Spector 360 Deployment Guide. Version 7.3 January 3, 2012

Transcription

1 Spector 360 Deployment Guide Version 7.3 January 3, 2012

2

3 Table of Contents Deploy to All Computers Step 1: Deploy the Servers... 5 Recorder Requirements Requirements... 5 Control Center Server Administrator Account... 6 Options - Configuration Exclude from Antivirus Scanning... 7 How the Spector 360 Components Work Download and Start the Setup... 7 Single Server Requirements Choose the Type of Setup... 9 Distributed Servers License Agreement SQL Express Setup Quick Install Settings SQL Server Standard/Enterprise Setup If Updates Are Available Deploy Dashboards for Managers General Settings Deploy Control Centers for Administrators Configure the Database Installing Extra Servers Configure the Dashboard & Control Center Deploy for Remote Employees Configure the Control Center Server Deploy to Branch Offices Configure the Primary Server Deploy in a Domain Network Configure the Web Filter Server Deploy in a Windows Workgroup Configure the Data Vault Server Deploy on a Multi-User Network View a Summary and Begin Installing Options - Space Management Register and Unlock the Installation Estimate the Database Size Finish the Setup and Start the Control Center Manage the Data Upgrade, Migrate, Uninstall Troubleshooting Upgrade (Reinstall) Components Exclude by Risk Upgrade Older Versions Exclude the Servers from Scanning Migrate from Spector CNE Exclude the Recorder from Antivirus Scanning Import Data from a CNE Data Vault Troubleshoot the Server Installation Uninstalling Spector 360 Components Troubleshoot Recorder Installation Step 2: Deploy Recorders SpectorSoft Information Starting the Control Center Contact Us Deploy the Recorder to a Windows Computer Copyrights and Trademarks Deploy the Recorder to a Macintosh Deploy Manually to Windows Index Verify Recorder Deployment and Recording SpectorSoft Corporation, All rights reserved. iii

4 Steps to Deploying Spector 360 Step 1 Deploy the Servers. Start by downloading and running the setup program to install Spector 360 core components and applications. When the setup is complete, you will start the Spector 360 Control Center. Step 2 Deploy the Recorders. The Spector 360 Control Center lets you deploy Recorder software to multiple, remote computers. Test the Recorder on a single computer, and then deploy a Recorder to all computers for which you have purchased licenses. The Setup program installs a Spector 360 Database, Servers, Control Center, and the Dashboard. As soon as it is installed, a Recorder begins capturing activity. You can review the activity from a Spector 360 Dashboard SpectorSoft Corporation, All rights reserved. 4

5 Step 1: Deploy the Servers Step 1: Deploy the Servers Requirements Minimum requirements At least 60 GB (gigabytes) free disk space for a new installation. This is the MINIMUM to get started. Review requirements for a Single Server or Distributed Servers. At least 10 GB free disk space to upgrade an existing installation. A 32-bit or 64-bit Windows operating system: Windows XP Professional Windows Vista Windows 7 Windows Server 2003 or Windows Server 2008 Static IP address is recommended. Internet access is recommended. Operating system uses the NTFS (not FAT32) file system. See requirements for MS SQL Server Express for under 1,000 computer licenses or MS SQL Server Standard for 1,000+ computer licenses. The installation takes minutes, depending on your method of access and hardware. If the correct version of Microsoft.NET Framework is not found on the computer, the Setup will install it, requiring additional disk space. Serial number A Spector 360 serial number is required to download and start the Setup. Check your Spector 360 purchase receipt or product CD case for this number. Windows Administrator account Spector 360 manages computers and recording via a Control Center Server (CCS). During the setup, you must provide account credentials for this Windows service. See Control Center Server Administrator Account. Disable antivirus software Antivirus scanning may interfere with the Spector 360 installation. Be sure to temporarily disable scanning as you run the Setup and exclude SpectorSoft files from future scanning on all Spector 360 computers. See Exclude from Antivirus Scanning. Upgrading If you have Spector 360 version 7.0 or later installed, you can Reinstall the new version over the old version without restoring the database. However, be sure to STOP the Data Vault Server and capture a Full Backup (for insurance) before upgrading. See: Upgrade Version 7.0 and Higher Upgrade Older Versions Migrate from Spector CNE SpectorSoft Corporation, All rights reserved. 5

6 Step 1: Deploy the Servers Control Center Server Administrator Account An administrator on all computers The Spector 360 Control Center Server (CCS) is installed as a Windows service and manages all other Spector 360 components. To do this, the server requires administrator-user permissions on ALL Spector 360 server and client computers. Create a CCS account, if necessary Use the Windows Control Panel > Manage User Accounts to Add an account in the Administrators group. This account will need to be present in the Administrators group of EACH Spector 360 computer. Refer to your Windows documentation for more information on creating accounts and administrator privileges. During Spector 360 Setup, you will be prompted to provide Windows account credentials (user name and password) the CCS can use to login and operate. Some customers use the domain administrator account, but you can use any account belonging to the Administrators group on each computer where Spector 360 servers (Setup components) or clients (Recorders) will be installed. If you do not have such an account, or do not want to use "Domain Administrator," create a special Windows account for the CCS to use. You can change the CCS service account AFTER Setup by using the Servers tool in the Control Center. Refer to your Windows help system to better understand Windows services and their login accounts. If you use a workgroup network, also refer to the article on Windows Workgroup configuration SpectorSoft Corporation, All rights reserved. 6

7 Step 1: Deploy the Servers Exclude from Antivirus Scanning Antivirus software may interfere with Spector 360 As you install Spector 360 Servers and Recorders on a network where antivirus software (McAfee, Symantec, etc.) is deployed, there is a chance the antivirus software may classify a Spector 360 component as a threat and remove it. This could happen during installation of the Servers or deployment of the Recorder, or anytime following installation. If a component is quarantined, Spector 360 won't work properly! Keep in mind, too, that many Windows Vista and 7 systems are configured with either Microsoft Windows Defender or Security Essentials performing scans by default. You must either disable this scanning or exclude Spector 360 from scanning before installing. Exclude centrally or at computers If you use enterprise or endpoint antivirus software, create a central policy that applies to all computers on the network. If various antivirus programs are running on computers, you will need to go to each computer to make exclusions. Exclude files or signature risk name Use the antivirus or anti-spyware program to exclude Spector 360 from scans. Some programs accept a list of file names to exclude. Others identify "risks" by name. Refer to the Knowledge Base for instructions on creating a whitelist in Symantec, McAfee, and other popular programs. Exclude Server files - Exclude these files at the server computer(s). Exclude Recorder files - Exclude at all computers you plan to monitor. Risk names - Click this link for a list of SpectorSoft risk names. Download and Start the Setup Access the Download page If you haven't downloaded the Setup program, Click here to access the SpectorSoft web site and enter your serial number; or you can start from a SpectorSoft with a download button. A Download button may be available in an sent to you from SpectorSoft following purchase. Click the download button SpectorSoft Corporation, All rights reserved. 7

8 Step 1: Deploy the Servers Click Save to download the Setup The File Download prompts you to Run, if you have a very fast, reliable Internet connection, or Save to download a self-extracting compressed file via HTTP. Alternative methods of downloading are available; for example, you can download via FTP. Look for "Click here for additional options". If you do not choose to run immediately after downloading, double-click the downloaded sp exe file to extract it into a folder that includes several subfolders and the sp360setup73.exe file as shown below. If you choose Run at this point, make sure you have a fast, reliable Internet connection. The Internet connection must not be interrupted during the entire down-load and installation procedure, which may take from 5 minutes to 1 hour. Save and extract the file You are prompted to choose a location (such as your local Desktop) and then download the compressed, self-extracting file. Wait as the file downloads from the SpectorSoft web site. This can take several minutes. Start the installation Click Run on the download dialog box (if you haven't closed it) or doubleclick the extracted sp360setup73.exe file in the Setup folder. The Setup begins SpectorSoft Corporation, All rights reserved. 8

9 Step 1: Deploy the Servers Choose the Type of Setup Choose the installation you want For a new installation, choose one of the following. If you are upgrading, you will be prompted to Reinstall. Quick Install - Highly recommended for new or evaluation customers. Installs ALL core components and applications on the local computer (single-server) using default settings. All services (servers) will operate under the local system account, which works well in most cases. Custom Install - Installs all ALL core components and applications locally (single-server), but allows you to change default settings and accounts, as well as deploy Web Filter and Data Vault Servers to remote computers. Component Install - Installs individual components as selected. Allows you to distribute or move core components, and add Web Filter Servers, Data Vault Servers, Dashboards, or Control Center applications. Always install a Database and core components BEFORE adding or moving other components. The "Quick Install" gets you started on one server computer. You can move or add components later. Only the Data Vault Server and Web Filter Server installations can be directed to a different computer from the Setup program. Use a Component Install to set up a distributed server installation. SQL Server Database Setup Microsoft SQL Server is required to build the Spector 360 Database instance. Note the type of SQL Server included with this Setup program: SQL Server Express, SQL Server Standard, or a previously purchased SQL Server install package that you will locate during the Setup. Run the Control Center when Setup is complete By default, the Control Center application will open at the end of the setup making it easy to immediately deploy the Spector 360 Client SpectorSoft Corporation, All rights reserved. 9

10 Step 1: Deploy the Servers Recorder to computers. Clear this check box if you prefer to finish the installation without opening the Control Center. ONE Primary Server is installed. Multiple Data Vaults can be installed. To maintain a central data repository, all Data Vaults use the SAME Database access account and the SAME File Storage Base Path for screen snapshots and attachments. Multiple Web Filter Servers can be installed. All Web Filter Servers communicate with the central Database using the SAME Database access account. Multiple Dashboards and Control Center applications can be installed. For a Component Install, select components You can select components for installation ONLY when a Component Install has been selected. Check the components you want to install on this computer. Note that the Database should always be installed first, and the Installation Status ("Not Installed") applies only to the local computer. You will need to locate previously installed components (the Database and CCS) later in the setup. Enter your serial number The serial number is included in your Spector 360 product confirmation or on the CD case. Characters 5 and 6 are letters of the alphabet; all other characters are numerical. Keep these points in mind... ONE central Database is always installed first. A Control Center (application) should be installed with the Database. ONE Control Center Server (CCS) is installed. A Control Center application is always installed with the CCS SpectorSoft Corporation, All rights reserved. 10

11 Step 1: Deploy the Servers License Agreement Read the agreement and check "I Accept" Scroll to read the entire agreement. Use the buttons at the bottom of the panel to Print or Save the agreement. If you agree to the terms, check "I have read and accept the license terms" and click Next. Your serial number is provided in the purchase receipt you received or on the CD case. If you cannot find your serial number, contact SpectorSoft. Click Next to continue When a valid serial number is entered, go on to the License Agreement by clicking Next. Points to remember are: Record only computers that you own. Always inform users that you will be monitoring them. Install the Recorder only on the number of computers for which you have purchased licenses. Do not attempt to move a license from one computer to another. Click Next to continue Continue on to Quick Install options OR (for a Custom, Component, or Re-Install) to check for newer installation files and then proceed to installation options SpectorSoft Corporation, All rights reserved. 11

12 Step 1: Deploy the Servers Quick Install Settings Required settings System Administrator (SA) password A new Spector 360 Database instance is set up with a single, default SA (System Administrator) account. This panel appears for a Quick Install. Two settings are required: (1) the Control Center Server (CCS) account and (2) the SA password. Other settings are optional, and you can accept the default entries. Control Center Server account The CCS requires an existing, valid Windows account to log in as and to manage the Server and Client Recorder components. The account must have Administrator user privileges on this computer - for installation purposes - and on each computer you plan to monitor. You can change this account from the Control Center when the setup is complete. SA password -Type a password for the default SA (System Administrator) account to be installed with this Spector 360 SQL Server instance. This SA login has nothing to do with other SQL Server instances. The password must be at least 6 characters long and include THREE of the following criteria: - An uppercase letter - A lowercase letter - A number - A non-alphabetic character, such as # ^ _ - Do NOT use the characters: / ' " [ ] { } ( ), ;? $ \ or <space> Confirm SA password - Type the password again to confirm it. Account - Type the name of a Windows account belonging to the Administrators group on this and all computers you will be monitoring. On a domain network, use the format Domain/Username. A SQL Server System Administrator (SA) has all rights and privileges to the databases. It's important to provide a strong password, guard the password, and change it if you suspect it has been compromised. Password - Type the password for the account. Confirm Password - Type the password again SpectorSoft Corporation, All rights reserved. 12

13 Step 1: Deploy the Servers Accept default installation locations To get started quickly, click Next at the bottom of this panel, accepting all default installation locations. To change a location, click the Browse button and navigate to a folder on this computer. See below. Spector 360 server and application location: All Spector 360 Servers (Windows services) and the Control Center and Dashboard applications will be installed at this base location, unless you select a different folder. The default installation path is: C:\Program Files\SpectorSoft\Spector 360 Screen snapshot and attachment file storage base path: The Data Vault Server stores captured Screen Snapshots (graphic files) and Attachment files (if capture is requested) at this folder location. These files, associated with data in the Database, can quickly use up disk space, and some customers prefer to provide a dedicated hard drive for this "File Storage Base Path." Browse to a new location on the server computer or accept the default location: C:\Spector360Data Use one file storage base path for all installed Data Vaults. Some customers direct the Snapshot and Attachment File Storage location to a dedicated hard drive on the Database computer. SQL Server setup location: Available (and required) when SQL Server is NOT provided with the Spector 360 Setup and you are using a previously purchased SQL Server package. Type the full path to the folder, or browse to and select the drive or network folder containing your customer-provided SQL Server installation files. Initial SQL Server database size (GB): Enabled only for a full SQL Server (not Express) setup. The Spector 360 databases will be created at this size. The SA user can change the maximum size of STORAGE databases from the Control Center following setup. A larger database size may improve performance for a large installation base (more than 500 clients). Too large a size will cause disk space and performance issues. Accept or change the SQL Server install locations: If you have requested MS SQL Server Standard, you have the option of setting the database size. If you have requested to use your own copy of SQL Server 2005 Standard or Enterprise, you must locate that installation package. MS SQL Server location: Microsoft SQL Server provides the database management system for custom Spector 360 database files. Your Spector 360 Database will be the SQL Server instance computer\spector360, where "computer" is SpectorSoft Corporation, All rights reserved. 13

14 Step 1: Deploy the Servers the name of this computer. Both MS SQL Server and the Spector 360 database files are installed on the local Setup computer. The default SQL Server installation is located at: C:\Program Files\Microsoft SQL Server Spector 360 Database files location: When you continue, the Setup will use scripts and files to automatically build a Spector 360 Database located at the following location. You can direct the SQL Server instance to another location on this computer, if you wish. The Spector 360 data will be stored here: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL View a summary To view a summary of your selections and begin the installation, click Next. If Updates Are Available Check for available updates For a Custom, Component or Re-install, you can choose to download newer installation files or use your current, local files. If time has passed since you originally acquired your Spector 360 installation, the following panel suggests that you download newer installation files. Check component to download updated files or clear components to use your existing files. Click Next to continue. Updates ensure you have the newest and best software components. However, if you are reinstalling or adding components and will not update ALL components, it may be safest to use your existing, local version. Component - Lists the components to be installed. Current Version - The version included with this Setup. Latest Version - The newest available version. Status - "up-to-date" if you have the latest version; "update available" if you do not have the latest version. Check components to download new files After comparing local files with those available at the SpectorSoft web site, the Setup checks all components that can be updated. If you are performing a complete installation, leave items checked. The Setup downloads and proceeds to install the newer files. Clear to install with existing files If you are installing components, you may prefer to update all components at a later time. Clear checked components to continue installing the existing files. The Setup proceeds using the local files. Click Next to continue To proceed using either newer, downloaded installation files or your existing installation files, click Next SpectorSoft Corporation, All rights reserved. 14

15 Step 1: Deploy the Servers General Settings Spector 360 installation location This panel appears for a Custom or Component Install. General settings are optional and allow you to set the base Spector 360 installation path. However, before you can click Next to proceed, other component settings are required: For a Custom Install: (1) define a Database SA password and (2) provide Control Center Server (CCS) account credentials. Configure the Database The Spector 360 Database The Spector 360 Database is a SQL Server instance that stores recorded activity, Web Filtering rules, Event Alerts, Spector 360 user accounts, and other configuration information. Spector 360 uses Microsoft SQL Server 2005 Express or SQL Server 2005 (if requested). When you are installing the Database, these settings are available: For individual Component Install, (1) locate the Database computer, (2) provide the Database SA Password if required, and (3) locate the CCS computer. If these values have been provided (or are not required for component installation), you can click Next to proceed. Install Spector 360 servers and applications at this location: All Spector 360 Servers (Windows services) and the Control Center and Dashboard applications will be installed at this base location, unless you select a different folder. The default installation path is: C:\Program Files\SpectorSoft\Spector 360 Both SQL Server and the Spector 360 Database will be installed on the computer where you run the Setup, although you can direct them to different local drives. The Database installation includes two services: the SQL Server and a Job Agent service to handle database tasks SpectorSoft Corporation, All rights reserved. 15

16 Step 1: Deploy the Servers When you are installing another component and NOT the Database, enter the computer name and SA password, if prompted: You cannot proceed until entering the SA Password on this panel! Database Computer Name REQUIRED. This field displays the name of the current computer. This computer will be your "Database computer," and the Database will be known as the SQL Server instance computer/spector360 where computer is this computer (SERVER05/SPECTOR360). If you are installing a separate component that accesses the Database, type or browse to and select the Database computer name (such as, \\SERVER05). SA password - Type a password for the default SA (System Administrator) account installed with this Spector 360 SQL Server instance. You will type the user name "SA" and the password defined here to log in to the Control Center or Dashboard for the first time. The password must be at least 6 characters long and include THREE of the following criteria: - An uppercase letter - A lowercase letter - A number - A non-alphabetic character, such as # ^ _ - Do NOT use the characters: / ' " [ ] { } ( ), ;? $ \ or <space> Confirm SA password - Type the password again to confirm it. Set database size, if using full SQL Server Available when installing the Database. Most Spector 360 setup packages automatically install Microsoft SQL Server Express. If you have requested MS SQL Server Standard, you have the option of setting the Database size. If you have requested to use your own copy of SQL Server 2005 Standard or Enterprise, you must locate that installation package. The System Administrator (SA Password) REQUIRED. If you are installing the Database, you MUST set a password for a built-in account for this SQL Server instance. You will use SA as the user name and this password to log in to the Control Center or Dashboard for the first time. If you are installing or reinstalling a component that accesses the Database, enter the current SA password SpectorSoft Corporation, All rights reserved. 16

