Argee MSA-004-004 manual

GUIDE ® QUICK ST ART Model: T AR MSA-004-004 Release: 1.1.15 / Updated: 02.29.08 Threat Anal ysis Reporter[...]

ii 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 8 e 6 e nterprise F il ter Q uick s t art G uide © 2008 8e6 T echnologies. All rights reserved. This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any elec- tronic medium or machine readable form without prior written consent from 8e[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide iii C ontents t hrea t a nal ysis r eporter i ntroduCtion .................................................... 1 About this Document .................................................................................................................... 2 Conventions Used in this Document ......[...]

iv 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 1 t hrea t a nal ysis r eporter i ntroduCtion Thank you for choosing to evaluate the 8e6 T echnologies Threat Analysis Reporter . This product addresses user-generated Web threats such as excessive use of bandwidth and inappropriate Internet usage, and provides network administrators tools t[...]

2 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide About this Document This document is divided into the following sections: Introduction - This section is comprised of an overview of the Threat Analysis Re- porter product and how to use this document Service Information - This section provides 8e6 T echnologies contact information Prelimi[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 3 s er viCe i nforma tion The user should not attempt any maintenance or service on the unit beyond the proce- dures outlined in this document. Any initial hardware setup problem that cannot be resolved at your internal organiza- tion should be referred to an 8e6 T echnologies solutions engi[...]

4 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide p reliminar y s etup p roCedures Unpack the Unit from the Carton Inspect the packaging container for evidence of mishandling during transit. If the packag- ing container is damaged, photograph it for reference. Carefully unpack the unit from the carton and verify that all accessories are i[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 5 Select a Site for the Server The server operates reliably within normal ofce environmental limits. Select a site that meets the following criteria: Clean and relatively free of excess dust. Well-ventilated and away from sources of heat, with the ventilating openings on the server kept f[...]

6 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Rack Mount the Server Rack Setup Precautions W arning: Before rack mounting the server , the physical environment should be set up to safely ac- commodate the server . Be sure that: The weight of all units in the rack is evenly distributed. Mounting of the equipment in the rack should be s[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 7 Rack Mount Instructions Optional: Install the Chassis Rails NOTE: If your chassis does not come with chassis rails, please follow the procedure listed on the last page of this sub-section to install the unit directly into the rack. CAUTION: Please make sure that the chassis covers and chas[...]

8 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 3. Locate the three holes on each side of the chassis and locate the three correspond- ing holes on each of the inner rail. 4. Attach an inner rail to each side of the chassis and secure the inner rail to the chas- sis by inserting three T ype G screws through the holes on each side of the[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 9 Optional: Install the T raditional UP Racks After you have installed the inner rails on the chassis, you are ready to install the outer rails of rail assemblies to the rack. NOTE: The rails are designed to t in the racks with the depth of 28” to 33”. • Determine the placement of e[...]

10 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 7. Slide the chassis into the rack as shown below . NOT E: The cha ssis may not slide into the rack smoot hly or easily when inst alle d the rst time. Some adjustment to the slide assemblies might be needed for easy installation. 8. Y ou will need to release the safety taps on both sid[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 1 1 Optional: Install the Open Racks After you have installed the inner rails on the chassis, you are ready to install the outer rails of rail assemblies to the rack. NOTE: The rails are designed to t in the racks with the depth of 28” to 33”. • Determine the placement of each compo[...]

12 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 3. Attach the front (short) bracket to the front end of the rack, and secure it to the rack with two T ype H screws and T ype I washers as shown below . (See the previous page for descriptions of T ype H and T ype I hardware components.) 4. Attach the rear (long) bracket to the rear end o[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 13 6. Slide the inner rails which are attached to the chassis into the outer rails on the rack.[...]

14 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Install the Chassis into the Rack CAUTION: Before installing the chassis into the rack: • Make sure that the rack is securely anchored onto an unmovable surface or structure before installing the chassis into the rack. • Unplug power cord(s) of the rack before installing the chassis i[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 15 Check the Power Supply This server is equipped with a universal power supply that handles 100-240 V , 50/60 Hz. A standard power cord interface (IEC 950) facilitates power plugs that are suitable for most European, North American, and Pacic Rim countries. Power Supply Precautions W arn[...]

16 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide General Safety Information Server Operation and Maintenance Precautions W arning: Observe the following safety precautions during server operation and maintenance: W ARNING: If the server is used in a manner not specied by the manufacturer , the protection provided by the server may be[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 17 AC Power Cord and Cable Precautions W arning: The AC power cord for the server must be plugged into a grounded, power outlet. Do not modify or use a supplied AC power cord if it is not the exact type required in the region where the server will be installed and used. Replace the cord with[...]

18 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Motherboard Battery Precautions Caution: The battery on the motherboard should not be replaced without following instructions provided by the manufacturer . Only qualied service personnel should replace batteries. The battery contains energy and, as with all batteries, a malfunction ca[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 19 i nst all the s erver Step 1: Initial Setup Procedures This step requires you to link the workstation to the Threat Analysis Reporter . Y ou have the option of using the text-based step-by-step setup procedures described in Step 1A. Step-by-Step Setup Requirements Threat Analysis Reporter[...]

