Paranet Solutions Network Discovery Client. Paranet Professional Services

Transcription

1 Paranet Solutions Network Discovery Client Paranet Professional Services

2 Contents 1. INTRODUCTION PURPOSE OF THIS DOCUMENT... 3 WHAT S IN THIS DOCUMENT SCANNING INSTRUCTIONS SCREENSHOTS... 5

3 1. Introduction 1.1 Purpose of this Document The purpose of this document is to provide customers with the knowledge on how to run a simple network scan using the proprietary Paranet Solutions client. The scan will generate results in a.zip file that should be returned to Paranet Solutions for processing. Please note: the contents of the zip file cannot be opened by customers. 1.2 What s in this Document The following sections are included in this document: Scanning Instructions: Summarizes key information regarding how to configure the client for accurate scans. Screenshots: Examples of how to properly deliver the resulting zip file to Paranet Solutions for processing.

4 2. Scanning Instructions To generate a scan that contains proper results, customers should first adhere to some basic network scanning best practices. The scanning client that Paranet uses makes use of various technologies for obtaining information, including Remote Registry and Remote WMI. Some best practices to follow include but are not limited to: If Windows Firewall is enabled on the domain: - Enable Windows Firewall: Allow remote administration exception in Group Policy settings. - Add/Define Windows Firewall: define port exceptions enabled: Remote Registry for IP range in Group Policy settings. Otherwise, ensure Windows Firewall is turned off on all machines that are to be scanned. 1. First, obtain the self-extracting installation exe (ParanetDataCollector.exe) file from a Paranet Solutions representative. This will not install the scanner as an application per say, but it will create a folder on the domain controller it s to be executed from. The self-extractor will also launch the scanning wizard to begin the network scan. a. Log into the target domain controller with Administrator privileges. b. Right-click and run-as administrator the self-extracting file to ensure you re running with elevated credentials. (Again, this is a non-invasive file and it s not installed on the domain controller or any other machine.) c. Select NETWORK DATA COLLECTOR and follow the wizard. d. Once the wizard and scans are completed, please save the output zip file to a local directory on the domain controller. (example: C:\temp\Paranet Scans) e. Notify your Paranet representative that the scans are complete. Arrangements will be made for retrieval of the files.

5 3. Screenshots. Enter either the admin credentials or use your own if you re logged in as a domain administrator. Leave the default setting for Gather information for ALL the domains detected. This will ensure proper scanning for the entire network.

6 domain names. External Domains: enter the external domain name(s) of the organization. Typically this is for IP Ranges: by default the wizard will enter the primary LAN IP range it finds. However if your network contains other subnets that the domain controller has access to, please enter them as well.

7 SNMP: Unless you have configured specific SNMP settings on the network devices, leave the default public string active. MBSA: Microsoft Baseline Security Analyzer. If it s not installed, please install it on the domain controller before continuing. After MBSA is verified, select the option for Run MBSA and leave the Patch Analysis unchecked.

8 complete, notify Paranet. Choose the folder where you wish to save the output.zip file. Begin the scans. After the scans are