User guide

29
Selecting 4 will allow the user to delete an existing host from the records. After selecting the option, enter the number of
the host to delete. If successful, the list of menu options will be displayed. If there is an issue, an error message will be
displayed indicating what has gone wrong.
Selecting 5 will save the current state of hosts and passwords. This allows the user to save their work without exiting the
program.
Selecting Q (case insensitive) will save the changes that have been made since the last save and quit the program.
Selecting X (case insensitive) will quit the program and not save any of the changes that were entered.
When running the wmi_config_credentials program, ensure that the wmi_monitor LCP policy file used
contains at least the hosts that have been previously encrypted. Otherwise, a warning will be issued and
credentials will be lost if you continue.
For more information about configuring remote hosts for remote WMIC connectivity or troubleshooting connectivity issues,
please refer to the following helpful links:
 http://msdn.microsoft.com/en-
us/library/aa389290%28v=vs.85%29.aspx#configuring_a_computer_for_a_remote_connection
 http://support.microsoft.com/kb/875605
Tenable NetFlow Monitor
The Tenable NetFlow Monitor Client currently only supports NetFlow versions 5 and 9.
A list of decimal protocol enumerations is found here:
http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
The Tenable NetFlow Monitor (TFM) client takes advantage of the ability in most modern routers to use the “NetFlow”
protocol to send network session statistics to remote collectors for processing and reporting. This enables you to monitor
network traffic without having to install a sniffer on a hub or switched span port.
To configure, specify the LCE server’s IP address, and if needed, change the server port. A default tfm.conf
configuration file is shown below:
# If using an LCE 4.x server, configure this file with the appropriate server
information.
# After the first run, the client will be configured strictly from the Client Manager.
# If using an LCE 3.x server, replace this file with the tfm.conf.v3_server file,
# which contains full configuration information.
options {
# Log messages will be stored in a file named according to date in the
following
# directory.
log-directory "/opt/netflow_monitor/";
# This section defines the login information for the LCE server. Only one