20 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Serial Console Setup A. Using the serial port cable (and USB DB9 serial adapter , if necessary), connect the laptop to the rear of the chassis (see Fig. 1). B. Power on the laptop. C. Power on the Threat Analysis Reporter by pressing the large button on the front panel (see Fig. 2). Fig. [...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 21 HyperT erminal Setup Procedures If using a serial console, follow these procedures to create a HyperT erminal session on the serial console. A. Launch HyperT erminal by going to Start > Programs > Accessories > Communica- tions > HyperT erminal: B. In the Connection Descriptio[...]

22 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide C. At the Connect using eld, select the COM port assigned to the serial port on the laptop (probably “COM1”), and then click OK to open the Properties dialog box, dis- playing the Port Settings tab: D. Specify the following session settings: Bits per second: 9600 Data bits: 8 Parit[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 23 F . In the HyperT erminal session window , go to File > Properties to open the Properties dialog box, displaying the Connect T o and Settings tabs: G. Click the Settings tab, and at the Emulation menu select “VT100”. H. Click OK to close the dialog box, and to go to the login scree[...]

24 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Step-by-Step Initial Setup Procedures For these step-by-step setup procedures, you will need your network administrator to provide you the LAN 1 and LAN 2 IP address and subnet mask, gateway IP address, DNS server IP address(es), host name of the server , and IP address for the W eb inter[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 25 E. At the Press the number of your selection prompt, press 2 to display the Adminis- trator Password Entry screen: F . At the Enter the administrator password prompt, re-enter your password: #s3tup#r3k G. Press Enter to display the Administration menu where you can begin the step-by- step[...]

26 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Congure Network Interface screen A. At the Enter interface LAN1 (eth0) IP address eld, enter the IP address for the LAN 1 (Ethernet 0) interface, and then press Enter to go to the next screen. B. At the Enter interface LAN1 (eth0) netmask eld, enter the subnet mask for the LAN 1 [...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 27 C. Press Y for “Y es” to conrm and save your entries for the LAN1 (eth0) interface, and to go to the next screen. D. At the Enter interface LAN2 (eth1) IP address eld, enter the IP address for the LAN 2 (Ethernet 1) interface, and then press Enter to go to the next screen. E. At[...]

28 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Congure default gateway screen A. At the Enter default gateway IP eld, enter the IP address for the default gateway . Press Enter to display the conrmation prompt. B. Press Y for “Y es” to conrm and save your entry for the gateway IP address, and to go to the Congure Do[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 29 A. At the Enter rst DNS server IP eld, enter the IP address for the primary Domain Name Server . Press Enter to go to the next screen. B. At the Enter (optional) second DNS server IP eld, if you have a secondary Do - main Name Server you wish to use, enter the IP address for that[...]

30 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide A. At the Enter host name eld, enter the host name of the server . Press Enter to dis- play the conrmation prompt. B. Press Y for “Y es” to conrm and save your entry for the host name, and to go to the T ime zone regional conguration screen. Time zone regional congurati[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 31 B. Use the up and down arrows in your keyboard to select your region. After selecting your locality , press Y for “Y es” to conrm and save your regional selection, and to go to the Congure Wizard user screen. Congure Wizard user screen A. At the Enter wizard user name eld,[...]

32 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide C. At the Enter wizard password eld, enter the password that will be used to access the setup wizard in the Threat Analysis Reporter interface. Press Y for “Y es” to con- rm and save your entry and to go to the Setup Wizard Conrmation screen. Setup Wizard Conrmation screen[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 33 System Status Screen The System Status screen contains the following information: LAN1 (eth0) interface for web access and R3000 communications: LAN1 (eth0) IP address and netmask specied in screen 3 (Congure Network Interface), and current status (“Active” or “Inactive”) LA[...]

34 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Physically Connect the Unit to the Network After performing initial setup procedures for the Threat Analysis Reporter , the unit should be physically connected to the network. This step requires a standard CA T -5E cable to connect the unit to the network. An additional CA T -5E cable is [...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 35 Step 2: Wizard Setup Procedures For this step, you will need your network administrator to provide you the following infor- mation: IP range and netmask of machines on the network the Threat Analysis Reporter server will be monitoring R3000 IP address, port number to be used between the R[...]

36 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide D. After reading the End User License Agreement, you have the option to do either of the following: Click No to close both the EULA Agreement dialog box and the Threat Analysis Reporter interface. Y ou will not be able to enable the Threat Analysis Reporter for use in your environment. Cl[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 37 Step 1: Register administrator Step 1 is performed in the left side of the rst screen of the wizard: A. Enter the username the global administrator will use when logging into the Threat Analysis Reporter Administrator console. The global administrator has the highest level of permissio[...]

38 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide D. Click the [+] Add tab beow to open the IP Range Information dialog box: E. Enter the IP address range for the bandwidth the Threat Analysis Reporter will moni- tor . F . Enter the Netmask for the IP range to be monitored, using the dotted decimals nota- tion format. G. Click OK to clos[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 39 T o modify an IP address range, double-click the entry in the list box to highlight it and to display the [-] Remove tab to the left of the [+] Add tab: T o modify the entries made for the IP address range, click the [+] Add tab to re- open the IP Range Information dialog box and edit inf[...]

