8e6 Technologies TAR S (5K02-62) Quick Start Manual

Threat analysis reporter

Advertisement

Quick Links

Threat Analysis Reporter
®

QUICK START

GUIDE
Model: TAR
TAR S (5K02-62), TAR H (5K02-66), TAR MSA (5K02-67)
Release: 1.2.00 / Updated: 03.31.08

Advertisement

Table of Contents
loading

Summary of Contents for 8e6 Technologies TAR S (5K02-62)

  • Page 1: Quick Start

    Threat Analysis Reporter ® QUICK START GUIDE Model: TAR TAR S (5K02-62), TAR H (5K02-66), TAR MSA (5K02-67) Release: 1.2.00 / Updated: 03.31.08...
  • Page 2 8e6 Technologies. Every effort has been made to ensure the accuracy of this document. However, 8e6 Technologies makes no war- ranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose.
  • Page 3: Table Of Contents

    ontents ............1 hreat nalysis eporter ntroduCtion About this Document ........................2 Conventions Used in this Document ................... 2 ..................3 erviCe nformation ..............4 reliminary etup roCedures Unpack the Unit from the Carton ....................4 Rack Mount the “S” or “MSA” Server ..................5 Install the “H”...
  • Page 4 hreaT nalysis eporTer uick TarT uide...
  • Page 5: T Hreat A Nalysis R Eporter I Ntroduction

    Thank you for choosing to evaluate the 8e6 Technologies Threat Analysis Reporter. This product addresses user-generated Web threats such as excessive use of bandwidth and inappropriate Internet usage, and provides network administrators tools to monitor such threats so management can enforce corporate Internet usage policies.
  • Page 6: About This Document

    Introduction - This section is comprised of an overview of the Threat Analysis Re- porter product and how to use this document • Service Information - This section provides 8e6 Technologies contact information • Preliminary Setup Procedures - This section includes instructions on how to physi- cally set up the Threat Analysis Reporter unit in your network environment •...
  • Page 7: S Ervice I Nformation

    The user should not attempt any maintenance or service on the unit beyond the proce- dures outlined in this document. Any initial hardware setup problem that cannot be resolved at your internal organiza- tion should be referred to an 8e6 Technologies solutions engineer or technical support representative. 8e6 Corporate Headquarters (USA) Local 714.282.6111...
  • Page 8: P Reliminary S Etup P Rocedures

    reliminary etup roCedures Unpack the Unit from the Carton Inspect the packaging container for evidence of mishandling during transit. If the packag- ing container is damaged, photograph it for reference. Carefully unpack the unit from the carton and verify that all accessories are included. Save all packing materials in the event that the unit needs to be returned to 8e6 Tech- nologies.
  • Page 9: Rack Mount The "S" Or "Msa" Server

    Rack Mount the “S” or “MSA” Server Rack Mount Instructions Rack Setup Suggestions • Determine the placement of each component in the rack before you install the rails. • Install the heaviest server components on the bottom of the rack first, and then work Identify the Sections of the Rack Rails You should have received two rack rail assemblies with the 8e6 server unit.
  • Page 10 Install the Rack Rails Determine where you want to place the server unit in the rack. Position the fixed rack rail/sliding rail guide assemblies at the desired location in the rack, keeping the sliding rail guide facing the inside of the rack. Screw the assembly securely to the rack using the brackets provided.
  • Page 11 Installing the Server into a Telco Rack If you are installing the 8e6 server unit into a Telco type rack, follow the directions given on the previous pages for rack installation. The only difference in the installation pro- cedure will be the positioning of the rack brackets to the rack. They should be spaced apart just enough to accommodate the width of the Telco rack.
  • Page 12: Install The "H" Server Bezel

