Trustwave M86 Manuel utilisateur

M86 Security Reporter Appliance

Installation Guide

Models: 300, 500, 505, 700, 705, 730, 735

Version 3.2.0

Publication Date: 08.06.12

Trustwave Installation Guide

Legal Notice

decompilation is strictly prohibited without the prior written consent of Trustwave. No part of this docu-

ment may be reproduced in any form or by any means without the prior written authorization of Trust-

wave. While every precaution has been taken in the preparation of this document, Trustwave assumes no

responsibility for errors or omissions. This publication and features described herein are subject to change

without notice.

While the authors have used their best efforts in preparing this document, they make no representation or

warranties with respect to the accuracy or completeness of the contents of this document and specifically

disclaim any implied warranties of merchantability or fitness for a particular purpose. No warranty may be

created or extended by sales representatives or written sales materials. The advice and strategies con-

tained herein may not be suitable for your situation. You should consult with a professional where appro-

priate. Neither the author nor Trustwave shall be liable for any loss of profit or any commercial damages,

including but not limited to direct, indirect, special, incidental, consequential, or other damages.

The most current version of this document may be obtained by contacting:

Trustwave Technical Support:

Phone: +1.800.363.1621

Email: [email protected]

Trademarks

Trustwave and the Trustwave logo are trademarks of Trustwave. Such trademarks shall not be used, cop-

ied, or disseminated in any manner without the prior written permission of Trustwave.

Part# SR-AIG-120806

M86 SECURITY INSTALLATION GUIDE iii

CONTENTS

M86 SR A

PPLIANCE

NTRODUCTION

................................................................1

About this Document...................................................................................................... 2

Conventions Used in this Document. ........................................................................... 3

Security Reporter Models 505, 705 and 735................................................................. 4

Model 505 ................................................................................................................................4

System x3250 M3 Installation and User's Guide ...............................................................4

System x3250 M3 Rack Installation Instructions ...............................................................4

Models 705 and 735 .................................................................................................................4

System x3620 M3 Type 7376 Installation and User’s Guide .............................................4

System x3620 M3 Rack Installation Instructions ...............................................................4

ERVICE

NFORMATION

....................................................................................5

M86 Technical Support Call Procedures. ..................................................................... 5

IBM System Support....................................................................................................... 5

RELIMINARY

ETUP

ROCEDURES

.................................................................6

Unpack the Unit from the Carton................................................................................... 6

Select a Site for the Server............................................................................................. 7

300 Model Server Setup Procedures .......................................................................................7

Set Top Applications ..........................................................................................................7

Optional 1U 2-Unit Tray Kit Applications ...........................................................................7

Rack Mount the Server. .................................................................................................. 8

Rack Setup Precautions ...........................................................................................................8

Rack Mount Instructions for 500 Model Servers ......................................................................9

Rack Setup Suggestions ...................................................................................................9

Install the Inner Slides .......................................................................................................9

Install the Outer Slides ......................................................................................................9

Install the Slide Assemblies to the Rack ..........................................................................10

Install the Chassis into the Rack . ....................................................................................11

Rack Mount Instructions for 700 and 730 Model Servers ......................................................12

Rack Setup Suggestions .................................................................................................12

Identify the Sections of the Rack Rails ............................................................................12

Install the Inner Rails .......................................................................................................13

Install the Outer Rails ......................................................................................................13

Install the Server into the Rack ........................................................................................15

Install the Server into a Telco Rack .................................................................................16

Install the Bezel on the 500, 700, and 730 Model Chassis ....................................................17

Check the Power Supply.............................................................................................. 18

Power Supply Precautions .....................................................................................................18

General Safety Information.......................................................................................... 18

Server Operation and Maintenance Precautions ...................................................................18

AC Power Cord and Cable Precautions .................................................................................19

Electrical Safety Precautions .................................................................................................19

CONTENTS

iv M86 SECURITY INSTALLATION GUIDE

Motherboard Battery Precautions ..........................................................................................20

NSTALL

THE

ERVER

....................................................................................21

Step 1: Setup Procedures. ........................................................................................... 21

Quick Start Setup Requirements ............................................................................................21

LCD Panel Setup Requirements ............................................................................................21

