2. Function, Operation

2-5

How does the NetSkateKoban Manager determine which conditions should be treated as warnings?

In addition to the warning rules listed below, the NetSkateKoban Manager can notify administrators of warnings and automatically execute actions such as communication blocking, based on policy settings and inputs such as SNMP traps, Snort alerts, and Syslog messages.

[Koban Alarm (Basic) Rules]
Reception of terminal detection information from unregistered sensors
Detection of network connections by unregistered terminals
Duplicate use of an IP address
IP address changes by terminals while connected to the network
Mismatch between an in‑use IP address and the IP address assigned by the DHCP server
User registration changes to a terminal made by an administrator

[Koban Alarm (Advanced) Rules]
Use of IP addresses within unregistered IP address ranges
Use of an IP address other than the static IP address set on the registered device
Use of specific addresses
Use outside the location set on the registered device
Detection of unregistered DHCP servers
Use outside the usage period set for the registered device
etc.