17 Step 1: Deploy the Servers SQL Server setup executable location: Available only when SQL Server is NOT provided with the Spector 360 Setup. Type the full path to the folder, or browse to and select the drive or network folder containing your customer-provided SQL Server installation files. Initial SQL Server database size (GB): Enabled only for a full SQL Server (not Express) setup. The Spector 360 databases will be created this size. The SA user can change the maximum size of STORAGE databases from the Control Center following setup. A larger database size may improve performance for a large installation base (more than 500 clients). Too large a size will cause disk space and performance issues. Read configuration notes for SQL Server Standard to understand the impact of setting a larger initial database size. Install SQL Server at this location Available when installing the Database. Install Spector 360 Database at this location Available when installing the Database. When you continue, the Setup will use scripts and files to automatically build a Spector 360 Database located at the following location. You can direct the SQL Server instance to another location on this computer, if you wish. The Spector 360 data will be stored in this folder: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL Make sure the Database computer has disk space to handle not only the databases, but the rate of data being returned from client Recorders. See Estimate the Data Size. Some customers prefer to install SQL Server and/or the Database files on a separate local drive to allow for plenty of disk space. Microsoft SQL Server provides the database management system for custom Spector 360 database files. Your Spector 360 Database will be the SQL Server instance computer\spector360, where "computer" is the name of this computer. Both MS SQL Server and the Spector 360 database files are installed on the local Setup computer. The default SQL Server installation is located at: C:\Program Files\Microsoft SQL Server SpectorSoft Corporation, All rights reserved. 17

18 Step 1: Deploy the Servers Spector 360 SQL Server and agent services account Available when installing the Database. Configure the Dashboard & Control Center OPTIONAL CONFIGURATION. Change the installation folder for the Control Center or Dashboard on this computer, or allow installation at the default locations. The Database services will login under a Windows account: Local System - DEFAULT. The Database services will use the current computer's Local System account. The service inherits appropriate security and privileges when the SQL Server and Spector 360 Database are installed on the same computer. This account - For security purposes, you may choose to run services under a different account. Enter another valid Windows account name and password that will have full privileges at the SQL Server and Database installation locations. When the Servers have been installed, you can install additional Dashboards and Control Centers at other computers using the Component Install. Note that the Control Center will automatically be selected for installation with a Control Center Server (CCS) or Database SpectorSoft Corporation, All rights reserved. 18

19 Step 1: Deploy the Servers Control Center location The Spector 360 Control Center manages Recorders, Servers, the Database, and Web Filtering and Event Alert policies. A Control Center must be installed with the CCS and Database. If these are on separate computers, install a Control Center on each. You can install as many Control Centers as needed. All Control Centers communicate with one, centralized CCS. You can direct the installation to a different location on this computer, if you wish. The default is: C:\Program Files\SpectorSoft\Spector 360 Control Center Dashboard location The Dashboard allows users to query the recorded data for display in charts and reports. The Dashboard uses the SQL Server to query the Database by date, time, user, computer, Web Filtering category, and other criteria. Multiple Dashboard applications can be installed. All Dashboards access a single, central Spector 360 Database. See the Spector 360 Dashboard Guide to learn how to review, analyze, and report on Spector 360 data. You can direct the installation to a different location on this computer, if you wish. The default is: C:\Program Files\SpectorSoft\Spector 360 Dashboard SpectorSoft Corporation, All rights reserved. 19

20 Step 1: Deploy the Servers Configure the Control Center Server The Control Center Server (CCS) A single Control Center Server (CCS) relays instructions from the Control Center to other network computers. This service must be logged in with Administrator-user privileges on all Spector 360 computers to handle remote configuration and installation of the Recorder. When installing the CCS, you must assign a Windows account to the service before you can continue. You can NOT proceed until the CCS has been assigned its service account. A CCS icon will appear in the Windows taskbar following installation. Control Center Server computer name This field displays the name of the current computer (i.e., \\COMPUTER05). If you are installing the CCS, the name cannot be changed. This computer will be your "Control Center Server computer." If you are installing a separate component, you must enter or browse to the correct computer where the CCS is already installed (i.e., \\COMPUTER01). Control Center Server service account Available when installing the CCS. REQUIRED. Use an existing Windows account with Administrator privileges on all Spector 360 computers. A domain account would be acceptable, but it can be any Administrator account valid on all computers. Enter and confirm the password for the account. When installing another component, be sure to identify the CCS computer by name. Database connection credentials Available when installing the CCS. The CCS accesses the Database directly to read and write Control Center auditing data. The account you select is automatically added to the Database. This Database login is not required to install Spector 360 ; you can provide it later from the Control Center SpectorSoft Corporation, All rights reserved. 20

21 Step 1: Deploy the Servers Account - Select and enter a valid Windows account name and password. This account will be used to authenticate CCS login to the Database. SQL Server Account - Select and enter ANY user name and password. This SQL Server account will be created to authenticate CCS login to the Database. Configure the Primary Server The Primary Server The Primary Server communicates with all Spector 360 Recorders to provide licensing and software updates. A Recorder will not operate properly unless it has a license and can establish network connection to the Primary Server. OPTIONAL CONFIGURATION. You can assign an account other than Local System to the Primary Server service Primary Server computer name This field displays the name of the current computer (i.e., \\COMPUTER05). If you are installing the Primary Server, the name cannot be changed. This computer will be your "Primary Server computer." If you are installing a separate component, you must enter or browse to the correct computer where the Primary Server is already installed (i.e., \\COMPUTER01). The Primary Server service must be up and running for Spector 360 to record activity! The Primary Server can operate under the Local System account, regardless of where it is installed. Primary Server service account Available when installing the Primary Server. The default service account for the Primary Server is Local System. If you want this service to log on as another account, provide the account credentials here. Local System - The Primary Server will use the current computer's Local System account. This account - For security purposes, you may choose to run services under a different account. Enter another valid Windows account name and password for use by the Primary Server SpectorSoft Corporation, All rights reserved. 21

22 Step 1: Deploy the Servers Configure the Web Filter Server The Web Filter Server OPTIONAL. The Web Filter Server (WFS) enforces Web Filtering rules across the Spector 360 network. Before accessing the Internet, recorded computers with filtering enabled query the WFS, which applies filtering rules stored in the Spector 360 Database. Web Filter Server computer name The current computer automatically appears in this field. Type another computer name to direct the installation elsewhere. Click the Add button to add the computer to the list at the bottom of the panel and clear it from this field. You can install the WFS on multiple computers from this panel. Web Filter Server service account The Web Filter Server is a Windows service that must be able to access the Database location in order to apply Web Filtering rules. Local System - DEFAULT. Choose this option when the Web Filter Server is installed on the same computer as the Database. This account - Choose this option for security, or when installing the Web Filter Server on computers remote from the Database. The account must have privileges to access the Database computer. Enter a Windows account name and password for use by the server. Database connection account If you are designating more than one computer to receive a Web Filter Server, use the same Database credentials for each. Server account (above) - DEFAULT. The account provided above is used to create the Server's login to the Database. On a single-server computer, the WFS can use the default settings. Some customers install the Web Filter Server on multiple computers to handle filtering for a large number of computers. Use the same Database login account for each Web Filter Server. SQL Server Account - Select and enter ANY user name and password. This SQL Server account will be created to authenticate Web Filter Server login to the Database. Remove computers Click the Add button to add the computer at the top of the panel to the list at the bottom. Select a computer and click Remove to delete it from the list. If you want to edit the service account or Database connection account for a computer, remove the computer and Add it again SpectorSoft Corporation, All rights reserved. 22

23 Step 1: Deploy the Servers Configure the Data Vault Server The Data Vault Server The Data Vault Server receives recorded activity from Client Recorders, sends Attachment and Screen Snapshot files to the File Storage location, and processes the "raw" recorded data for insertion into the Spector 360 Database. Use default settings to install a Data Vault Server on a single-server computer. Otherwise, enter the computer name(s), the service account, and the Database login account for this server. Some customers install the Data Vault Server on multiple computers to handle data retrieval for a large number of computers. Use the same Database login for each Data Vault. Data Vault computer name The current computer (i.e., \\COMPUTER05) is automatically displayed in the field. You can type in a computer name to direct the installation elsewhere. Click Add to add the computer to the list of "Data Vaults to be installed" at the bottom of the panel and clear it from this field. You can install multiple Data Vaults from a single Setup run. Data Vault service account The Data Vault Windows service must be able to access the Database computer in order to store captured files and data. Local System - DEFAULT. Choose this option when the Data Vault is installed on the same computer as the Database. The Data Vault will use the current computer's Local System account. This account - Choose this option for security or when installing the Data Vault on a computer remote from the Database. The account must have full privileges to access the SQL Server instance and File Storage Base Path on the Database computer. Enter a valid Windows account name and password. Database connection account The Setup will configure a Database login for the Data Vault. If you are designating more than one computer to receive a Data Vault, use the SAME Database credentials for each. If you are installing one Data Vault on a single-server computer, you can use the default settings. Some customers choose to create a network account to be used by Data Vaults. Use the same Database connection account for each Data Vault. Server account (above) - DEFAULT. The account provided above is used to create the Server's login to the Database SpectorSoft Corporation, All rights reserved. 23

24 Step 1: Deploy the Servers SQL Server Account - Select and enter ANY user name and password. This SQL Server account will be created to authenticate Data Vault login to the Database. Screen Snapshot/ Attachment File Storage The Data Vault Server stores captured Screen Snapshots (graphic files) and Attachment files (if capture is requested) at this folder location. These files, associated with data in the Database, can quickly use up disk space, and some customers prefer to provide a dedicated hard drive for this "File Storage Base Path." Browse to a new location on the server computer or accept the default location: View a Summary and Begin Installing View a summary of installation selections When you click Next after setting installation options, a message appears if required information is missing. If not, a summary of your installation choices appears. You can Print or Save the summary. C:\Spector360Data Use one file storage base path for all installed Data Vaults. Reference the same File Storage Base path for each Data Vault Server. Remove computers Click the Add button to add the computer at the top of the panel to the list at the bottom. The computer name at the top clears, and you can add another computer to receive the installation. Select a computer and click Remove to delete it from the list. If you want to edit the service account or Database connection account, Remove the computer and Add it again. View a summary To view a summary of your selections and begin the installation, click Next. Click Install to begin the installation Wait for all components to be installed. When installation is complete, following instructions to register and unlock the installation SpectorSoft Corporation, All rights reserved. 24

25 Step 1: Deploy the Servers Register and Unlock the Installation Click Register to receive an Unlock Code Following installation, the Serial Number Registration panel appears. 1. Click Register in the middle of this panel to submit your serial number and registration code and receive an unlock code. A web page confirming your registration opens in a browser window. Close the browser window, but leave the Registration panel open. 4. Paste the Unlock code in the Registration. Return to the open Registration panel. Open the Unlock Code attachment and use Ctrl+A to highlight the entire, long, unlock code. Press Ctrl+C to copy the code. Click in the field at the bottom of the Registration panel and press (Ctrl+V) to paste the Unlock Code in the field. It doesn't matter if you include or omit the square brackets around the code when you copy it. 5. Click the Unlock button. A message confirms the installation has been unlocked and displays the number of licenses purchased. Click OK. Finish the Setup 2. Wait a minute for a Spector 360 Registration to arrive. The arrives with two attachments: Registration Code and the Unlock Code. 3. Save the Unlock Code attachment to a location you can access from the Setup computer. Complete the setup and open the Control Center to continue. You can register later from the Control Center application, but keep in mind that Spector 360 will NOT operate properly until registered and unlocked for the number of licenses purchased. Registration is required after installing the first time, after adding client licenses, after installing a new Primary Server, after reinstalling servers that have been uninstalled, or after having installed a major upgrade SpectorSoft Corporation, All rights reserved. 25

26 Step 1: Deploy the Servers Finish the Setup and Start the Control Center Read the Post-Install Notes When all server components have been installed, post-installation notes appear in a browser window. Read or print the notes and close the browser window. Start and login to the Control Center If requested, the Control Center will start immediately when the setup is complete, allowing you to begin deploying the Recorder to computers. Otherwise select Start All Programs Spector 360 Spector 360 Control Center from the desktop. At the prompt log in as System Administrator (SA). Add Computers and Schedule Installation If this is a new installation and no computers have been "added" to the Control Center, the Add Computers wizard opens automatically, prompting you to add the names of network computers you plan to monitor. The wizard allows you to type computer names or import them through Active Directory, through Network Discovery, or as a text file list. Authentication Select SQL Database - computer\spector360, where computer is the name of the computer where the database is installed Login - SA Password - SA password defined during setup Click LOGIN to open the Control Center. If you are evaluating Spector 360, you may prefer to start by adding one or two test computers. Go on to Deploying the Recorder to a Test Computer SpectorSoft Corporation, All rights reserved. 26

27 Upgrade, Migrate, Uninstall Back up the database before upgrading Upgrade, Migrate, Uninstall Upgrade (Reinstall) Components Upgrade options If you are upgrading from Spector 360 version 6.2 or later, you may choose to install directly over your existing Spector 360 installation, or test the new version on a separate computer. Installing an upgrade should not interfere with your active databases, but it is a good policy to create a fresh, Full Backup just before you upgrade. See the Administrator's Guide for more about Database backups. 1. Open the Control Center and select Servers. Double-click the Data Vault Server. STOP the service to prevent Recorders from sending in new data. If you have more than one Data Vault Server, stop them all. This ensures the Backup has all current data. The Recorders will store data locally until their assigned Data Vault service is re-started. 2. Select Database Manage Database Backup and Restore. 3. Select Backup Create a Full Backup from the toolbar. 4. WAIT for the backup to complete. 5. Move the Backup Folder you just created to another, non-default location. The default location for a Backup folder is: C:\Program Files\Microsoft SQL Server\MSSQL\Spctr_Backup It is good policy to test your Database backups. By installing a "Test" Database on a separate computer, you can perform a Restore without compromising the active databases. See the Administrator's Guide. Install (Re-install) over the previous version If you are ready to upgrade your existing installation, read the Download page or Installation Notes to see if there are special installation instructions. Follow the steps to install Spector 360. This version of Spector 360 requires that you update ALL components. The setup may upgrade or install Microsoft.NET. You do not need to uninstall the previous version before installing the new version SpectorSoft Corporation, All rights reserved. 27

28 Upgrade, Migrate, Uninstall Select Install/Reinstall. The Setup detects which components are already installed on this computer. Check components you want to install or reinstall; uncheck components you do not want to reinstall. Click Next to accept Agree to the License Agreement terms. Accept the End User License Agreement. Scroll to read the entire agreement. Use the buttons at the bottom of the panel to Save or Print the agreement. Click Yes to continue or No to exit the Setup. Download updates, if available. If time has passed since you originally acquired your Spector 360 installation, the following panel suggests that you download newer installation files. Check component to download updated files or clear components to use your existing files. Click Next to continue. Database - REQUIRED: Provide a System Administrator (SA) password for your SQL Server Spector 360 database instance. Dashboard & Control Center - Installs the Dashboard for viewing activity and the Control Center for managing Servers and Recorders. Control Center Server - REQUIRED: Provide credentials for a Windows account that is member of the Administrators group on all Spector 360 computers. Primary Server - Manages licensing for recorded computers. Web Filter Server - Manages web site filtering, when it is enabled. Data Vault - Retrieves recorded activity from computers to store in the Database, and sends Screen Snapshots and Attachments to the specified file storage location. Configure components for installation. Components are listed in the left column. Select a component on the left to change settings on the right. You will be able to upgrade multiple Data Vault and Web Filter Servers, if necessary. General - Change the default installation location, if desired. If necessary, change the name of the Local System account. Install components When you click Next, a message appears if the account or SA password is not properly provided. If a path does not exist, you are prompted to create it. The installation begins. You may be prompted to stop existing Servers in order to allow the installation. All Servers will automatically start when the new installation is finished. When the upgrade of server components is complete, you will be required to Register and Unlock the Installation SpectorSoft Corporation, All rights reserved. 28

29 Upgrade, Migrate, Uninstall Install separately You may want to test the new version of Spector 360 before removing the old version. To do this, you'll need a second serial number. Set up a "test" installation 1. Contact SpectorSoft and request a temporary serial number. 2. Use a Quick Install to get started on a separate computer. Enter the new, temporary serial number for this "test" installation. You must register the test installation and unlock it in order to deploy a Recorder. 3. When the Setup is finished, install one or two test Recorders from the new Control Center and try the upgrade. 4. When you are finished testing, remove the test installation. When ready, install over the active installation 1. Use your "old" Control Center to stop the "old" Data Vault Service and perform a Full Backup of the "old" Database. Move the backup to a safe, non-default location. Revert to a Previous Version You can revert back to the previous version of Spector 360 if you are not comfortable with the new version, but you MUST restore the earlier, "old installation" backup you created before upgrading. A backup created by the newer version of Spector 360 will NOT work with an older version. To revert to the previous version: 1. Follow instructions in Uninstalling Spector 360 to remove all components of the new version. 2. Install the older version. Use your previous Install CD or download. You will need to re-register your serial number and obtain a new unlock code. 3. Restore the "old installation" Full Backup. After allowing some time, click Refresh to verify that data has been restored. 4. Reinstall the "old installation" Recorders, Dashboards, and Control Centers. You cannot restore a backup from a NEWER version of Spector 360 to an older version. 2. Next, either remove the old installation and re-install or install over the old installation. Use your fully licensed serial number. Note that if you uninstall the Database you must be able to restore your latest backup! 3. Be sure to Register and Unlock the new installation. Upgrade ALL Servers, Control Centers, Dashboards and Recorders on the network SpectorSoft Corporation, All rights reserved. 29

