Rebasoft Auditor Quick Start Guide

Transcription

1 Copyright Rebasoft Limited:

2 Release 2.1, Rev. 1 Copyright Notice Copyright Rebasoft Ltd. All rights reserved. REBASOFT Software, the Rebasoft logo, Rebasoft Auditor are registered trademarks of Rebasoft Ltd in the United Kingdom and other countries. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. All specifications are subject to change without notice. Rebasoft assumes no responsibility for any inaccuracies in this document or for any obligation to update information in this document. Rebasoft reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Disclaimer THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR REBASOFT REPRESENTATIVE FOR A COPY. Copyright Rebasoft Limited:

3 Table of Contents Introduction... 4 Installation and Configuration... 4 Minimum System Requirements...4 Parameters prompted during installation...4 Logging in for the first time (default username & password)... 9 Updating the License Adding a License key Adding devices for polling Grouping devices into sites Configuring Active Directory user lookup Copyright Rebasoft Limited:

4 Introduction This guide is intended to help administrators install and get Rebasoft Auditor running as quickly as possible covering the minimum necessary steps required. The guide explains how to install Auditor, add devices and group them into sites. Once this is done administrators can extend and tune the system, adding user lookup and activating other features. More details on using Auditor and configuring functions can be found in the Administration guide, knowldegebase and other support articles at Installation and Configuration Rebasoft Auditor is provisioned using a simple installer that can be run on Windows Server operating systems. This installer can be used for initial installation, software version upgrades and changes in system parameters. Minimum System Requirements While the hardware required depends on the number of devices to be polled for management reporting, the following requirements can be used as a guideline; the only way to determine requirements is by testing the software s performance in a specific network environment. To this end Rebasoft recommends Auditor be trialled in the target environment to verify this information. Dual core Intel Xeon or AMD similar processor. 2-4GB RAM, although performance will benefit from increased RAM, as data is cached in memory prior to writing to the database. 250 GB SATA 7200rpm+ disk (or greater depending on network size and period of storage). Windows 2003/2008 server or Linux. Java Runtime (JRE) V1.6 (or later) installed. PostgreSQL Internet Explorer V6 or later, Mozilla V3 or later (JavaScript must enabled in the browser) x 1024 pixel screen resolution is recommended for client devices accessing Rebasoft Auditor. Rebasoft Auditor is supported in a VMware environment. Parameters prompted during installation Beyond installation file location and HTTP / HTTPS ports to access the system, Rebasoft Auditor s installer also offers the opportunity to set the number of threads to use. By default, 20 threads is set. Auditor can use these threads to poll devices concurrently. Concurrent threads only get used once Auditor is polling discovered devices. During device discovery, Auditor will use a single thread to avoid duplicate devices being discovered. To start installation, simply execute the installer: Note: Experience with Windows security suggests that the installer be run as the Local Administrator Copyright Rebasoft Limited:

5 1) 2) Click next. Click I Agree to accept the licence agreement. 3) Select components to install and click next. Copyright Rebasoft Limited:

6 4) Note: The Java installer does not permit spaces in the specification of the destination folder Specify installation directory for installation and click next. 1) For threads setting please see Parameters for more details. If the http or https ports entered are already in use by another application, the installation will prompt you to select an alternative port Copyright Rebasoft Limited:

7 Click next (If upgrading the installer will stop the Rebasoft Auditor service) 2) If not installed Rebasoft Auditor will install PostgreSQL and JRE Sometimes, due to windows permissions, postgres will not install. The installer will terminate and a message will request that postgres be installed manually. 7) Copyright Rebasoft Limited:

8 Rebasoft Auditor installs as a system service, a command window should appear during this process 8) Once Rebasoft Auditor installation is complete (administrators can view the details of where files have been installed by clicking the details button) click next.. Copyright Rebasoft Limited:

9 Logging in for the first time (default username & password) Users and administrators can access Rebasoft Auditor from a workstation with a compliant browser by opening the following address: or DNS address of server>:<port> To access Rebasoft Auditor, at the login screen enter the default username and password: Default username = admin Default password = admin We recommend administrators change the default installation password from admin via the Error! Reference source not found. function. Until devices are configured, you will see the message below: Copyright Rebasoft Limited:

