Subscribe to Our Youtube Channel
Related Manuals for OPENTEXT CHA C8200
Summary of Contents for OPENTEXT CHA C8200
- Page 1 CHA Appliance Model C8200 Software Version: 24.3 Administrator's Guide to Hardware Appliances for ArcMC...
- Page 2 Legal Notices Open Text Corporation 275 Frank Tompa Drive, Waterloo, Ontario, Canada, N2L 0A1 Copyright Notice Copyright 2024 OpenText The only warranties for products and services of Open Text and its affiliates and licensors (“Open Text”) are as may be set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Open Text shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice. Trademark Notices Adobe™ is a trademark of Adobe Systems Incorporated. Microsoft® and Windows® are U.S. registered trademarks of Microsoft Corporation. UNIX® is a registered trademark of The Open Group. Documentation Updates The title page of this document contains the following identifying information: Software Version number Document Release Date, which changes each time the document is updated Software Release Date, which indicates the release date of this version of the software To check for recent updates or to verify that you are using the most recent edition of a document, go to: https://www.microfocus.com/support-and-services/documentation Support Contact Information Phone A list of phone numbers is available on the T echnical Support Page: https://www.microfocus.com/en-us/contact-support/stackb Support Web Site https://www.microfocus.com/en-us/support ArcSight Product Documentation https://www.microfocus.com/documentation/arcsight/#gsc.tab=0...
-
Page 3: Table Of Contents
Administrator's Guide to Hardware Appliances for ArcSight Recon Contents About this Guide Intended Audience Additional Documentation Contact Information Chapter 1: Overview How the CHA Appliance Works Chapter 2: Setting Up a CHA Appliance Powering On the CHA Appliance Setting Up the A ppliance for Remote Access Changing the iDRAC password on your A ppliance Encryption of SEDs Setting Up the CHA C8200 Appliance Configure a New IP Address Accept the End User License Agreement Appliance Licenses Obtaining your license Initialize the C8200 Appliance Configuring a CHA Appliance Event Ingestion Configuring the Firewall on a CHA Appliance To configure the firewall: SNMP SNMP Configuration Viewing SNMP System Information SSH, FTP, Diagnostic Tools and Audit Forwarding SSH Access to the Appliance FTP Protocol Diagnostic Tools Configuring Audit Forwarding Chapter 3: Navigating the User Interface... - Page 4 Administrator's Guide to Hardware Appliances for ArcSight Recon Restoring an Appliance Using iDRAC Access Restore Procedure: Managing Backups and Restoring from them Publication Status Send Documentation Feedback Page 4 of 25...
-
Page 5: About This Guide
About this Guide This installation guide provides instructions on how to install and initialize the standalone appliance: CHA C8200 (Connector Hosting Appliance) Intended Audience This book provides information for admins who need to install, initialize, and restore appliances. Additional Documentation This documentation library includes the following resources, based on the product that you use. CHA Appliance 24.3 Release Notes, which provides information about the latest release. Documentation site for ArcSight Platform where you can discover documentation for multiple ArcSight products. Contact Information We want to hear your comments and suggestions about this book and the other documentation included with this product. You can use the comment on this topic link at the bottom of each page of the online documentation, or send an email to Documentation- Feedback@microfocus.com. For specific product issues, contact OpenText Customer Care. About this Guide Page 5 of 25... -
Page 6: Chapter 1: Overview
Chapter 1: Overview ArcSight Management Center (ArcMC) is a centralized security management center that manages deployments of ArcSight solutions such as Transformation Hub, Logger, SmartConnectors, etc., through a single interface. ArcSight Management Center (ArcMC) automates log collection and log management, whether you have a large ArcSight deployment or a small one. ArcSight Management Center (ArcMC) helps you with: The centralized management of ArcSight solutions. The automation of change management. The reduction of the resource requirement for security information and event management (SIEM). Easy management of large deployments, with reduction of a dministrative overhead and operational expenses. Efficient log traffic management. Bandwidth optimization for log collection. Support of IT operational analytics. This appliance version of ArcSight Management Center (ArcMC) (CHA, or Connector Hosting Appliance) reinforces its known benefits, such as: Implementation of new and updated security policies in a quick and easy way. Configuration of managed nodes with an increased level of accuracy and e rror reduction. How the CHA Appliance Works Each appliance consists of a single-node version of ArcSight Management Center (ArcMC), configured to host and execute SmartConnectors, and to administrate and monitor CHA managed nodes (such as connector appliances, Loggers, other ArcSight Management Center (ArcMC)s, and Transformation Hub). Chapter 1: Overview Page 6 of 25... - Page 7 Administrator's Guide to Hardware Appliances for ArcSight Recon How the CHA Appliance Works Page 7 of 25...