    Install the “H” Server Bezel Before rack mounting the “H” unit, the bezel should be installed on the front end of the chassis. This portion of the installation process requires you to unpack the unit and be- zel. NOTE: The bezel has been packaged separately from the unit to prevent dam- age during shipping.
  • Page 13 A. Remove the plastic wrapping from the left and right U-shaped chassis rail handles. B. On one side of the chassis (left or right), un- screw the inner rail from the chassis. C. Slide the loosened inner rail slightly backwards to release it from the clips at the side of the chassis, and then lay it down beside the chas- sis, with the inside of the rail facing up.
  • Page 14 F. Return the loosened inner rail to its upright po- sition and insert the bezel pin into the bottom hole of the U-shaped handle. G. Slide the inner rail forward beneath the clips to lock it in place. H. Screw the inner rail back on the chassis. After it is installed, the bezel should drop down when it is gently tugged forward and down- ward.
  • Page 15: Rack Mount The "H" Server

    Rack Mount the “H” Server Rack Mount Instructions Identify the Sections of the Rack Rails You should have received two rack rail assemblies with the 8e6 server unit. Each of these assemblies consists of two sections: An inner fixed chassis rail that secures to the unit (A), and an outer fixed rack rail that secures directly to the rack itself (B).
  • Page 16 Install the Server into the Rack You should now have rails attached to both the chassis and the rack unit. The next step is to install the server chassis into the rack. Do this by lining up the rear of the chassis rails with the front of the rack rails.
  • Page 17 Installing the Server into a Telco Rack If you are installing the 8e6 server unit into a Telco type rack, follow the directions given on the previous page for rack installation. The only difference in the installation proce- dure will be the positioning of the rack brackets to the rack. They should be spaced apart just enough to accommodate the width of the Telco rack.
  • Page 18: I Nstall The S Erver

    nstall the erver Step 1: Initial Setup Procedures This step requires you to link the workstation to the Threat Analysis Reporter. The follow- ing hardware can be used for the initial setup procedures: • Threat Analysis Reporter unit with AC power cord •...
  • Page 19 Link the Workstation to the Threat Analysis Reporter Monitor and Keyboard Setup A. Connect the PC monitor and keyboard cables to the rear of the chassis. B. Turn on the PC monitor. C. Power on the Threat Analysis Reporter unit by dropping down the face plate and pressing the large button at the right of the front panel (see image below).
  • Page 20: Hyperterminal Setup Procedures

    HyperTerminal Setup Procedures If using a serial console, follow these procedures to create a HyperTerminal session. A. Launch HyperTerminal by going to Start > Programs > Accessories > Communica- tions > HyperTerminal: B. In the Connection Description dialog box, enter any session Name, and then click OK to open the Connect To dialog box: hreaT nalysis...
  • Page 21 C. At the Connect using field, select the COM port assigned to the serial port on the laptop (probably “COM1”), and then click OK to open the Properties dialog box, dis- playing the Port Settings tab: D. Specify the following session settings: •...
  • Page 22 F. In the HyperTerminal session window, go to File > Properties to open the Properties dialog box, displaying the Connect To and Settings tabs: G. Click the Settings tab, and at the Emulation menu select “VT100”. H. Click OK to close the dialog box, and to go to the login screen. NOTE: If using a HyperTerminal session, the login screen will display with black text on a white background.
  • Page 23 Quick Start Setup Procedures For these Quick Start setup procedures, you will need your network administrator to pro- vide you the LAN 1 and LAN 2 IP address and subnet mask, gateway IP address, DNS server IP address(es), host name of the server, and IP address for the Web interface (if using a NAT device).
  • Page 24 E. At the Press the number of your selection prompt, press 2 to display the Adminis- trator Password Entry screen: F. At the Enter the administrator password prompt, re-enter your password: #s3tup#r3k G. Press Enter to display the Administration menu where you can begin the Quick Start setup process using the configuration screens: H.
  • Page 25 Configure Network Interface screen A. At the Enter interface lan1 IP address field, enter the IP address for the LAN 1 interface, and then press Enter to go to the next screen. B. At the Enter interface lan1 netmask field, enter the subnet mask for the LAN 1 in- terface using the dotted decimals notation format.
  • Page 26 C. Press Y for “Yes” to confirm and save your entries for the LAN1 interface, and to go to the next screen. D. At the Enter interface lan2 IP address field, enter the IP address for the LAN 2 interface, and then press Enter to go to the next screen. E.
  • Page 27 Configure default gateway screen A. At the Enter default gateway IP field, enter the IP address for the default gateway. Press Enter to display the confirmation prompt. B. Press Y for “Yes” to confirm and save your entry for the gateway IP address, and to go to the Configure Domain Name Servers screen.
  • Page 28 B. At the Enter (optional) second DNS server IP field, if you have a secondary Do- main Name Server you wish to use, enter the IP address for that server. Press Enter to display the confirmation prompt. C. Press Y for “Yes” to confirm and save your entries for the domain name servers, and to go to the Configure Host Name screen.
  • Page 29 B. Press Y for “Yes” to confirm and save your entry for the host name, and to go to the Time zone regional configuration screen. Time zone regional configuration screen A. Use the up and down arrows in your keyboard to select your region. After selecting your locality, press Y for “Yes”...
  • Page 30 Configure Wizard user screen A. At the Enter wizard user name field, enter the username that will be used to access the setup wizard in the Threat Analysis Reporter interface. Press Enter to display the confirmation prompt. B. Press Y for “Yes” to confirm and save your entry and to go to the next screen. C.
  • Page 31: Administration Menu

