Skybox APPLIANCE 8000 Manuale utente

SKYBOX APPLIANCE 8000

QUICK START GUIDE

11.3.100

CentOS Linux release 7.9.2009 (Core)

Skybox version 11.3.100 2

Due to continued product development, the information contained in this document may change

without notice. The information and intellectual property contained herein are confidential and

remain the exclusive intellectual property of Skybox Security. If you find any problems in the

documentation, please report them to us in writing. Skybox Security does not warrant that this

document is error-free.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any

form or by any means—electronic, mechanical, photocopying, recording, or otherwise—without

the prior written permission of Skybox Security.

Skybox®, Skybox® Security, Skybox Firewall Assurance, Skybox Network Assurance, Skybox

Vulnerability Control, Skybox Threat Manager, Skybox Change Manager, Skybox Appliance

5500/6000/7000/8000/8050, and the Skybox Security logo are either registered trademarks or

trademarks of Skybox Security, Inc., in the United States and/or other countries. All other

trademarks are the property of their respective owners.

Skybox version 11.3.100 3

CONTENTS

Overview 5

Basic architecture 5

Related documentation 5

Skybox Appliance specifications 1

Before you open the box 1

What’s in the box 1

Physical specifications 1

Environmental specifications 2

MTBF estimates for Skybox Appliance 3

Front panel 3

Back panel connectors 5

File system partitions 5

Setting up Skybox Appliance 6

Hardware installation 6

Starting Skybox Appliance 6

System configuration 7

What’s next 11

Configuring the Appliance 12

Configuration and management options 12

Setting up network interface bonding 13

Setting up SNMP configuration 15

RADIUS authentication 16

LDAP authentication 17

Changing the TLS version 19

Sending CentOS logs to a remote syslog server 20

Customizing the syslog server 21

Setting up TCP and UDP listeners 21

How to work with syslog files 21

Skybox Manager Installation 23

Skybox Manager system requirements 23

Installing Skybox Manager 23

Upgrading Skybox Manager 23

Updating the operating system on Skybox Appliance 25

ISO burning 27

Skybox Appliance 8000 Quick Start Guide

Skybox version 11.3.100 4

SSH hardening 28

Firmware updates for Skybox Appliance 29

Checking your firmware revision via the console 29

Checking your firmware revision via RMM 29

Preparing to update 32

Updating via the console 33

Updating via RMM 33

Adding your own certificate 43

Exporting the Server certificate and private key from the Java keystore 44

Restoring the Appliance to factory defaults 46

Monitoring SNMP 47

Troubleshooting 49

Wiping the hard disk drive 50

CIS benchmarks for CentOS 7 51

Regulatory and safety information 58

Product regulatory compliance 58

Regulatory compliance markings 59

Electromagnetic compatibility notices for the server board 61

Skybox version 11.3.100 5

OVERVIEW

Skybox® Appliance is a hardware solution that enables you to deploy Skybox without the burden

of maintaining your own server.

Skybox® is an Automated Risk and Compliance Management (ARCM) platform that helps

enterprise IT departments to discover and resolve potential security and compliance risks before

they impact your organization.

Skybox is a multi-tiered platform. Skybox Appliance runs the Skybox Server and users run Skybox

Managers (clients) that connect to the Skybox Server over the network. Skybox also runs an

additional Skybox component, the Skybox Collector, which connects to data sources and imports

the data to the Skybox Server.

The Skybox Server and Skybox Collector are preinstalled on Skybox Appliance and run at startup.

Basic architecture

The Skybox platform consists of a 3-tiered architecture with a centralized server (Skybox Server),

data collectors (Skybox Collectors), and a user interface (Skybox Manager). Skybox can be

scaled to suit the complexity and size of any infrastructure.

See the Skybox architecture topic in the Skybox Installation and Administration Guide.

Related documentation includes:

lSkybox online help

lSkybox documentation

Note: If you are not using the latest version of Skybox, you can find the documentation for your

version at http://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/<your major version/<your minor version>/Docs. For example,

http://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/11.0/11.1.400/Docs

Chapter 1

Skybox version 11.3.100 1

SKYBOX APPLIANCE SPECIFICATIONS

This chapter contains product specifications and packaging information for your Skybox

Appliance.

