Accounting. Novell Security Manager Powered by Astaro

Using Novell Security Manager

4.3.8. Accounting

When the Accounting function is enabled, Novell Security Manager will track all transmitted data and compile statistics about it. The accounting menu allows you to select which network cards should be monitored. You can download the data from the Log Files/Accounting menu, or view daily reports in the

Reporting/ Accounting menu.

Important Note:

In the normal case, you should only enable Accounting on one network card, because, if more than one card is monitored, data forwarded from one monitored interface to another monitored one will be counted twice.

If you use Masquerading, you should probably use Accounting on the internal interface. Otherwise, data packets dropped by Novell Security

Manager filters will be included, and will appear to come from the wrong interface.

It is also possible to exclude certain Hosts or Networks from the

accounting records. After installation, all networks are included in accounting records.

It may be useful to block certain hosts or networks from accounting data, for instance when a DMZ host only communicates with internal systems, but you are only interested in collecting accounting data for outbound traffic. ince it might only be used for internal means, it might not be useful to consider its traffic data.

In the Reporting/Accounting menu, you can monitor the collected

accounting data and edit accounting rules.

Important Note:

Do not use accounting on network interfaces. Doing so may overload the system.

Configuring Traffic Accounting:

1. In the Network tab, open the Accounting menu.

2. Enable the function by clicking the Enable button.

The status light will show green and another entry window will open.

3. In the Interfaces selection table, choose the network cards.

A description of how to use the selection table can be found in chapter 3.3.3 on page 29.

138