30 Upgrade, Migrate, Uninstall Upgrade Older Versions What is your current version? Select Help About from the Dashboard or Control Center menu to verify the version of Spector 360 you have currently installed. If you currently are running a pre-6.2 version of Spector 360, you will need to upgrade to version 7.0 before you will be able to restore your Spector 360 Database to the current version. Contact Technical Support: Refer to the Spector 360 Knowledge Base or contact SpectorSoft Technical Support for assistance in going through the process of upgrading first to version 7.0 and then to the latest version. Upgrading from Version 6.1 IMPORTANT: You will need free disk space equal to 3 times your current database size in order to upgrade a version 6.1 MSDE database to the MS SQL Server 2005 Express database. Database Backups prior to version will not properly restore in version 7.3 Please contact Technical Support before you begin! Database Management moves from the Dashboard to the Control Center as of version 7.0. Migrate from Spector CNE Migrate your Data Vault to the Database It is possible to migrate data from the Spector CNE Data Vault into the Spector 360 Database, if you have been using Spector CNE Version 4.3 or later. Spector 360 will require installation of its own network Server Components, registration of its own serial number, and installation of its own Client Recorder. Before making the change from CNE to 360, decide whether you want to install Spector 360 over your current Spector CNE installation or on a separate computer. If you are using Spector CNE 4.2 or earlier, you will not be able to import your data into the Spector 360 Databases. Install separately If you have a large Spector CNE installation, begin by installing Spector 360 on a separate computer and test it before migrating. Test Spector 360 on a few computers while continuing to run Spector CNE from another server. As you become comfortable with Spector 360, you can gradually move more computers from CNE to 360 recording. 1. Check the requirements. Make sure the server computer meets the initial requirements. 2. Install all Spector 360 components. Use the Setup program to install all components on the new computer. Register and unlock the installation. 3. Install one or two Spector 360 Recorders on computers. Use the Add Computer wizard that pops up after setup to Install the Recorder on "test" computer. You do not have to uninstall an existing Spector CNE client. Use the Spector 360 Dashboard to SpectorSoft Corporation, All rights reserved. 30

31 Upgrade, Migrate, Uninstall view activity on the test computers. When you feel comfortable with Spector 360, complete the next steps. 4. Stop the Spector CNE Data Vault service. This forces all client computers to hold data locally while you import the latest data files from your CNE Data Vault folders to the Spector 360 Database. Spector CNE clients will continue to record, and data will not be lost. 5. Import Spector CNE data using the Spector 360 Import Utility. If you have a Spector CNE Data Vault (version 4.3 or higher), run the Import Utility to populate your Spector 360 Database with existing data. Do this before installing the Spector 360 Recorder on clients. See Importing Data from CNE. 6. Re-install Recorders. Use the new Spector 360 Control Center to add all computers and install the Recorder on them. You do not need to uninstall the Spector CNE Recorder. See Deploy to All Computers. 7. Uninstall Spector CNE. When you are ready, remove the Spector CNE servers using Windows Start All Programs Spector CNE Uninstall at the server computer. You will be allowed to install the Recorder component only on the number of computers for which you have purchased Spector 360 licenses. You can't move a license from one computer to another. Install over 1. Check the requirements. Make computer meets Single Server Requirements for the Server Components and Database in addition to existing CNE Data Vaults. Be sure to consult Estimating the Data Size. 2. Back up your Spector CNE Data Vault. Even though the Spector 360 Setup does not overwrite your CNE Data Vault, copy or move the C:\SpectorData folder (may have another name in your installation of Spector CNE) and its subfolders to another location for safety. The Spector 360 Import Utility will allow you to point to the new location and import or link to existing folders for Screen Snapshot and Attachment files. 3. Install all Spector 360 Components. You do not need to uninstall Spector CNE Server Components. Follow instructions for a Quick or Custom Install. 4. The following components will be installed: Spector 360 Databases (with Microsoft SQL Server) the Dashboard, which will be your "viewer" a NEW Control Center Server a NEW Primary Server (Spector 360 registration required) a NEW Data Vault Server a Web Filter Server a NEW Control Center application the Import Utility, which allows you to import Spector CNE 4.3 (or higher) data into a Spector 360 Database. Register and unlock the installation. Configuration files are preserved. The computer list (network configuration file) will be preserved and should appear in the new Control Center when you open it. Your existing Data Vault folders are preserved. When the installation is complete, you can run the Import Utility to populate the new Spector 360 Database with your existing Spector CNE data. 5. Import Spector CNE data. If you have a Spector CNE Data Vault (version 4.3 or higher), run the SpectorSoft Corporation, All rights reserved. 31

32 Upgrade, Migrate, Uninstall Import Utility to populate your Spector 360 database with existing data. See Importing Data from CNE. Do this before installing the Spector 360 Recorder. Spector CNE clients will continue to record and store data at the computers; this data will be held locally and will not be lost. 6. Install one or two Spector 360 Recorders on computers. Open the newly installed Spector 360 Control Center and select Recording Manage Computers. Add and install the Recorder on "test" computers, following instructions in Installing the Recorder. Use the Spector 360 Dashboard to view activity on the test computers. When you feel comfortable with Spector 360, complete the final step. 7. Re-install Recorders. You will need to reinstall ALL Recorders on the network. Old Recorders will not deliver data to the new Data Vault / Database, but new Recorders will deliver old data. Follow the instructions in Deploy to All Computers. Be aware that you cannot "undo" the Spector 360 installation. If you decide to go back to Spector CNE, you must uninstall Spector 360, reinstall (and re-register) Spector CNE, and redeploy Clients. Only the Spector 360 System Administrator (SA) login can import data into a Spector 360 Database. You can run the Import Utility on more than one Spector CNE Data Vault to consolidate all data in one Spector 360 Database. You can re-use the Import Utility on the same CNE Data Vault after a period of time to retrieve new data, if necessary. The Import Utility can take from 5 minutes to 10 hours to populate the database, depending on the amount of data in the Data Vault, your system capacity, and network capacity. To import CNE data into the 360 Database 1. Start the Import Utility: Open the Windows Start menu, select All Programs, Spector 360, and Spector 360 SQL Import Utility. Click Next. 2. Specify the SQL Server and log in as SA: At the Database Configuration screen, click Browse to display all instances of SQL Server available on the network. Select the computer\spector360 instance, where computer is the Windows computer name where Spector 360 Database is installed. Import Data from a CNE Data Vault If you are migrating from Spector CNE When fully installed, Spector 360 will automatically populate its Database with the recordings received by the Data Vault Service. An Import Utility (FileToSQL.exe) allows you to populate a Spector 360 Database with data from pre-existing Spector CNE Data Vault files, as long as you were using Spector CNE version 4.3 or higher. The Import Utility is automatically installed with the Spector 360 Database SpectorSoft Corporation, All rights reserved. 32

33 Upgrade, Migrate, Uninstall Check Use SQL Server Authentication. For Login Name, type sa and enter the SA password for the Spector 360 Database. Click Next. 3. Specify the Data Vault source location: Next to Source Folder, type or browse to the folder containing the Spector CNE Data Vault you wish to import. Use Existing Folder Structure: Check to have Spector 360 point to Snapshots in the existing Spector CNE Data Vault rather than importing them to the new Spector 360 file storage folder. This saves disk space, but the files cannot be encrypted. Leave this option clear if you plan to archive and remove the CNE Data Vault. Include Subfolders: Leave this option checked if you want to import data from all subfolders in the specified location. If you do not check this item, only data files in the named location are imported. Data Extension: Leave the sdf data file name extension as is, unless you have changed the file extension for your Spector CNE data files. Press Next. 4. Specify options for the import: Import Snapshot Events: Check to import existing Screen Snapshots into the Spector 360 Data Vault. Clear this option to skip import of snapshot files. Make sure you have enough disk space to hold past, present, and future Snapshot files. See Estimating the Database Size. Copy Snapshot Files: Check to import and optionally encrypt Snapshot files. Select a file encryption from the drop-down list. The encryption will be applied to each file as it is imported: None - no encryption applied, files can be opened as is Internal - applies SpectorSoft encryption format 3DES - applies "Triple Data Encryption Standard" (a NIST standard) format with 3 stages of encryption Import Attachments: Check to import all attachment files. Clear this option if you do not need to view older attachments from the Dashboard. Encryption Type: Select a file encryption from the drop-down list (None or 3DES). The encryption will be applied as files are imported SpectorSoft Corporation, All rights reserved. 33

34 Upgrade, Migrate, Uninstall Reimport Peviously Imported Files: The Import Utility can mark data files that have and have not been imported. If you are using the Import Utility to add recently captured data from your Data Vault to the database, leave this option blank. Check this option to import all data from the Spector CNE Data Vault, including data that has already been imported. Select the Reimport Previously Imported Files option ONLY if you want to import all data from the CNE Data Vault. Re-importing data results in duplication in the Database. Import Today's Data Files: The Import Utility imports data recordings in full days. To import all data for viewing in the Dashboard, leave this option blank. You can get a full day's recordings for today on a subsequent import. Check this option only if you want today's recorded events, even though additional data recording could take place after the import. Combine Local Users into One Account: Check to import user names that may be recorded as a local user on different computers (for example: Computer1\sallyj, Computer2\sallyj) as one user (<Combined>\ sallyj). This is particularly useful for Novell networks. All data for the combined user is consolidated. Leave this option blank if this is not a problem. Output Folder: Select a folder to store the imported Screen Snapshot and Attachment files. You can create a new folder with any name you wish. Click Next. If you are not importing snapshots or attachments, there is no need to choose a folder. Select the Import Today's Data Files option ONLY if you know for sure that no new data will be added to the Data Vault files by Spector CNE for today. 5. Click Finish. The Import Utility connects to the Spector 360 Database, and the import begins. If the Import Utility fails to connect to the database, follow instructions to begin the Import "wizard" again and be sure to log in as the SQL System Administrator (SA) using the password you defined during the database setup. 6. Importing the data: A status screen displays data being imported and the import progress. Click OK when the import is complete. 7. Review the import log. If errors occur, you can review the log file ( filetosql.log), a text file with date and time stamps showing errors that occurred during the import. The file is saved at C:\Program Files\SpectorSoft\Spector360\filetosql. If you have more than 50 errors, contact SpectorSoft and be prepared to send the Import Log File (filetosql.txt) located in the same folder as the Import Utility. It is normal for an import to have a few errors because of differences in data structures; this will not prevent you from viewing successfully imported data in the Dashboard SpectorSoft Corporation, All rights reserved. 34

35 Upgrade, Migrate, Uninstall Uninstalling Spector 360 Components When to uninstall Use the Setup program to remove the Database, a server, the Control Center, or the Dashboard from a computer. The Setup program automatically detects which components are installed on the computer where it is running and prompts you to reinstall or uninstall when it runs. If you plan to move the Database, first STOP the Data Vault service, create a Full Backup, and move the Backup Set folder to a non-default location. Click here for more help. If you plan to move a server, click here for more help. IMPORTANT: If your goal is to remove Spector 360 entirely, use the Control Center to uninstall all Client Recorders BEFORE you uninstall the servers. If your goal is to upgrade the Server Components, you do NOT need to uninstall components first. To uninstall components 1. Select Windows Start All Programs Spector 360 Uninstall Spector 360. You can also double-click the downloaded sp360setup73.exe program icon or load the installation CD to autostart the Setup program. Make sure you use the Setup program for the current installation. 4. Supply the SA Password to remove the Database. 5. If servers you want to remove are installed on other computers, enter or browse to the computer names. Otherwise, click Next. 2. Select Uninstall. The Setup program detects the components that are already installed, and marks them for uninstall by checking them. 3. Leave all components selected if you wish to remove the installation. Deselect components you do not wish to uninstall. For example, to remove only the Dashboard, clear all options except the Dashboard. Click Next SpectorSoft Corporation, All rights reserved. 35

36 Upgrade, Migrate, Uninstall 6. A Summary of components to be removed appears with your serial number. You can Print or Save the Summary. Click Uninstall to continue, Back to go back and select different components, or Cancel to exit the Setup program. 8. A progress table shows the components being removed, and a message informs you when uninstall has been successful. Restart the computer, if prompted, and click Finish. 7. You may be prompted to close the "Spector Web Filter Server" before continuing. Before responding to the prompt, double-click the Web Filter Server icon in the Windows System tray. When the computer restarts, Spector 360 components have been removed. Do not remove the Control Center application from the Database or CCS computer. In the Administration window that opens, click Stop Service. Respond Yes at the confirmation prompt and wait. When a message informs you the service was successfully stopped, click OK. Click Retry on the SQL Server prompt and continue uninstalling SQL Server. When the Spector 360 Database changes have completed successfully, click Finish SpectorSoft Corporation, All rights reserved. 36

37 Step 2: Deploy Recorders Starting the Control Center Starting from the Setup Following installation of Spector 360, you are prompted to start the Control Center immediately. At the login prompt, enter the SA user name and the Database SA password you creating during Setup. Initially, SA is the ONLY login account. Guard this password carefully. Starting from the desktop 1. Select Start > All Programs > Spector 360 > Spector 360 Control Center. You will begin by logging in as SA. See the Administrator's Guide for complete information on how to use the Control Center. After initial login, you can "Skip" database login when you start the Control Center; however, functionality will be limited. Do NOT use the SA login for regular Control Center or Dashboard operation. Instead, create another "Master" login account to use for administrative functions. 2. Next to Authentication, select SQL. Enter the SA credentials. Login: SA Password: The password you defined during setup The Spector 360 Control Center manages Recorders, Servers, the Database, and Web Filtering and Event Alert policies. A Control Center must be installed with the CCS and Database. If these are on separate computers, install a Control Center on each. You can install as many Control Centers as needed. All Control Centers communicate with one, centralized CCS. If you are not logging in, click Skip and click OK at the message that appears. Press Cancel to exit the program. 3. Next to Database, select computer\spector360 SQL Server instance, where computer is the name of the machine where the Database is installed. 4. Click the Login button. The Control Center opens SpectorSoft Corporation, All rights reserved. 37

38 Step 2: Deploy Recorders Deploy the Recorder to a Windows Computer Requirements A Windows computer receiving the Recorder installation must be on the same network as the servers, have about 50 MB free disk space. See Recorder Requirements. If you are not on a domain, see the information on workgroups. Select Manage Computers from the upper left pane. Start in the Control Center Log in to the Control Center. See Start the Control Center. The Control Center allows you to "add" network computers to a list and immediately (or at a scheduled time) install the Recorder on those computers. Control Center Home Select the Add Computers task navigation command, click New on the tool bar, or right-click and select the New context command. The Add Computers wizard opens. You must have a license for each computer receiving a Recorder installation. Be sure to upgrade any older Recorder installations. You do NOT need to uninstall an old Recorder from a computer before installing the new version. You can change any settings except Platform and Domain after adding the computer to the Control Center list. For more about scheduling installations and automatic Recorder updates, see the Administrator's Guide. If the Add Computer wizard did not start If the "Add Computer" wizard did not start automatically, select Recording from the left tool set. Select Advanced Setup to add ONE computer In the Add Computers Wizard window, select Advanced Setup. The Advanced Setup method is easiest for adding one or two computers. When you're ready to add a longer list of network computers, use the Wizard option, as described in Deploying Recorders to All Computers SpectorSoft Corporation, All rights reserved. 38

39 Step 2: Deploy Recorders Platform - Leave the Windows selection (or refer to Deploy to a Macintosh Computer). Computer Name - Enter the computer's name as known to the network. Domain Name - Enter the Domain, if applicable. If not, enter LOCAL (or any other designation). If a Domain Name entry is not detected as a domain on the network, a message will warn you when you save this information to add the computer. You can click Yes on the message to go ahead and add the computer anyway. Description - OPTIONAL. Type a description of this computer to be used in the Control Center and the Dashboard. Click Next to open the Add New Computer box. Enter the computer name and domain Choose a Windows computer easily accessible to you. Use the Add New Computer panel to identify one computer. Be careful to choose the correct platform (Windows or Mac) and use the correct computer name, as known to the network. Leave the following settings at their default values. Group Name - DEFAULTGROUP. Define and assign groups later. Profile Name - Initial Profile. Define and assign profiles later. Recorder Version - Leave the default (latest) Version selected. Take care to schedule Recorder installation at a time when no one is using the computer. If the computer is OFF at the scheduled time, the installation will be performed as soon as the computer is powered ON. Schedule installation a few minutes in the future Choose Schedule installation for and set the scheduled time for a few minutes in the future by increasing the minutes field. Leave the other selections as is. Identify the computer: SpectorSoft Corporation, All rights reserved. 39

40 Step 2: Deploy Recorders Click Add to add the computer and Close to return to the Computers list. The test computer is added to the Computers list; complete information may not be available for several minutes. Wait for the CCS to perform the scheduled installation and the computer to restart. When the computer restarts, recording begins and the computer's status is updated. At the computer, there is no indication that the installation ever occurred. Actively use the test computer Once the Recorder is installed, spend some time at this "test" computer performing a variety of activities for test purposes: , chat, web surfing, file transfers, and so on. View the recorded activity from a Spector 360 Dashboard. See Troubleshoot Recorder Installation if necessary. Deploy the Recorder to a Macintosh Requirements A Mac computer receiving the Recorder installation must be on the same network as the servers, have about 50 MB free disk space. See Recorder Requirements. You will need to enter the Mac Administrator password to complete the installation. Start in the Control Center Log in to the Control Center. See Start the Control Center. First add the Mac computer or computers to the Control Center Computers list, then create a Manual Setup File, and finally use the Manual Setup File to install the Recorder manually, at the computer. The Mac does not have to be on the same Windows domain or workgroup as the Servers, but it does need TCP/IP connection to the network. If a Domain Name entry is not detected, a message warns you when you save this information to add the computer. You can click Yes on the message to add the computer anyway. Add a computer Select Recording > Manage Computers, and select New or Add Computers to open the Add Computers wizard. Select Advanced Setup to add computers one at a time. Note that you can NOT schedule remote installation of the Recorder to a Mac while adding the computer. If you prefer, add all computers at once using the Add Computers Wizard SpectorSoft Corporation, All rights reserved. 40