    Quick Start Setup confirmation screen Press Y for “Yes” to save all your Quick Start setup entries and to return to the Adminis- tration menu. NOTE: When saving your entries, there may be a 4-10 second delay before the Administration menu displays. Administration menu After making all entries using the Quick Start setup process, you will return to the Admin- istration menu.
  • Page 32: System Status Screen

    System Status screen The System Status screen contains the following information: • lan1 interface for web access and R3000 communications: LAN1 IP address and netmask specified in screen 3 (Configure Network Interface), and current status (“Active” or “Inactive”) • lan2 interface for bandwidth monitoring: LAN2 IP address and netmask specified in screen 4 (Configure Network Interface), and current status (“Active”...
  • Page 33: Bandwidth Management

    Step 2: Physically Connect the Unit to the Network After performing initial setup procedures for the Threat Analysis Reporter, the unit should be physically connected to the network. This step requires a standard CAT-5E cable to connect the unit to the network. An additional CAT-5E cable is required if the Ethernet Tap unit will be installed for bandwidth monitoring.
  • Page 34: Step 3: Wizard Setup Procedures

    Step 3: Wizard Setup Procedures For this step, you will need your network administrator to provide you the following infor- mation: • IP range and netmask of machines on the network the Threat Analysis Reporter server will be monitoring • R3000 IP address, and port number to be used between the R3000 and Threat Analysis Reporter •...
  • Page 35 D. After reading the End User License Agreement, you have the option to do either of the following: • Click No to close both the EULA Agreement dialog box and the Threat Analysis Reporter interface. You will not be able to enable the Threat Analysis Reporter for use in your environment.
  • Page 36 Step 1: Register administrator Step 1 is performed in the left side of the first screen of the wizard: A. Enter the username the global administrator will use when logging into the Threat Analysis Reporter Administrator console. The global administrator has the highest level of permissions in the Threat Analysis Reporter interface.
  • Page 37 D. Click the [+] Add tab beow to open the IP Range Information dialog box: E. Enter the Bandwidth IP address range for the bandwidth the Threat Analysis Re- porter will monitor. F. Enter the Bandwidth Netmask for the bandwidth IP range to be monitored, using the dotted decimals notation format.
  • Page 38 To modify an IP address range, double-click the entry in the list box to highlight it and to display the [-] Remove tab to the left of the [+] Add tab: • To modify the entries made for the IP address range, click the [+] Add tab to re- open the IP Range Information dialog box and edit information, as necessary.
  • Page 39 Step 2: Register R3000 & ER Step 2 is performed in the right side of the first screen of the wizard. R3000: Specify information for the R3000 to be used with the Threat Analysis Reporter: A. Click the [+] Add tab above the R3000 list box to open the R3000 Information dialog box: B.
  • Page 40 E. Click OK to close the dialog box and to display your entries in the list box: NOTE: Additional R3000 servers can be included by clicking the [+] Add tab again and making the entries described in steps A through E above. To modify an R3000 entry, double-click the R3000 entry in the list box to highlight it and to display the Set as Source tab and the [-] Remove tab to the left of the [+] Add tab:...
  • Page 41 • To modify the IP address and Server Name for the R3000 server, click the [+] Add tab to re-open the R3000 Information dialog box, and edit information as necessary. Click OK to close the dialog box and to display the modified informa- tion in the list box.
  • Page 42 Respond to the question “Do you have an Enterprise Reporter?” by clicking the radio button corresponding to either “Yes” or “No”. • If “No” was selected, click SAVE > at the bottom right of the screen to go to Step 3. •...
  • Page 43: C Onclusion

