Skybox Security Appliance 8000 Manuel utilisateur

Skybox Appliance 8000

Quick Start Guide

11.4.100

CentOS Linux release 7.9.2009 (Core)

Skybox Security, Inc. | 2077 Gateway Place, Suite 200, San Jose, CA 95110 USA | +1 866 675 9269 | skyboxsecurity.com

Skybox version 11.4.100 2

reserved.

Due to continued product development, the information contained in this document may

change without notice. The information and intellectual property contained herein are

confidential and remain the exclusive intellectual property of Skybox Security. If you find any

problems in the documentation, please report them to us in writing. Skybox Security does not

warrant that this document is error-free.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in

any form or by any means—electronic, mechanical, photocopying, recording, or otherwise—

without the prior written permission of Skybox Security.

Skybox®, Skybox® Security, Skybox Firewall Assurance, Skybox Network Assurance, Skybox

Vulnerability Control, Skybox Threat Manager, Skybox Change Manager, Skybox Appliance

5500/6000/7000/8000/8050, and the Skybox Security logo are either registered trademarks or

trademarks of Skybox Security, Inc., in the United States and/or other countries. All other

trademarks are the property of their respective owners.

Skybox version 11.4.100 3

Contents

Contents 3

Overview 5

Basic architecture 5

Related documentation 5

Skybox Appliance specifications 1

Before you open the box 1

What’s in the box 1

Physical specifications 1

Environmental specifications 2

MTBF estimates for Skybox Appliance 3

Front panel 3

Back panel connectors 5

File system partitions 5

Setting up Skybox Appliance 6

Hardware installation 6

Starting Skybox Appliance 6

System configuration 7

What’s next 11

Configuring the Appliance 12

Configuration and management options 12

Setting up network interface bonding 13

Setting up SNMP configuration 15

RADIUS authentication 16

LDAP authentication 17

Changing the TLS version 19

Sending CentOS logs to a remote syslog server 20

Customizing the syslog server 21

Setting up TCP and UDP listeners 21

Working with syslog files 21

Skybox Manager Installation 23

Skybox Manager system requirements 23

Installing Skybox Manager 23

Upgrading Skybox Manager 23

Updating the operating system on Skybox Appliance 25

ISO burning 27

Skybox Appliance 8000 Quick Start Guide

Skybox version 11.4.100 4

SSH hardening 28

Firmware updates for Skybox Appliance 29

Checking your firmware revision via the console 29

Checking your firmware revision via RMM 29

Preparing to update 31

Updating via the console 32

Updating via RMM 33

Adding your own certificate 42

Exporting the Server certificate and private key from the Java keystore 43

Restoring the Appliance to factory defaults 45

Monitoring SNMP 46

Troubleshooting 48

Wiping the hard disk drive 49

CIS benchmarks for CentOS 7 50

Regulatory and safety information 58

Product regulatory compliance 58

Regulatory compliance markings 59

Electromagnetic compatibility notices for the server board 61

Skybox version 11.4.100 5

Chapter 1

Overview

Skybox® Appliance is a hardware solution that enables you to deploy Skybox without the

burden of maintaining your own server.

Skybox® is an Automated Risk and Compliance Management (ARCM) platform that helps

enterprise IT departments to discover and resolve potential security and compliance risks

before they impact your organization.

Skybox is a multi-tiered platform. Skybox Appliance runs the Skybox Server and users run

Skybox Managers (clients) that connect to the Skybox Server over the network. Skybox also

runs an additional Skybox component, the Skybox Collector, which connects to data sources

and imports the data to the Skybox Server.

The Skybox Server and Skybox Collector are preinstalled on Skybox Appliance and run at

startup.

Basic architecture

The Skybox platform consists of a 3-tiered architecture with a centralized server (Skybox

Server), data collectors (Skybox Collectors), and a user interface (Skybox Manager). Skybox

can be scaled to suit the complexity and size of any infrastructure.

See the Skybox architecture topic in the

Skybox Installation and Administration Guide

Related documentation includes:

lSkybox online help

lSkybox documentation

Note: If you are not using the latest version of Skybox, you can find the documentation for

your version at https://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/<your major version/<your minor version>/Docs. For example,

https://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/11.3/11.3.100/Docs

Skybox version 11.4.100 1

Chapter 2

Skybox Appliance specifications

This chapter contains product specifications and packaging information for your Skybox

Appliance.