41 Step 2: Deploy Recorders The Control Center may not detect the Mac in its Computers list until after the Recorder is installed. Note that Initial Profile settings cause the Recorder to install "quietly" and automatically restart the computer. Build a Manual Setup File The computer identity includes: Platform - Select Mac from the drop-down list.. Computer Name - Enter the computer's name as accessed on the local network. If you cannot view the Mac on the network, go to the computer and check Apple > System Preferences > Sharing where the name is displayed. Domain Name - Enter the Domain or Workgroup name, if applicable. If not, enter LOCAL (or any other designation). If a Domain Name entry is not detected as a domain on the network, a message will warn you when you save this information to add the computer. You can click Yes on the message to go ahead and add the computer anyway. Description - OPTIONAL. Type a description of this computer to be used in the Control Center and the Dashboard. Leave all other settings at their default values. Group Name - DEFAULTGROUP. Define and assign groups later. Profile Name - Initial Profile. Define and assign profiles later. Recorder Version - Leave the default (latest) Version selected. Don't Install the Recorder - Leave this option selected. Automatically update the Recorder at - Leave this option at the default setting, unless you wish to change it. 1. Start the Create Manual Recorder Setup wizard. In the Manage Computers view, select File > Create Manual Setup from the menu bar. At the Welcome wizard panel, click Next. 2. Choose the platform. A Manual Setup File uses an OS-specific Recorder Profile and software Version. You will be able to use this setup file on as many Mac or Windows computers as desired (up to the license limit). 3. Select a Recording Profile. Select the Initial Profile for this installation. Select (highlight) a Profile in the list, or create a New profile. Click Next SpectorSoft Corporation, All rights reserved. 41

42 Step 2: Deploy Recorders Each computer receiving a Recorder installation requires a license. A Manual Setup file assigns licenses using the serial number you select. If there are 0 Licenses Available, you need to purchase additional licenses before continuing. 4. Select a Recorder Version. Only versions for the selected OS are shown. Initially, the version provided with your Spector 360 installation is the only one available. Highlight a version and click Next. 6. Name the file and location. A panel summarizes the computer OS, Profile used, Recorder Version, and serial number. Click the folder button next to the Setup File Name field at the bottom of the panel to set the name and location for the Setup file. The default file name includes the Recorder Version and Serial Number. You can change the name, but do NOT change the file extension. 5. Select a serial number. Highlight your serial number and click Next. Click Save after selecting the name and location, which are then displayed in the wizard's Setup File Name field SpectorSoft Corporation, All rights reserved. 42

43 Step 2: Deploy Recorders Install the Recorder on the Mac 1. At the Mac computer, double-click the.zip file to extract a "Spector 360 Client".dmg Setup file. A Manual Setup file for Mac is a.zip file. 2. Double-click the Spector 360 Client.dmg file to run the Spector Client Installation. When you are prompted, enter the Mac Admin password required for software installation. Click OK. 8. Finish building the file. Click Finish. Wait for the file to be built at the location you specified. 3. When an "Install Succeeded" panel appears, the installation is complete. If you wish, click View to view a ReadMe file. 4. Click Finish to end the installation and restart the computer. 7. Use the.zip file to install manually. Deliver and execute this file on a computer where you want to install a Recorder. You can use the same Manual Setup File at all Macs you wish to record, To deliver the.zip file, copy it to media, attach it to an , put it into a shared network folder, or use any other means to deliver the file to the targeted computers. 5. When the computer restarts, the Recorder will be recording data and communicating with the servers. 6. Remove all evidence of the installation from the computer: Drag.zip and.dmg install files to the Trash. Empty the Trash. Clear the Apple > Recent Items menu. If necessary, remove items from the Downloads folder. 7. Verify the computer and Recorder status appear as expected in the Control Center's Computer list. See the Administrator's Guide. 8. Test recording by viewing activity on this computer from a Spector 360 Dashboard. If you need to update the Profile or Version, make changes from the Control Center SpectorSoft Corporation, All rights reserved. 43

44 Step 2: Deploy Recorders Deploy Manually to Windows When to use manual deployment Even if the Control Center cannot deliver a Recorder installation to a computer, it can manage the Recorder once it is installed, as long as the computer is connected to the network via TCP/IP, and the Control Center Server (CCS) has Administrator-level privileges on the computer. Use manual deployment for: Add a computer Select Recording > Manage Computers, and select New or Add Computers to open the Add Computers wizard. Select Advanced Setup to add computers one at a time. Note that you can NOT schedule remote installation of the Recorder to a Mac while adding the computer. Computers in a workgroup Computers working at a remote location (via VPN) Computers with an older OS or other limitations When another method of deploying software is preferred Start in the Control Center Log in to the Control Center. See Start the Control Center. First add the computer or computers to the Control Center s Computers list, create a Manual Setup File, and then use the Manual Setup File to install the Recorder manually, at the computer. The computer identity includes: Platform - Select Windows from the drop-down list.. Computer Name - Enter the computer's name as accessed on the local network. Domain Name - Enter the Domain or Workgroup name, if applicable. If not, enter LOCAL (or any other designation). If a Domain Name entry is not detected as a domain on the network, a message will warn you when you save this information to add the computer. You can click Yes on the message to go ahead and add the computer anyway. Description - OPTIONAL. Type a description of this computer to be used in the Control Center and the Dashboard. Leave all other settings at their default values. Group Name - DEFAULTGROUP. Define and assign groups later. Profile Name - Initial Profile. Define and assign profiles later. Recorder Version - Leave the default (latest) Version selected SpectorSoft Corporation, All rights reserved. 44

45 Step 2: Deploy Recorders Don't Install the Recorder - Leave this option selected. Automatically update the Recorder at - Leave this option at the default setting, unless you wish to change it. Add all computers at once using the Add Computers Wizard. Without changes, the Initial Profile settings cause the Recorder to install "quietly" and automatically restart the computer. Build a manual setup file for Windows 1. Start the Create Manual Recorder Setup wizard. In the Manage Computers view, select File Create Manual Setup from the menu bar. At the Welcome wizard panel, click Next. 2. Choose the Windows platform. A Manual Setup File uses an OS-specific Recorder Profile and software Version. You will be able to use this setup file on as many Mac or Windows computers as desired (up to the license limit). 4. Select a Recorder Version. Only versions for the selected OS are shown. Initially, the version provided with your Spector 360 installation is the only one available. Highlight a version and click Next. 5. Select a serial number. Highlight your serial number and click Next. 3. Select a Recording Profile. Select the Initial Profile for this installation. Select (highlight) a Profile in the list, or create a New profile. Click Next SpectorSoft Corporation, All rights reserved. 45

46 Step 2: Deploy Recorders A Manual Setup file assigns licenses using the serial number you select. If there are 0 Licenses Available, you need to purchase additional licenses before continuing. 6. Name the file and location. A panel summarizes the computer OS, Profile used, Recorder Version, and serial number. Click the folder button next to the Setup File Name field at the bottom of the panel to set the name and location for the Setup file. The default file name includes the Recorder Version and Serial Number. You can change the name, but do NOT change the file extension. Click Save after selecting the name and location, which are then displayed in the wizard's Setup File Name field. A Manual Setup file for Windows is an.exe file. Install the Recorder on the Computer 1. Run the executable file on the computer. The installation runs without dialog boxes and automatically restarts the computer. 2. When the computer starts again, the Recorder will be recording data and communicating with the servers. 3. Verify the computer and Recorder status appear as expected in the Control Center's Computer list. See the Administrator's Guide. Use the Run Diagnostics command, if necessary. 4. Test recording by viewing activity on this computer from a Spector 360 Dashboard. 5. If you need to update the Profile or Version, make changes from the Control Center. 7. Finish building the file. Click Finish. Wait for the file to be built at the location you specified. 8. Use the.zip file to install manually. Deliver and execute this file on a computer where you want to install a Recorder. You can use the same Manual Setup File at multiple computers. To deliver the.zip file, copy it to media, attach it to an , put it into a shared network folder, or use any other means to deliver the file to the targeted computers SpectorSoft Corporation, All rights reserved. 46

47 Step 2: Deploy Recorders Verify Recorder Deployment and Recording Check the Control Center list When the Recorder is successfully installed, the Computers list under Manage Computers shows a Recorder status of "Installed" and the state "Recording." Log in to the Dashboard 1. Select Start All Programs Spector 360 Spector 360 Dashboard. 2. At the login prompt, select your computer\spector360 SQL Server instance; computer is where the Database is installed. 3. Select SQL Server authentication and log in as System Administrator: Login: SA Password: The password you defined during setup. 4. Click the Login button and wait for the Dashboard to open. It may take a few minutes for the OS Version for computers to be detected. The Recorder status is "Pending" if installation has been scheduled, and the assigned profile and version should appear in the appropriate columns. Actively use the test computers Use the "test" computer to send , chat, surf the web, and so on. Wait a few minutes following computer restart for status to be updated in the Control Center. See Troubleshoot Recorder Installation for more help. If you start the Dashboard before the activity has been stored in the Database, no data or charts are available. After a half-day of recording, explore the various Dashboard views and adjust Recording Profiles assigned to computers to refine activity reports SpectorSoft Corporation, All rights reserved. 47

48 Step 2: Deploy Recorders Deploy to All Computers Complete deployment Complete Spector 360 deployment by installing the Recorder software on each computer you plan to record. If you are upgrading Spector 360, include computers where an older Recorder is already installed, since the Recorder MUST be updated to work with the upgrade. Follow the directions below for deploying to ALL computers. For a new installation, the Add Computers wizard automatically opens Use the Add Computers wizard The wizard allows you to find, select, and add computers, assign a Recorder version and profile to them, and schedule Recorder installation. See the Spector 360 Administrator's Guide for more help. 1. Start the wizard. If the wizard did not start automatically, select Recording > Manage Computers > Add Computers in the Control Center. Any computers you have already added will not be duplicated. Select "Using this Wizard" and click Next. Otherwise, select Recording Manage Computers. Test communication with a single computer BEFORE or AFTER deployment by using the Computer Diagnostics under Manage Computers. 2. Choose a source for adding computer names. The best sources for building a complete list of network computers are "Active Directory," "Network Discovery," or "Import a list of computer names." Click Next, provide other information as requested by the wizard, and wait for the import SpectorSoft Corporation, All rights reserved. 48

49 Step 2: Deploy Recorders You can use the Add Computers multiple times to build a complete computer list. Computers already in the list will not be added again. You can Windows and Mac computers to the Computers list at the same time, but make sure the Platform designation for each computer is correct. 3. Finalize the list of computers you are adding. At this point you can Add in missing computers and Remove computers you don't want to record. Click Next when the list is ready. The Platform field is required, because the Recorder configuration (Version/Profile) is always platform-dependent. Click the Platform column heading to sort any blank entries to the top of the list, and then either provide a platform selection or remove the computer from the list. A license is required for each computer receiving a Recorder. Be sure you do not deploy computers you don't intend to record! 4. Schedule Recorder installation on Windows computers. Once you approve the list of computers, you can schedule the installation (for Windows computers) and request automatic updates of the Recorder Version. Mac Recorders will need to be installed manually SpectorSoft Corporation, All rights reserved. 49

50 Step 2: Deploy Recorders If the list includes ONLY Mac computers, the option to schedule installation is not available. If the list includes BOTH Windows and Mac computers, you can schedule installation, but the schedule will apply ONLY to Windows computers. If a computer is OFF at the scheduled installation time, the Recorder will be installed when the computer is started. Installation causes computers to restart (a profile setting that can be changed), so schedule it for a time when computers are likely not to be in use. Don't install the Spector Recorder - Select this option to add the computers to the Control Center list without scheduling installation. Schedule installation for - Windows Computers Only. Select this option to set a date and time for Recorder installation on these computers. Click in any field to change it, or select a date from the drop-down calendar. Select a time in the future by at least a few minutes. Automatically update the Spector Recorder - This option applies to ALL computers in the list (Windows and Mac). Choose this option to deliver a new Recorder version to computers automatically when it is available. Don't automatically update the Spector Recorder - Select this option to keep installed Recorder versions they are until you "assign" a new version specifically to computers. 5. Assign a Recording Profile. The behavior and capabilities of a Recorder installation are determined by its Recording Profile. If both Windows and Mac computers are in the list you are creating, select a Windows profile and a Mac profile. Choose: SpectorSoft Corporation, All rights reserved. 50

51 Step 2: Deploy Recorders Don't assign a Recording Profile or Build to these computers - This option is only available if you are NOT scheduling the Recorder for installation. Select to add computers to the list without making a Recorder Profile and Version selection for them. Assign a Recording Profile to these computers - Select this option to assign a Profile to all Windows and to all Macintosh computers in this list. 6. Assign a Recorder Version. A new installation has only one version. Select the latest 7.3 version for both Windows and Mac. You can modify a profile's Client Options so that an immediate restart does not occur. Instead, the installation will be complete when users themselves restart their computers. See the Administrator's Guide for complete information about profiles. Deploy manually to Mac computers Once computers have been added to the list, File > Manual Setup File in the Control Center to build an Macintosh Manual Setup File, as described in Deploy to a Macintosh Computer. Use the single Setup file to install on each Mac you want to record. You will be able to manage Mac Recorders from the Control Center following successful installation. Verify deployment and recording Check the Computers list to make sure the Recorder is "Installed" and "Recording." See Verify Deployment and Recording, and if you have problems refer to Troubleshoot Recorder Installation and the extensive information in the Administrator's Guide. 7. Finish the wizard. When you click Finish, the computers are added to the Control Center's Computer list. At the scheduled installation time, the Recorder software will be installed and when the computer restarts, the Recorder will be capturing activity SpectorSoft Corporation, All rights reserved. 51

52 Options - Configuration Recorder Requirements The Spector 360 Recorder installed on a computer requires network communication with the Primary Server, Control Center Server, Data Vault Server, and Web Filter Server. New users should attempt to successfully install a Recorder on one or two computers before deploying to all computers. Each Recorder installation requires: Platform Windows OS Requirements 32-bit or 64-bit system: - Windows XP - Windows Vista - Windows 7 - Server Server MB free disk space per day. File and Printer Sharing enabled. Registry Services enabled. (C$) Administrative share access. TCP/IP Network connection to servers. Port 2468 (TCP) used to listen for the CCS Options - Configuration How the Spector 360 Components Work Platform Mac OS All Platforms Requirements System with Intel processor: - Mac OS X 10.5 (Leopard) - Mac OS X 10.6 (Snow Leopard) - Mac OS X Lion 5-50 MB free disk space per day. Local Mac Admin login credentials to install. "Parental Controls" turned OFF or set to allow this product. TCP/IP Network connection to servers Port 2468 (TCP) used to listen for the CCS. 1 license for each Client Recorder installed. Spector 360 attempts to enable Registry Services and other required Windows services when it installs the client. Computer Diagnostics are provided in the Control Center to help you determine whether or not a computer meets requirements. The Recorder contacts the Primary Server for licensing and will not operate if it does not receive its licensing. If you want to install the Recorder on 100 computers, you need to have purchased 100 licenses. If you have a multiuser network (Citrix or Remote Desktop/Terminal Services) you must purchase a license for each user. To purchase additional licenses, click here. application. The Client component is the Spector 360 Recorder, which is deployed to and records activity at network computers. You will manage both Servers and Clients from the Spector 360 Control Center application. Server and Client components The Spector 360 Server components include a central Database and Servers (Windows services), a Control Center application, and a Dashboard SpectorSoft Corporation, All rights reserved. 52

53 Options - Configuration One Spector 360 Database instance is installed. It includes a set of databases, the Database Server, and an additional Job Agent service. One central File Storage location contains files associated with database records. Database & File Storage Spector 360 installs with Microsoft SQL Server 2005 Express or Standard. The Spector 360 Database is a SQL Server instance that stores recorded activity. The Spector 360 Database is actually several databases. It also stores Web Filtering rules, Event Alerts, Spector 360 user accounts, and other configuration information. You will manage the databases from a Spector 360 Control Center application on the Database computer. The File Storage Location, external to the Database (by default located at C:\Spector360Data), holds Attachment and Screen Snapshot files associated with event data in the STORAGE database. The File Storage folder should be on the same computer as the Database, although it may be on a separate hard drive. Control Center Server A single Control Center Server (CCS) relays instructions from the Control Center to other network computers. This service must be logged in with Administrator-user privileges on all Spector 360 computers to handle remote configuration and installation of the Recorder. The CCS listens for status updates from and is able to stop and start all Servers and Recorders. When changes to Recorder configuration are made at the Control Center, the CCS delivers them when it "checks in," by default SpectorSoft Corporation, All rights reserved. 53

54 Options - Configuration every 5 minutes. If a Recorder fails to check in on time, it is highlighted in the Computer list. Spector 360 Database. One central CCS is installed with a Control Center. Primary Server The Primary Server communicates with all Spector 360 Recorders to provide licensing and software updates. A Recorder will not operate properly unless it has a license and can establish network connection to the Primary Server. How does it work? 1. The Data Vault Server receives data from Recorders and delivers it to the DATA VAULT DB, where it is held in "raw" format. 2. If there are attachments or screen snapshot files associated with the data, the Data Vault delivers these to the File Storage folder located at the Base Path (default is C:\Spector360Data ). Attachments are stored in one folder, and snapshots are stored by Domain and User. One Primary Server is installed anywhere on the network. Data Vault Server The Data Vault Server receives recorded activity from Client Recorders, sends Attachment and Screen Snapshot files to the File Storage location, and processes the "raw" recorded data for insertion into the 3. The Data Vault initiates the various "Process DV" jobs. Every few minutes, a Data Vault job runs to process events from a certain type of activity in the DATA VAULT DB and insert them into the active STORAGE Database. The STORAGE database contains records of data for each computer or user and can be queried by the Dashboard Multiple Data Vaults can be used to deliver data to the Database. Web Filter Server OPTIONAL. The Web Filter Server (WFS) enforces Web Filtering rules across the Spector 360 network. Before accessing the Internet, recorded computers with filtering enabled query the WFS, which applies filtering rules stored in the Spector 360 Database SpectorSoft Corporation, All rights reserved. 54