10 Updating the License Rebasoft Auditor installed has a 7-day, 2000 interface license embedded. Once this license has expires, Auditor will no longer record information polled to the database. You can obtain a full or extended evaluation key from your reseller. Adding a License key License administration is accessed from the Admin dropdown in the top frame, by clicking the arrow: To add a license, simply cut and paste the license string into the New License box and click load license. The license will validate and confirmation of the system license will be displayed. If the license level is exceeded, Rebasoft Auditor will not collect information from the additional interfaces until a new key is obtained from a Rebasoft Auditor reseller. Note: After applying the license key, the Rebasoft Auditor service must be restarted to activate the new license level and re-enable device polling. Copyright Rebasoft Limited:

11 Note: If an invalid license is applied, or a version mismatch is detected, Rebasoft Auditor will write a message to the Rebasoft Auditor log, located in SYSTEM32 directory and will not perform any further polling until a valid license is loaded Adding devices for polling To start collecting data, Devices administration should be used to configure switches and routers that Rebasoft Auditor should poll. Device admin can be accessed via the admin dropdown & click the arrow: Devices can be added either directly from their IP address or from their assigned DNS name. Administrators can add up to 10 devices via the add device button. To add more than 10 devices, it is advisable to use the bulk loading dialog. The SNMP Community string can be input along with the device, or set centrally see System settings in the administration guide. Copyright Rebasoft Limited:

12 Note: To add a device (or devices) directly to a site, simply select from the site dropdown. If the site selector is none, the device will be added to the All devices site only. To add multiple devices, simply separate with a comma; for example router1, switch1, firewall8 will add 3 devices DNS will resolve the device to the current IP address. Up to 10 devices may be added using this method using IP addresses. To add a range of devices, simply add the start of the range and the end of the range separated with a space; for example will add and scan fifty devices from to For multiple ranges, it is recommended that the bulk load facility is used Devices can be bulk loaded by cutting and pasting lines into the Bulk load dialog. The format of the load is shown below: <ipaddress>:<snmpcommunity>:<sitename> This loads a single IP address per line. If snmpcommunity is omitted, Rebasoft Auditor uses the system defaults in turn to contact the device. If SiteName is omitted, device is added to All devices. The colon ( : ) is a field delimiter. If the site does not currently exist, it will be created dynamically <ipaddress_start> <ipaddress_end>:snmpcommunity:sitename In this case the space between the 2 IP addresses indicates that Rebasoft Auditor should add the range of addresses between the two. The same provisions apply for snmpcommunity & SiteName Copyright Rebasoft Limited:

13 <ipaddress_1>,<ipaddress_2>,<ipaddress_3>:<snmpcommunity>:<sitename> A set of IP addresses separated by commas constitutes a list to be processed. If more than 90 devices are loaded at a time, then the list of devices can be up loaded in a file, the same format rules apply as in single device. Grouping devices into sites Grouping devices together allows administrators to reflect the physical locations of switches and routers in their networks this helps with localising devices, IP and users on the network To access Sites administration, select Sites from the administration dropdown in the top frame and click the arrow: To add a site, simply type a name and click the Add New Site button. Once a site has been added it will appear in the Existing sites list. Administrators can add or remove a device by using the cursor to select a device and add or remove it from the members list. Copyright Rebasoft Limited:

14 Configuring Active Directory user lookup A description of user lookup can be found in the administration guide. The screenshots below show how to configure Auditor with Windows Active Directory authentication systems. User lookup admin is accessible from the dropdown: Note: Windows Authentication 2003/2008 lookup uses the System Security Log as the data source. Auditor collects information from the security event log via remote, read-only WMI queries. Active Directory itself is not queried. Rebasoft recommend creation of a new user with read-only access privileges to the system security event logs. To add a lookup, simply specify a tag this identifies which server Rebasoft Auditor has used for the lookup. Specify the server address, domain name and user ID & password and click add user lookup. Copyright Rebasoft Limited:

15 More information on user lookup, fine-tuning settings and troubleshooting Windows permissions problems can be found at Copyright Rebasoft Limited: