the main window. At the top of the tree, the My ESM Enterprise node consists of regions that contain managers. Each manager has four types of objects: domains, policies, policy runs, and templates. The names of the regions, managers, domains, agents, policies, and modules are specific to your network.
Expand the summary branch to display the agents in each manager domain. Managers can transfer LiveUpdate data to agents with a colored icon. Managers cannot update agents with a gray icon.
Further expansion of the summary branch displays security level information for policies, modules, and policy runs.
You can expand the Policies branch to see the modules in each policy. Further expansion shows the operating systems that are checked by the modules and also provides access to message suppressions.
Using the Symantec ESM console
Using the console controls
Note:Red, yellow and green on the icons in the summary branch indicate the security level of each object. Grey or black indicates no data.
You can double-click a policy name in the Policies branch to access the policy editor. The policy editor lets you select the modules that comprise the policy. You can double-click a module name and operating system within a policy to expand the Policies branch to enable or disable module security checks, edit name lists, or select other options that are related to module checks. You can click an object in the Policy Runs branch to view and take action regarding a policy run. You can click an object in the Templates branch to edit the templates that are used by specific security modules.
■ Chart
Information in the chart pertains to the level immediately below the object that is selected in the Summary branch of the enterprise tree. For example, clicking the summary chart on the toolbar and then clicking an agent object in the Summary branch causes the chart and grid to display security level information about the most recent policy runs on the agent.
If your environment supports connections to all of the network managers, the chart and grid can display enterprise-wide level and average rating information when you select the Symantec ESM enterprise object.
If you select the summary chart for an object in the Summary branch from My ESM Enterprise to a module, the chart displays a count of the red, yellow, and green objects for the level that is immediately below the selected object. When you select the drill-down chart for an object in the summary branch, the chart displays level and rating information for the objects in the level immediately below the selected object. You can click on the chart to expand the Summary branch to the next level and show the chart for that level. If you select trend mode, the chart displays the cumulative results of policy runs over a period of time. Summary filter settings can limit the information that is displayed in the chart and grid.
43 Using the Symantec ESM console
■ Grid
Information in the grid applies to the level immediately below the object that is selected in the summary branch of the enterprise tree.
On the Summary branch, the grid displays average agent level and rating information for each node from My ESM Enterprise to domains. When you select a domain, the grid displays level and rating information for each agent. If you select an agent, the grid displays level and rating information for each policy. When you select a policy, the grid displays level and rating information for each module. On the Policies branch, the grid displays the status of the modules and security checks in a policy. Double-click a policy name, or right-click a policy name and then click properties, to access an editor where you can enable or disable a module check or change the contents of a name list. On the Policy Runs branch, the grid displays policy run status. A context menu provides options to stop, delete, or view the properties of policy runs. On the Templates branch, the grid provides access to an editor that can change the contents of template files.