-
Page 8: Chapter 2: Setting Up A Cha Appliance
Administrator's Guide to Hardware Appliances for ArcSight Recon Chapter 2: Setting Up a CHA Appliance You can verify the type of CHA you're using by going to System > LIcense & Upgrade in the menu, and looking at the Model value. Instructions in this page refer specifically to the C8200 model. This section describes how to rack mount your CHA C8200. You do not need to run an installer when setting up your appliance; the s oftware comes pre-installed on it. These basic steps enable you to start using your CHA appliances. Task 1. Power on the Appliance "Powering On the CHA Appliance" below 2. Set up Remote Access "Setting Up the A ppliance for Remote Access" on the next page 3. (Optional) Encryption of SEDs "Encryption of SEDs" on page 10 4. Appliance Initialization Procedures "Setting Up the CHA C8200 Appliance " on page 10 5. Appliance Configuration "Configuring a CHA Appliance" on page 13 Powering On the CHA Appliance Before you Begin: Redeem your license key by following the instructions in the documents you received when purchasing. Redeeming this key gets you the license that you need to access the CHA functionality. ... -
Page 9: Setting Up The A Ppliance For Remote Access
4. To enable local access to the Appliance, connect a keyboard, monitor, and mouse to the Appliance ports. 5. Power on the appliance. Setting Up the A ppliance for Remote Access All a ppliances are equipped with an for remote access. iDRAC Service Module (iSM) OpenText strongly recommends setting up and configuring your appliance for out-of-band remote access. Doing so ensures that you or Customer Support (with your permission and assistance) can remotely access the console of your appliance for troubleshooting, maintenance, and c ontrol over the powering on and off of the box. Changing the password on your A ppliance iDRAC Appliance boxes come with a random ... -
Page 10: Encryption Of Seds
Administrator's Guide to Hardware Appliances for ArcSight Recon Encryption of SEDs The CHA Appliances support FIPS enabled self-encrypting disks (SEDs). A SED is a data storage device with built-in cryptographic processing t o encrypt and decrypt the data it contains. This process occurs within the device itself, independent of any connected information system, and it provides data protection against the loss or theft of the disks, as well as certain levels of hacking attempts. This protection consists of setting up passphrase-access-only. The SEDs ship without the passphrase, allowing you to chose your own. To set up a passphrase, first follow the steps to establish a security key. The c hosen passphrase can then be applied to pre-existing virtual disks by following the steps in Secure a pre-existing virtual disk. To change or disable a security key, please follow the specific procedures listed under this section. Setting Up the CHA C8200 Appliance The following instructions are intended to help you set up your CHA Appliance for its first use. Configure a New IP Address Use the appliance's Command Line Interface (CLI) to configure a new IP address, default gateway, hostname, and DNS and NTP servers. The CHA C8200 Appliance ships with the default IP address of on . 192.168.35.35 (subnet mask 255.255.255.0) Eth0 Tip: You will need the following information available before proceeding: ... -
Page 11: Accept The End User License Agreement
Administrator's Guide to Hardware Appliances for ArcSight Recon Password: password 2. Enter the new IP address with one of the following commands: set ip eth0 <ip>/<prefix> Where and are your new IP address and prefix. <ip> <prefix> set ip eth0 <ip> <subnetmask> Where and are your new IP address a nd subnet mask. <ip> <subnetmask> 3. Execute the following command to set the default gateway: set defaultgw <address> Where <address> is your default gateway IP address. 4. Execute the following command to set the hostname: set hostname <FQDN>... -
Page 12: Appliance Licenses
