H3C Technologies H3C Intelligent Management Center - Manual (Page 636)

622
Configuration segment
The (HPA)Remote login rule checks whether the remote login mode is SSH.
1. Navigation Service > Compliance Policy.
a. Click the Service tab from the tabular navigation system on the top.
b. Click Compliance Center on the navigation tree on the left.
c. Click Compliance Policy under Compliance Center on the left navigation tree.
The Policy List appears.
2. Input Security in the Name field, and click Query.
3. Click the name link of Security in the Policy List to enter the Compliance Policy Details page.
For more information about the Compliance Policy Details page, see "
Viewing detailed
information about a compliance policy ."
4. Click the name link of (HPA)Remote login in the Rule List to enter the Rule Details page.
a. Checks whether the device is a Hewlett Packard device. If not, the device is not checked. If yes,
the rule goes to the next step.
b. Checks whether the device series belongs to Device Series. If not, the rule does not check the
device. If yes, the rule goes to the next step.
c. Reads (user-interface){1}|#{1} in the latest backup running configuration file, and uses the
read parameter as the end identifier. If no parameter is read, ends the check on the device.
Otherwise, the rule goes to the next step.
d. Checks the configuration segment starting with user-interface vty and ending with 1, 2, or 3,
for example. If the configuration segment contains protocol inbound ssh, the device conforms
to the compliance policy, and the rule ends the check on the device. If the configuration
segment does not contain protocol inbound ssh, the device violates the compliance policy. The
check result is displayed to notify the administrator that the device violates the compliance
policy.
e. Repeats the previous steps to check all the devices in the check task.
Check tasks
A check task is used to check the policy compliancy of a device based on the association between a
compliance policy with the device and parameters such as the check severity level and execution period.
The following sections provide details about check tasks.
Viewing the check task list
To view the check task list:
1. Navigate to Service > Check Task.
a. Click the Service tab from the tabular navigation system on the top.
b. Click the Compliance Center on the navigation tree on the left.
c. Click Check Task under Compliance Center from the navigation system on the left.
The Task List appears.
Task list
• Status: Contains status of the check task, which can be Finished, Enabled, Disabled, or Running. If
a task is finished, Finished appears. A task in Enabled state is executed automatically at an interval,