    Step 3: Server Settings Step 3, the following R3000 server information displays: SMTP Server Settings, Patch Server Settings, PROXY Server Settings, NTP Server Settings: After reviewing the information in this screen, the following actions can now be per- formed: • To print this information, click the PRINT button.
  • Page 44: S Pecifications

    peCifiCations Physical Specifications Specification “S” Value “H” Value “MSA” Value Height 1.7” (43mm) 1.7” (43mm) 1.7” (43mm) Width 16.8” (426mm) 17.2” (438mm) 16.8” (426mm) Depth 22.6” (574mm) 26.8” (681mm) 14.0” (356mm) Front clearance 2 inches (76mm) 2 inches (76mm) 2 inches (76mm) Side clearance 1 inch (25mm) 1 inch (25mm)
  • Page 45: Hardware Component Specifications

    Hardware Component Specifications Specification “S” Value “H” Value “MSA” Value Operating temperature 10° C ~ 35° C (50° F 10° C ~ 35° C (50° 10° C ~ 35° C (50° F range ~ 95° F) F ~ 95° F) ~ 95°...
  • Page 46: S" And "Msa" Front Panel Led Indicators, Buttons

    “S” and “MSA” Front Panel LED Indicators, Buttons Diagrams and Descriptions On “S” and “MSA” units, LED indicators and buttons display on the front panel to the right: LED indicators alert you to the status of a feature on the unit while buttons let you per- form a function on the unit.
  • Page 47: A Ppendix : O Ptional E Thernet T Ap I Nstallation

    Unpack the Ethernet Tap Unit from the Box Open the NetOptics Ethernet Tap box and verify that all accessories are included. Save all packing materials in the event that the unit needs to be returned to 8e6 Technologies. The NetOptics box should contain the following items: •...
  • Page 48: Install The Ethernet Tap Unit

    nsTallaTion Install the Ethernet Tap Unit Diagram showing TAR Ethernet Tap installation on the network This step is a continuation from Step 2: Physically Connect the Unit to the Network. The procedures outlined in this step require the use of a CAT-5E cable. A.
  • Page 49 nsTallaTion C. Using a crossover cable, connect one end to the Switch’s port configured to be the destination port of the Port Mirror. If adding a Threat Analysis Reporter to an existing installation, this port would be the port that was originally occupied by the listening interface of the R3000. D.
  • Page 50 8e6 Corporate Headquarters (USA): 828 West Taft Avenue Orange, CA 92865-4232 • Tel: 714.282.6111 or 888.786.7999 Fax: 714.282.6116 (Sales/Technical Support) • 714.282.6117 (General Office) Satellite Office: 8e6 Taiwan: 7 Fl., No. 1, Sec. 2, Ren-Ai Rd., Taipei 10055, Taiwan, R.O.C. Tel: 886-2-2397-0300 •...

Table of Contents