4. Log in as an administrator using the default credentials. Login: admin Password: password Appliance Licenses While your appliance ships with its software already installed, you will require the ArcSight Management Center (ArcMC) per-instance software license key (purchased separately) to be able to g et your appliance up and running. Once the license has been installed, it will behave as a normal permanent license for ArcSight Management Center (ArcMC). Obtaining your license Redeem your license on the Software Entitlements Portal, then download the license file to a computer from which you can connect to your CHA. For more information, refer to the software delivery confirmation email you received from OpenText. Initialize the C8200 Appliance The Appliance is initialized b y uploading its license file. Optionally, you can also set the date and time, and change the admin login credentials to non-default values. 1. On the CHA Appliance menu, go to System > License & Update, click the Browse... button to look for your license file. 2. Click Upload Update and wait for the update to finish. An Update In Progress page displays the update progress. After the update has completed, the Update Results page displays the update result (success/failure). 3. A reboot is required after installing or updating a license. 4. Configure your date and time settings for the appliance. Appliance Licenses Page 12 of 25... -
Page 13: Configuring A Cha Appliance
Administrator's Guide to Hardware Appliances for ArcSight Recon 5. Change the login credentials from their default values. For instructions, see Change admin Password. For instructions on how to install your license key, see: License & Update Configuring a CHA Appliance The links provided for each feature are meant as a starting point, and not meant to be exhaustive. You will find more in depth information in the ArcSight Management Center (ArcMC) ... -
Page 14: To Configure The Firewall
Administrator's Guide to Hardware Appliances for ArcSight Recon To preview the list of ports the script will open: 1. Log into the appliance as root. 2. Run the following command: /usr/sbin/arcfirewall The script displays the ports that it would open, as shown in the following example. [root@myserver ~]# /usr/sbin/arcfirewall PREVIEW MODE - NO FIREWALL CHANGES... List of ports that firewall would allow inbound from any IP address: 21/tcp 22/tcp 443/tcp... -
Page 15: Snmp Configuration
Administrator's Guide to Hardware Appliances for ArcSight Recon The instructions in this page differ from the ones in the ArcSight Management Center (ArcMC) guide. Please use these instructions for the configuration of a C8200 appliance. SNMP SNMP Configuration You can configure polling and notifications. I f polling is configured, a manager SNMP SNMP station can query the agent residing on the appliance. T he information retrieved provides SNMP detailed information at the hardware and operating system level. To configure SNMP polling: 1. In the main menu bar, click Administration > Setup> System Admin 2. In the navigation tree, under System, click SNMP. 3. On the SNMPPoll Configuration tab, ensure Enabled is selected. ... -
Page 16: Viewing Snmp System Information
Administrator's Guide to Hardware Appliances for ArcSight Recon For Port, specify 162. Specifying a non- default port may cause a brief delay. Give the process time to complete. ... -
Page 17: Ssh, Ftp, Diagnostic Tools And Audit Forwarding
Administrator's Guide to Hardware Appliances for ArcSight Recon To view system notifications in an MIB browser on your appliance: You can download the ArcSight MIB file and other standard Net- MIB files using the SNMP following URLs: https://<system_name_or_ip>/platform-service/ARCSIGHT-EVENT-MIB.txt https://<system_name_or_ip>/platform-service/DISMAN-EVENT-MIB.txt https://<system_name_or_ip>/platform-service/HOST-RESOURCES-MIB.txt https://<system_name_or_ip>/platform-service/IF-MIB.txt https://<system_name_or_ip>/platform-service/UCD-SNMP-MIB.txt MIB Contents Notifications are written to the following modules of the MIB file: Module Notification Types HOST-RESOURCES-MIB Standard hardware parameters. IF-MIB Objects for network interfaces. IP-MIB IP and ICMP implementations. DISMAN-EVENT-MIB Event triggers and actions for standard network management. -
Page 18: Diagnostic Tools
Administrator's Guide to Hardware Appliances for ArcSight Recon Enabling FTP Diagnostic Tools The appliance Diagnostic tools are available for set up, management, and troubleshooting tasks. For more information see: Diagnostic Tools Configuring Audit Forwarding For Audit Forwarding, you will require a single connector installed in your appliance. syslog Follow the procedure below to configure it: To configure audit forwarding for ArcMC Appliance Diagnostic Tools Page 18 of 25... -
Page 19: Chapter 3: Navigating The User Interface
Administrator's Guide to Hardware Appliances for ArcSight Recon Chapter 3: Navigating the User Interface The links provided for each feature are meant as a starting point, and not meant to be exhaustive. You will find more in depth information in the ArcSight Management Center (ArcMC) ... -
Page 20: Chapter 4: Backup And Restore Procedures
