User guide

iGuard/inSight User Guide
Release 7.0.0.4
25
Using the System
If you are using an inSight Console, you are the central management point for multiple iGuards.
The work generally done on standalone iGuards is shifted away from those managed mode
appliances to make your network security easier to manage.
Whether you use an inSight Console or a standalone iGuard, the tasks described here will help you
to find incidents and violations, investigate anomalies, prepare reports, build cases, and set up
othermechanisms to help you protect your business operations.
Start with these core topics.
Before Searching
Create Compound Queries
Custom Dashboard Viewing
Filtering Examples
Incident Examples
Get Incident Details
My Reports
Search by Keywords
Search Using Standard Templates
Managing Cases
What are Policies
What are Templates
What is an Action Rule
What is a Concept
What is a Rule
Finding Incidents
If no incidents are found on your dashboard, your iGuard may not have been up long enough, or it
may not be detecting traffic.
First try clicking on the Monitor tab. Capture may have started while the interface was
loading.
Check your iGuard's status by going to the System Monitor.
If there is no systemic problem, try clearing any existing filters.
If none of these tactics work, contact Reconnex Technical Support.
Adjust Your Workspace
Open and close your navigation bar by double-clicking between frames.