1. Manuals
  2. Brands
  3. RSA Manuals
  4. Network Hardware
  5. Netwitness Suite 4 Series
  6. Setup manual

RSA Netwitness Suite 4 Series Setup Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Series 4 Appliances Setup Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Netwitness Suite 4 Series and is the answer not in the manual?

Questions and answers

Related Manuals for RSA Netwitness Suite 4 Series

Summary of Contents for RSA Netwitness Suite 4 Series

  • Page 1 Series 4 Appliances Setup Guide...
  • Page 2 This product may include software developed by parties other than RSA. The text of the license agreements applicable to third-party software in this product may be viewed on the product documentation page on RSA Link. By using this product, a user of this product agrees to be fully bound by terms of the license agreements.

  • Page 3: Table Of Contents

    Contents About this Document S4 R620 Appliances Hardware Description Package Contents Customer Supplied Materials Front View of the Series 4 Appliances Rear View of the Series 4 Appliances Series 4 Specifications (Except ESA, MA, Hybrid, Warehouse, and AIO) S4 ESA, MA, Hybrid, Warehouse, and All-in-One Specifications Install a Deep-Rack Adapter for an R620 Appliance Connect the Appliance to the Network Prerequisites...

  • Page 4: About This Document

    Series 4 Appliances Setup Guide About this Document This document is a step-by-step guide for installing the RSA Series 4 (S4) NetWitness Suite appliances (hosts) and connecting them to your network. The hardware setup instructions in this document are for hardware only; they do not apply to a specific release of NetWitness Suite software.

  • Page 5: S4 R620 Appliances Hardware Description

    Series 4 Appliances Setup Guide S4 R620 Appliances Hardware Description The RSA Series 4 (S4) NetWitness Suite appliances (hosts) are based on the Dell PowerEdge R620 chassis. The Series 4 appliances are shipped with NetWitness Suite software installed. This topic describes the Series 4 appliances that are based on the Dell PowerEdge R620 chassis:...
  • Page 6 RSA does not support re-shipping of racked servers. The customer assumes all risk and liability for transporting NetWitness servers and appliances mounted in a rack. S4 R620 Appliances Hardware Description...

  • Page 7: Package Contents

    Verify the contents of the packing box to ensure that you have received all items necessary to install and configure the appliance. Series 4 NetWitness Suite appliance (Decoder, Concentrator, Broker, Archiver, NetWitness Server, Malware Analysis, ESA, RSA Analytics Warehouse (MapR-Based), Hybrid, or All- in-One) Rail Slide Assemblies (2)

  • Page 8: Front View Of The Series 4 Appliances

    Series 4 Appliances Setup Guide Front View of the Series 4 Appliances Key Description Diagnostic LEDs System Identification Light Power On/Off Recessed non-maskable interrupt (NMI) button System Identification Button Micro USB port Series 4 Appliances except ESA, MA, Hybrid, Warehouse, and All-in-One: Ten 2.5-inch hard drive bays.

  • Page 9: Rear View Of The Series 4 Appliances

    Series 4 Appliances Setup Guide Rear View of the Series 4 Appliances Key Description System Identification Light Network Interface cards slot: SAS Controller installed with two DAC interface ports for connecting to the disk storage arrays. Network Interface card expansion slots for optional cards. Possible options are: Fiber/Copper 10Gbps network capture card (RJ45) Fiber-channel host bus adaptor (HBA) used to connect to a SAN System Identification Button...

  • Page 10: Series 4 Specifications (Except Esa, Ma, Hybrid, Warehouse, And Aio)

    96 GB Caution: Opening the appliance chassis will void the warranty unless you are specifically instructed to do so by RSA Customer Care. The hard drives and power supplies are replaceable in the field by a qualified technician. S4 R620 Appliances Hardware Description...

  • Page 11: Install A Deep-Rack Adapter For An R620 Appliance

    Series 4 Appliances Setup Guide Install a Deep-Rack Adapter for an R620 Appliance Note: This procedure is only applicable if you are installing the S4 R620 appliance in the EMC Titan D Ultra Rack. When installing the S4 R620 appliance into the EMC Titan D Ultra Rack, a 1U deep-rack adapter is required.
  • Page 12 Series 4 Appliances Setup Guide Each rail is marked. 3. Use a Phillips screwdriver to remove the two mounting screws. Install a Deep-Rack Adapter for an R620 Appliance...
  • Page 13 Series 4 Appliances Setup Guide 4. Remove the bracket and replace it with the new bracket. 5. Re-use the screws to fasten the new bracket in place. The rail is now ready for the R620 appliance installation. Install a Deep-Rack Adapter for an R620 Appliance...

  • Page 14: Connect The Appliance To The Network

    Series 4 Appliances Setup Guide Connect the Appliance to the Network This topic provides instructions for connecting a NetWitness Suite S4 appliance (host) to your network. Prerequisites For each NetWitness Suite Series 4 appliance, obtain and write the information in the following table.

  • Page 15: Connect To The Appliance Console

    IP address, your DNS servers, the hostname, and the network clock source. To set these parameters, you connect to the appliance console using a keyboard and mouse. The preferred practice is to provision the NetWitness Server before configuring the other RSA NetWitness Suite appliances (hosts).

  • Page 16: Additional 10.6 And Earlier Installation Tasks

    Series 4 Appliances Setup Guide Additional 10.6 and Earlier Installation Tasks If you are on NetWitness Suite 10.6 or earlier, follow the steps below to configure the network parameters on the appliance (host) and finish the setup in NetWitness Suite. Configure Network Parameters 1.

  • Page 17: Specify The Network Clock Source

    If the NTP server is not configured or reachable at this time, the network clock source configuration will fail, but can be done from the RSA NetWitness Suite interface later. Best Practices RSA recommends the following best practices: Additional 10.6 and Earlier Installation Tasks...

  • Page 18: Set Time On The Netwitness Server Using The Nwconsole Utility

    1. At the root prompt [root@NwAppliance~]# enter the following command: NwConsole ​ N wConsole starts up and the startup message with a version and date displayed: RSA NetWitness Suite Console 2. In NwConsole, enter the following command: login localhost:50006 <username> <password> The system administrator account username for NetWitness Suite is admin and the default password is netwitness.

  • Page 19: Finish Appliance Setup In Netwitness Suite

    Log On to NetWitness Suite RSA NetWitness Suite is a web-based application that you launch in a browser window. Compatible browsers include any browser that supports WebSockets, LocalStorage, and the HTML5 History API: Google Chrome, Apple Safari, Mozilla Firefox, and Internet Explorer 10 and above.

  • Page 20: Additional 11.0 And Later Installation Tasks

    Series 4 Appliances Setup Guide Additional 11.0 and Later Installation Tasks If you are on NetWitness Suite 11.0 or later, go to the Physical Host Installation Guide and follow the steps for installing and configuring your appliance (host). Additional 11.0 and Later Installation Tasks...

Table of Contents