Administrator's Guide to Hardware Appliances for ArcSight Recon Chapter 4: Backup and Restore Procedures OpenText recommends to perform backups of the information and configuration of a CHA appliance to ensure you can recover your data in case of loss. Components should be backed up on a regular schedule, as well as before you upgrade your environment. Restoring an Appliance to Factory Settings You can verify the type of CHA you're using by going to System > LIcense & Upgrade in the menu, and looking at the Model value. Instructions in this page refer specifically to the C8200 model. You can restore appliances to their original factory settings by using the procedures detailed here. To perform a restore procedure, you will require: An image file containing the factory settings for the version of CHA you are restoring. .iso Find the name of the file in the Downloading Your Factory Restore Image Files section of the CHA Appliance 24.3 Release Notes. Once you have acquired the image file, please refer to the ... -
Page 21: Image Burning
Administrator's Guide to Hardware Appliances for ArcSight Recon Image Burning 1. Connect the USB memory s tick to one of the ports of the Linux machine. 2. From the command line, execute the following command to burn the image into the .iso USB memory s tick: dd if=<iso_image_file_name>.iso status=progress oflag=sync of=/dev/sdb bs=1M Where is the name of the image file downloaded here. <iso_image_file_name> And wait until the progress has reached 100%. 3. Turn y our a ppliance off and connect the bootable USB stick you just created to one of its ports. Reboot the appliance. Restore Procedure: 1. Access the remote console of the appliance through . ... -
Page 22: Restoring An Appliance Using Idrac Access
Administrator's Guide to Hardware Appliances for ArcSight Recon 8. Different screens will follow each other, some of them with progress bars, indicating the restoring progress of a specific system portion. None of these require user intervention, and the whole process takes approximately 20 minutes. Once the restore process has reached this point: The next step: true Now run: true Your input will be required to reboot the appliance: reboot 9. Once the reboot process is finished, follow the instructions listed in: "Setting Up the CHA C8200 Appliance " on page 10 Restoring an Appliance Using iDRAC Access When using the Remote File Share feature to perform the r estore procedure, make sure iDRAC there is no drive connected to the appliance ports, since its presence m ay interfere with the restore process. This method will require the following preparation: ... -
Page 23: Managing Backups And Restoring From Them
Administrator's Guide to Hardware Appliances for ArcSight Recon A pop-up window will request to Confirm Power Action. Select Yes. 5. The booting process will prompt a selection from the B oot Manager. Choose One-shot UEFI Boot Menu. 6. From the Select UEFI Boot Option, select Virtual Optical Drive. 7. The appliance will boot from the .iso image in the Remote File Share. The restore process will start automatically if you allow it some time, or you can click on the ArcSight ARCMC-C6615-C8200-RH92-FIPS-STIG-CIS2-xx.x.x-x.iso option at the top to start right away. 8. Different screens will follow each other, some of them with progress bars, indicating the restoring progress of a specific system portion. None of these require user intervention, and the whole process takes approximately 20 minutes. Once the restore process has reached this point: The next step: true Now run: true Your input will be required to reboot the appliance:... -
Page 24: Publication Status
Administrator's Guide to Hardware Appliances for ArcSight Recon Publication Status Released: Monday, September 30, 2024 Updated: Monday, September 30, 2024 Publication Status Page 24 of 25... -
Page 25: Send Documentation Feedback
Send Documentation Feedback If you have comments about this document, you can contact the documentation team by email. If an email client is configured on this computer, click the link above and an email window opens with the following information in the subject line: Feedback on Administrator's Guide to Hardware Appliances for ArcMC (8000 Appliance 24.3) Just add your feedback to the email and click send. If no email client is available, copy the information above to a new message in a web mail client, and send your feedback to documentation-feedback@microfocus.com. We appreciate your feedback! Send Documentation Feedback Page 25 of 25...
Need help?
Do you have a question about the CHA C8200 and is the answer not in the manual?
Questions and answers