Document Outline

• Chapter 1: Introduction
  • Stand-alone Appliances
  • Distributed 2500 Series Appliances
  • CommandCenter Secure Gateway (CC-SG)
    • User PC Preparation
    • Remote Authentication
      • Mapping of User Groups
    • Local Authentication
  • Intended Audience
  • Features Described in this Document
  • Terminology/Acronyms
  • Licensing Explained
    • Infrastructure
    • Server
    • Workstation
    • Promoted Workstation
• Chapter 2: General and Advanced Administration
  • Power Down CC-NOC
  • Appliance Shutdown/Restart
  • Appliance Network Settings
    • Configure Date and Time
    • Configure Network Connection
    • Change the ISP Gateway Address
    • Outgoing Email Communication
    • Change Nameserver Addresses
  • Network Management Configuration
    • Edit Discovery Ranges
      • Example
    • Edit SNMP Ranges
    • Configure Scheduled Outages
    • Configure Pollers
    • Manage, Unmanage, Rescan, or Delete Devices
    • Configure Performance Thresholds
    • Configure Outage Report
    • SNMP Reparenting Exclusion List
  • Associate CommandCenter Secure Gateway (CC-SG)
    • Configure a CC-SG
    • Create a CC-SG Peer via a Secure Channel
    • Disconnect a CC-SG
    • Delete a CC-SG
    • Map CC-SG User Groups to Local User Roles
  • Multi-Site Management
    • Configure Event Forwarding
      • Configure Event Recipients
      • Configure Event Severities to Forward
    • Configure Trap Relaying
  • Discover a Single Device
  • Edit Performance Thresholds (Per Device)
  • Administrator Tools
    • Export and Download Configuration Files
    • Download Log Files
    • Check Disk Utilization on Appliance
    • Send Incident Report
    • Generate Diagnostics File
    • Establish Support Connection
  • Download Data Archives
  • Advanced Administration
    • System Software & Signature Updates
      • Download Updates
      • Install Updates
      • View Installed Updates
      • View All Updates
      • Configure Automatic Download Settings
      • Upload Update Manually
    • Appliance Database Administration
    • Data Backup and Restore
      • Download a Backup File
      • Install a Backup File
      • Manually Upload a Backup File
    • Manage Routes
      • Add a New Network Route
    • Prune Unused Performance Data
    • Delete Management Settings and Data
    • Delete Traffic Analysis Performance Information
  • Install CC-NOC License
  • Installed Appliances List
• Chapter 3: Configuring Intrusion Detection
  • Configure a Spanned or Mirrored Port
  • Ethernet TAP
    • Benefits
    • Deployment
  • Configure Appliance Home Networks
  • Configure Port Scan Detection
  • Enable/Disable Signature Types via Signature Profiler
    • Select Intrusion Detection Appliance(s)
    • Select Types of Signatures to Monitor
    • Load Default Signatures or Settings from Another Appliance
  • Delete Intrusion Detection Performance Data
  • Advanced Intrusion Detection Administration
    • Manage Signatures
    • Upload Custom Signatures Tool
      • Hints and Tips:
• Chapter 4: Configuring Windows Management
  • Windows Management Instrumentation (WMI)
  • Configure an External Windows Proxy
    • External Proxy Host Requirements
    • Overview
    • Download and Run ProxyInstaller
    • Open Ports on External Proxy Host
    • Configuring the CC-NOC to communicate with the Proxy
      • Identifying Local Proxy
      • Specifying Windows Management Ranges
        • Management naming resolution
      • Proxy Identification and Credentials
    • Configuring a WINS Server or LMHOSTS File
      • Configure a WINS Server on External Proxy
        • Properties Dialog Box
        • Command Line Interface
      • Edit LMHOSTS File on External Proxy
  • Authenticate Windows Computers
    • Manage, Unmanage, or Rescan Devices
  • Configure Windows Performance Thresholds
  • Configure WINS Server or LMHOSTS File on 2500M
    • Edit WINS Settings
    • Edit LMHOSTS File
• Chapter 5: Configuring Vulnerability Scanning
  • Accessing Vulnerability Scanning
    • Vulnerability Scan Levels
