Restrictions and guidelines
When you use a probe and IMC UBA to create Web visiting, FTP, and mail audit tasks, follow these restrictions and guidelines:
You must install a type of FTP server software on the IMC UBA server, because the IMC UBA server does not provide the FTP server function. The probe is embedded with an FTP client, so the probe can send the generated logs to the IMC UBA server through FTP.
The network device connected to the probe is not limited to H3C devices. As a best practice, use devices that support port mirroring. If the device does not support port mirroring, use a network test access point (TAP) for port mirroring.