Installatin Guide Installatin Guide Marshal Reprting Cnsle Cntents Intrductin 2 Supprted Installatin Types 2 Hardware Prerequisites 2 Sftware Prerequisites 3 Installatin Prcedures 3 Appendix: Enabling IIS 8 Marshal Reprting Cnsle (MRC) is a server-based tl that allws yu t create reprts n data lgged by MailMarshal SMTP, MailMarshal Exchange, and WebMarshal. Yu can reprt n system activity, threats, and blcked r quarantined items. This dcument applies t MRC 2.5. It prvides infrmatin abut supprted envirnments and prerequisites, as well as instructins fr installatin f the prduct. Fr usage instructins, see the prduct Help. Fr late-breaking infrmatin and change histry, see the Release Ntes included with the prduct. m86security.cm
INTRODUCTION Marshal Reprting Cnsle is a server-based tl that allws yu t create reprts n MailMarshal SMTP. MailMarshal Exchange, and WebMarshal system activity, threats, and blcked r quarantined items. SUPPORTED INSTALLATION TYPES Yu can install Marshal Reprting Cnsle in a number f scenaris. M86 Security suggests type 1 belw as a free slutin fr mst custmers and trial installatins. Type 2 belw can be used by larger rganizatins that have the apprpriate infrastructure and SQL Server licenses. Yu can upgrade seamlessly frm Marshal Reprting Cnsle 2.1 t Marshal Reprting Cnsle 2.5. Fr mre infrmatin abut upgrading, see the Release Ntes. 1. Standalne Server Installatin (SQL Express 2008 R2 Advanced): Install IIS, SQL Express Advanced Editin with Reprting Services and Marshal Reprting Cnsle n a single server. This server culd be the intranet web server. The MailMarshal and/r WebMarshal lgging databases can be hsted n this r anther database server. The MailMarshal Spam Quarantine Management and Web Administratin Cnsle culd be installed n the same server. Advantages: N cst fr SQL Server sftware. Simplified installatin and cnfiguratin (the MRC installer package includes SQL Express 2008 R2 Advanced, and cnfigures MRC t use this instance). Disadvantages: SQL Express des nt supprt abrt f running reprts. SQL Express supprts limited exprt frmats (PDF and Excel nly). SQL Express Advanced must be installed as a package; yu cannt add SQL Reprting Services t an existing SQL Express installatin. (Hwever, it may be pssible t install SQL Express Advanced as a secnd instance n a server that already has SQL Express installed.) Database size is limited t 10 GB. 2. Standalne Server Installatin (SQL Server 2005, 2008, 2008 R2): Install IIS, SQL Server, SQL Reprting Services, and Marshal Reprting Cnsle n a single server. This scenari als applies if yu want t use a pre-existing installatin f SQL Express Advanced Editin. This server culd als hst the MailMarshal and/r WebMarshal lgging databases. This server culd hst ther IIS applicatins such as the MailMarshal Spam Quarantine Management and Web Administratin Cnsle (lad permitting). Advantages: Full range f features. Single SQL server fr all databases. Simplified installatin and cnfiguratin f Reprting Services (when SQL Server and SSRS are installed at the same time, a default cnfiguratin is created). N limitatins n database size. Disadvantages: License required fr SQL Server and SQL Reprting Services. Nte: It may als be pssible t install MRC and SSRS using separate servers fr the main SQL instance and SSRS instance. This scenari wuld nly apply t a large enterprise with existing infrastructure and licenses. HARDWARE PREREQUISITES The fllwing are hardware prerequisites fr the Marshal Reprting Cnsle installatin. Nte that if Reprting Cnsle databases are installed n the same cmputer as the MailMarshal SMTP, MailMarshal Exchange, and/r WebMarshal lgging databases, the requirements fr the prduct databases must als be cnsidered. Fr infrmatin abut MailMarshal and WebMarshal database sizing, see the User Guide fr each prduct. Pentium, 3GHz 2 GB RAM Free disk space t supprt installatin temprary files and databases (10 GB free recmmended) Installatin Guide: Marshal Reprting Cnsle Page 2
If installing standalne, SQL Express requires a minimum f 600 MB f free disk space fr installatin (in additin t database strage space) SOFTWARE PREREQUISITES The fllwing are sftware prerequisites fr the Marshal Reprting Cnsle installatin. Nte that if Reprting Cnsle is installed n the same cmputer as SQL Server, the SQL Server requirements must als be cnsidered. Windws Server 2008 SP2, 32 r 64 bit versins, r Server 2008 R2 (installed as a 32 bit applicatin) Windws 7, 32 r 64 bit versins (installed as a 32 bit applicatin) Windws Vista Business r Ultimate, SP2, 32 r 64 bit versins (installed as a 32 bit applicatin) Windws Server 2003, SP2 r abve (32 bit versins, excluding R2) Windws XP, SP3 r abve (32 bit versins) SQL Server: Mixed Mde authenticatin enabled 2005 SP3, 2005 Express Advanced Editin SP3 2008 SP1, 2008 Express Advanced Editin SP1 2008 R2, 2008 R2 Express Advanced Editin Internet Infrmatin Services 5.1 r abve.net Framewrk 3.5 SP1 The Marshal Reprting Cnsle installer autmatically installs the Micrsft Reprt Viewer. Supprted brwsers (fr client wrkstatins): Internet Explrer 7 r abve Nte: T successfully cnnect t the MRC site using Internet Explrer frm a cmputer running Windws Server 2003 r abve, uninstall Internet Explrer Enhanced Security Cnfiguratin (IEESC) n the cmputer yu are brwsing frm. IEESC blcks active cntent such as the ASP.NET cde used by MRC. This behavir is by design. Adding the MRC site t safe sites may nt reslve all issues created by IEESC. If yu cannt uninstall IEESC, brwse frm anther wrkstatin, r use anther brwser such as Firefx. Yu may als wish t enable Intranet Settings (disabled by default with sme recent Windws service packs) in rder t avid repeated authenticatin prmpts. Firefx 3.6 r abve INSTALLATION PROCEDURES Installatin varies depending n the selected installatin type. Permissins The SQL Reprt Server applicatin requires write access t the Temprary ASP.NET files flder (by default, a path like C:\WINDOWS\Micrsft.NET\Framewrk\V2.0.050727\Temprary ASP.NET Files). The.NET framewrk installer included with SQL Reprting Services crrectly sets this permissin fr the Netwrk Service accunt. SQL Express Advanced als crrectly sets this permissin. Hwever if yu previusly installed.net framewrk, and then install SQL Reprting Services, this permissin may nt be set. If yu encunter an errr referring t permissins n this flder, use Windws Explrer t set the permissin. Fr mre infrmatin, see this File Permissins tpic frm SQL Server Develper Center. Standalne Installatin (SQL Express Advanced) T install Marshal Reprting Cnsle, including SQL Express 2008 R2 Advanced, cmplete the fllwing steps. 1. Obtain the MRC installer (dwnlad frm M86 Security). 2. If necessary, btain.net Framewrk 3.5 SP1 (dwnlad frm Micrsft). Installatin Guide: Marshal Reprting Cnsle Page 3
On the target server: 3. Lg n t the server as an accunt with lcal administratr permissins. 4. Enable IIS (if it is nt already enabled). Fr infrmatin abut enabling IIS n varius Windws versins, see Appendix: Enabling IIS. Include Windws Authenticatin and ASP.NET supprt. 5. Enable Windws Pwer Shell. 6. Install.NET 3.5 SP1. Nte: Yu must enable IIS befre installing the.net framewrk. If yu d nt, SQL Express will nt install crrectly. Fr mre infrmatin and trubleshting help, see M86 Security Knwledge Base article Q12054. 7. Install Marshal Reprting Cnsle. A. On the SQL Server Optins windw, chse t install SQL Server 2008 R2 Express. B. On the SQL Server Passwrd windw, enter and cnfirm a strng passwrd fr the administrative accunt (SA), which will be created during installatin. C. Setup nw prceeds t extract and install SQL Server 2008 R2 Express. The server instance name is MRC_SQLEXPRESS. This prcess can take 15 minutes r lnger. It des nt require additinal input. Nte: If the SQL Server installatin encunters any errrs, it pens a reprt in a new windw. D. Cntinue with the Installatin Lcatin and Ready t Install windws. Setup installs the MRC prgram files. E. On the Impersnate User Details windw, enter the Windws accunt and passwrd that Reprting Cnsle will use fr access t lcal resurces. This shuld be a lcal administratr. If yu plan t add users frm the dmain envirnment, this accunt must als be a dmain administratr. Installatin Guide: Marshal Reprting Cnsle Page 4
