Raritan Computer Home Security System User Manual

Commandcenter secure gateway, Administrators guide, Release 4.3

CCA-0K-v4.3-E

December 2009

255-80-5140-00

CommandCenter Secure Gateway

Administrators Guide

Release 4.3

Table of contents

Document Outline

What's New in the CC-SG Administrators Guide
Introduction
- Prerequisites
- Terminology/Acronyms
- Client Browser Requirements
Accessing CC-SG
- Browser-Based Access via the CC-SG Admin Client
  - JRE Incompatibility
- Thick Client Access
  - Install the Thick Client
  - Use the Thick Client
- CC-SG Admin Client
Getting Started
- Confirming IP Address
- Setting CC-SG Server Time
- Checking the Compatibility Matrix
- Checking and Upgrading Application Versions
Configuring CC-SG with Guided Setup
- Before You Use Guided Setup
- Associations in Guided Setup
  - Create Categories and Elements
- Device Setup
  - Discover and Add Devices
- Creating Groups
  - Add Device Groups and Node Groups
- User Management
  - Add User Groups and Users
Associations, Categories, and Elements
- About Associations
- Adding, Editing, and Deleting Categories and Elements
- Adding Categories and Elements with CSV File Import
Devices, Device Groups, and Ports
- Viewing Devices
  - The Devices Tab
  - Device and Port Icons
  - Port Sorting Options
  - Device Profile Screen
  - Topology View
  - Right Click Options in the Devices Tab
- Searching for Devices
  - Wildcards for Search
  - Wildcard Examples
- Discovering Devices
- Adding a Device
  - Add a KVM or Serial Device
  - Add a PowerStrip Device
  - Add a Dominion PX Device
- Editing a Device
- Editing a PowerStrip Device or a Dominion PX Device
- Adding Notes to a Device Profile
- Adding Location and Contacts to a Device Profile
- Deleting a Device
- Configuring Ports
  - Configure a Serial Port
  - Configure a KVM Port
  - Nodes Created by Configuring Ports
- Editing a Port
- Deleting a Port
- Configuring a Blade Chassis Device Connected to KX2
  - Blade Chassis Overview
  - Add a Blade Chassis Device
  - Edit a Blade Chassis Device
  - Delete a Blade Chassis Device
  - Move a Blade Chassis Device to a Different Port
- Restore Blade Servers Ports to Normal KX2 Ports
- Bulk Copying for Device Associations, Location and Contacts
- Device Group Manager
  - Device Groups Overview
  - Add a Device Group
  - Edit a Device Group
  - Delete a Device Group
- Adding Devices with CSV File Import
  - Devices CSV File Requirements
  - Sample Devices CSV File
  - Import Devices
  - Export Devices
- Upgrading a Device
- Backing Up a Device Configuration
- Restoring Device Configurations
  - Restore a Device Configuration (KX, KSX, KX101, SX, IP-Reach)
  - Restore All Configuration Data Except Network Settings to a KX2, KSX2, or KX2-101 Device
  - Restore Only Device Settings or User and User Group Data to a KX2, KSX2, or KX2-101 Device
  - Restore All Configuration Data to a KX2, KSX2, or KX2-101 Device
  - Save, Upload, and Delete Device Backup Files
- Copying Device Configuration
- Restarting a Device
- Pinging the Device
- Pausing CC-SG's Management of a Device
- Resuming Management
- Device Power Manager
- Launching a Device's Administrative Page
- Disconnecting Users
- Special Access to Paragon II System Devices
  - Paragon II System Controller (P2-SC)
  - IP-Reach and UST-IP Administration
Managed Powerstrips
- Configuring Powerstrips that are Managed by Another Device in CC-SG
- Configuring PowerStrips Connected to KX, KX2, KX2-101, KSX2, and P2SC
- Configuring PowerStrips Connected to SX 3.0 and KSX
- Configuring Powerstrips Connected to SX 3.1
- Configuring Outlets on a Powerstrip
Nodes, Node Groups, and Interfaces
- Nodes and Interfaces Overview
- Viewing Nodes
- Service Accounts
- Adding, Editing, and Deleting Nodes
- Adding Location and Contacts to a Node Profile
- Adding Notes to a Node Profile
- Configuring the Virtual Infrastructure in CC-SG
- Synchronizing the Virtual Infrastructure with CC-SG
  - Synchronize the Virtual Infrastructure
  - Enable or Disable Daily Synchronization of the Virtual Infrastructure
- Reboot or Force Reboot a Virtual Host Node
- Accessing the Virtual Topology View
- Connecting to a Node
- Pinging a Node
- Adding, Editing, and Deleting Interfaces
- Bookmarking an Interface
- Configuring Direct Port Access to a Node
- Bulk Copying for Node Associations, Location and Contacts
- Using Chat
- Adding Nodes with CSV File Import
- Adding, Editing, and Deleting Node Groups
Users and User Groups
- The Users Tab
- Default User Groups
- Adding, Editing, and Deleting User Groups
- Limit the Number of KVM Sessions per User
- Configuring Access Auditing for User Groups
- Adding, Editing, and Deleting Users
- Assigning a User to a Group
- Deleting a User From a Group
- Adding Users with CSV File Import
- Your User Profile
- Logging Users Out
- Bulk Copying Users
Policies for Access Control
- Adding a Policy
- Editing a Policy
- Deleting a Policy
- Support for Virtual Media
- Assigning Policies To User Groups
Custom Views for Devices and Nodes
- Types of Custom Views
- Using Custom Views in the Admin Client
  - Custom Views for Nodes
  - Custom Views for Devices
Remote Authentication
- Authentication and Authorization (AA) Overview
  - Flow for Authentication
  - User Accounts
- Distinguished Names for LDAP and AD
- Specifying Modules for Authentication and Authorization
- Establishing Order of External AA Servers
- AD and CC-SG Overview
- Adding an AD Module to CC-SG
- Editing an AD Module
- