Gravityzone Deployment Checklist. GravityZone Deployment Pre-requisites

Transcription

1 Gravityzone Deployment Checklist For installation and initial setup, you must have the following at hand: DNS names or fixed IP addresses (either by static configuration or via a DHCP reservation) for the GravityZone appliances Person on hand with admin privileges for server vcenter Server, vshield Manager, XenServer details (hostname or IP address, communication port, administrator username and password) License key for each GravityZone security service (check the trial registration or purchase ) Outgoing mail server settings If needed, proxy server settings Security certificates GravityZone Deployment Pre-requisites The GravityZone Appliance is delivered as a Virtual appliance in the following formats: Environment VMware, vsphere, View, VMware Player Citrix XenServer, XenDesktop, VDI-in-a-Box Microsoft Hyper-V Red Hat Enterprise Virtualization Oracle VM Kernel-based Virtual Machine or KVM Format OVA XVA VHD OVF OVF RAW Default Configuration for GravityZone Appliance CPU: 4 vcpu with 2 GHz each Minimum RAM: 6 GB HDD: 40 GB Internet Connection

2 For License key validation and updates download, external network communication is required. Please ensure ports 443 and port 80 are allowed in your firewall Component Direction Port Destination Description Web Server 443 Lv2.bitdefender.com License Validation Update Server 80 Upgrade.bitdefender.com Download.bitdefender.com Update download Internal Network communication list Component Direction Port Source/Destination Description Any Communication Admin Web Console Inbound 443, 4369, 6150 Server RabbitMQ Messaging Web Console Database Server Database Access Server 389 Domain Controller AD Integration 443 vcenter Server vcenter Integration Communication Server Database Server Inbound 4369, 6150 Communication Server RabbitMQ Messaging 8443 Any Agent Management Traffic 4369, 6150 Web Server RabbitMQ Messaging Database Server Database Access 4369, 6150 Web Server RabbitMQ Messaging Inbound Any Database Access N/A N/A N/A Security Server/Endpoint Security Tools Ports Component Direction Port Source/Destination Description 7081 Security Server Scanning Traffic 7083 Security Server Scanning Traffic over SSL BD Endpoint 8443 Communication Server Management Traffic Security Tools 7074 Update Server Update Download 443 Web Server Package Download During Install Operation Security Server 7074 Update Server Update Download 8443 Communication Server Management Traffic Inbound 7081 Any Scanning Traffic 7083 Any Scanning Traffic over SSL

3 Control Center Web Console Requirements: Internet Explorer 9+, Mozilla Firefox 14+, Google Chrome 15+, Safari 5+ Recommended Screeen Resolution: 1280x800 or higher Network connectivity to the GravityZone appliance with the Web Server role installed Endpoint Protection compatible Windows Operating Systems Workstation OSes Server OSes Tablet/Embedded OSes Windows 8.1 Windows 8 Windows 7 Windows Vista SP1 Windows XP SP3 Windows XP SP2 (64 bit) Windows Server 2012 R2 Windows Server 2012 Windows SBS 2011 Windows SBS 2008 Windows Server 2008 Windows Server 2008 R2 Windows SBS 2003 Windows Server 2003 R2 Windows Server 2003 SP1 Windows Home Server Windows Embedded 8.1 Industry Windows Embedded 8 Standard Windows Embedded Standard 7 Windows Embedded Compact 7 Windows Embedded POSready 7 Windows Embedded Enterprise 7 Windows Embedded POSReady 2009 Windows Embedded Standard 2009 Windows XP Embedded SP2 Windows XP Tablet PC Edition Mac and Linux supported Operating Systems Mac OSes Mac OS X Yosemite (10.10.x) Mac OS X Mavericks (10.9.x) Mac OS X Mountain Lion (10.8.x) Mac OS X Lion (10.7.x) Linux OSes Red Hat Enterprise Linux / CentOS 5.6 or higher Ubuntu LTS or higher SUSE Linux Enterprise Server 11 or higher OpenSUSE 11 or higher Fedora 15 or higher Debian 5.0 or higher Oracle Solaris 11, 10(only in VMware vshield ) Endpoint Protection Hardware Requirements Intel Pentium Compatible Processor Workstation Operating System Hardware requirements: 1 GHz or faster for Microsoft Windows XP SP3, XP SP2 64bit, and Windows 7 Enterprise

4 2 GHz or faster for Microsoft Windows Vista SP1 or higher, Windows 7, Windows 7 SP1, and Windows MHz or faster for tablet and embedded OSes Server Operating Systems Hardware Requirements Minimum: 2.4 GHz single-core CPU Recommended: 1.86 GHz or faster Intel Xeon multi-core CPU Free RAM Memory - Windows: 512MB minimum, 1GB Recommended - Mac: 1GB minimum Free HDD Space GB Minimum (6 GB on entities with Endpoint Security Relay Role, as they will store all updates and installation packages) Endpoint Protection Supported Virtualized Platforms VMware vsphere 5.5, 5.1, 5.0, 4.1 with VMware vcenter Server 5.5, 5.1, 5.0, or 4.1 vcns 5.5 VMware View 5.1, 5.0 Citrix XenServer 6.2, 6.0, 5.6, 5.5 (including Xen Hypervisor) Citrix XenDesktop 7.5, 5.5, or 5.0 (including Xen Hypervisor) Citrix VDI-in-a-Box 5.x Microsoft Hyper-V Server 2008 R2, 2012, 2012 R2, or Windows Server 2008 R2, 2012, 2012 R2 (including Hyper-V Hypervisor) Oracle VM 3.0 Red Hat Enterprise Virtualization 3.0 (including KVM Hypervisor) For Endpoint Protection with VMware vshield Endpoint ESXi 5.5, 5.1, 5.0, 4.1 vcenter Server 5.5, 5.1, 5.0, 4.1 vshield Manager 5.5, 5.1, 5.0 vshield Endpoint installed by vshield Manager on the host/hosts protected by Security for Virtualized Environments

5 VMware Tools or higher installed on the protected VMs in the complete mode or with vshield endpoint driver selected under VCMI in custom mode Security Server Requirements Number of Protected VMs Ram CPUs 1-50 VMs 2 GB 2 CPUs VMs 2 GB 4 CPUs VMs 4 GB 6 CPUs In VMware environments with vshield Endpoint Security Server must be installed on each ESXi host to be protected 80 GB disk space In other environments Bitdefender recommends installing Security Server on each physical host for improved performance 8 GB disk space Security For Mobile Devices Supported by: Apple iphone and ipad Tablets (ios 5.1+) Google Android smartphones and tablets (2.3+) Port List for Mobile Devices Port Usage 8443 HTTPS port used by the client to connect to GravityZone 2195, 2196, 5223 Apple Push Notification service ports. 2195, 2196 are used by communication server to communicate with the APNs Servers is used by mananged ios devices to communicate with the APNs servers over Wi-Fi 5228, 5229, 5230 Google Cloud Messaging (GCM) ports. The communication server uses GCM to send push notifications to managed Android devices. Security for Exchange supports the following Microsoft Exchange versions and roles:

6 Exchange Server 2013 with Edge Transport or Mailbox role Exchange Server 2010 with Edge Transport, Hub Transport, or Mailbox role Exchange Server 2007 with Edge Transport, Hub Transport, or Mailbox role