F. On the Email Cnfiguratin windw, enter details f an email server that Marshal Reprting Cnsle will use t deliver reprts and administrative messages. Nte: The Sender Email address must be allwed t send mail thrugh the specified server. The address shuld be valid fr delivery and mnitred by an administratr. Yu can enter a user name and passwrd fr SMTP authenticatin, if required by the email server. Click Test t verify the details by sending an email. Click Next t cntinue. G. Setup nw cnnects t SQL Reprting Services and installs the reprts. H. On the final windw f the wizard, accept the defaults t start services and pen the Cnsle in a brwser windw. Tip: See the nte abut Internet Explrer Enhanced Security Cnfiguratin in the Sftware Prerequisites sectin. T cmplete cnfiguratin, yu may need t cnnect frm anther wrkstatin. 8. Cnnect t the Marshal Reprting Cnsle website using an accunt that is an administratr f the server. On the Cnfiguratin>Databases tab, add MailMarshal and/r WebMarshal databases that yu want t reprt n, and users wh can access the website. T learn mre abut the ptins n this tab, see Help. Installatin Guide: Marshal Reprting Cnsle Page 5
Same Server Installatin (SQL Server 2005 r 2008) The detailed instructins in this sectin assume that yu have already installed and cnfigured SQL Server and SQL Reprting Services. Marshal Reprting Cnsle is installed n the same cmputer as SQL Reprting Services. M86 Security has validated the fllwing settings fr SQL and Reprting Services in this scenari: Enable TCP/IP cnnectins t SQL Server. Enable Mixed Mde authenticatin n SQL Server. Enable SQL Server Brwser. This allws the Marshal Reprting Cnsle installer t find the SQL Server. When yu install Reprting Services at the same time as SQL Server, by default the Reprting Services installatin creates apprpriate settings. Yu can review these settings after installatin using Reprting Services Cnfiguratin Manager. Ensure that Reprting Services is initialized befre yu install MRC. On the target server fr Marshal Reprting Cnsle: 1. Install Marshal Reprting Cnsle. On the Setup Type windw, select a Virtual Directry name used t cnnect t the web applicatin. On the Database Server Lcatin windw, select r enter the server name - d nt use (lcal). T specify a named instance, yu can use the frmat servername\instancename. Yu may need t specify the instance if the server includes multiple instances, r if yu are using a pre-existing installatin f SQL Express (by default SQL Express creates an instance named SQLExpress). Enter a SQL username and passwrd. Nte: The user accunt must be allwed t create databases. On the Impersnate User Details windw, enter the Windws accunt and passwrd that Reprting Cnsle will use fr access t lcal resurces. This shuld be a lcal administratr. If yu plan t add users frm the dmain envirnment, this accunt must als be a dmain administratr. Installatin Guide: Marshal Reprting Cnsle Page 6
