Change Guardian provides the following user interfaces:
The web console includes the following interfaces:
The Change Guardian dashboard provides a quick view of events generated as a result of preconfigured policies. For more information, see Change Guardian Dashboard
in the Change Guardian User Guide.
The Policy tab provides reports related to the Change Guardian policies. You can create reports to generate a list of policies that are either not assigned to any agent or are associated with various agents and agent groups.
Adam Mandari is the Change Guardian administrator and is responsible for installing and managing agents. As part of a new setup, Adam deploys Change Guardian agents and creates and assigns policies to the agents. He creates a Policies not Assigned report from the Reports tab to identify any policies that are not yet assigned and deletes the policies that are not required anymore.
To be able to email the reports, Adam configures SMTP. He reviews the report and emails the report as PDF from the Policy tab to Daniel Altaner, the architect.
The Agents tab includes the following interfaces:
The Overview dashboard gives you the status of agents in your environment. Based on the heartbeat of agents, the agents are categorized as offline, warning, or online. Agents that have missed a heartbeat goes to offline state through to the next heartbeat poll interval. Agents with warning status displays the reason why they failed to collect events. The dashboard also provides agent details and policies associated with agents. You can configure email IDs to notify users when agents go offline. You can also configure email IDs to send daily updates of the health of agents.
Mandy Rabani is responsible for managing the IT infrastructure in her organization. She is responsible for troubleshooting agent related issues reported by Change Guardian. Mandy cannot spend hours and days to diagnose an issue. She wants to quickly resolve any issues related to Change Guardian agents.
One morning, Mandy finds out that a Change Guardian Agent for Windows is not sending Active Directory events to the Change Guardian server. However, the agent is communicating with the server. To find out the cause of failure, she logs in to the Change Guardian web console and opens the Overview tab. She searches the agent name and clicks on the search result to view the diagnostic report. The last heartbeat was received some time ago and the diagnostic report indicates the issue as Missing auditing for 'User Account Management', unable to monitor policy
. Using the Overview tab, Mandy quickly identifies and troubleshoot the root cause by configuring auditing on the AD machine. She ensures that Change Guardian is receiving events by logging in to the Change Guardian dashboard. To receive daily health updates of all agents, she configures configures SMTP, sets her email ID, and schedules an email at 9:00 a.m. daily to send her the health status of agents at 9:00 a.m.
NOTE:Upgrade Change Guardian Agent for Windows to 6.0 and Security Agent for UNIX to 7.6.3 to view agent details accurately. Agents that are not upgraded appear offline.
Agent Manger is a central location where you can manage agents. Agent Manager allows you to deploy and manage your agents directly on the agent host machine, or remotely install agents.
For more information, see the following sections:
The Alerts tab opens the Threat Response Dashboard that is the main user interface for viewing and triaging alerts. For more information, see Threat Response Dashboard
in the Change Guardian User Guide.
The Administration tab opens the Administration Console that is the main user interface for viewing and interacting with Change Guardian data. As an administrator, you can perform tasks such as:
Create filters and tags for events
Search and view events
Policy Editor allows you to configure and manage policies. You can perform manage application licenses, create and assign policies to assets, create alert rules, configure event destinations, configure emails, schedule monitoring, and so on.
For more information, see the following sections: