H3C Technologies H3C Intelligent Management Center - Manual (Page 131)

115
The Internet access audit policy list displays all Internet access audit policies.
3. Click the Delete icon for the Internet access audit policy you want to delete.
A confirmation dialog box appears.
4. Click OK.
Managing Internet access audit logs
The online audit logs and offline audit logs are managed separately for Internet access behaviors.
Viewing the online audit log list
1. Click the User tab.
2. From the navigation tree, select User Access Log > Internet Access Audit Log.
The Online Audit List displays all online audit logs.
Online Audit List contents
{
Account Name—Account name used by the online user to access the Internet.
{
User Name—Name of the IMC Platform user associated with the access user account.
{
Start Time (Server)—Logging start time recorded by the EAD server.
{
End Time (Server)—Logging end time recorded by the EAD server when the EAD server
received the Internet access audit log.
{
Destination IP—Destination IP address the online user accessed.
{
Source IP—Source IP address used by the online user to access the Internet.
{
Destination Port—Destination port accessed by the online user.
{
Protocol Number—Transport layer protocol number. Common transport layer protocol
numbers are 1 (ICMP), 6 (TCP), and 17 (UDP).
{
NIC Name—Name of the NIC used by the online user to access the Internet.
{
MAC Address—MAC address used by the online user to access the Internet.
{
Packet Number—Total number of packets sent by the online user that match the ACL rule for
auditing.
{
Details—Click the Details icon to view detailed information about an online audit log.
Querying online audit logs
Basic query
1. Click the User tab.
From the navigation tree, select Access User View > Log Management > Internet Access Audit Log.
The Online Audit List displays all online audit logs.
2. Specify one or more of the following query criteria:
{
Account Name—Enter a partial or complete account name used by the online user to access
the Internet.
{
User Name—Enter a partial or complete name of the IMC Platform user with which the access
user account is associated.