Step 1A: Quick Start Setup Procedures...................................................................... 22

Storage Device Setup (for Attached Storage Units) ...............................................................22

Link the Workstation to the SR ...............................................................................................22

Monitor and Keyboard Setup ...........................................................................................22

Serial Console Setup .......................................................................................................22

Power on the SR ....................................................................................................................24

Power up a 300 Model .....................................................................................................24

Power up a 500, 700, or 730 Model ................................................................................24

Power up a 505 Model .....................................................................................................25

Power up a 705 or 735 Model .........................................................................................25

HyperTerminal Setup Procedures ..........................................................................................26

Login screen ...........................................................................................................................29

Quick Start menu screen ........................................................................................................29

Quick Start setup ....................................................................................................................30

Configure network interface LAN1 ...................................................................................31

Configure network interface LAN2 ...................................................................................31

Configure default gateway ...............................................................................................31

Configure DNS servers ....................................................................................................31

Configure host name .......................................................................................................31

Time Zone regional setting ..............................................................................................32

Configure setup wizard user ............................................................................................32

Non-Quick Start procedures or settings ...........................................................................33

Reboot system...........................................................................................................33

Change Quick Start password ...................................................................................33

Reset Admin account.................................................................................................33

System Status screen ............................................................................................................34

Log Off, Disconnect the Peripherals ......................................................................................34

Step 1B: LCD Panel Setup Procedures....................................................................... 35

Storage Device Setup (for Attached Storage Units) ...............................................................35

LCD Panel ..............................................................................................................................35

LCD panel keypad ...........................................................................................................35

LCD Menu . ......................................................................................................................36

M86 menu ..............................................................................................................................36

IP / LAN1 and 2 . ..............................................................................................................37

Gateway ..........................................................................................................................37

DNS 1 and 2 ....................................................................................................................37

Host Name .......................................................................................................................38

Regional Setting (Time Zone, date, time) ........................................................................38

Configure Setup Wizard User ..........................................................................................38

Non-Quick Start procedures or settings ...........................................................................39

SR Patch Level ..........................................................................................................39

Serial Number............................................................................................................39

Reset Admin Account.................................................................................................39

Reboot........................................................................................................................39

Shutdown...................................................................................................................39

LCD Options menu .................................................................................................................40

Heartbeat .........................................................................................................................40

Backlight ..........................................................................................................................40

CONTENTS

M86 SECURITY INSTALLATION GUIDE v

LCD Controls ...................................................................................................................40

Step 2: Physically Connect the Unit to the Network.................................................. 41

Bandwidth Management ........................................................................................................42

Step 3: Access the SR and its Applications Online................................................... 43

Access the SR via its LAN 1 IP Address ................................................................................43

Accept the Security Certificate in Firefox ...............................................................................44

Temporarily Accept the Security Certificate in IE ...................................................................46

Accept the Security Certificate in Safari .................................................................................47

Accept the Security Certificate in Chrome .............................................................................48

Accept the End User License Agreement ..............................................................................49

Log in to the Security Reporter Wizard ..................................................................................50

Use the SR Wizard to Specify Application Settings ...............................................................50

Enter Main Administrator Criteria .....................................................................................51

For Web Filters: Go to Bandwidth Range and Web Filter Setup .....................................51

Enter Bandwidth Range.............................................................................................51

Enter Web Filter Setup Criteria ..................................................................................51

For SWGs: Go to Secure Web Gateway Setup ...............................................................52

Save settings ...................................................................................................................52

Step 4: Generate SSL Certificate................................................................................. 53

Generate a Self-Signed Certficate for the SR ........................................................................53

IE Security Certificate Installation Procedures .......................................................................55

Accept the Security Certificate in IE ................................................................................55

Windows XP or Vista with IE 8 or 9............................................................................55

Windows 7 with IE 8 or 9............................................................................................59

Map the SR’s IP Address to the Server’s Hostname .......................................................60

Step 5: Add Web Filter, SWG to Device Registry....................................................... 62

Add a Web Filter Device ........................................................................................................62

Add an SWG Device ..............................................................................................................63

Step 6: Set up Web Filter, SWG Log Transfers.......................................................... 64

