Skybox Securoty Appliance 7000 Manual de usuario

Skybox Appliance 7000

Quick Start Guide

11.7.103

CentOS Linux release 7.9.2009 (Core)

Skybox Security, Inc. | 2077 Gateway Place, Suite 200, San Jose, CA 95110 USA | +1 866 675 9269 | skyboxsecurity.com

Skybox version 11.7.100 2

reserved.

Due to continued product development, the information contained in this document may

change without notice. The information and intellectual property contained herein are

confidential and remain the exclusive intellectual property of Skybox Security. If you find any

problems in the documentation, please report them to us in writing. Skybox Security does not

warrant that this document is error-free.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in

any form or by any means—electronic, mechanical, photocopying, recording, or otherwise—

without the prior written permission of Skybox Security.

Skybox®, Skybox®Security, Skybox Firewall Assurance, Skybox Network Assurance, Skybox

Vulnerability Control, Skybox Change Manager, Skybox Appliance

5500/6000/7000/8000/8050/11000/12100/12200, and the Skybox Security logo are either

registered trademarks or trademarks of Skybox Security, Inc., in the United States and/or other

countries. All other trademarks are the property of their respective owners.

Skybox version 11.7.100 3

Contents

Contents 3

Overview 5

Basic architecture 5

Related documentation 5

Skybox Appliance specifications 6

Before you open the box 6

What’s in the box 6

Physical specifications 6

Environmental specifications 7

MTBF estimates for Skybox Appliance 8

Front panel 8

Back panel connectors 10

File system partitions 10

Setting up Skybox Appliance 11

Hardware installation 11

Starting Skybox Appliance 12

Available Installation Processes 12

System configuration 13

What’s next 16

Configuring Skybox Appliance 18

Configuration and management options 18

Setting up network interface bonding 19

Setting up SNMP configuration 21

RADIUS authentication 22

LDAP authentication 23

Changing the TLS version 25

Sending CentOS logs to a remote syslog server 27

Customizing the syslog server 28

Setting up TCP and UDP listeners 28

Working with syslog files 28

Skybox Manager Installation 30

Skybox Manager system requirements 30

Installing Skybox Manager 30

Upgrading Skybox Manager 31

Updating the operating system on Skybox Appliance 32

Skybox Appliance 7000 Quick Start Guide

Skybox version 11.7.100 4

ISO burning 34

SSH hardening 35

Firmware updates for Skybox Appliance 36

Checking your firmware revision via the console 36

Checking your firmware revision via RMM 37

Preparing to update 39

Updating via the console 40

Updating via RMM 41

Adding your own certificate 50

Exporting the Server certificate and private key from the Java keystore 51

Selecting the Skybox Appliance Installation 53

Overview 53

Modify the Skybox Server and Collector Parameters 54

Install only the Skybox Collector 55

Install Standalone Elasticsearch Node 56

Monitoring SNMP 57

Troubleshooting 60

Restoring Skybox Appliance to factory defaults 61

Wiping the hard disk drive 62

CIS benchmarks for CentOS 7 63

Regulatory and safety information 71

Product regulatory compliance 71

Regulatory compliance markings 72

Electromagnetic compatibility notices for the server board 75

Skybox version 11.7.100 5

Chapter 1

Overview

Skybox®Appliance is a hardware solution that enables you to deploy Skybox without the

burden of maintaining your own server.

Skybox is an Automated Risk and Compliance Management (ARCM) platform that helps

enterprise IT departments to discover and resolve potential security and compliance risks

before they impact your organization.

Skybox is a multi-tiered platform. Skybox Appliance runs the Skybox Server and users run

Skybox Managers (clients) that connect to the Skybox Server over the network. Skybox also

runs an additional Skybox component, the Skybox Collector, which connects to data sources

and imports the data to the Skybox Server.

The Skybox Server and Skybox Collector are preinstalled on Skybox Appliance and run at

startup.