On the Email Cnfiguratin windw, enter details f an email server that Marshal Reprting Cnsle will use t deliver reprts and administrative messages. Nte: The Sender Email address must be allwed t send mail thrugh the specified server. The address shuld be valid fr delivery and mnitred by an administratr. Yu can enter a user name and passwrd fr SMTP authenticatin, if required by the email server. Click Test t verify the details by sending an email. A. On the SQL Reprt Services windw, enter the web address f the SQL Reprting Services website, and enter a deplyment flder lcatin. If necessary yu can find the path using IIS Manager. Tip: Fr instance, if the name f the server is intranetserver and yu installed SQL Server as the default instance, the entry shuld be http://intranetserver/reprtserver B. On the final windw f the wizard, accept the defaults t start services and pen the Cnsle in a brwser windw. Tip: See the nte abut Internet Explrer Enhanced Security Cnfiguratin in the Sftware Prerequisites sectin. T cmplete cnfiguratin, yu may need t cnnect frm anther wrkstatin. 2. Cnnect t the Marshal Reprting Cnsle website using an accunt that is an administratr f the server. On the Cnfiguratin tab, add MailMarshal SMTP and/r WebMarshal databases that yu want t reprt n, and users wh can access the website. T learn mre abut the ptins n this tab, see Help. Installatin Guide: Marshal Reprting Cnsle Page 7
APPENDIX: ENABLING IIS This sectin briefly utlines the steps and ptins required t enable Internet Infrmatin Services n supprted Windws versins. Windws Server 2008 1. Open Server Manager (Start>Administrative Tls>Server Manager). 2. Expand Rles. 3. Add the Rle Web Server (IIS). 4. On the Select Rle Services windw, in additin t the defaults, add Rle Services ASP.NET and Windws Authenticatin. 5. Cmplete the wizard t enable this cmpnent. Windws Vista 1. Navigate t Start>Cntrl Panel>Prgrams and Features>Turn Windws features n r ff. 2. Select Internet Infrmatin Services. Installatin Guide: Marshal Reprting Cnsle Page 8
3. Expand Internet Infrmatin Services, expand the required feature sets, and select ASP.NET and Windws Authenticatin. 4. Click OK t enable this cmpnent. Windws Server 2003 1. Navigate t Start>Cntrl Panel>Add/Remve prgrams>add/remve Windws cmpnents. 2. Select Applicatin Server (the default limited set f ptins is all that is required). 3. Cmplete the prcess t enable this cmpnent. Windws XP 1. Navigate t Start>Cntrl Panel>Add/Remve prgrams>add/remve Windws cmpnents. Installatin Guide: Marshal Reprting Cnsle Page 9
2. Select Internet Infrmatin Services (the default limited set f ptins is all that is required). 3. Cmplete the prcess t enable this cmpnent. Installatin Guide: Marshal Reprting Cnsle Page 10
ABOUT M86 SECURITY M86 Security is a glbal prvider f Web and messaging security prducts, delivering cmprehensive prtectin t mre than 20,000 custmers and ver 16 millin users wrldwide. As ne f the largest independent internet security cmpanies, we have the expertise, prduct breadth and technlgy t prtect rganizatins frm bth current and emerging threats. Our appliance, sftware and clud-based slutins leverage real-time threat data t practively secure custmers netwrks frm malware and spam; prtect their sensitive infrmatin; and maintain emplyee prductivity. The cmpany is based in Orange, Califrnia with internatinal headquarters in Lndn and ffices wrldwide. Fr mre infrmatin abut M86 Security, please visit www.m86security.cm. TRY BEFORE YOU BUY M86 Security ffers free prduct trials and evaluatins. Simply cntact us r visit www.m86security.cm/dwnlads Crprate Headquarters 828 West Taft Avenue Orange, CA 92865 United States Phne: +1 (714) 282-6111 Fax: +1 (714) 282-6116 Internatinal Headquarters Renaissance 2200 Basing View, Basingstke Hampshire RG21 4EQ United Kingdm Phne: +44 (0) 1256 848080 Fax: +44 (0) 1256 848060 Asia-Pacific Millennium Centre, Bldg C, Level 1 600 Great Suth Rad Ellerslie, Auckland, 1051 New Zealand Phne: +64 (0) 9 984 5700 Fax: +64 (0) 9 984 5720 Versin 03.29.11 Cpyright 2011 M86 Security. All rights reserved. M86 Security is a registered trademark f M86 Security. All ther prduct and cmpany names mentined herein are trademarks r registered trademarks f their respective cmpanies.