Before you open the box

Inspect the shipping carton to ensure that the packaging is not damaged and verify that all

tamper evident seals are intact. Verify that the Appliance serial number, purchase order

number, and FedEx tracking number match the information provided by Skybox Customer

Support.

What’s in the box

The following items are in the shipping carton:

lSkybox Appliance

lRack mount kit

lFront bezel

l2 AC power cords

lRJ45 to DB9 serial console cable

lSkybox Quick Start Guide

l2 DVDs

oSkybox: Installs Skybox on the Appliance; it contains the Skybox software and additional

Appliance documentation

oRestore Appliance: Restores Skybox Appliance to factory settings

Physical specifications

The physical features of Skybox are listed in the following table.

FEATURE DESCRIPTION

Form factor 1U rack mount chassis

Rack dimensions

(H x W x D)

1.7” x 17.25” x 28” (43.2 mm x 438.15 mm x 712 mm)

Weight lSystem weight: 27.1 lb (12.3 kg)

lPackaged weight: 47 lb (21.3 kg)

Power supply 750 W redundant AC

Data storage Embedded Software SATA RAID

lIntel® Rapid Storage Technology enterprise (RSTe) 4.1

Skybox Appliance 8000 Quick Start Guide

Skybox version 11.4.100 2

FEATURE DESCRIPTION

lIntel® Embedded Server RAID Technology 2 (ESRT2) 1.41 with optional

RAID 5 key support

System cooling l6 managed 40 mm dual-rotor system fans

l2 power supply fans

Front panel

features

l1 power button with integrated LED

l1 system ID button with integrated LED

l1 system status LED

l2 NIC LEDs

l1 HDD activity LED

l1 system cold reset button

l2 USB 2.0 / 3.0 connectors

lDB-15 video connector

lBezel with lock support

External I/O

connectors

(back panel)

lDB-15 video connector

lRJ45 serial port A connector

lDedicated RJ45 server management NIC

l2 RJ-45 10000baseT network interfaces (10 GB Ethernet LAN): eno1 and

eno2

l4 RJ-45 1000baseT network interfaces (1 GB Ethernet LAN): eno3, eno4,

ens513f2 and ens51f3

l3 USB 2.0 / 3.0 Ports

Compliant

standards

CE, UL, VCCI, BSMI, GS, ICES-003, FCC Part 15, IEC 60950-1, and more

For detailed information, see Regulatory and safety information.

Environmental specifications

Environmental specifications for Skybox are listed in the following table.

PROPERTY LIMITS

Operating

temperature

lASHRAE Class A2: Continuous Operation. 10ºC to 35ºC (50ºF to 95ºF) with the

maximum rate of change not to exceed 10°C per hour

lASHRAE Class A3: Includes operation up to 40ºC for up to 900 hours per year

lASHRAE Class A4: Includes operation up to 45ºC for up to 90 hours per year

Shipping

temperature

-40°C to +70°C (-40°F to 158°F)

Non-operating

humidity

50% to 90%, non-condensing with a maximum wet bulb of 28°C (at temperatures

from 25°C to 35°C)

Shock lOperating: Half sine, 2 g peak, 11 msec

lUnpackaged: Trapezoidal, 25 g, velocity change is based on packaged weight

lPackaged: ISTA (International Safe Transit Association) Test Procedure 3A

2008

Vibration lUnpackaged: 5 Hz to 500 Hz, 2.20 g RMS random

lPackaged: ISTA (International Safe Transit Association) Test Procedure 3A

Chapter 2 Skybox Appliance specifications

Skybox version 11.4.100 3

PROPERTY LIMITS

2008

ESD lAir Discharge: 12.0 kV

lContact Discharge: 8.0 kV

System cooling

requirement

l2352.3 BTU/hour for 115-volt power

l2302.3 BTU/hour for 220-volt power

MTBF estimates for Skybox Appliance

The estimated mean time between failures (MTBF) and Failures in Time (FIT) for Skybox

Appliances 8000 and 8050 are listed in the following table.