Web Filter Setup ....................................................................................................................64

Web Filter Configuration ..................................................................................................64

Web Filter Log Transfer Verification ................................................................................65

Set Self-Monitoring ..........................................................................................................66

Use Single Sign-On Access . ...........................................................................................67

Single Sign-On Access ..............................................................................................67

Default Usernames and Passwords...........................................................................67

SWG Setup ............................................................................................................................68

SWG Configuration for Software Version 10.0 ................................................................68

Configure SWG to Send Logs to the SR....................................................................68

Policy Settings............................................................................................................69

SWG Configuration for Software Version 9.2.5 ...............................................................70

Configure SWG to Send Logs to the SR....................................................................70

Policy Settings............................................................................................................70

ONCLUSION

................................................................................................72

EST

EPORTING

RACTICES

.......................................................................73

Productivity Reports Usage Scenarios....................................................................... 74

I. Summary Report and Drill Down Report exercise ..............................................................74

Step A: Use Summary Reports for a high level activity overview ...................................74

CONTENTS

vi M86 SECURITY INSTALLATION GUIDE

Step B: Further investigate using a Summary Drill Down Report ...................................75

Step C: Create a new report using yesterday’s date scope .............................................77

Step D: Create a report grouped by two report types .....................................................77

Step E: Create a Detail Drill Down Report to obtain a list of URLs ..................................78

II. ‘Group By’ Report and Export Report exercise ..................................................................80

Step A: Drill down to view the most visited sites in a category ........................................80

Step B: Modify the report view to only display top 10 site records ..................................81

Step C: Export the report view in the PDF output format ................................................82

III. Save and schedule a report exercise ................................................................................83

Step A. Save a report ......................................................................................................83

Step B. Schedule a recurring time for the report to run ...................................................84

IV. Create a Custom Category Group and generate reports ..................................................85

Step A: Create a Custom Category Group ......................................................................85

Step B: Run a report for a specified Custom Category Group .........................................86

V. Create a custom User Group and generate reports ..........................................................86

Step A: Create a custom User Group ..............................................................................86

Step B: Generate a report for a custom User Group .......................................................88

Security Reports Usage Scenarios. ............................................................................ 89

I. Explore the four basic Security Reports types ....................................................................89

Step A: Navigate to the Blocked Viruses report ..............................................................89

Step B: Navigate to the Security Policy Violations report ................................................90

Step C: Navigate to the Traffic Analysis report ................................................................90

Step D: Navigate to the Rule Transactions report ...........................................................91

Step E: Modify the current report view ............................................................................91

II. Create a drill down Security Report view ...........................................................................92

Exercise A: Create a report view that includes two report types .....................................92

Exercise B: Create a detail report view ............................................................................93

III. Create a customized Security Report ...............................................................................95

Exercise A: Use the current view to generate a custom report ........................................95

Exercise B: Use the Report Wizard to run a custom report .............................................97

IV. Export a Security Report ...................................................................................................99

Step A: Specify records to include in the report ..............................................................99

Step B: Specify ‘Group By’ and URL limitation criteria ....................................................99

Step C: Download the report ...........................................................................................99

Step D: View the exported Security Report ...................................................................100

V. Save a Security Report ....................................................................................................101

Step A: Select Report Wizard, Save option ...................................................................101

Step B: Specify criteria in Report Details .......................................................................102

Step C: Select the users or group in Users . ..................................................................103

Step D: Populate Email Settings ...................................................................................103

Step E: Save the report .................................................................................................103

Access the Saved Reports panel . .................................................................................104

VI. Schedule a Security Report to run ..................................................................................105

Exercise A: Use the current view to schedule a report to run ........................................105

Exercise B: Use the Wizard to create and schedule reports .........................................107

Access the Report Schedule panel ...............................................................................108

Real Time Reports Usage Scenarios......................................................................... 109

I. Screen navigation exercise ...............................................................................................109

Step A: Navigate panels in the Gauges section ............................................................109

Step B: Navigate panels in the Policy section ...............................................................110

II. Drill down into a gauge exercise ......................................................................................110

Step A: Select the gauge with the highest score ...........................................................110

Step B: Investigate a user’s activity in a specified gauge ..............................................112