55 Options - Configuration access a single, central Spector 360 Database. See the Spector 360 Dashboard Guide to learn how to review, analyze, and report on Spector 360 data. The Client Recorder When Server Web Filtering is on, additional "categories" are added to recorded web site data (such as Shopping, Entertainment, or Finance), which can enhance Dashboard queries. If you will not be using Spector 360 Web Filtering, there is no need to install this component. Hidden Spector 360 Recorder software automatically captures activity on a computer where it is installed. It takes snapshots of screens, captures , chat and instant messaging, keystrokes, web sites visited, programs used, network connections made, documents transferred, and log on/off times. The Recorder automatically uploads its recorded data files (containing "event" records) to the Data Vault Server at regular intervals. Multiple Web Filter Servers and be used to handle client Internet requests. Control Center (application) The Spector 360 Control Center manages Recorders, Servers, the Database, and Web Filtering and Event Alert policies. A Control Center must be installed with the CCS and Database. If these are on separate computers, install a Control Center on each. You can install as many Control Centers as needed. All Control Centers communicate with one, centralized CCS. Spector 360 login accounts can be set with access to specific areas of Control Center and Dashboard functionality. Dashboard (application) The Dashboard allows users to query the recorded data for display in charts and reports. The Dashboard uses the SQL Server to query the Database by date, time, user, computer, Web Filtering category, and other criteria. Multiple Dashboard applications can be installed. All Dashboards More about the Recorder The Recorder checks in with the CCS every 5 minutes (or as configured) to report computer status and receive instructions and updates. The Control Center sends instructions via the CCS to the Recorder (at port 2468). 2. Once every 4 minutes (or as configured), the Recorder attempts to upload its activity files to the designated Data Vault Server. If the Client Service cannot make contact with the Data Vault Server, the recorded data remains on the local computer until a maximum number days have passed or a storage limit is reached. If a maximum limit is reached (for example, the computer is offline for several weeks), the Recorder begins deleting the oldest data. When the Client Service makes contact with the Data Vault, the transmission lasts a maximum of 30 seconds. Any remaining events are transmitted to the Data Vault on subsequent connections. The Recorder would only reach this 30-threshold if it has been SpectorSoft Corporation, All rights reserved. 55

56 Options - Configuration disconnected from the Data Vault for a period of time and has accumulated a large number of recorded events in the local Data File. You can control when the Recorder "pushes" data to the Data Vault in the Recorder Profile. 3. After a successful upload, the Recorder deletes the data from the local hard drive. Single Server Requirements How it works To get started, install all Spector 360 Setup components on one computer. You can always distribute components later if there are issues (see Distributed Servers). Use the Quick Install or Custom Install to set up a single-server Spector 360 installation. Because all components are on one machine, all servers except the Control Center Server (CCS) can operate under the Local System Account. Communication problems are unlikely. The CCS, however, must operate under an account with administrator privileges on all computers being recorded. Requirements The Database presents the greatest disk space concern. As far as other Servers are concerned, the more users recorded and the more activity occurring on computers, the busier they will be. For additional information, see Estimate the Data Size SpectorSoft Corporation, All rights reserved. 56

57 Options - Configuration A Server computer should have: Static IP address NTFS file system Firewall exceptions for ports used (see below). Recommended OS Hardware Clients Server 2003 Server Dual-core processors 500 GB disk space 2 GB+ RAM Gigabit Ethernet network Clients Server 2003 Server Quad-core processors 500+ GB disk space 4-6 GB RAM Gigabit Ethernet network 100+ Clients Server 2003 Server Quad-core processors 500+ GB disk space 6-8 GB RAM Gigabit Ethernet network Microsoft SQL Server 2005 depends on the features of an NTFS file system. Make sure the computer OS where you install the Spector 360 Database uses NTFS. The FAT32 file system is NOT supported. Recommended OS Hardware Quick Start Evaluation Windows 7 Windows Vista Windows XP Pro 1 Dual-core processor 60 GB disk space 1 GB+ RAM Server 2003 Server 2008 Up to 100 Clients Windows 7 Windows Vista Windows XP Pro Server 2003 Server Dual-core processor 100 GB disk space 2 GB+ RAM Gigabit Ethernet network The amount of hard disk space consumed will depend on the number of computers recorded and the amount of user activity. See Estimate the Data Size. Be sure to set up automatic Space Management following installation if you plan to go forward with monitoring. The Setup automatically creates Windows firewall exceptions for Spector 360 server ports. Make sure you address other firewall concerns or port conflicts SpectorSoft Corporation, All rights reserved. 57

58 Options - Configuration Ports used The following ports are used by default. The Spector 360 Setup program automatically sets Windows firewall exceptions at these ports. You can change the ports used from the Control Center Servers view. Port (TCP) by the Data Vault service to receive Recorder data Port (TCP) by Primary Server for Recorder licensing Port (TCP and UDP) by the Control Center Server to manage Recorders Port (TCP and UDP) by the Web Filter Server to intercept client web requests Port 1434 (UDP) by the Spector 360 SQL Server for connection Internet Access Although Spector 360 components do NOT require Internet access, running Spector 360 Setup from a computer with Internet access allows the necessary downloads and immediate registration. If the Control Center application has Internet access, you can download software updates for easy distribution to computers. Distributed Servers The issues Reasons for distributing servers to computers across a network: Conserve disk space by installing the Database on a separate computer Large installation base requires additional servers Improve database performance by separating the WFS Improve database performance with multiple DVs Multiple office locations require additional servers Options for distribution A single database allows data to be accessed, aggregated, and interpreted for the entire network from any Dashboard. The Database requires a centralized File Storage system from which to draw Screen Snapshots and Attachments (if attachments are being captured). A single Primary Server licenses all recorded computers for a single serial number. Special circumstances may require more than one Primary Server SpectorSoft Corporation, All rights reserved. 58

59 Options - Configuration Dashboard application Data Vault Web Filter Server It's possible to distribute servers to other computers during a Custom Setup. If you are installing a Database, run the Setup at the computer where you plan to install. See also: A single CCS allows all Recorders on the network to be managed from one Control Center. See Branch Offices and Remote Employees for solving these problems. Deploy for Remote Employees Deploy to Branch Offices How it works Most customers start by installing the base components on one computer. After testing the installation, they move (uninstall and reinstall) servers to other computers. These components can be on separate computers, using Component Install: SQL Server + Database + File Storage + Control Center application Control Center Server + Control Center application Primary Server Data Vault Server Web Filter Server Dashboard application Control Center application These components can be installed on multiple computers: Control Center application SpectorSoft Corporation, All rights reserved. 59

60 Options - Configuration The Component Install option allows you to install each component separately. Always install a Database first. It's possible to direct the Data Vault (DV) and Web Filter Server (WFS) installations to multiple computers from the Setup, or by using a command line installation. When Server components are on separate computers, communication and privileges are essential. You may want to define one or more Windows Network accounts to be used specifically by the services requiring access. Service account credentials The services need access to the following computers: SQL Server needs access to the Database computer Web Filter Server needs access to the Database computer Data Vault needs access to the Database computer CCS needs access to ALL COMPONENTS Access to computers or folders on computers is defined by the Windows account the service runs under. Path) to a separate hard drive on this computer to prevent disk space issues. See Estimate the Database Size. Requires Windows 32-bit or 64-bit systems OS Requirements Database Computer Windows XP Professional Windows Vista Windows 7 Recommended for 100+ Clients: Server 2003 Server 2008 Install MS SQL Server only on a LOCAL, fixed, hard drive (run Spector 360 Setup at the Database computer) Static IP Address Computer is always ON NTFS file system; FAT32 file system is NOT supported Database credentials All services except the Primary Server require access not only to the Database computer, but to the SQL Server instance. You can use the Windows account assigned to the service as a Database login, or you can specify separate SQL Server login accounts for each service. Your choices during Setup will automatically create the appropriate Database login for the service. Requirements for a Database-only installation A Database computer, including SQL Server and File Storage has the following requirements. You may want to direct the File Storage (Base Database Disk Space File Storage Disk space 4 GB - SQL Server 2005 Express or Standard 40 GB - Install the Spector 360 Databases 56 MB - Install a Control Center Additional free disk space to support: 100 GB (up to 25 clients) 200 GB (up to 50 clients) 500 GB (up to 100 clients) See Estimate the Database Size MB per user, per month, for the File Storage location. See Estimate the Database Size SpectorSoft Corporation, All rights reserved. 60

61 Options - Configuration Requires Database Computer Network TCP/IP Network connection to Servers Firewall Exception at Port 1434 (UDP) As needed, Windows Firewall exceptions are automatically created on Setup. Control Center A Control Center application (not necessarily the CCS) must be installed on the Database computer for Database Management purposes. You will receive a warning message if you attempt to install the SQL Server to a remote network, RAM, or removable drive. If the Setup program cannot determine the drive type, installation will not be allowed. Control Center Server Only The Control Center Server (CCS) requires direct network connection to all Servers and Client Recorders. The CCS has the following requirements: Requires Windows 32-bit or 64-bit systems Computer Requirements Disk Space Control Center Server Computer Windows XP Professional Windows Vista Windows 7 Server 2003 Server 2008 Static IP address Computer is always on 1 MB - for the CCS. 56 MB - for a Control Center. The Control Center requires.net Framework, if not installed would an additional 280 MB (x86) or 610 MB (x64). Network Service Requirements Direct network access to each client computer. Direct network access to all other Servers. Firewall Exception at IP port (TCP and UDP) to communicate with computers for Recorder installation and configuration; a Windows Firewall exception is created during Setup, as needed. Administrator user credentials to manage all other Spector 360 computers. CCS credentials for Read/Write access to the Database is provided on Setup, using the Network Account you provide SpectorSoft Corporation, All rights reserved. 61

62 Options - Configuration Requires Control Center Primary Server Only Control Center Server Computer A Control Center application must be installed on the CCS computer. The Primary Server requires direct network connection to all Client Recorders. One Primary Server can manage up to 10,000 Client Recorder licenses. Requires Windows 32-bit or 64- bit systems Computer Requirements Disk Space Network Service Requirements Primary Server Computer Windows XP Professional Windows Vista Windows 7 Server 2003 Server 2008 Static IP address Computer is always on 1 MB - for the Primary Server. Direct network access to each client computer. Direct network access to the CCS. Firewall Exception at IP port to allow Recorders to retrieve licensing; a Windows Firewall exception is created during Setup, as needed. Internet access for registration and updates (optional). Operates under the Local System or other Windows Network account. (No DB access.) If the Primary Server can't communicate with a Recorder, the Recorder will not deliver its recorded data. Web Filter Server Only When there are thousands of web sites to filter, you may decide to install the Web Filter Server on its own computer so that web filtering doesn't interfere with other database processing. Multiple Web Filter Servers (WFS) may be installed. Each WFS should use the same Database credentials. Requires Windows 32-bit or 64- bit systems Computer Requirements Disk Space Network Web Filter Server Computer Windows XP Professional Windows Vista Windows 7 Server 2003 Server 2008 Static IP address Computer is always on 1 MB - for the Web Filter Server. Direct network access to each client computer. Direct network access to the CCS. Direct network access to the Database. Firewall Exception at IP port (TCP and UDP) to receive and filter Recorder requests to go online; a Windows Firewall exception is created during Setup, as needed SpectorSoft Corporation, All rights reserved. 62

63 Options - Configuration Requires Web Filter Server Computer Requires Data Vault Computer Service Requirements Service account must have credentials to access the Database computer. The WFS connects to the Spector 360 SQL Server instance using the account you specify during Setup. If you install more than one WFS, use the Recording Profile to direct each client Recorder to the correct server. Data Vault Server When there are many clients to handle or client multiple locations, you may want to install multiple Data Vaults. Each Data Vault should use the same Database credentials. Requires Data Vault Computer Network Service Requirements Direct network access to each client computer. Direct network access to the Database computer. Firewall Exception at IP port to receive recorded events from Recorders; a Windows Firewall exception is created during Setup, as needed. Service account must have Windows credentials to access the Database computer. The Data Vault connects to the Spector 360 SQL Server instance using the account you specify during Setup. Windows 32-bit or 64- bit systems Computer Requirements Disk Space Windows XP Professional Windows Vista Windows 7 Server 2003 Server 2008 Static IP address Computer is always on 205 MB - for the Data Vault Server. Direct Client Recorders to the correct Data Vault from the Recording Profile SpectorSoft Corporation, All rights reserved. 63

64 Options - Configuration SQL Express Setup When SQL Server Standard or Enterprise is required A Spector 360 Setup for fewer than 1,000 computer licenses installs MS SQL Server Express Edition, unless you have requested otherwise. Your Spector 360 Setup package displays the type of Database Setup purchased on the first installation panel. A SQL Server Express Setup requires 32- or 64-bit* Windows 7, Windows Vista, Windows XP Pro, Server 2003, or Server 2008 with NTFS Direct TCP/IP communication with the Control Center Server, Data Vault Servers, Web Filter Servers, Dashboards A Control Center application installed on the same machine About 60 GB free disk space to install and get started. MS SQL Server Standard - about 350 MB STORAGE Database MB LOOKUP Database MB DATA VAULT Database MB Other Databases (ADMIN, AUDITING, CUSTOMER, SEARCH, WFS FILTER, WFS SYSTEM) - 5 GB * The setup automatically queries the system to determine whether 32-bit or 64-bit SQL Server Express should be installed. Working Requirements With 60 GB free disk space, you can run a single-server Spector 360 installation and record a few computers. To record 25 or more computers, you plan on 100 GB free disk space. Even with this amount of disk space available, you must set up Space Management. See Estimate the Data Size and Space Management. SQL Server Standard/Enterprise Setup When SQL Server Standard or Enterprise is required A Spector 360 Setup for 1,000 or more Recorders installs MS SQL Server Standard Edition. You may have specially requested the standard SQL Server, or you may be using a previous purchased SQL Server package. 1. Run the Setup on the computer where to install the Spector 360 SQL Server instance. Your Spector 360 Setup package displays the type of Database Setup purchased on the first installation panel. 2. Follow normal instructions for a Quick, Custom, or Component Install. 3. During the Database Setup: If the Setup includes SQL Server 2005 Standard, it automatically installs SQL Server and configures the Database. If you will be using a previously purchased SQL Server 2005 package, the Setup prompts you to locate SQL Server installation files and then automatically configures the Database. The Setup program checks for required disk space. See Configure the Database for more information. A full SQL Server Setup requires 32- or 64-bit* Windows 7, Windows Vista, Windows XP Pro, Server 2003, or Server 2008 with NTFS Direct TCP/IP communication with the Control Center Server, Data Vault Servers, Web Filter Servers, Dashboards A Control Center application installed on the same machine SpectorSoft Corporation, All rights reserved. 64

65 Options - Configuration About 100 GB free disk space to accommodate 25+ recorded client computers. MS SQL Server Standard - about 350 MB STORAGE Database MB LOOKUP Database MB DATA VAULT Database MB Other Databases (ADMIN, AUDITING, CUSTOMER, SEARCH, WFS FILTER, WFS SYSTEM) - 5 GB * Spector 360 provides SQL Server 2005 Standard, 32-bit edition, for installations with more than 1,000 clients. If you are providing a previously purchased SQL Server (32-bit or 64-bit), make sure it is version 2005 and appropriate for the OS where you are installing. Change the Database size During installation, or following installation from the Control Center's Database Configuration feature, you can change the size of the STORAGE (and related) databases for your Spector 360 instance. A larger database size provides better performance for a large installation base, but requires more disk space. Use this formula: STORAGE * 2 + DATA VAULT DB + 5 GB STORAGE size set at 0-20 GB 4 GB GB 8 GB Greater than 50 GB DATA VAULT DB requires: 16 GB The user-defined STORAGE size applies to both the STORAGE and LOOKUP databases (Size * 2). Note that another STORAGE database of the defined size is automatically created when the active one has been "filled." The DATA VAULT DB must be accommodated based on the userdefined STORAGE size as indicated in the table above. 5 GB should accommodate the other Spector 360 databases. 90 GB EXAMPLE: If you define a STORAGE database size of 25 GB, the minimum disk space free required will be about 63 GB. The STORAGE (and related) databases will expand at the rate of about 3 MB per user, per day. 350 MB - MS SQL Server Standard 25 GB - User-defined STORAGE database 25 GB - LOOKUP database 8 GB - DATA VAULT database (see table above) 5 GB - Other 360 databases 63.5 GB Approximate Total, before data collection. Requirements for 100+ users for 1 month would be around 500 GB. Working requirements Once you are actively using Spector 360, more free disk space is required to store data. The rate of disk space used depends on the number of computers recorded and amount of activity recorded. See Estimate the Data Size and Manage the Data for tips on managing disk space. For a single-server, full SQL Server Setup, 100 GB free disk space is strongly recommended to accommodate data. Be careful setting database size! Setting a large user-defined STORAGE database size (e.g., 100 GB) can cause lengthy Backup, Restore, and Archive times, and could slow down Dashboard searches and queries. You can use the Control Center SpectorSoft Corporation, All rights reserved. 65

66 Options - Configuration (Databases Database Configuration) to change the maximum size of future STORAGE databases. The Spector 360 SQL Server instance by default is set to a maximum of 4096 GB, which you can change from the Control Center following installation. Microsoft SQL Server 2005 depends on the features of an NTFS file system. Make sure the computer OS where you install the Spector 360 Database uses the NTFS and not the FAT32 file system. Requires Disk Space Network Dashboard Computer 56 MB free hard disk space. An additional 280 MB (x86), 610 MB (x64) for Microsoft.NET Framework 2.0, if not installed TCP/IP network connection to the Database computer. Windows login or SQL login privileges to the Spector 360 SQL Server instance. The MS SQL Server installation and the Spector 360 Databases can be installed at different locations, but must be in constant communication. Deploy Dashboards for Managers Dashboard requirements Each Dashboard requires network access to the Spector 360 Database (SQL Server instance). As many Dashboards as needed can be installed on the network. The Dashboard installation requires: Requires Windows 32-bit or 64- bit systems Dashboard Computer Windows XP Pro, Windows Vista, Windows 7, Server 2003, or Server File Storage Share Access (see below) To install, choose Component Install Ports 1111 and 1424 (TCP) are used to receive data. Each Dashboard requires permissions for accessing the File Storage Location where Screen Snapshot and Attachment files are stored. By default, this is the C$ Share on the Database computer. You can change the network share for security. See the Administrator's Guide. Access and run the sp360setup73.exe program from the computer where you want to install the Dashboard. If any components were previously installed on this computer, you will be using Install/Reinstall. Otherwise, choose Component Install. Other Software Microsoft.NET Framework 2.0 (installed by Setup if not found). Select only the Dashboard for installation. Enter your 16-character Spector 360 serial number and click Next. Agree to terms of the license agreement; click Yes SpectorSoft Corporation, All rights reserved. 66

