Configuring and Monitoring Bluecoat AntiVirus

Transcription

1 Configuring and Monitoring Bluecoat AntiVirus eg Enterprise v5.6

2 Restricted Rights Legend The information contained in this document is confidential and subject to change without notice. No part of this document may be reproduced or disclosed to others without the prior permission of eg Innovations, Inc. eg Innovations, Inc. makes no warranty of any kind with regard to the software and documentation, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Trademarks Microsoft Windows, Windows NT, Windows 2000, Windows 2003 and Windows 2008 are either registered trademarks or trademarks of Microsoft Corporation in United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Copyright 2012 eg Innovations, Inc. All rights reserved.

3 Table of Contents CONFIGURING AND MONITORING THE BLUECOAT ANTIVIRUS ADMINISTERING THE EG MANAGER TO MONITOR THE BLUECOAT ANTIVIRUS MONITORING THE BLUECOAT ANTIVIRUS...4 CONCLUSION...5

4 Table of Figures Figure 1.1: Adding a new Bluecoat AntiVirus component...1 Figure 1.2: Viewing the list of unconfigured tests for the Bluecoat Antivirus...2 Figure 1.3: Configuring the AntiVirus Scan Status test...2

5 Configuring and Monitoring the Bluecoat AntiVirus Chapter 1 Configuring and Monitoring the Bluecoat AntiVirus This chapter discusses how to administer and monitor the Bluecoat AntiVirus. 1.1 Administering the eg Manager to Monitor the Bluecoat AntiVirus To achieve this, do the following: 1. Login to the eg administrative interface. 2. Since a Bluecoat AntiVirus cannot be auto-discovered by eg Enterprise, proceed to manually add the component to be monitored. For this, use the Infrastructure -> Components -> Add/Modify menu sequence, pick Bluecoat AntiVirus as the Component type, and click on the Add New Component button. Figure 1.1 will then appear. 3. Specify the details of Host IP and Nick name of the Bluecoat AntiVirus and click the Add button to add the new component. Figure 1.1: Adding a new Bluecoat AntiVirus component 1

6 Configuring and Monitoring the Bluecoat AntiVirus 4. A summary of the new component details will then appear. 5. The Bluecoat AntiVirus so added will be managed automatically by eg Enterprise. Then, click on the Sign out button to exit the eg administrative interface. This will bring up Figure 1.2, where you can view the complete list of unconfigured tests for the added Bluecoat AntiVirus component. Figure 1.2: Viewing the list of unconfigured tests for the Bluecoat Antivirus 6. First, click on the Antivirus Scan Status in Figure 1.3 to configure it. This test reports the scanning status of the Bluecoat AntiVirus. Figure 1.3: Configuring the AntiVirus Scan Status test 7. To configure the test, specify the following in Figure 1.3: TEST PERIOD How often should the test be executed HOST - The host for which the test is to be configured. SNMPPORT The port at which the server exposes its SNMP MIB. The default is 161. TIMEOUT - Specify the duration (in seconds) within which the SNMP query executed by this test should time out in the TIMEOUT text box. The default is 10 seconds. SNMPVERSION By default, the eg agent supports SNMP version 1. Accordingly, the default selection in the SNMPVERSION list is v1. However, if a different SNMP framework is in use in your environment, say SNMP v2 or v3, then select the corresponding option from 2

7 Configuring and Monitoring the Bluecoat AntiVirus this list. SNMPCOMMUNITY The SNMP community name that the test uses to communicate with the server. This parameter is specific to SNMP v1 and v2 only. Therefore, if the SNMPVERSION chosen is v3, then this parameter will not appear. USERNAME This parameter appears only when v3 is selected as the SNMPVERSION. SNMP version 3 (SNMPv3) is an extensible SNMP Framework which supplements the SNMPv2 Framework, by additionally supporting message security, access control, and remote SNMP configuration capabilities. To extract performance statistics from the MIB using the highly secure SNMP v3 protocol, the eg agent has to be configured with the required access privileges in other words, the eg agent should connect to the MIB using the credentials of a user with access permissions to be MIB. Therefore, specify the name of such a user against the USERNAME parameter. AUTHPASS Specify the password that corresponds to the above-mentioned USERNAME. This parameter once again appears only if the SNMPVERSION selected is v3. CONFIRM PASSWORD Confirm the AUTHPASS by retyping it here. AUTHTYPE This parameter too appears only if v3 is selected as the SNMPVERSION. From the AUTHTYPE list box, choose the authentication algorithm using which SNMP v3 converts the specified USERNAME and PASSWORD into a 32-bit format to ensure security of SNMP transactions. You can choose between the following options: o o MD5 Message Digest Algorithm SHA Secure Hash Algorithm ENCRYPTFLAG This flag appears only when v3 is selected as the SNMPVERSION. By default, the eg agent does not encrypt SNMP requests. Accordingly, the ENCRYPTFLAG is set to NO by default. To ensure that SNMP requests sent by the eg agent are encrypted, select the YES option. ENCRYPTTYPE If the ENCRYPTFLAG is set to YES, then you will have to mention the encryption type by selecting an option from the ENCRYPTTYPE list. SNMP v3 supports the following encryption types: o DES Data Encryption Standard o AES Advanced Encryption Standard ENCRYPTPASSWORD Specify the encryption password here. CONFIRM PASSWORD Confirm the encryption password by retyping it here. 8. Click the Update button in Figure 1.3 and finally signout of the administrative interface. 3

8 Configuring and Monitoring the Bluecoat AntiVirus 1.2 Monitoring the Bluecoat AntiVirus For this, do the following: 1. Login as a monitor / supermonitor user. 2. Click on the Components option in the menu bar, and select the Servers option from the Components menu. 3. From the component list page, click on the Bluecoat AntiVirus for which you wish to view measurements. 4

9 Conclusion Chapter 2 Conclusion This document has described in detail the steps for configuring and monitoring the Bluecoat AntiVirus. For details of how to administer and use the eg Enterprise suite of products, refer to the user manuals. We will be adding new measurement capabilities into the future versions of the eg Enterprise suite. If you can identify new capabilities that you would like us to incorporate in the eg Enterprise suite of products, please contact support@eginnovations.com. We look forward to your support and cooperation. Any feedback regarding this manual or any other aspects of the eg Enterprise suite can be forwarded to feedback@eginnovations.com. 5