In this chapter

Basic architecture 5

Related documentation includes:

lSkybox online help

lSkybox documentation

Note: If you are not using the latest version of Skybox, you can find the documentation for

your version at https://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/<major version/<minor version>/Docs. For example,

https://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/11.5/11.5.100/Docs

Skybox version 11.7.100 6

Chapter 2

Skybox Appliance specifications

This chapter contains product specifications and packaging information for your Skybox

Appliance.

In this chapter

Before you open the box 6

What’s in the box 6

Physical specifications 6

Environmental specifications 7

MTBF estimates for Skybox Appliance 8

Front panel 8

Back panel connectors 10

File system partitions 10

Before you open the box

Inspect the shipping carton to ensure that the packaging is not damaged and verify that all

tamper evident seals are intact. Verify that the Skybox Appliance serial number, purchase

order number, and FedEx tracking number match the information provided by Skybox

Customer Support.

What’s in the box

The following items are in the shipping carton:

lSkybox Appliance

lRack mount kit

lFront bezel

l2 AC power cords

lRJ45 to DB9 serial console cable

lSkybox Quick Start Guide

l2 DVDs

oSkybox: Installs Skybox on your Skybox Appliance; the DVD contains the Skybox

software and additional Appliance documentation

oRestore Appliance: Restores Skybox Appliance to factory settings

Physical specifications

The physical features of Skybox are listed in the following table.

Skybox Appliance 7000 Quick Start Guide

Skybox version 11.7.100 7

FEATURE DESCRIPTION

Form factor 1U rack mount chassis

Rack dimensions

(H x W x D)

1.7” x 17.25” x 23.84” (43.2 mm x 438.15 mm x 605.56 mm)

Weight lPackaged weight: 28.2 lb (12.8 kg)

lSystem weight: 19.6 lb (8.87 kg)

Power supply 450 W redundant AC

Data storage Embedded Software SATA RAID

lIntel®Rapid Storage Technology enterprise (RSTe) 4

lIntel®Embedded Server RAID Technology 2 (ESRT2) with optional RAID

5 key support

System cooling l3 managed 40 mm single rotor system fans

l2 power supply fans

Front panel features l1 power button with integrated LED

l1 system ID button with integrated LED

l1 system status LED

l2 NIC LEDs

l1 HDD activity LED

l1 system cold reset button

l2 USB 2.0 / 3.0 connectors

lDB-15 video connector

lBezel with lock support

External I/O

connectors

(back panel)

lDB-15 video connector

lDedicated RJ45 server management NIC

l6 RJ-45 1000baseT network interfaces (1 GB Ethernet LAN)

l2 USB 2.0 Ports

l2 USB 3.0 Ports

Compliant standards CE, UL, VCCI, BSMI, GS, ICES-003, FCC Part 15, IEC 60950-1, and more

For detailed information, see Regulatory and safety information.

Environmental specifications

Environmental specifications for Skybox are listed in the following table.

PROPERTY LIMITS

Operating

temperature

lASHRAE Class A2: Continuous Operation. 10ºC to 35ºC (50ºF to 95ºF) with the

maximum rate of change not to exceed 10°C per hour

lASHRAE Class A3: Includes operation up to 40ºC for up to 900 hours per year

Shipping

temperature

-40°C to +70°C (-40°F to 158°F)

Non-operating

humidity

50% to 90%, non-condensing with a maximum wet bulb of 28°C (at temperatures

from 25°C to 35°C)

Shock lOperating: Half sine, 2 g peak, 11 msec

Chapter 2 Skybox Appliance specifications

Skybox version 11.7.100 8

PROPERTY LIMITS

lUnpackaged: Trapezoidal, 25 g, velocity change is based on packaged weight

lPackaged: ISTA (International Safe Transit Association) Test Procedure 3A

2008

Vibration lUnpackaged: 5 Hz to 500 Hz, 2.20 g RMS random

lPackaged: ISTA (International Safe Transit Association) Test Procedure 3A

2008

ESD lAir Discharge: 12.0 kV

lContact Discharge: 8.0 kV

Acoustic sound

power

Servers/rack mount sound power level for the following wattages are all 7.0 dBA

Power in wattage: <300 W, ≥300 W, ≥600 W, ≥1000 W

System cooling

requirement

840.7 BTU/hour

EMI operating Required to meet EMI emission requirements, tested as part of system

MTBF estimates for Skybox Appliance

The estimated mean time between failures (MTBF) and Failures in Time (FIT) for Skybox

Appliance 7000 are listed in the following table.

