XYGATE Merged Audit Reference Manual

XYGATE Merged Audit
®
Reference Manual
Introduction
XYPRO Technology Corporation xix Proprietary and Confidential
The data for all the nodes in your network will be consolidated into one central SQL
database. There are also SQL tables used in the configuration and management of the
MOVER. The MOVER Serverclass objects will “push” or “pull” the data to the central
collection point. The MOVER Serverclasses will be controlled from the Pathway, which
runs on one central node
Important! If an HP NonStop Server is not licensed for SQL by HP, XMA is compiled
with a Runtime License so that you can use it with just a few limitations. The only
feature that is unavailable on such nodes is the host-based reporting. You can still run
Audit Pro reports using the Report Manager GUI.
The items below are the major components that are used to configure, manage, and
store data within the XYGATE Merged Audit environment. Each item is described in
detail in the Glossary.
EMS Templates and Macros
FILTERS File
FILTSAMP File
MACONF File
MAMGRC File
MGRSETUP File
NEWTBLS
REMNODES
XMA (SQL) Database
Categorizing the PCI Requirements in XMA
PCI requirements are not easy to categorize. XYPRO Technology has chosen the
following conventions for assigning reports to a PCI Requirement number:
• PCI 2.2.3 is considered to reference the security configuration; therefore,
management (creating or changing) of Safeguard globals, file, process, and device
security, and all XYGATE configuration files fall into this category. Managing the
rules that protect files is reported in the 2.2.3 requirement, while reports recording
actual access to a file will fall into another requirement depending on the type of
file. For example, accesses of card holder data would be 10.2.1, while access to
network configuration files would be 10.2.