67 Options - Configuration Configure components for installation Database - REQUIRED. Enter the name of the computer where the Database is already installed. Dashboard & Control Center - OPTIONAL. Accept or change the installation path. The default path is C:\Program Files\SpectorSoft\Spector 360 Dashboard. Click Next to check for disk space and begin the installation. Download newer installation files if they are available. The installation is finished when the Setup closes. Windows account or a SQL Server account that you define. Refer to the Administrator's Guide. Database Login management in the Control Center When installing a Dashboard, make sure you are using the same Setup program you used to install the Spector 360 Database. The Dashboard accesses the Database via a TCP/IP connection. If it needs to retrieve snapshot or attachment information, it attempts to connect to the appropriate share using the context of the user currently logged on to Windows. Test the Dashboard Start the Dashboard by selecting Start > All Programs > Spector 360 > Spector 360 Dashboard. At the startup splash screen, location your Spector 360 Database instance, computer\spector360, and log in as SA. Set up sharing of the file storage location To provide Dashboard access to the file storage location where snapshots and attachments are stored (C:\Spector360Data ), Spector 360 automatically uses C$ share for all Dashboard users. For better security, create a share for your file storage location and add this Dashboard Share to the Control Center. The Control Center will automatically apply this share to all installed Dashboards on the network. Database Configuration of File Storage in the Control Center Create a login for each Dashboard user From the Dashboard (Management) or Control Center (Database > Manage Database Logins) you can create a Database login for each user, using their SpectorSoft Corporation, All rights reserved. 67

68 Options - Configuration Deploy Control Centers for Administrators Requirements for a Control Center Each Control Center requires network access to the Control Center Server and (if Database login is required) permission to access the Spector 360 SQL Server instance. As many Control Centers as needed can be installed on the network. The Control Center installation requires: Requires Control Center Computer To install, choose Component Install Access and run the sp360setup73.exe program from the computer where you want to install the Control Center. If any components were previously installed on this computer, you will be using Install/Reinstall. Otherwise, choose Component Install. Select only the Control Center for installation. Enter your 16-character Spector 360 serial number and click Next. Agree to terms of the license agreement; click Yes. The Spector 360 servers should already be installed on the network! Windows 32-bit or 64- bit systems Other Software Disk Space Network Windows XP Professional, Windows Vista Windows 7, Server 2003, or Server Microsoft.NET Framework 2.0 (installed by Setup if not found). 56 MB free hard disk space. An additional 280 MB (x86), 610 MB (x64) for Microsoft.NET Framework 2.0, if not installed. Direct network connection to Servers and Client computers. Network access to the SPECTOR360 SQL Server instance and a Database login, if Web Filtering, Event Alerts, or Database Management will be used at this Control Center. Note that the Control Center can be used to configure and install Recorders without Database access. Configure components for installation Database - REQUIRED. Select Database and enter the name of the computer where the Database is already installed and type and confirm the SA password. Control Center Server - REQUIRED. Select Control Center Server and provide the name of the computer where the CCS is already installed. Dashboard & Control Center - OPTIONAL. Accept or change the installation path. The default path is C:\Program Files\SpectorSoft\Spector 360 Control Center. Primary Server - REQUIRED. Select Control Center Server and provide the name of the computer where the Primary Server is already installed. Note that the default location for server components will be THIS computer; change it to the computer where the server is installed SpectorSoft Corporation, All rights reserved. 68

69 Options - Configuration Test the Control Center You can now open the Control Center from the Windows Start menu on this computer. Select Windows Start > All Programs > Spector 360 > Spector 360 Control Center. If no computers have been added, the Manage Computers list is empty. Computers you add are visible to other Control Centers. Create a Database login for users that need it Select the large Recording button from the lower left and Manage Computers from the upper left pane. If computers have been added via another Control Center, the CCS will populate the list of computers in this Control Center. Users who manage computers and recording can open the Control Center without logging in to the Database. However, users who will manage the Database, or set up Web Filtering or Event Alerts, require Database access. Select the large Database button and Manage Database Logins. Create an account for each user. Refer to the Administrator's Guide. For security, give each user his or her own Database login. Select the large Servers button from the lower left pane. All servers should be visible in the right pane SpectorSoft Corporation, All rights reserved. 69

70 Options - Configuration Installing Extra Servers After initial Spector 360 installation, customers who are recording hundreds of clients or use complex filtering can improve Spector 360 performance by adding a Data Vault or Web Filter Server to their configuration. Install servers from the Setup If you are installing or re-installing ALL components, use the Custom Install, starting at the Database computer. You will be able to add multiple Data Vault and Web Filter Servers at other computers on the network from a single Setup run. If you've completed the base installation, use the Component Install and direct the Data Vault or Web Filter Server configuration to computers as desired. You will be required to identify the CCS and Database computers. Install servers from a command line 4. Configure the components you are adding as desired. Give each Web Filter Server the same Database credentials, and give each Data Vault Server the same Database credentials. 5. Follow instructions to complete the installation. The Server icon should appear in the system tray of the computer where it is installed. The CCS automatically attempts to detect the location of all servers, but you may need to ADD the server to the Control Center. To have Client Recorders use the extra Server, you will need to change the Recorder Profile Server Settings and name the extra Server computer. Add the servers to the Control Center Check the Control Center Servers section to make sure new servers are being managed. If the new server is NOT visible, Add it to the Control Center. Another option is to install the servers from a command line. Download the Setup program to a hard drive, if necessary. You can access the Setup at any time from the using your serial number. 1. Select Windows Start > Run and type cmd in the run box and press Enter. At the console prompt, navigate to the folder where the Setup program is saved and use the following command: sp360setup73.exe /e If components are detected on this computer, the Setup program launches to the Reinstall/Uninstall panel. 2. Enter your serial number and agree to the End User License Agreement. Select the Server(s) you wish to install. Click Next. Direct client Recorders to the new servers Finally, direct clients to use the new server. Use Manage Recording Profiles to create a new Recording Profile that references the new server in its General Options Servers panel. 3. Agree to the License Agreement SpectorSoft Corporation, All rights reserved. 70

71 Options - Configuration Deploy for Remote Employees In the Manage Computers list, assign the new profiles (one for Windows and one for Mac, if necessary) to the computers you want to use the new servers. Refer to the Administrator's Guide for complete instructions. You will need a Recording Profile for each added Server. Options To monitor computers that leave the network or operate from a remote location, you need to provide a path for the Recorder to communicate with the Servers. Once communication is established, the Recorder sends data to the central Data Vault Server, requests Internet access from the Web Filter Server, requests licensing from the Primary Server, and is managed and updated by the Control Center Server (CCS). Two methods are possible: The computer connects to the Servers via VPN.When the remote user connects via VPN to the network where Server Components are accessible, the computer is essentially on the same network. No different from local clients, the computer secretly delivers its recorded data and receives instructions while connected via VPN. The CCS has no trouble communicating with and managing the Recorder. The computer connects to the Servers via Internet connection. When a computer connects to a static, external IP address on the network where Servers are accessible, the necessary ports must be forwarded and open to traffic. The Recorder uses its Server Settings to deliver data to the central Data Vault and receives Web Filtering from the WFS over the "raw" Internet connection. However, the CCS will NOT be able to identify or manage the remote Recorder. If that remote computer itself is configured to communicate via a static IP address, you can add the computer's IP address to your Server side DNS or host file to provide name resolution. The Control Center will then be able to fully manage the Recorder SpectorSoft Corporation, All rights reserved. 71

72 Options - Configuration Opening up an external IP address leaves your network vulnerable to hackers for DoS and flood attacks. If you choose this method, it is imperative that you use industry strength, standard Firewall protection! To set up the Recorder for a VPN connection 1. Add the remote computer to the Control Center. It is detected when connected via VPN. Assign a Recording Profile with the same Server Settings used by local network computers. 2. Schedule the installation. When the VPN connection is active, the installation is delivered. A VPN connection allows communication with a remote computer as if it were local, providing: Secure access to Servers and Database at the central location. Ability to install, configure and manage the Recorder from a remote Control Center. Direct contact of the remote Recorder with the Primary Server. Direct delivery of recorded data to the central Data Vault server. Centralized Web Filtering provided by the Web Filter Server (WFS). Port forwarding for Internet connection The Recorder is configured to communicate with each Server component on a specific port. If the computer is connected by VPN, normally all open ports are available. If the computer is connected by Internet, you must configure the Server-side device receiving communication to forward ports requested by the Recorder to the correct port at the computer where each Server is installed. By default, communication is configured at the following ports. Recorder to CCS: (TCP/UDP) Recorder to Data Vault: (TCP) Recorder to Primary Server: (TCP) Recorder to Web Filter Server: (TCP/UDP) CCS to Recorder: 2468 (TCP) To set up communication via the Internet 1. Use a static IP for all Server computers. In the above illustration, Servers are installed on a computer with the static IP address Set up an external static IP for the receiving device. The external IP address receives the communication from roaming Recorders intended for the Servers. In the above illustration, a NAT router device has the address Create a separate profile using the external static IP address. Open the Control Center's Recording Manage Computer Profiles. Use General Options Security to name the profile. This profile will ONLY be used for computers connecting via the Internet. Use the Servers panel to Edit each Server IP field to use the static external IP address ( in the above illustration). Make sure the Port entry for each Server is correct, and save the profile. 4. Install the Recorder manually. If the centralized CCS won t be able to resolve the remote computer name, install the Recorder manually. When you create the Manual Setup File, be sure to assign the profile that specifies the external IP address. 5. Configure port forwarding. Use your NAT or other system configuration interface to forward the ports used by the Recorder (as they are listed in the Server Settings panel) to the appropriate Server port. If possible, forward the Recorder listening port on the client side (at the remote computer) SpectorSoft Corporation, All rights reserved. 72

73 Deploy to Branch Offices General branch office configuration When there are too many remote computers to reasonably provide VPN or Internet access for each. It is possible to monitor branch offices at remote locations through a centralized database. Complete your centralized Spector 360 and SQL Server installation BEFORE setting up a branch office. Install ALL servers and applications EXCEPT the Database A single-server computer requires: - At least 100 GB free hard disk space (depending on data recorded) - Static IP address - Always available - Internet connection Install a Control Center to manage and configure the Recorders Install Recorders with a profile set to use the branch office servers Give the branch server computer a VPN connection to the central server network Spector 360 Recorders require direct connection to the Primary Server, and you can install only one Primary Server under one serial number. To obtain serial numbers for branch offices, contact SpectorSoft. Run the Setup at a branch office 1. Obtain a serial number for the branch office. Be sure to purchase licenses for the number of computers you plan to record. 2. Activate a VPN connection from the local server computer to the central Spector 360 server network. The central servers should be visible on the network via VPN SpectorSoft Corporation, All rights reserved. 73

74 Options - Configuration 3. At the branch office server, use the new serial number to download and run the Spector 360 Setup program. Use the Component Install to install all components EXCEPT the Database. computer name and the path name (by default Spector360Data computer). For example: \\COMPUTER05\Spector360Data 4. Enter the branch office serial number when prompted by the setup. Keep in mind that the Data Vault Server may be handling MB of data per Recorder - every day. Locate the central Spector 360 SQL Server instance The Setup will prompt you to locate the Spector 360 SQL Server instance. Be sure to provide the correct Computer Name for the central Server computer where the Spector 360 Database is installed. Register the branch office serial number Finish the installation and follow normal procedure to register the local branch office serial number and apply an unlock code. Use the SA password to open the Control Center and add the branch office computers to the Control Center Computers list. Enter the SA Password defined for the central Database. Click Next. Install servers under network accounts For each computer, install on a local branch computer. For service accounts, be sure to select an account with network permissions to access the centralized CCS and Database locations. For the Data Vault and Web Filter Server, use the SAME Database connection account you use for centralized servers. For the Data Vault Server, use the SAME centralized Screen Snapshot/ Attachment folder. Reference the central Database Install Recorders Use the Control Center to add branch office computer to the Control Center list and deploy the Recorder. Check the profiles you plan to use to be sure they reference the local servers. Installed Recorders will send data to the local Data Vault, which will deliver it for processing and storage in the central Database and File Storage location SpectorSoft Corporation, All rights reserved. 74

75 Options - Configuration Deploy in a Domain Network Spector 360 was designed for domain networks A managed domain network is already configured for centralized management. After installing the Spector 360 Server Components, you will be able to install the Recorder on network computers from the Control Center. The Control Center Server must have Local Administrator privileges on each computer in order to control the remote computers. Any computer, in turn, must be able to authenticate that the Control Center has Local Administrator privileges before it allows control. If you supply Domain Administrator credentials to the Control Center Server, it will have control, as set by Domain Group Policy, over all aspects of the Recorder installation and administration. Using Active Directory and Spector 360 It's possible to "synch" Active Directory with your Spector 360 installation to make sure all computers are being recorded. See Managing Computers from Active Directory in the Administrator's Guide. Deploy in a Windows Workgroup Spector 360 supports workgroup networks Spector 360 was designed for domain networks, but it's possible to configure a Windows Workgroup for Spector 360 management. To make sure the Control Center Server (CCS) has Administrator privileges on each computer, follow these steps: Define a common Local Administrator at each server and workstation. Check each computer's network and local security policy settings. Run the Setup as described in this guide to install server components. Install the Client Recorder manually, at the computer. Make sure the Control Center Server (CCS) is using the same, Local Administrator credentials you defined at each computer so that it can manage Recorders across the network. The Control Center Server needs credentials! The Control Center Server must have Local Administrator privileges on each computer in order to control the remote computers. Any computer, in turn, must be able to authenticate that the Control Center has Local Administrator privileges before it allows control. During Spector 360 Setup, when asked for CCS network account credentials, you should use the SAME common, local administrator account you defined at each computer. If you do not have a common Administrator defined at each computer, go to each computer you plan to record and follow the next steps. You can change the CCS credentials following installation from the Control Center. Select Servers, right-click Control Center Server and select Modify SpectorSoft Corporation, All rights reserved. 75

76 Options - Configuration Set up a common Windows administrator account Create exactly the same administrator account (user name and password) at each computer as described in Administrator credentials. This account will give Spector 360 access to each computer. The admin005 account is a local administrator on each computer Policies Security Options Network access: Sharing and security for local accounts. Enable this setting for local security: Classic local users authenticate as themselves 3. Make sure the File and Printer Sharing setting is enabled. 4. Make sure C$ Administrative Share is enabled. Install the Client Recorder manually at the computer Instead of installing the computers from the Control Center, you will use the Control Center to create an executable Manual Install file with the configuration you want. Then, launch the Install executable file at each computer. Follow instructions in Installing Manually. Restart the computer following Recorder installation. If a Guest Login prompt appears when Spector 360 connects to the computer, the CCS won t be able to log on as administrator. Change the Local Security Policy to prevent this from happening. It does NOT matter which user is logged on to the network computer as long as the account as described above exists in the local Administrators group on the computer. Make sure each computer belongs to the workgroup 1. While at each computer, use Windows Control Panel System to view the current workgroup settings. If necessary, change settings so that each computer is a member of the same workgroup. 2. If necessary, change the computer's local security policy to allow user authentication. This may or may not be a problem. The steps may be: Control Panel Administrative Tools Local Security Policy Local SpectorSoft Corporation, All rights reserved. 76

77 Options - Configuration Deploy on a Multi-User Network Set up Spector 360 at the server Spector 360 Server Components will operate in a Terminal Server or Citrix environment, provided requirements are met. All users logging on to the network will be recorded. Install the Spector 360 Database and Servers at your server. The same requirements apply as for a normal single-server installation. Use: Quick Install or Custom Install Give the CCS a common administrator account The Control Center Server (CCS) must have Local Administrator privileges on each computer in order to control the remote computers. Any computer, in turn, must be able to authenticate that the Control Center has Local Administrator privileges before it allows control. If computer users log on to: A workgroup - Spector 360 behaves exactly as if it were in a Windows Workgroup environment. Make sure the Control Center Server (CCS) runs under an Administrator account common to all workstations. See Deploy to a Windows Workgroup. A domain - Spector 360 behaves as it would on a Windows Domain Network. Make sure the CCS runs as domain administrator or equivalent before you attempt to deploy the Recorder. See Deploy to a Domain Network. A common Windows account - If all users are assigned a common Windows account, the Spector 360 will have issues managing computers and data. Spector 360 is more useful if each user has his or her own Windows login account. SpectorSoft requires customers using multi-user platforms to purchase a license for each user who will be logging in to the server. A 50-computer license allows for the installation of the Recorder onto a Citrix MetaFrame server configured for 50 unique users. Capture published applications No special procedures are required to capture activity in "Full Desktop" mode. If "Published Applications" are used, follow these steps to modify the Recording Profile at the server computer Recorder: 1. In the Control Center, select Recording > Recording Profiles and create a new Recording Profile or modify the Intial Profile. 2. In the Profile Settings box, select General Options > Client Options. 3. Check Enable Alternative Shell Support. 4. Click Edit to open a box where you can specify the alternate shell that is launched when a user requests a Citrix or Terminal Server published application. NOTE: Clear this option to record applications running under the normal Windows shell. Enter the alternative shell name: wfshell.exe - Citrix Server rdpshell.exe - Windows Terminal Server 5. Click OK to set the alternate shell name. 6. List all computers in the Control Center, and assign a Recorder Profile with this setting to computers. A Recorder will capture sessions directly from a Terminal Server (Microsoft Remote Desktop) or Citrix server where either Full Desktop or "Published Applications" are used SpectorSoft Corporation, All rights reserved. 77