COMPONENT MTBF (HOURS) ESTIMATED FIT

Hot Swap Backplane 9419052 107

1-Slot Riser Card (per card) 106005093 10

Standard Front Panel 16324108 62

Intel®Server Board 993177 1443

Power Supply 450W 1131559 884

System Fan 370728 2698

System MTBF hrs @ 40°C 94380 10596

System MTBF hrs @ 35°C 117894

System MTBF hrs @ 25°C 181829

Model: Telcordia Issue 2

Method I-D

Duty cycle 100%

Quality Level II

Note: The estimates listed here are for Appliance in 40°C ambient air.

Front panel

Skybox Appliance 7000 front panel includes 2 USB connectors, a power button, and LEDs.

Skybox Appliance 7000 Quick Start Guide

Skybox version 11.7.100 9

Power button and LEDs

LETTER FEATURE

A System ID button with integrated LED

B NMI button (recessed; tool required for use)

C NIC1 and NIC2 activity LEDs

D System cold reset button

E System status LED

F Power button with integrated LED

G Hard drive activity LED

Front panel LED functions

LED COLOR /

STATE

DESCRIPTION

Power/Sleep

Green / on Power on

Green /

blinking

Sleep

Off Power off

NIC LEDs

Green / on Network link but no network activity

Green /

blinking

Network activity

Off No link

Chapter 2 Skybox Appliance specifications

Skybox version 11.7.100 10

LED COLOR /

STATE

DESCRIPTION

System Status

Green / on System ready/no alarm

Green /

blinking

System ready but degraded: Redundancy lost (for example, a power

supply or fan failure); non-critical temperature or voltage threshold

reached; battery failure; or predictive power supply failure.

Amber /

Critical Alarm: Critical power modules failure, critical fans failure,

voltage (power supply), critical temperature and voltage

Amber /

blinking

Non-Critical Alarm: Redundant fan failure, redundant power module

failure, non-critical temperature, and voltage

Off Power off: System unplugged

Power on: System powered off and in standby, no prior degraded/non-

critical/critical state

Back panel connectors

Skybox Appliance 7000 back panel includes the connectors shown in the following figure.

By default:

leno1 is enabled and configured as DHCP

leno2 is enabled and configured as static with the IP address: 192.168.1.1 /24

You can change these values.

File system partitions

By default, the Skybox Appliance file system is partitioned as follows:

l/tmp partition – 5%

l/ (root) partition – 10%

l/var partition – 30%

lSwap partition: The swap size is set to half the total RAM but no more than 8% of total

storage

l/opt partition – remainder of storage

Tabla de contenidos

Manuales populares de Plataforma multiservicio de otras marcas

Banner

Banner SureCross DX99 FlexPower Series Manual de usuario

VeEX

VeEX eCPRI Manual de usuario

Vestil

Vestil FTLP Series Manual de usuario

ATD Tools

ATD Tools ATD7341 Instrucciones de uso

Calix

Calix E7-20 Manual de usuario

Vestil

Vestil WP Series Manual de usuario

Bosch

Bosch XDK Manual de usuario

TEUPEN

TEUPEN LEO 23 GT Manual de usuario

Juniper

Juniper NFX350 Manual de usuario

Vestil

Vestil WP Series Hoja de especificaciones

Cisco

Cisco ONS 15454 Series Manual

Airo

Airo XS Series Manual de usuario

Siemens

Siemens RUGGEDCOM RX1400 Manual de usuario

Siemens

Siemens SIMATIC NET RUGGEDCOM MX5000 Manual de usuario

PASCO

PASCO ME-6834 Manual de usuario

Parker

Parker P2M Node 24 DO Manual de usuario

Cisco

Cisco ONS 15454 Series Manual de usuario

Infinera

Infinera ATN Instrucciones de funcionamiento e instalación