Updated : 4-Jan-2023
First Time Setup
|
GbJade Intrution Module
Intrution Detection Help FileIntrusion Workshop Module Configuration.
Setting Scan Time. Select the time at which you wish to
scan the server for intrution detections and reports. Selecting more than once a
day can be done but is not recomended. Each check box represents the time of
day on a 24 hour scale.
Note: This module is CPU intensive. It should not be configured to scan during
working hours, it will slow down the server response. Best used while server is
idle.
Sending notifications
|
Notification Type. |
All: |
When selected, the reports producted by the scanner
will include everything that it encounters. Passed and Failed.
|
Failed only: |
This type of report will show only the activities that
are unusual to the system.
Note: Selecting any of these types of
report won't change the way IDS works internally. All unknown files,
ports or activities encoutered on the server will be stopped and
deleted. Only the report file content will change.
|
|
Email notifications |
Email From: |
In most cases, this field can be a non valid email
address such as
ReSieve.master@WhichDomainFilters.com. In this way it is easy
to know where the device is installed and for whom it's work for. The IP
address will also be included in the email message.
|
Email To: |
This field MUST be valid email address or phone number@YourCellPhoneGateway.com.
ie: admin@MyDomain.com or for SMS
1234567890@bellmobility.ca
Most cell phone companies has the same syntax of 10 digits @ sms gatway.
See below to find your carrier's gateway.
|
Authenticating on Remote Server.
|
Server authentication |
Smtp Server: |
The name or IP address of the remote smtp server. |
Port: |
A digit. most likely to be 587 over STARTTLS. 465 for
SMTP over SSL. Default smtp port is 25 without SSL or TLS. |
Password: |
As it says. |
Name: |
login name, can also be your email address. |
StartTLS |
A startTLS command is sent to the server before
authentication. |
SSL / TLS |
Encrypting a communication channel between your
computers and the mail server. SSL and TLS both provide a secure
way. |
Notification interval: |
The interval in which the SMTP traps will notify you if
a trap is triggered and remains in trigger state. |
ie: Smtp
Server: Port : Password : Auth Name : |
Google smtp.gmail.com 465
(select SSL / TLS) Your Google password as usual
YouEmail@gmail.com |
ie: Smtp
Server: Port : Password : Auth Name :
|
Gmx.com smtp.gmx.com 587
(select StartTLS) Gmx.com password as usual
YouEmail@gmx.com
|
Intrution Workshop Reports
IDS need to be configured before you can see reports. First time start for
IDS without configuration will not display anything.
Click the Fetch button to see the last report of Intrution
Workshop. Clicking the Scan Now button will do as it says.
To be used while little activities is going through the server. Scans are CPU
intensive. Use with care.
|