      • Scan Level 1
      • Scan Level 2
      • Scan Level 3
      • Scan Level 4
    • Specify IP Addresses and Schedule the Scan
• Chapter 6: Configuring Notifications
  • Enable/Disable Notifications
  • Configure Event Notifications
    • Add/Edit a Notification
      • Select Event Type
      • Build and Validate an Interface/Service Rule
      • Enter Content for Notification and Notification Path
      • Arrange Notice Hierarchy
  • Configure Notification Groups
    • Add/Modify a Notification Group
  • Configure Notification Paths
    • Add/Edit a Notification Path
      • Create New Path Name and Specify Targets
      • Modify a Notification Path
      • Define Escalation in Notification Path
  • Configure TAP Paging
    • Add a new TAP Service
    • Edit Modem Parameters
  • Revert to Original Configuration
• Chapter 7: Managing Assets
  • Manage Assets
    • Import Assets
    • Export Assets
    • Map Unassociated Assets to Nodes
  • Clear All Asset Records
• Chapter 8: Creating Users, Categories, Views
  • Create, Modify, Delete Users
    • Add a New User
    • Edit a User
    • Adding/Editing a Duty Schedule
  • Configure Categories
  • Configure Views
    • Add/Modify an Existing View
    • Map Users
• Appendix A: Specifications
  • V1 Platform
    • General Specifications
    • Hardware Specifications
    • Remote Connection
    • Environmental Requirements
    • Electrical Specifications
• Appendix B: Troubleshooting
  • The Raritan Support Structure
    • The CC-NOC’s Ability to SSH to Raritan
  • Checking Appliance Database Settings
  • RAID Array Failure
  • The CC-NOC Services
    • Discovery
    • Capability Scanning
    • Pollers
    • Notifications
    • SNMP Data Collection
    • Vulnerability Scanning
    • Events, Historic Data, and Graphs
    • Windows Management
  • Your Network
  • Raritan Support Structure
    • Contacting Raritan
  • Discovery
    • Why Don’t I See the Machine Name for my Windows 2000 Systems?
    • Capability Scanning
    • Scanning Interfaces
    • Re-Parenting
    • Do the NetBIOS Node Names Match?
    • Are Both IP Addresses in the SNMP Interfaces Table?
    • Why Can’t My CC-NOC Manage X Service?
  • Pollers
  • Notifications
    • Why am I Not Receiving Notifications?
    • What Conditions Cause a Notification to be Sent?
  • SNMP Data Collection
    • SNMP – What it is and What it Does
    • Troubleshooting SNMP Data Collection
    • GetIF
  • Vulnerability Scanning
  • Historic Data and Graphs
    • How is Performance Data Summarized?
    • How are Service Level Availabilities Calculated?
    • Why isn’t SNMP Part of my Service Level Availability Calculations?
    • How Do I Interpret the SNMP Graphs/Reports?
  • Additional Support
    • The Tools Discussed in this Chapter
    • Documentation
    • How do I get Help?
• Appendix C: Performance Monitoring
  • Overview
  • SNMP Data Collection
  • SNMP Data Collection Enhancements
  • Windows Performance Metrics
  • Leveraging Performance Data in Network Management
  • Thresholding
    • How it works
      • Type
      • Value
      • Trigger
      • Rearm
      • Example
  • SNMP Performance Metric Thresholds
  • Windows Performance Metric Thresholds
• Appendix D: Setting up WMI on Target Machines
  • Configuring a Windows 98/ME box for Remote WMI Management
  • Configuring a Windows Proxy Details
    • Registry Changes [configuration]:
• Appendix E: Managing and Responding to Intrusion Detection Events
  • How the Intrusion Detection works
    • Reducing False Positives with the Signature Profiler
    • Signature Profiler and the Rules Engine
    • Responding to Events and Notifications
  • Event Categories
  • What do I do when…
  • What if I have been hacked?
  • Security – An Elusive Goal
• Appendix F: Notification Parameters
  • Notification Parameter Substitution
  • Available values
  • Notification:
  • Events:
  • Assets:
• Appendix G: Network Traffic Overhead: Network Management’s Necessary Evil
  • ICMP Pings
  • TCP Socket Reachability
  • HTTP Synthetic Transaction
  • SNMP Data Collection
  • Additional Notes