Viewing Intelligence Updates

Intelligence Manager—Intelligence Updates displays all intelligence update messages received by AIM from JSS.

Intelligence Manager—Intelligence Updates lets you do the following:

• View all intelligence messages and alerts received from JSS
• View intelligence messages by organization name
• View intelligence message or alert details
• Flag an intelligence message or alert to a user
• Clear an intelligence message or alert flag
• Scan all devices managed by AIM for intelligence message or alert impact
• Assign an intelligence message or alert owner
• Change owner status

To view Intelligence Updates, follow these steps:

• Click Intelligence Manager in the navigation area. The Intelligence Updates tab appears by default.

  

You can show the statistics dashboard that shows a summary of intelligence messages by clicking the plus image. The default is for the statistics dashboard to be hidden.

For more information on the Intelligence Updates tab description, see Intelligence Updates Tab Description.

Intelligence Updates Tab Description

Table 72 describes the Intelligence Updates tab elements.

Table 72: Intelligence Updates Tab Element Descriptions

Table 73 describes the columns in the Incident Manager table.

Table 73: Intelligence Updates Table Column Description

View Intelligence Update View by Organization

You can view intelligence updates by organizations that have been created (if the Multi-Site feature is enabled). By default you view intelligence updates by all organizations.

To view intelligence updates by organizations, follow these steps:

1. Click Intelligence Manager in the navigation area. The Intelligence Updates tab appears by default.
2. In Intelligence Updates, select the organization you want from the Organization drop-down list box. Only the intelligence updates for the organization you select appear. The default is all organizations.

Viewing Intelligence Update Synopsis

You can view more detailed information about each information update.

To view more detailed information about an intelligence message, follow these steps:

1. Click Intelligence Manager in the navigation area. The Intelligence Updates tab appears by default.
2. In Intelligence Updates, click the link in the Synopsis column. The Information Entry page appears.

   

   For more information about the Information Entry fields, see Information Entry Page Field Descriptions.

Information Entry Page Field Descriptions

Table 74 describes the fields in the Information Entry page.

Table 74: Information Entry Field Descriptions

Flagging an Intelligence Update To a User

Flagging the incident is used to inform other users who might be impacted or need to be aware of the incident.

To flag an incident to a user from the Intelligence Updates Information Entry page, follow these steps:

1. Click Intelligence Manager in the navigation area. The Intelligence Updates tab appears by default.
2. In Intelligence Updates, click the intelligence message Synopsis link. The Information Entry page appears.
3. Click Flag to Users. The Flag To Users page appears.

4. On the Flag to Users page, select the user(s) to which you want to flag the intelligence update.
5. Click Save. A flag appears in the intelligence update Flag column on the Information Updates tab. The incident appears in the My AIM Home page for each flagged user for inspection.

Scanning Intelligence Messages for Impact

The Scan for Impact command lets AIM search for any device for which an intelligence message applies and displays it in the Scan for Impact table. The Scan for Impact table also displays the date of the last intelligence Juniper Message Bundle (JMB) received.

To scan an intelligence message for impact, follow these steps:

1. From My AIM Home, click the intelligence message synopsis link. The Incident Detail page appears.
2. On the Incident Detail page, click Scan for Impact. The Scan for Impact page appears.

   The devices are listed in the Scan for Impact table alphabetically.

3. Click Back to Intelligence Update.

   Scan for Impact Table Description describes the columns in the Scan for Impact table.

Scan for Impact Table Description

Table 75 describes the elements in the Scan for Impact table.

Table 75: Scan for Impact Table Column Descriptions

Assigning an Intelligence Update Owner

The user can have responsibility for following the incident resolution process to completion, including editing the status. See Understanding AIM Ownership. See also AIM User Privileges.

To assign ownership an incident, follow these steps:

1. From My AIM Home or Incident Manager, click the incident synopsis link. The Incident detail page appears.

2. On the Incident detail page, select an AIM user from the Owner drop-down list.
3. Click Save Changes.

Changing Intelligence Update Owner Status

The incident owner can specify the incident status:

• Unassigned—Incident is not owned by an AIM user
• Assigned—Incident is owned by an AIM user
• In Progress—Incident case ID has been assigned and resolution is in progress.
• Completed—Incident has been resolved

To specify incident owner status, follow these steps:

1. From My AIM Home or Incident Manager, click the incident synopsis link. The Incident detail page appears.

2. On the Incident detail page, select the incident status from the Owner Status drop-down list.
3. Click Save Changes.

Clearing a Flag

1. Click Intelligence Manager in the navigation area. The Intelligence Updates tab appears by default.
2. Select the incident with the flag that you want to delete. The Clear Flag button is enabled.
3. Click Clear Flag. The flag is removed from the Intelligence Updates table and the Intelligence Update will not appear in My AIM Home Intelligence Messages table.