XYGATE Compliance PRO (XSW) Reference Manual

XYPRO Technology Corporation 205 Proprietary and Confidential
Chapter 12. XSW Auditing and Audit
Reporting
XSW auditing is performed by the XSW host modules only. At this time, none of the
XSW GUI modules (XYGATE Client, Loader and Service Process) perform auditing.
12.1 XSW within the XYGATE Audit Architecture
XSW auditing fits into the general XYGATE audit architecture. The diagram below
illustrates the high-level audit architecture, common to the XYGATE products. There
are three main parts to this architecture: (1) audit configuration, (2) audit collection,
and (3) audit reporting.
12.1.1 Audit Configuration
Product-specific audit configuration is handled through the XYGATE product’s
xxCONF and sometimes its xxACL file. XSW utilizes only the SWCONF file for its audit
configuration. These files indicate which items to audit and where to write or send the
audit trail. Refer to Appendix A: for details about the SWCONF file and the AUDIT
keywords in particular.
12.1.2 Audit Collection
Formatted audit records can be sent to an IP address (such as the IP address of an
external syslog process), a process running on the host (such as EMS), or a disk file