40 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Step 2: Register R3000 & ER Step 2 is performed in the right side of the rst screen of the wizard. R3000: Specify information for the R3000 to be used with the Threat Analysis Reporter: A. Click the [+] Add tab above the R3000 list box to open the R3000 Information dialog box: B. E[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 41 E. Click OK to close the dialog box and to display your entries in the list box: NOTE: Additional R3000 servers can be included by clicking the [+] Add tab again and making the entries described in steps A through E above. T o modify an R3000 entry , double-click the R3000 entry in the li[...]

42 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide T o modify the IP address and Server Name for the R3000 server , click the [+] Add tab to re-open the R3000 Information dialog box, and edit information as necessary . Click OK to close the dialog box and to display the modied informa - tion in the list box. T o designate an R3000 as t[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 43 ER: Respond to the question “Do you have an Enterprise Reporter?” by clicking the radio button corresponding to either “Y es” or “No”. If “No” was selected, click NEXT > at the bottom right of the screen to go to Step 3. If “Y es” was selected, the IP address and Se[...]

44 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Step 3: Register Gauges Step 3 requires you to specify settings for default gauges to be monitored by the Threat Analysis Reporter . These gauges will display in the Threat Analysis Reporter interface upon logging into the Administrator console. NOTE: Return to Step 1 or Step 2 by clickin[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 45 View , Edit Gauge Components T o view gauge components for a specied gauge, highlight and double-click the gauge name to populate the the elds to the right of the Gauge Groups list box. The following gauge criteria can be edited: Name : The displayed gauge name to be used in the int[...]

46 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide Step 4: Server Settings In Step 4, the following R3000 server information displays: Active Directory Settings, SMTP Server Settings, Patch Server Settings, PROXY Server Settings, NTP Server Set- tings: NOTE: Return to Step 3 by clicking the < BACK button in the lower left corner of thi[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 47 C onClusion Congratulations; you have completed the Threat Analysis Reporter quick start proce- dures. Now that the Threat Analysis Reporter is running on your network, the next step is to set up user groups or administrator groups. Y ou will set up and congure gauges thereafter . Obta[...]

48 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide led i ndiCa tors and B utt ons MSA Units Front LED Indicators and Buttons for Hardware Status Monitoring LED indicators and buttons for hardware status monitoring display on the front panel, located on the right side of the chassis (see diagram below). Chassis control panel LED Indicator [...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 49 r egula tor y s peCifiCa tions and d isClaimers Declaration of the Manufacturer or Importer Safety Compliance USA: UL 60950-1 2nd ed. 2007 Europe: Low V oltage Directive (L VD) 2006/95/EC to CB Scheme EN 60950: 2006 International: UL/CB to IEC 60950-1:2006 Electromagnetic Compatibility (E[...]

50 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide EC Declaration of Conformity European Community Directives Requirement (CE) Declaration of Conformity Manufacturer ’s Name: 8e6 T echnologies Manufacturer ’s Address: 828 W . T aft Avenue Orange, CA 92865 Application of Council Directive(s): Low V oltage • 2006/95/EC EMC • 2004/10[...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 51 t ap i nst alla tion a ppendix : o ptional e thernet t ap i nst alla tion This appendix pertains to the optional installation of the Ethernet T ap unit for bandwidth monitoring. Preliminary Setup Procedures Unpack the Ethernet T ap Unit from the Box Open the NetOptics Ethernet T ap box an[...]

52 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide t ap i nst alla tion Install the Ethernet T ap Unit Diagram showing T AR Ethernet T ap installation on the network This step is a continuation from Physically Connect the Unit to the Network in Step 1A or following setup in Step 1B. The procedures outlined in this step require the use of [...]

8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide 53 t ap i nst alla tion C. Using a crossover cable, connect one end to the Switch’s port congured to be the destination port of the Port Mirror . If adding a Threat Analysis Reporter to an existing installation, this port would be the port that was originally occupied by the listening i[...]

54 8 e 6 T hrea T a nal ysis r eporTer Q uick s T arT G uide i ndex C crossover cable 51, 53 E EMC 49, 50 F FCC 49 H HyperT erminal Setup 21 I ICES-003 49 Install T AP 51 L Login screen 24 L VD 49 M MSA 20, 48, 50 P Power Supply Precautions 15 R R3000 1, 19, 35, 40, 41, 42, 46, 52, 53 Rack Setup Precautions 6 RoHS compliant 50 S serial port cable 1[...]

8e6 Corporate Headquarters (USA): 828 West T aft Avenue Orange, CA 92865-4232 • T el: 714.282.61 1 1 or 888.786.7999 Fax: 714.282.61 16 (Sales/T echnical Support) • 714.282.61 17 (General Ofce) Satellite Ofce: 8e6 T aiwan: 7 Fl., No. 1, Sec. 2, Ren-Ai Rd., T aipei 10055, T aiwan, R.O.C. T el: 886-2-2397-0300 • Fax: 886-2-2397-0306[...]