COMPONENT MTBF (HOURS) ESTIMATED FIT

4” x 3.5” 12 Gb Hot Swap Backplane – SATA/SAS 9579145 104

1-Slot Riser Card (per card) 20060338 50

Standard Front Panel 5053932 198

Intel® Server Board S2600WTT 230615 4336

AC 750W Platinum 537582 1860

Fan kit, 6 fans 50799 19685

Total FIT rate 26284

System MTBF hrs @ 40°C 38084

System MTBF hrs @ 35°C 48577

System MTBF hrs @ 25°C 63263

Model: Telcordia Issue 3*

Method 1 Case 3

Duty cycle 100%

Quality Level II

Note: The estimates listed here are for Appliance in 35°C ambient air with a rise of up to 10°C

at the Server Board.

Front panel

The Appliance front panel includes 2 USB connectors, a power button, and LEDs.

Skybox Appliance 8000 Quick Start Guide

Skybox version 11.4.100 4

Power button and LEDs

LETTER FEATURE

A System ID button with integrated LED

B NMI button (recessed; tool required for use)

C NIC1 activity LED

D System cold reset button

E System status LED

F Power button with integrated LED

G Hard drive activity LED

H NIC2 activity LED

Front panel LED functions

LED COLOR /

STATE

DESCRIPTION

Power/Sleep Green / on Power on

Green /

blinking

Sleep

Off Power off

NIC LEDs Green / on Network link but no network activity

Green /

blinking

Network activity

Off No link

System Status Green / on System ready/no alarm

Green /

blinking

System ready but degraded: Redundancy lost (for example, a power

supply or fan failure); non-critical temperature or voltage threshold

reached; battery failure; or predictive power supply failure.

Amber /

Critical Alarm: Critical power modules failure, critical fans failure,

voltage (power supply), critical temperature and voltage

Amber /

blinking

Non-Critical Alarm: Redundant fan failure, redundant power module

failure, non-critical temperature, and voltage

Off Power off: System unplugged

Power on: System powered off and in standby, no prior degraded/non-

critical/critical state

Chapter 2 Skybox Appliance specifications

Skybox version 11.4.100 5

Back panel connectors

The Appliance back panel includes the connectors shown in the following figure.

By default:

lNIC1 / eno1 is enabled and configured as DHCP

lNIC2 / eno2 is enabled and configured as static with the IP address: 192.168.1.1 /24

You can change these values.

File system partitions

By default, the Skybox Appliance file system is partitioned as follows:

l/tmp partition – 5%

l/ (root) partition – 10%

l/var partition – 30%

lSwap partition: The swap size is set to half the total RAM but no more than 8% of total

storage

l/opt partition – remainder of storage

Ce manuel convient aux modèles suivants

Table des matières

Manuels Matériel informatique populaires d'autres marques

EMC2

EMC2 VNX Series Manuel du propriétaire

Panasonic

Panasonic DV0PM20105 Manuel utilisateur

Mitsubishi Electric

Mitsubishi Electric Q81BD-J61BT11 Manuel utilisateur

Gigabyte

Gigabyte B660M DS3H AX DDR4 Manuel utilisateur

Raidon

Raidon iT2300 Manuel utilisateur

National Instruments

National Instruments PXI-8186 Manuel utilisateur

Hauppauge

Hauppauge WinTV-HVR-2250 Manuel utilisateur

Kontron

Kontron CP6002 Manuel utilisateur

Manhattan

Manhattan 702843 Manuel utilisateur

Aphex

Aphex 230 Manuel utilisateur

AMD

AMD Phenom II Manuel d'exploitation

Intel

Intel NUC 12 Pro Manuel utilisateur

dbx

dbx Zone Pro 1260 Manuel utilisateur

Galaxy

Galaxy GHDX2-2430S-24F4D Manuel utilisateur

Intel

Intel AXXRMFBU4 Manuel utilisateur

Kontron

Kontron DIMM-PC/MD Manuel utilisateur

ST X-NUCLEO-SAFEA1B Mode d'emploi

STEINWAY LYNGDORF

STEINWAY LYNGDORF SP-1 Manuel utilisateur