78 Options - Configuration Install a Recorder at the server By installing a Recorder on the server, sessions from a Windows Terminal or Citrix Server (either Full Desktop or "Published Applications") are captured. Add the server computer to the Control Center as described in Deploy to a Windows Computer. Schedule installation for a time the server can restart without interrupting users. Spector 360 Servers and a Client Together? - Yes, you CAN install Spector 360 Server Components and the Client Recorder on the same machine - AFTER the Spector 360 Setup is complete. The servers cannot be installed if any previous SpectorSoft recording software exists on a computer. Simultaneous Users - The Recorder on the server records activity under the login name of the user who performed the activity. This means the Recorder will capture , web sites visited, keystrokes, and all other activities for DOMAIN\SALLY, DOMAIN\PETER and DOMAIN\JIM as they use the terminal services, even when activity occurs simultaneously. Uninstall the Recorder to Upgrade - It will be necessary to uninstall the Recorder before you upgrade or reinstall Servers. Perform upgrades when users will not be at workstations, or when you can prevent activity at the server. Re-install the Recorder at the server computer when the Setup is complete and the upgraded Control Center and Servers have been verified. domain. Create a Manual Setup file to execute at each computer the computers are in a workgroup. To ensure activity recorded at any computer is stored by user name in the Database, enable the Data Vault Server setting, Combine user recordings across computers. (This assumes users have their own Windows account.) Watch ongoing performance Keep track of performance and usage. The more users who connect to the server and are recorded, the more difficult it becomes for the Recorder to take Screen Snapshots for each user every 30 seconds. Use Recorder Profile settings to reduce frequency of (or disable) Screen Snapshots, or consider disabling other activity recording. Install a Recorder at each workstation By installing a Recorder on each workstation in addition to the server, local activity will be captured. For example, web surfing from a local Internet Explorer application would not be captured by a Recorder on the server. Add the workstation computers to the Control Center and schedule them for installation from the Control Center if the computers are on a SpectorSoft Corporation, All rights reserved. 78

79 Options - Space Management Estimate the Database Size The Control Center view of Databases Which type of database installation are you using? The best policy is to test your particular installation with a limited set of users, watch disk space usage, and establish benchmarks. The base SQL Server Database requirements are provided in: SQL Express Setup SQL Server Standard/Enterprise Setup How it works The "Spector 360 Database" actually includes several databases, which are fully described in the Spector 360 Administrator's Guide. As data is received from Recorders, the Data Vault Server sends event records to the currently active STORAGE database. The STORAGE database is where activity recordings are stored. New STORAGE databases are automatically created when a maximum size is reached. The LOOKUP database allows query of the data and grows with the STORAGE database. The DATA VAULT database receives recordings from Spector 360 Recorders before processing them for storage in the STORAGE database and is sized to match the maximum STORAGE size. Other databases (for Alert Profiles, Web Filtering and administrative purposes) do not change in size as data is recorded. The Data Vault sends associated Screen Snapshot and Attachment files (if recorded) to a File Storage Location, by default C:\Spector360Data on the Database computer. Quick numbers How much disk space is required for a single-server Spector 360 installation capable of collecting data? The quick answer using default settings is: 25 Recorders installed - Minimum 100 GB Recorders installed - Minimum 100 GB Recorders installed - Minimum 500 GB More than 100 Recorders installed GB + Ongoing estimating The required hard disk space for effective, ongoing monitoring depends on: The number of computers you are recording The amount of daily activity at computers How much activity recording is requested When using SQL Server Standard or Enterprise, the maximum database size How often you archive or remove STORAGE databases The number of centralized Alerts and Web Filtering rules used SpectorSoft Corporation, All rights reserved. 79

80 Options - Space Management How you choose to capture and manage Screen Snapshot and Attachment files Be sure to activate automatic Database Space Management and regularly monitor disk space used. If the data size exceeds thresholds on the Database computer, Spector 360 will be compromised. See Single Server or Distributed Servers for more about disk space required for component installation. STORAGE Database A newly installed Database has one STORAGE database. When the maximum data size is reached (4 GB for MS SQL Server Express or a userdefined limit for SQL Server Standard/Enterprise), Spector 360 automatically creates a new STORAGE and LOOKUP database. You may end up with several active STORAGE databases. New STORAGE databases continue to accrue until you archive them or set up automatic space management. Most users want to have about a month's worth of non-archived, active data available for effective Dashboard use. Watch the data (Database Statistics) for a week or two to establish your own benchmarks for average daily disk cost per user. Disk cost based on number of computers (default settings) The "per user" rate of database space consumption depends on the number and activity of your users. Roughly, you can estimate a rate of 50 MB per user, per month, for users working an 8-hr day. So, if you are recording 20 average employees, the STORAGE database will receive about 1 GB of recorded data per month. The following formula helps to estimate on-going disk space needs for data storage following installation. This formula assumes a recording period of 8 hours, that each user costs about 3 MB per day (which you should adjust to your benchmarks), and that the "Initial Profile" default settings are used. 3 MB * <users> * <days> = Total Cost Therefore: 3 MB * 30 days * 15 users = 1.35 GB 3 MB * 30 days * 100 users = 9 GB Users Disk Cost per Day Disk Cost per Month MB 1.35 GB MB 9 GB GB 45 GB GB 90 GB GB 450 GB Disk cost based on activity and recording profiles The initial Recording Profile is set to automatically capture: All exchange and Webmail (no attachments) All Web Site Visits All Online Searches All Chat and IM activity All Keystroke Activity All Keyword Alert Activity All Application Activity All Network Activity SpectorSoft Corporation, All rights reserved. 80

81 Options - Space Management All File Transfer Activity Document Tracking of print and CD/DVD activity (complete tracking of Create, Edit, and Delete activity can be enabled) Screen Snapshots (single monitor) at a rate of once every 30 seconds in 4-bit grayscale A user sending dozens of messages generates a higher record count for . A user continuously filling out forms generates a higher record count for Keystrokes. Database Statistics shows events records by activity The size limits and types of attachments captured From the Control Center Database tool, you can: Delete snapshots older than a certain number of days Include snapshots and attachment files with STORAGE archives to preserver them AND free up space Depending on the amount of activity data captured at a computer, the daily total of 3 MB per user may be significantly larger. Screen Snapshots The single largest data point is the Screen Snapshots, actual pictures of the user's screen, taken by default every 30 seconds. The daily per-user storage requirement can drop to as little as 2-3 MB per day if snapshots are disabled and increase to as much as 100 MB or more if they are taken every few seconds or in color with multiple monitors. Grayscale Screen Snapshot viewed from the Dashboard File Storage The File Storage folder collects all Screen Snapshot graphics and Attachment files. These files are associated with event records in the STORAGE database. The folder is usually located on the same computer as the Database. It's entirely possible to give this data storage area its own hard drive so that the disk space it uses does not compromise the active Database. However, employ space management techniques to avoid a full hard drive, lost snapshots, and Database errors. From the Recorder Profile, you can control: How many snapshot "triggers" are used Keyword alerts, if set to trigger snapshots Whether or not attachments are captured Factors that influence storage requirements are: The amount of time the user was active on the computer The resolution of the user's desktop and number of monitors used The color depth the Recorder is configured to record The frequency with which areas of the user's screen change SpectorSoft Corporation, All rights reserved. 81

82 Options - Space Management Multiple monitors being used For example, a user with an 800 x 600 display engaged in computer activity for 2 hours a day, who is being recorded in grey scale, is going to have a significantly lower storage requirement than a user with two 1280 x 1024 displays engaged in activity for 6 hours a day, who is being recorded in color. You can control the frequency and color depth of snapshot files from the Recorder Profile Settings. Be careful to balance your need for detail with the storage needed for requesting additional Triggers and Capture Snapshots on Alert. Number of Computers Snapshot taken every... Disk Cost per Day seconds 120 MB 3.6 GB Disk Cost per Month Attachments If you decide to enable " Attachment Capture and/or Local Document Tracking (at the user's hard drive) you should expect to add significantly to the daily storage requirements. attachment recording is OFF by default, and attachments are not captured. If attachment recording is turned ON in the Recorder Profile Settings, the default maximum size of attachments captured is 100K. Files up to 100K attached to sent or received will be captured and stored in the File Storage location; anything larger will not be captured. You can change the settings to capture ALL attachments, but be aware that file attachments can take up a great deal of disk space seconds 800 MB GB seconds 800 MB 75 GB seconds 2.5 GB 75 GB seconds 4 GB 120 GB seconds SpectorSoft Corporation, All rights reserved. 82

83 Options - Space Management Manage the Data The issues A full or nearly full hard disk causes problems viewing data, prevents new data from being stored, and eventually causes the Spector 360 Database to stop functioning. As recorded activity accrues, you must be prepared to manage the space used by the active databases, by database backups, and by the files stored to be accessed with database records. What happens? 1. Data is recorded. The Recorder records activity and delivers it every 4 minutes to the Data Vault Server. 2. Data is stored in the database. The Data Vault Server delivers recorded event records to the Data Vault DB, where they are temporarily held and then processed and stored in the active STORAGE DB. 3. Associated files are stored in a folder. The Data Vault Server directs recorded Screen Snapshots (ON by default) and Attachments (OFF by default) to the default location (base path) on the Data Vault computer. Screen snapshots are graphic files and Attachments, if on, can be any file type. This File Storage folder can grow extremely large in a short time. new STORAGE database - and a new LOOKUP database - are automatically created. This can go on and on until disk space is used up and new data can no longer be stored! Set up Space Management for your organization in a way that conserves disk space without sacrificing what you need to see. Choose options that will work best for you. Note that once data is archived or removed from the Database, it is no longer included in Dashboard reports. Delete unnecessary backup sets Deal with old backup sets by keeping only the last two sets. Restoring a backup resets the Database to a previous state and overwrites all current data. You will restore a backup ONLY if something bad happens to the computer or the database, or if you decide to MOVE the database. To preserve older data, use Storage database archives. Read about Backups vs. Archives in the Administrator's Guide. In the Control Center, select Database Manage Database Configuration Modify space management settings. 4. Automatic Backups are performed. A Database Backup includes ALL active Spector 360 Databases. By default, an automatic DIFFERENTIAL BACKUP is performed every night and a new FULL BACKUP set is created once a week on the Database computer. Old Backup sets - equivalent to a whole other database - are NOT automatically removed. 5. New STORAGE databases are automatically created. When a STORAGE database becomes full (at 4 GB for SQL Server Express, or at the defined maximum DB size for SQL Server Standard or Enterprise), a SpectorSoft Corporation, All rights reserved. 83

84 Options - Space Management Manage Database Configuration - Modify space management settings The setting below archives any FULL Storage database after 30 days have passed. Manage Database Configuration - Modify space management settings Automatically archive full Storage databases When a Storage database is full, as defined by the maximum database size, a new one is automatically created. All data in active Storage databases is accessible in the Dashboard. Because a database in an SQL Server Express installation is full at about 4 GB and is accompanied by LOOKUP information, four active Storage databases may be costing the installation about 32 GB of disk space. STORAGE DB STORAGE DB STORAGE DB STORAGE DB If your Storage databases are multiplying quickly, consider automatically archiving them to a different location. Although the Dashboard loses instant access to the archived data, you can always move the archive back and restore it to pop that data back in without sacrificing the current data. Change the location of backups and archives By default, backups and archives are stored in a folder in the same SQL Server path as the current Database. You could direct backups to a different local hard drive and archives to another network folder. This would prevent backups and archives from "piling up" on the Database machine. Select Database Manage Database Configuration Modify database settings SpectorSoft Corporation, All rights reserved. 84

85 Options - Space Management Manage Database Configuration - Modify database settings Refer to the Administrator's Guide These are just a few of the space management options available. Refer to the Administrator's Guide for all options and complete instructions. Keep in mind that fewer problems occur when automatic database operations stay on the local computer (if on a different hard drive). You can always manually move backup and archive folders. Be sure to move a folder back to the local Database machine before attempting a restore. Some organizations maintain the File Storage (base path) on its own, local hard drive to ensure access to snapshots. Use Data Vault Server settings to change the base path. Trim snapshots saved in the active storage folder If snapshots are important to you - they provide good legal proof - make sure they are being copied with backups and archives. On the same Modify database settings panel shown above, find and select the Snapshot and Attachment Files options. You can then delete the oldest snapshots to ensure the storage folder will not unexpectedly fill up. Do this on the Modify space management settings panel SpectorSoft Corporation, All rights reserved. 85

86

87 Exclude by Risk Troubleshooting Exclude by risk name, if possible Some antivirus/anti-spyware packages allow you to exclude the SpectorSoft signature "risk name" during scans. The package must list SpectorSoft products as a possible risk that you can exclude, or SpectorSoft software must have already been detected as a "risk." Open the antivirus or anti-spyware control panel and look for their provided list of "risks" to exclude from scanning. The following table shows a few antivirus packages and the risk name to exclude from scanning. See Exclude the Servers from Scanning. Vendor Antivirus Risk Name Symantec/Norto n AntiVirus, Internet Security, Endpoint Spyware.Eblaster Spyware.Eblaster!gen1 Spyware.Spector PC Tools Spyware Doctor Spyware.Eblaster, Application.Spector_Pro_Keylogge r Exclude the Servers from Scanning Looking for SpectorSoft Some antivirus and anti-spyware programs will look for and attempt to remove SpectorSoft files on a computer. Files may be removed during or after Spector 360 installation. To keep all components running properly, exclude Spector 360 server files from scanning. If you use enterprise or endpoint antivirus software, make exclusions at the antivirus server to apply across the network. If antivirus programs are installed locally, make exclusions the server computer. See the Knowledge Base for articles on adjusting McAfee, Symantec, and other popular antivirus programs. Temporarily disable scanning Disable antivirus scanning on the server computer while installing Spector 360 to ensure completion of the Setup. Before re-enabling scanning, exclude the SpectorSoft risk name, if the antivirus software identifies "risks" by signature name (see Exclude Risks) or exclude the installed files by adding them to an "whitelist." This ensures the antivirus software will bypass these files in subsequent scans and not remove or quarantine them. Trend Micro OfficeSca n SPYW_SPECTOR SPYW_SPECTOR.A SPYW_SPECTOR.B Be sure to take steps to exclude Recorder files from scanning before deploying the Recorder! Note that risk names may change as you upgrade your antivirus software. With Symantec and Norton products, the safest approach is to exclude both the risk AND the file names. Exclude installed servers by file name, if possible Open the antivirus or anti-spyware control panel and look for an option that allows you to exclude specific files from scanning. To safeguard your Spector 360 installation, exclude all of the following files. If you wish, exclude the entire SpectorSoft folder instead of listing each file: SpectorSoft Corporation, All rights reserved. 87

88 Troubleshooting SPDataServer.log \..\SpectorSoft\* Example: Exclude files in Windows Defender CNESvrMgr.exe CNECDLL4.dll CENotify.dll msocxushell.dll Installation folders include: C:\Program Files\SpectorSoft C:\Program Files\SpectorSoft\Setup C:\Program Files\SpectorSoft\Spector 360 Exclude the following files in the Spector 360 program folder. C:\Program Files\SpectorSoft\Spector 360 Files below with???? in the filename include the Recorder build number. Use a wildcard, if your antivirus software permits it, because new Recorder versions will be added. Note that the Control Center and Dashboard applications generally are not targets for antivirus detection and therefore their installed files are not included. Files are listed with the default directory structure path; computer directory structures may vary. In the System32 folder on the computer where servers are installed, exclude: C:\Windows\SYSTEM32 SPLicenseManager.exe SPLicenseManager.log SPWebFilterSvr.exe SPWebFilterSvr.log SPDataServer.exe Admin.exe CEAdmin.cfg CEAdmin.dll CEAdminExt.dll CEAdminRT.log CEClientSettings????.cmp CEClientSettings????.dll CENotify.dll CESetup.exe CNECommDll.dll CNESvrMgr.exe ControlCenterSetup.msi ControlCenterXP0.msc DeploymentGuide.chm ExportCtl2.dll FileToSql.exe msnwcfg.ini MSVxRsc.dll NetConfig.xml PostRead360.htm SpectorSoft Corporation, All rights reserved. 88

89 Troubleshooting Read360.htm ReadMe.htm Settings.ini SPCEAdminSvc.exe SPCEAdminSvc.log SPClientSvc????.exe SPDataServer.exe SPDataServer.log SpectorCNE.chm SPLicenseManager.exe SPLicenseManager.log SPSetup.exe SPSetup????.cmp SPSetup????.exe SPSetupMac????.zip spsetup_settings.sds SPUninst.exe SPUninst64.exe SPWebFilterSvr.exe SPWebFilterSvr.log VersionInfo.txt Default files appear in the SDSFiles folder, but other files will be created as Spector 360 is used: C:\Program Files\SpectorSoft\Spector 360 \SDSFiles\*.xml C:\Program Files\SpectorSoft\Spector 360 \SDSFiles\*.sds C:\Program Files\SpectorSoft\Spector 360 \SDSFiles\*.ini Exclude files in the Setup folder: C:\Program Files\SpectorSoft\Setup C:\Program Files\SpectorSoft\Setup\CNE C:\Program Files\SpectorSoft\Setup\360DotNet FileManipCommon.dll FileManipDriver.exe FileManipDriver.exe.config FileToSql.cmp license.txt msdesetup.log msvcr71.dll msxml6_x86.msi osql.exe SACSDataVault.sql.log SACSSqlAgent.sql.log SACSSqlServer.sql.log setup.exe setup.ini setup.rll spctrdb_createaddlogintest.sql spctrdb_createaddlogintest.sql.log SPCTR_ADMIN_Data.cmp SPCTR_ADMIN_Log.cmp SPCTR_CUST_Data.cmp SPCTR_CUST_Log.cmp SPCTR_DB_CreateNewSPs.sql SPCTR_DB_CreateNewSPs.sql.log SPCTR_DB_Install.sql SPCTR_DB_InstalX.sql SPCTR_DB_InstalX.sql.log SPCTR_DB_Preupgrade.sql SPCTR_DB_ProductInfo.sql SPCTR_DB_ProductInfo.sql.log SPCTR_DB_Settings.sql SPCTR_DB_Settings.sql.log SPCTR_DB_TestConnect.sql SPCTR_DB_TestConnect.sql.log SPCTR_DB_TestLogin.sql SPCTR_DB_Uninstall.sql SPCTR_DB_Uninstall.sql.log SPCTR_DB_Upgrade.sql SPCTR_DB_UpgradeFrom2000.sql SpectorSoft Corporation, All rights reserved. 89