Step C: Investigate the user’s Internet activity in other gauges .....................................113

III. Create a gauge exercise .................................................................................................114

CONTENTS

M86 SECURITY INSTALLATION GUIDE vii

Step A: Access the Add/Edit Gauges panel ..................................................................114

Step B: Add a URL Gauge ............................................................................................115

IV. Create an email alert exercise ........................................................................................117

Step A: Add a new alert .................................................................................................117

Step B: Select Email Alert Action . .................................................................................119

Step C: Receiving an email alert . ..................................................................................120

MPORTANT

NFORMATION

ABOUT

USING

THE

VALUATION

ODE

121

Report Manager........................................................................................................... 121

Server Information Panel .....................................................................................................121

System Configuration................................................................................................. 122

Evaluation Mode Pop-Up .....................................................................................................122

Expiration screen .................................................................................................................122

LED I

NDICATORS

AND

UTTONS

.................................................................123

Front Control Panels on 500, 700 and 730 Models. ................................................. 123

Rear Panel on the 700 and 730 Model....................................................................... 124

Front Control Panel on a 300 Model.......................................................................... 124

Chassis Panel on a 505 Model................................................................................... 125

Chassis Panels on 705 and 735 Models.................................................................... 126

EGULATORY

PECIFICATIONS

AND

ISCLAIMERS

.......................................127

Declaration of the Manufacturer or Importer............................................................ 127

Safety Compliance ...............................................................................................................127

Electromagnetic Compatibility (EMC) ..................................................................................127

Federal Communications Commission (FCC) Class A Notice (USA) ..................................127

FCC Declaration of Conformity ............................................................................................127

Electromagnetic Compatibility Class A Notice .....................................................................127

Industry Canada Equipment Standard for Digital Equipment (ICES-003) .....................127

EC Declaration of Conformity ...............................................................................................128

European Community Directives Requirement (CE) .....................................................128

PPENDIX

A: F

IBRE

HANNEL

ONNECTED

TORAGE

EVICE

.....................129

Preliminary Setup Procedures................................................................................... 129

Unpack the Unit from the Carton ..........................................................................................129

Other Required Installation Item ..........................................................................................129

Rack Mount the Server ........................................................................................................130

Rack Mount Components ..............................................................................................130

Rack Setup Precautions ................................................................................................130

Step 1 . ...........................................................................................................................131

Step 2 ............................................................................................................................131

Step 3 ............................................................................................................................131

Step 4 . ...........................................................................................................................132

Step 5 ............................................................................................................................132

Step 6 ............................................................................................................................132

Install the Unit. ............................................................................................................ 133

CONTENTS

viii M86 SECURITY INSTALLATION GUIDE

Link the SR Unit with the Fibre Channel Connected Device ................................................133

Step 1: Connect the SR to the Storage Device .............................................................133

Connect a 730 Model...............................................................................................133

Connect a 735 Model...............................................................................................133

Step 2: Connect the Storage Device .............................................................................134

Shut Down, Restart Procedures ...........................................................................................135

Shut Down the Storage Device Unit ..............................................................................135

Restart the Storage Device Unit ....................................................................................135

Physical Components................................................................................................. 136

LED Display .........................................................................................................................137

Temperature and Ventilation Status ..............................................................................137

Power Supply Status .....................................................................................................137

Management Alarm .......................................................................................................137

Silence Button ...............................................................................................................137

Disc Drive Alarm ............................................................................................................138

Disk Drive Activity ..........................................................................................................138

PPENDIX

B: O

PTIONAL

THERNET

NSTALLATION

...............................139

Preliminary Setup Procedures................................................................................... 139

Unpack the Ethernet Tap Unit from the Box ........................................................................139

Other Required Installation Items .........................................................................................139

Install the Ethernet Tap Unit. ..................................................................................... 139

NDEX

.........................................................................................................141

M86 SR APPLIANCE INTRODUCTION

M86 SECURITY INSTALLATION GUIDE 1

M86 SR APPLIANCE INTRODUCTION

Thank you for choosing to install and evaluate the M86 Security Reporter appli-

ance. The Security Reporter (SR) from M86 Security consists of the best in breed

of M86 Professional Edition reporting software consolidated into one unit, with the

capability to generate productivity reports of end user Internet activity from M86

Web Filter and/or M86 Secure Web Gateway (SWG) appliance(s), and security

reports from an SWG.

