Search results

= About ASL = ...utions, ASL is designed for beginners and experts alike. You just install ASL and it does the work for you.

[[ASL]] includes a special secure kernel, that will proactively protect your syst ...the [https://www.atomicorp.com/wiki/index.php/ASL_3.2_Virtualization_Notes ASL 3 Virtualization Notes] for special information about using the kernel with

...lve and release an update within a few hours of you report. Real time and ASL customers can expect to see the update the same day they report this issue. === '''False Positives/Negatives with Atomic Secured Linux (ASL)''' ===

=== Do I need a real time rules subscription if I am using ASL? === No. ASL includes the Real Time Rules.

...an it change this behavior in apache. Disabling this rule will only cause ASL to not report the event, it wont change apache behavior nor will disabling ...on from a client, and Apache has determined the method used is Invalid. [[ASL]] does not cause this, this is simply a reporting rule, and disabling this

ASL is reporting that a client has made multiple successful FTP login attempts '''ASL will not shun on this event, so there is no effect on the end user.''' We

...ese events are not triggered, caused, configured or managed by by ASL, and ASL does not cause the blocking action or alert. The Third Party IDS is the ca ASL will shun on this event by default.

''(Available in ASL and the real time rules only)'' ... a search engine, as well as valid search engines. You must have either [[ASL]] installed, or apache configured with "HostnameLookups Double" and a very

The ASL firewall will log a lot of information about a firewall event. A typical l These rules do not block anything, they just log allowed traffic or special events.

ASL, Atomic Protector and Atomic WAF support unattended installations. That me ASL and Atomic WAF contain a number of new features that are set up on Installa

...g [[ASL]], then this is already setup for you and you can simply use the [[ASL]] gui to view the event. This article will focus on the audit log event de = Viewing events =

= ASL Rule Manager = The ASL rule manager centrally controls all of ASLs event correlation, analysis and

... lead to the compromise of that application and in some cases the system. ASL itself is immune to this, however other log monitoring applications may not ..., or they could be serious problems or event attacks on the systems. When ASL detects a syslog message that is greater than 1025 characters (1024 being t

...as the minimum level to send emails. '''1002's are always emailed because ASL does not know what they are, they may be important and the system is seekin ...tional analysis on the event and if the log entry contains words that lead ASL to believe this is an error or a potentially malicious event, it will alert

...f reverse lookup errors. The application performs the reverse lookup (not ASL), and reports that the reverse lookups mapping has failed. ...o you you based on its internal understanding of those messages, and other events that may (or may not) be occurring on the system.

...tortix : TTY=unknown ; PWD=/var/asl/www ; USER=root ; COMMAND=/var/asl/bin/asl --validate_gui '''Known ASL use of sudo'''

ASL has two different ways you can configure the firewall on your system: The ASL stateful packet inspection firewall works much like other firewalls. It in

The ASL WAF has two non-exclusive modes operation: ... it native WAF protection capabilities. This installation will occur when ASL is installed.

ASL is configured to a secure set of defaults upon installation. Most users do ...sl/config file is not supported. Please change these settings through the ASL web console.

ASL includes a powerful Host Based Intrusion Detection System (HIDS). This HID Step 1) Log into the ASL GUI