Before you open the box

Inspect the shipping carton to ensure that the packaging is not damaged and verify that all tamper

evident seals are intact. Verify that the Appliance serial number, purchase order number, and

FedEx tracking number match the information provided by Skybox Customer Support.

What’s in the box

The following items are in the shipping carton:

lSkybox Appliance

lRack mount kit

lFront bezel

l2 AC power cords

lRJ45 to DB9 serial console cable

lSkybox Quick Start Guide

l2 DVDs

oSkybox: Installs Skybox on the Skybox Appliance; it contains the Skybox software and

additional Appliance documentation

oRestore Appliance: Restores the Skybox Appliance to factory settings

Physical specifications

The physical features of Skybox are listed in the following table.

Feature Description

Form factor 1U rack mount chassis

Rack dimensions

(H x W x D)

1.7” x 17.25” x 28” (43.2 mm x 438.15 mm x 712 mm)

Weight lSystem weight: 27.1 lb (12.3 kg)

lPackaged weight: 47 lb (21.3 kg)

Power supply 750 W redundant AC

Data storage Embedded Software SATA RAID

lIntel® Rapid Storage Technology enterprise (RSTe) 4.1

Chapter 2

Skybox Appliance 8000 Quick Start Guide

Skybox version 11.3.100 2

Feature Description

lIntel® Embedded Server RAID Technology 2 (ESRT2) 1.41 with optional RAID 5

key support

System cooling l6 managed 40 mm dual-rotor system fans

l2 power supply fans

Front panel features l1 power button with integrated LED

l1 system ID button with integrated LED

l1 system status LED

l2 NIC LEDs

l1 HDD activity LED

l1 system cold reset button

l2 USB 2.0 / 3.0 connectors

lDB-15 video connector

lBezel with lock support

External I/O

connectors

(back panel)

lDB-15 video connector

lRJ45 serial port A connector

lDedicated RJ45 server management NIC

l2 RJ-45 10000baseT network interfaces (10 GB Ethernet LAN): eno1 and eno2

l4 RJ-45 1000baseT network interfaces (1 GB Ethernet LAN): eno3, eno4,

ens513f2 and ens51f3

l3 USB 2.0 / 3.0 Ports

Compliant

standards

CE, UL, VCCI, BSMI, GS, ICES-003, FCC Part 15, IEC 60950-1, and more

For detailed information, see Regulatory and safety information.

Environmental specifications

Environmental specifications for Skybox are listed in the following table.

Property Limits

Operating

temperature

lASHRAE Class A2: Continuous Operation. 10ºC to 35ºC (50ºF to 95ºF) with the

maximum rate of change not to exceed 10°C per hour

lASHRAE Class A3: Includes operation up to 40ºC for up to 900 hours per year

lASHRAE Class A4: Includes operation up to 45ºC for up to 90 hours per year

Shipping

temperature

-40°C to +70°C (-40°F to 158°F)

Non-operating

humidity

50% to 90%, non-condensing with a maximum wet bulb of 28°C (at temperatures from

25°C to 35°C)

Shock lOperating: Half sine, 2 g peak, 11 msec

lUnpackaged: Trapezoidal, 25 g, velocity change is based on packaged weight

lPackaged: ISTA (International Safe Transit Association) Test Procedure 3A 2008

Vibration lUnpackaged: 5 Hz to 500 Hz, 2.20 g RMS random

Chapter 2 Skybox Appliance specifications

Skybox version 11.3.100 3

Property Limits

lPackaged: ISTA (International Safe Transit Association) Test Procedure 3A 2008

ESD lAir Discharge: 12.0 kV

lContact Discharge: 8.0 kV

System cooling

requirement

l2352.3 BTU/hour for 115-volt power

l2302.3 BTU/hour for 220-volt power

MTBF estimates for Skybox Appliance

The estimated mean time between failures (MTBF) and Failures in Time (FIT) for Skybox

Appliances 8000 and 8050 are listed in the following table.

Component MTBF (hours) Estimated FIT

4” x 3.5” 12 Gb Hot Swap Backplane – SATA/SAS 9579145 104

1-Slot Riser Card (per card) 20060338 50

Standard Front Panel 5053932 198

Intel® Server Board S2600WTT 230615 4336

AC 750W Platinum 537582 1860

Fan kit, 6 fans 50799 19685

Total FIT rate 26284

System MTBF hrs @ 40°C 38084

System MTBF hrs @ 35°C 48577

System MTBF hrs @ 25°C 63263

Model: Telcordia Issue 3*

Method 1 Case 3

Duty cycle 100%

Quality Level II

Note: The estimates listed here are for Appliance in 35°C ambient air with a rise of up to 10°C at

the Server Board.

Front panel

The Appliance front panel includes 2 USB connectors, a power button, and LEDs.

Skybox Appliance 8000 Quick Start Guide

Skybox version 11.3.100 4

Power button and LEDs

Letter Feature

A System ID button with integrated LED

B NMI button (recessed; tool required for use)

C NIC1 activity LED

D System cold reset button

E System status LED

F Power button with integrated LED

G Hard drive activity LED

H NIC2 activity LED

Front panel LED functions

LED Color /

State

Description

Power/Sleep Green /

Power on

Green /

blinking

Sleep

Off Power off

NIC LEDs Green /

Network link but no network activity

Green /

blinking

Network activity

Off No link

System Status Green /

System ready/no alarm

Green /

blinking

System ready but degraded: Redundancy lost (for example, a power supply

or fan failure); non-critical temperature or voltage threshold reached;

battery failure; or predictive power supply failure.

Amber /

Critical Alarm: Critical power modules failure, critical fans failure, voltage

(power supply), critical temperature and voltage

Chapter 2 Skybox Appliance specifications

Skybox version 11.3.100 5

LED Color /

State

Description

Amber /

blinking

Non-Critical Alarm: Redundant fan failure, redundant power module failure,

non-critical temperature, and voltage

Off Power off: System unplugged

Power on: System powered off and in standby, no prior degraded/non-

critical/critical state

Back panel connectors

The Appliance back panel includes the connectors shown in the following figure.

By default:

lNIC1 / eno1 is enabled and configured as DHCP

lNIC2 / eno2 is enabled and configured as static with the IP address: 192.168.1.1 /24

You can change these values.

File system partitions

The Skybox Appliance file system is partitioned as follows:

lThe Swap size is set to half the total RAM but no more than 8% of total storage

lBy default, the file system is partitioned as follows:

o/tmp partition – 5%

o/ (root) partition – 10%

o/var partition – 30%

oSWAP partition – per calculated swap size

o/opt partition – remainder of storage

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali skybox Hardware di rete

skybox

skybox 6000 Manuale utente

Manuali Hardware di rete popolari di altre marche

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuale utente

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuale utente

Yudor

Yudor YDS-16 Manuale utente

D-Link

D-Link ShareCenter DNS-320L Manuale utente

Samsung

Samsung ES1642dc Istruzioni per l’uso

Honeywell Home

Honeywell Home LTEM-PV Istruzioni per il montaggio

evertz

evertz 7700 Series Manuale utente

D-Link

D-Link ShareCenter DNS-343 Manuale utente

Asante

Asante AsanteBridge 1012 Manuale utente

FireBrick

FireBrick FB2700 Manuale utente

Audiovox Electronics

Audiovox Electronics ARWH2T Manuale utente

ADC

ADC DSX-1 Manuale

NetComm

NetComm NF2 Manuale utente

Alcatel-Lucent

Alcatel-Lucent 5620 Manuale utente

Dell EMC

Dell EMC XC6420 Series Manuale utente

Lanner

Lanner NCA-1020A Manuale utente

Allied Telesis

Allied Telesis AT-TN121-A Manuale utente

Arista

Arista CCA-ETM-Q12 Manuale utente

skybox APPLIANCE 8000 Manuale utente

Manuali Hardware di rete popolari di altre marche