90 Troubleshooting SPCTR_DB_UpgradeFrom2000.sql.log SPCTR_DB_UpgradeFrom2K_step2.sql.log SPCTR_DB_UpgradeFrom2K_step3.sql SPCTR_DB_UpgradeFrom2K_step4.sql.log SPCTR_DB_UpgradeFrom2K_step5.sql SPCTR_DB_UpgradeFrom2K_step5.sql.log SPCTR_DB_UpgradeFrom2K_stepX.sql SPCTR_DB_UpgradeFrom2K_stepX.sql.log SpectorAgent.msi Spector360SqlAgent.msi SpectorSoft.Spector360.Logging.cmp SpectorSoft.Spector360.SqlAgentService.SqlAgentInterf ace.cmp SpectorSoft.Spector360.SQLCLR.cmp SpectorSoft.WinService.cmp sqdedev.dll SQLEXPR.EXE sqlresld.dll SqlRun.cab SqlRun01.msi sqlsut.dll sqlunirl.dll usp_migration_detach2kdbs.sql usp_migration_detach2kdbs.sql.log VersionInfo.txt VersionInfo.txtX WFSCategories.cmp Exclude the Recorder from Antivirus Scanning Looking for SpectorSoft If antivirus or anti-spyware software detects and quarantines the Recorder software, the computer may remain "Pending" at the Control Center without ever becoming fully installed. In addition, the user at the computer may be alerted that a "Threat" was found. If you want to record secretly and without interference, you must exclude the Spector 360 client files from scanning. If you use enterprise or endpoint antivirus software, you can make exclusions at the antivirus server to apply across the network. If antivirus programs are installed locally and actively scanning, you must make exclusions at each computer. If you make exclusions locally at a computer, keep in mind that a knowledge-able user may be able to find and remove Recorder files. Exclude by risk name, if possible Some antivirus and anti-spyware programs identify software by a "risk" signature. You may need to look up the software's risk name for SpectorSoft and exclude it. The risk name applies to both Server and Recorder software. See Exclude by Risk. If possible, make exclusions at the antivirus server to apply across the network SpectorSoft Corporation, All rights reserved. 90

91 Troubleshooting Exclude by file name, if possible Exclude files in Windows Defender By default, the Recorder is installed on client computers using fixed filenames. This means each Recorder installation uses the same hidden files at the same locations. If necessary, check the Recording Profile configuration from the Control Center. If the Recorder was already installed on a computer using random filenames - Fixed Filenames - were NOT used, uninstall the Recorder before reinstalling with fixed filenames to make sure the random names are not retained. Temporary Recorder setup files The following files are used to install the Recorder and are removed when installation is complete. Open the antivirus or anti-spyware control panel and look for an option that allows you to exclude specific files from scanning. Enter all files listed below. Refer to the Spector 360 Knowledge Base for instructions on creating a whitelist in Symantec, McAfee, Windows Defender, and other popular programs. Files containing???? (question marks) listed below include the 4-digit Client Recorder Version number being installed. Replace the question marks with the version number being installed, for example, SPClientSVC7454.exe. If possible use a? or * wildcard in your antivirus exclusion. This is a temporary file created for "fresh" installations (not updates) and will change as the Recorder version changes. C:\Windows\SPSetup.exe 32-bit systems, in the System32 folder: C:\Windows\System32\SPClientSVC????.exe C:\Windows\System32\msocxushell2.dll SpectorSoft Corporation, All rights reserved. 91

92 Troubleshooting C:\Windows\System32\CNECommDll.dll C:\Windows\System32\SPSetup.exe C:\Windows\System32\SPSetup64.exe 64-bit systems, in the SysWOW64 folder: C:\Windows\SysWOW64\SPClientSVC????.exe C:\Windows\SysWOW64\msocxushell2.dll C:\Windows\SysWOW64\CNECommDll.dll C:\Windows\SysWOW64\SPSetup.exe C:\Windows\SysWOW64\SPSetup64.exe If you are disabling scanning during Recorder installation, you do NOT need to enter the temporary Recorder Setup files in the whitelist. Files are shown within the default directory structure path; computer directory structures may vary. If your network includes both 32-bit and 64-bit machines, enter all file names once. Some files are used in both 32-bit and 64-bit installations. Spector 360 automatically installs the correct Recorder software on a 32-bit or 64-bit machine. Installed Client Recorder files 32-bit systems, in the System32 folder: C:\Windows\SYSTEM32\cmproxfr.dll C:\Windows\SYSTEM32\nmcpusym.dll C:\Windows\SYSTEM32\secadtr.dll C:\Windows\SYSTEM32\sgvrfy32.exe C:\Windows\SYSTEM32\svrltwp.dll C:\Windows\SYSTEM32\svrlser.dll C:\Windows\SYSTEM32\svrltmgr.dll C:\Windows\SYSTEM32\vdorctrl.dll C:\Windows\SYSTEM32\wshvtx.exe C:\Windows\SYSTEM32\wzodlg32.dll C:\Windows\SYSTEM32\Winipdat\winipdll\svrltwp.dll C:\Windows\SYSTEM32\drivers*\vdorctrl.sys 64-bit systems, in the System32 and SysWOW64 folders C:\Windows\SYSTEM32\cmproxfr.dll C:\Windows\SYSTEM32\nmcpusym.dll C:\Windows\SYSTEM32\sgvrfy32.exe C:\Windows\SYSTEM32\svrltwp.dll C:\Windows\SYSTEM32\svrltmgr.dll C:\Windows\SYSTEM32\vdorctrl.dll C:\Windows\SYSTEM32\drivers*\vdorctrl.sys C:\Windows\SysWOW64\mxcrsc32.exe C:\Windows\SysWOW64\nmcpusym.dll C:\Windows\SysWOW64\secadtr.dll C:\Windows\SysWOW64\svrlser.dll C:\Windows\SysWOW64\svrltmgr.dll C:\Windows\SysWOW64\svrltwp.dll C:\Windows\SysWOW64\wshvtx.exe SpectorSoft Corporation, All rights reserved. 92

93 Troubleshooting C:\Windows\SysWOW64\wzodlg32.dll * Vista/System 7/Server 2008 machines Troubleshoot the Server Installation Setup Error: You do not have enough free disk space When you install the Database, it runs a script and checks available free disk space. If there is not enough free disk space to install (40 GB), you receive an error. EXIT out of the Setup program. You need to free up disk space or install on a different computer. Setup Error: Unable to connect to SQL Server When you are installing or reinstalling the Dashboard, Control Center, or a Server that requires Database access, you must locate the Database computer. If you receive an error saying the Setup is unable to connect to SQL Server: Check the Database computer name entry Check the SA Password entry Make sure the Database computer is online Make sure the current computer has network connection Only the Control Center Server (CCS) is visible If you see only one Server when you select the Control Center Servers tool, it may be the CCS service is not currently running, or your Control Center application cannot find the CCS. 1. Select the Servers tool. 2. Right-click on Control Center and select Modify. If you are unable to modify the CCS, you may have to reinstall it (see below). 3. In the CCS Properties box, click the Start Service button. If you get an error trying to start the CCS, there may be a problem with the network communication to the CCS. 4. If the CCS computer is wrong, use Change to set the correct Computer Name and location. If the port is wrong, change the Port number. Click Use Default Port if you know you are using the defaults and the number may have been wrongly changed. 5. When the service starts, on a Refresh all Servers will be visible in the Control Center. A Server is not running If a Server has stopped running for some reason, Spector 360 cannot operate correctly. You can start each Server from the Control Center Servers tool or from the Server's administration window. 1. Select the Servers tool. 2. Right-click on a Server and select Modify. 3. In the Properties window, click the Start Service button to start the Server. If the Stop Service button appears, the Server is already running. To check the administration window, double-click the Server icon in the System Tray of the computer where the Server is installed. This SpectorSoft Corporation, All rights reserved. 93

94 Troubleshooting window allows you to Start/Stop the service, check the version, communication settings, and other information. A Start Service button is disabled If the Start Service button is visible but disabled when you open a Server Properties box, it means that the Control Center cannot connect to the service control manager on the CCS machine typically a machine offline," connectivity, or permissions issue. 1. Make sure the CCS is running under an account with Administrator privileges on all computers where Spector 360 components are installed. 2. Make sure the CCS machine is running and on the network. 3. Check the Server at the computer where it is installed to determine whether or not the service is running. If necessary, reinstall the CCS. Cannot stop or start the service You attempt to stop or start the Server (using the Stop/Start Service button) and see the "Starting" or "Stopping" progress message followed by the message "Cannot stop [start] SPDataServer service on computer 'COMPUTERNAME'. This operating system message may indicate a problem with the Server, but it also may be that the service actually was stopped or started, after you clicked OK on the error message. The Control Center's connection to the Windows Service Control Manager (SCM) may get hung up by the shutdown request while attempting to stop the service. This may also happen if you stop or start the service from SCM. Check the Server log file If there appears to be a problem with a Server, check its log file for errors or other interruptions. The log file lists all Server actions and events with a date and time stamp. Scroll to the bottom of the log to view the latest events. 1. Select the Servers tool. 2. Right-click on a Server select Modify. 3. In the Properties button click the View Log button. If you contact SpectorSoft Technical Support, they may ask you to send a copy of the log file to troubleshoot a problem. Reinstall the Server If you are unable to modify the Control Center Server, you may need to exit out of the Control Center and use the Spector 360 Setup program to reinstall the Control Center Server. This will not affect other components. Be sure to provide service account credentials that have administrator privileges on other Spector 360 computers. If any Server installation or its computer has become compromised, you can reinstall the Server. Be sure to uninstall the old Primary Server or CCS if your intention is to install it on a new computer. You may need to re-register your serial number and receive a new unlock code. Use the Spector 360 Setup version compatible with your other installed components and Database SpectorSoft Corporation, All rights reserved. 94

95 Troubleshooting Troubleshoot Recorder Installation Check the status in Manage Computers You can tell if the Client Recorder is properly installed from the Recording > Manage Computers view. For each recorded computer you should see: State - Recording Recorder - Installed Recorder Version - Displays a version number Last Recording - Date and time of last data sent Profile Name - Profile settings installed 6. Click Run Diagnostics on the toolbar. 7. In the Computer Diagnostics dialog box, click Start Automatic Diagnostics. 8. Wait for results. The Administrator's Guide provides information on each set of results. Communication ("ping") test failed If you do not see these indicators following installation, or if the Recorder appears to be installed but is not recording, read this section. Run Diagnostics A series of diagnostic tests help to pinpoint problems with Recorder installations. For Macintosh computers, the tests can only determine if communication is possible ("ping") with the Mac. For Windows, the tests are useful for tracking how far a Recorder installation progressed. 4. Select Recording Manage Computers. 5. Select a computer in the right pane to test. It may take up to an hour for a newly deployed Recorder to report its status to the Control Center. Run Computer Diagnostics from the Control Center while logged into Windows under the same account as the CCS. As an administrator, the CCS will attempt to start the necessary Windows services. Computer is "Not Detected" If a computer remains "Not Detected" in the Control Center Computers list, it may be off the network, it may not have the required Windows settings enabled, or the CCS may not have administrator privileges on the computer SpectorSoft Corporation, All rights reserved. 95

96 Troubleshooting Check the CCS service account credentials. If the Server does not have Administrator access to a computer, the installation will fail. Automatic Diagnostics indicate lack of appropriate credentials. Use the Control Center's Servers tool, if necessary, to change the Control Center Server Credentials to an account with Administrator privileges on the remote computer. Check and enable the required Windows settings. If Automatic Diagnostics show the computer cannot receive an installation, you many need to make adjustments to that computer's operating system: Enable the Administrative Share (C$) Enable Remote Registry Services Enable File and Printer Sharing If necessary, perform a manual installation. Some computers may not be able to receive a remote installation. Even if status does not properly appear in the Control Center, you may still be able to receive recorded activity from the computer. See Deploy Manually to a Windows Computer. You may need to wait an hour after Recorder installation for the Computer list to be fully updated. Recorder State remains "Pending" When you request a Recorder installation, the Recorder State immediately becomes "Pending." In a normal Recorder install, (a) a Client Bootstrap service is deployed to the computer, (b) the installation (.sds) file is downloaded and executed, (c) the Client Service is installed while the Bootstrap service is removed, and (d) the computer restarts with the Client Service activated. 1. Refresh the Control Center view. Press F5 to update the Control Center and see if the computer status has changed. 2. Verify the scheduled installation time. If there is a difference in the system clock on this computer and at the target computer, the install may not have happened yet. To check the target computer's time, open a cmd window and type net time \\computername replacing computername with the name of the computer in question. 3. Use Automatic Diagnostics to verify how far the installation progressed. Run the Control Center's Automatic Computer Diagnostics on the computer in question. If the client bootstrap file is found on the computer, follow instructions in the Administrator's Guide before attempting to install again. 4. Make sure antivirus software is not interfering with the installation. Check antivirus software for messages that may indicate discovery of Spector 360. Be sure to Exclude the Recorder from Scanning before attempting to install again. 5. Reinstall the Recorder using the "Push" option. Cancel the current installation command by selecting Cancel Recorder Install/Uninstall. Then select Install the Recorder. Check the "Push" option in the installation dialog box to force a complete software re-installation. Status remains "Pending" until all steps are completed. If you continue to see "Pending" after the Recorder computer restarts (or is manually restarted) and after time passes, try these steps: SpectorSoft Corporation, All rights reserved. 96

97 Troubleshooting 3. If you are unsuccessful, Uninstall and Install the Recorder again. If necessary use a manual install at the computer. Manual uninstall cleanup License is not available If you have check Computer Diagnostics, and the Client Service appears to have been installed, but the computer lists the Recorder as "Not Installed" or there is no entry in the "Last Check-in" field, you may have used all computer licenses for this serial number. Check Manage Computer Licenses, which tells you how many licenses have been assigned and how many are available. If all licenses have been assigned, you need to update your serial number for additional licenses with SpectorSoft. You may then install the Recorder. Recorder is "Not Installed" If a Recorder has a license and version, but appears to be "Not Installed," or if you get a Client Service error, it's possible the Client Service was not properly installed or the Recorder configuration has been corrupted. Run Computer Diagnostics from the Control Center. If the Client Bootstrap Service is running, the installation is in progress. Wait a few minutes and then re-run the diagnostics. 1. Look for "The Client Service is installed." If the result is "Yes," then the Spector Client Bootstrap Service (needed for installation) should already have been removed. 2. Look for "The Client Service is running." If the result is "No," and the service has been installed. Try the Manual diagnostics to start the service. After uninstalling the Recorder from a computer manually (at the computer), information still remains in the Control Center that may interfere with future installations. Return to the Control Center and perform this cleanup procedure to fully remove this Recorder configuration from the Control Center Server (CCS). Note that the computer will remain in the Control Center list until you remove it. 1. At the Control Center, select Recording > Manage Computers. 2. Select the computer you have uninstalled from the Computer list, open the Edit menu, and select Manual Uninstall Cleanup. 3. A message asks if you want to update the CCS configuration for the selected computer after manually uninstalling the Recorder. Click Yes to continue or No to cancel. Recorder is not sending data If the Recorder is successfully installed, but the "Last Recording" column is not updated, or you are not receiving the data you expect: Check your Computer Profile settings. Make sure recording is ON for all activities. Make sure Internet access has not been blocked for the type of recording you expect. Make sure Spector 360 supports recording. There are a few applications, protocols and circumstances where Spector 360 does not record. See the specific topics in this section. Check your antivirus/anti-spyware software. Although SpectorSoft continually improves and updates the Recorder stealth so it will not be detected, software vendors also continually update their "risks." Your software may suddenly begin detecting and SpectorSoft Corporation, All rights reserved. 97

98 Troubleshooting quarantining the Spector 360 Recorder software. Refer to the Spector 360 Deployment Guide for proactive solutions that exclude SpectorSoft from scans and prevent detection from happening in the future. Consult the Knowledge Base for specific instructions in adjusting settings in major antivirus / anti-spyware packages, such as McAfee and Symantec. Consult the online Knowledge Base. Click the link at the bottom of this page and enter your serial number. The Knowledge Base covers issues, workaround, and solutions to a variety of problems SpectorSoft Corporation, All rights reserved. 98

99 Contact Us SpectorSoft Information When sending , please include your company name, city, and state to ensure your request is handled as promptly as possible. Feel free to contact us 24 hours a day, 7 days a week. General SpectorSoft Corporation 1555 Indian River Blvd., B-210 Vero Beach, FL USA Web: U.S. & Canada: International: Sales Contact our sales staff for pre-sales questions, upgrade options, adding computer licenses, and information about the latest SpectorSoft products. Monday - Friday; 9:00 AM to 10:00 PM EST Saturday & Sunday; 10:00 AM to 6:00 PM EST Web inquiries: productinquiry.asp [email protected] Sales Fax: Technical Support Contact SpectorSoft engineers if you have any difficulties at all, 24 hours a day, seven days a week. Web: Request Support [email protected] Suggestions and Comments SpectorSoft is always interested in hearing from our customers. If you would like to make a suggestion that would improve this product or the Online Help, do not hesitate to contact us. Copyrights and Trademarks Copyright Notice Copyright 2012 SpectorSoft Corporation, 1555 Indian River Blvd., B-210, Vero Beach, Florida U.S.A. All rights reserved. Spector 360, Copyright SpectorSoft Corporation. SpectorSoft and Spector are Registered Trademarks of SpectorSoft Corporation. This software includes code under license from Microsoft Corporation Microsoft Corporation. All rights reserved. Other Trademarks Microsoft, Microsoft SQL Server, Microsoft Internet Explorer logo, Microsoft Office Compatible logo, Explorer, Windows, Windows logo, Windows Vista, Windows XP, Windows 7,.NET, Terminal Services, and / or other Microsoft products referenced herein are either registered trademarks or trademarks of Microsoft Corporation in the U.S. and / or other countries. Macintosh and Mac are trademarks of and copyrighted by Apple, Inc. Citrix is a registered trademark of Citrix Systems, Inc. All other trademarks and service marks are the property of their respective owners SpectorSoft Corporation, All rights reserved. 99

100

101 A Antivirus... 7 C Exclude scanning of Recorder Risk names Citrix deployment Computer not detected Contact Control Center Control Center login Control Center Server D Dashboard login Domain network Download... 7 E Enable alternative shell support Exclude by risk Exclude Recorder files F Full desktop M Macintosh Recorder deployment Manual install cleanup Multi-user network Index N Not installed status P Pending status Ports used Primary Server settings Published applications R Recorder installation Deploy to all computers Deploy to Mac Pending status Risk name Run Diagnostics S Single server sp exe... 8 sp360setup73.exe... 8 Spector CNE T Test Recorder W Web Filter Server settings Windows Domain network deployment Recorder deployment Terminal services deployment Windows settings required SpectorSoft Corporation, All rights reserved. 101

102 SpectorSoft Corporation, All rights reserved. 102