Configuring the live connection audit method

The live connection audit method allows you to view audit messages in real time via the Audit Viewer.

To configure OneSpan Authentication Server to use the live connection audit method

1. Start the Configuration Utility.
2. Click on the Auditing icon.
3. Click Add.
4. Select Live Connection from the list box.
5. Click OK.

   The Add Live Connection Method dialog appears.

1. Enter a name in the Display Name field. This name will only be used for display purposes.

   If this audit method must succeed, select the Reject audit message if this method fails box. An error will be returned by OneSpan Authentication Server if an audit message cannot be written with this method.

2. If required, select the Record audit message if no other audit method has recorded it box.

3. Select one or more audit message types to be logged by this plug-in:

   • Error
   • Warning
   • Information
   • Success
   • Failure

4. Enter the IP address and port on which OneSpan Authentication Server should listen for auditing connections.
5. Enter the maximum number of concurrent connections allowed.

6. If you want to secure the connection with SSL, select the Enable SSL checkbox and enter the necessary details. Note that SSL will also need to be configured on the OneSpan Authentication Server end.

   • Select the appropriate SSL cipher suite from the SSL Cipher Suite Security Level list. For more information about supported SSL ciphers and how to handle custom SSL ciphers, see SSL cipher suites.
   • Browse to the path of the server certificate file and enter the corresponding password.

   If you do not require an SSL client certificate, select Never from the Require Client Certificate list. Otherwise:

   • Select the appropriate security level (Optional, Required, or Required – Signed Address Only).
   • Browse to the path of the client certificate file.

   Select the Re-Verify on Re-Negotiation checkbox if you want to re-verify the client certificate each time a connection is established.

   Enabling the Re-Verify on Re-Negotiation option may incur a performance penalty. As such, do not do so unless absolutely necessary.

7. Click OK.
8. Click Apply.

After configuring OneSpan Authentication Server to use live audit connections, configure Audit Viewer as required.

To configure Audit Viewer for the live connection audit method

1. Start the Audit Viewer.
2. Select File > New Audit Source > Server.
3. Enter a display name to be used for the messages within the Audit Viewer.
4. Enter the IP address of OneSpan Authentication Server.
5. Enter the port on which OneSpan Authentication Server will listen for live audit connections.

6. If the live connection is SSL-secured (i.e. Enable SSL was selected when setting up the Add Live Connection Method in OneSpan Authentication Server), you need to configure the Audit Viewer to connect via SSL:

   1. Select Enable SSL.
   2. Browse to the path of the server certificate file and enter the corresponding password.
   3. Browse to the path of the client certificate file.
7. Click OK.

If both, the OneSpan Authentication Server instance and the Audit Viewer application, are installed on the same computer during installation (e.g. during a basic installation), then a default live audit connection is automatically set up in Audit Viewer. The display name used by that live audit connection is IAS on Local Machine.