5.3 Configurations Using Policy Editor

5.3.1 Adding License for Applications

Module Manager provides you information about licensed applications and allows you to import application licenses to Policy Editor.

When you install Change Guardian, all available applications are installed automatically on Policy Editor. However, you must add a new application to Policy Editor. To allow Change Guardian to start monitoring, import the license key for each application.

To add a new application to Module Manager:

  1. In Module Manager, click Install > From Local Directory.

To import a license:

  1. Log in to Policy Editor, click Change Guardian.

  2. Select Module Manager.

  3. Click Import License Key.

  4. Select the license key for the required application.

To create a report the application licenses, in Policy Editor click Administrative Reports > License Utilization > Run.

5.3.2 Adding Email Servers to Change Guardian

After you ensure each event destination computer in your Change Guardian environment hosts an email server, you can add each email server to Change Guardian. Change Guardian can send email notifications to specified administrators and operators.

You can also configure email servers by using the Change Guardian command prompt.

  1. In the Policy Editor, select Settings > Email Configuration.

  2. Under Email Servers, click Add.

  3. Specify the name and description of the email server you want to add.

  4. Specify values for the following fields:

    • SMTP Host: The fully qualified domain name of the email server computer.

    • SMTP Port: The remote SMTP port to use when communicating with the email server.

    • Secure: Specifies whether the connection to the SMTP computer must be a secure connection. If Yes, specify the protocol type. If you select No, the SMTP Port is set to 25 by default.

    • From: The return email address appearing on each email alert for this email server.

    • Authentication Required: Specifies whether the email server requires SMTP authentication to send email. If Yes, specify the following:

      • User Name: The user name to use when connecting to the SMTP server.

      • Password: The password corresponding to the specified SMTP user name.

    • Protocol: Specifies which protocol can be used for the email communication. You can select SSL or STARTTLS.

      NOTE:If you select SSL, the SMTP Port value must be set to 465.

      If you select STARTTLS, the SMTP Port value must be set to 587.

5.3.3 Creating and Configuring Notification Groups

For each email server you add to Change Guardian, you must create one or more notification groups specific to that email server. A notification group specifies one or more recipients of the email alerts and contains change event information. When you assign email alerts to events ( web console > ADMINISTRATION), you can choose from the notification groups available for that email server. For more information, see Creating Event Routing Rules.

To create and configure a notification group:

  1. In the Policy Editor, select Settings > Email Configuration.

  2. Select the email server for which you want to create a notification group.

  3. Under Notification Groups, click Add.

  4. Specify the name and description of the notification group you want to create.

  5. Specify values for the following fields:

    • From: The return email address appearing on each email alert for this email server.

    • To: A list of email addresses, separated by commas or semicolons, that receive email alerts.

    • CC: A list of email addresses, separated by commas or semicolons, that receive copies of email alerts.

    • BCC: A list of email addresses, separated by commas or semicolons, that receive blind copies of email alerts.

    • Subject: The subject for the alert email.

    • Maximum Events per Email: Specifies the maximum number of events in the email alert.

    • Include Change Details: Specifies whether the email contains the details of the change detected by Change Guardian.

    • Email Format: Specifies either text or HTML.

5.3.4 Viewing Assets

In Policy Editor, asset groups allow you to assign policies to the group instead of to each individual computer. When you add an asset to a group, Change Guardian automatically deploys the policies assigned to the group to the new asset.

Change Guardian provides the following types of asset groups:

  • Default groups: Assets specific to platforms.

    You can view the members of default groups, but you cannot modify or delete the groups.

  • Static groups: Assets you manually add.

    To add or remove members, manually update the group.

  • Dynamic groups: Assets that match the filter criteria you specify for the group.

Policy Editor does not show an asset group if the group does not contain registered assets.

Change Guardian refreshes the group membership every 30 minutes based on the specified criteria.