Using a Web Filter, you have the option to use an Equus SR 300, 500, 700 or 730

model, or an IBM SR 505, 705 or 735 model.

Using an SWG, you have the option to use an IBM SR 505, 705 or 735 model.

Using both a Web Filter and an SWG, you have the option to use an IBM SR 505,

705 or 735 IBM model.

Logs of end user Internet activity from a Web Filter and/or SWG are fed into SR,

giving you an overall picture of end user productivity in a bar chart dashboard, and

the ability to interrogate massive datasets through flexible drill-down technology,

until the desired view is obtained. This “view” can be memorized and saved to a

user-defined report menu for repetitive, scheduled execution and distribution.

Web Filter logs provide content for dynamic, real time graphical snapshots of

network Internet traffic. Drilling downinto the URL categories or bandwidth gauges

dashboard quickly identifies the source of user-generated Web threats. SWG logs

provide content for bar charts detecting security threats on the network so that

prompt action can be taken to terminate them before they become a liability on

your network.

Using the SR, threats to your network are readily targeted, thus arming you with

the capability to take immediate action to halt the source, secure your network, and

protect your organization against lost productivity, network bandwidth issues, and

possible legal problems that can result from the misuse of Internet and intranet

resources.

Quick setup procedures to implement the best reporting practices are included in

the Best Reporting Practices section that follows the Conclusion of this guide.

M86 SR APPLIANCE INTRODUCTION ABOUT THIS DOCUMENT

2M86 SECURITY INSTALLATION GUIDE

About this Document

This document is divided into the following sections:

•Introduction - This section is comprised of an overview of the SR product and

how to use this document

•Service Information - This section provides M86 Security contact information

•Preliminary Setup Procedures - This section includes instructions on how to

physically set up the SR appliance in your network environment

•Install the Server - This section explains how to configure the SR for reporting

•Conclusion - This section indicates that the installation steps have been

completed

•Best Reporting Practices - This section includes reporting scenarios and

instructions for implementing the best reporting practices to capture a snapshot

of end user activity on your network that tells you whether or not policies are

being enforced

•Evaluation Mode - This section gives information on using the SR in the eval-

uation mode

•LED Indicators and Buttons - This section explains how to read LED indica-

tors and use LED buttons for troubleshooting the unit

•Regulatory Specifications and Disclaimers - This section cites safety and

emissions compliance information for specified SR models

•Appendices - Appendix A explains how to set up the optional NAS (Fibre

Channel Connected Storage Device or“SAN”) unit. Appendix B explains how to

install the optional Ethernet Tap device on your network for bandwidth moni-

toring.

•Index - An alphabetized list of some topics included in this document

Autres manuels pour M86

Ce manuel convient aux modèles suivants

Table des matières

Manuels Serveur populaires d'autres marques

HP AlphaServer ES47 Manuel utilisateur

Dell

Dell PowerEdge R410 Manuel utilisateur

PowerNAS

PowerNAS CMA Manuel utilisateur

Supero

Supero FatTwin F617R3-FT Manuel utilisateur

MSI

MSI P1-109N-L70 Manuel utilisateur

Dell

Dell PowerEdge XE9640 Manuel

Dell

Dell PS4100 Instructions de montage

EtroVISION

EtroVISION EV3151 Manuel utilisateur

NEC

NEC Express5800/T110j Manuel utilisateur

HP ProLiant Gen9 Manuel utilisateur

Compaq

Compaq ProLiant 3000 Manuel

Dell

Dell PowerEdge 3YPMN Manuel utilisateur

iRobo

iRobo IPC2U Manuel utilisateur

Nortel

Nortel 1000 Con?guration guide Manuel utilisateur

Asus

Asus AP7500 Manuel d'utilisation et d'entretien

Avid Technology

Avid Technology AirSpeed 5000 Manuel utilisateur

HP Integrity rx2600 Guide d'installation

Milestone

Milestone Husky IVO 350T Manuel utilisateur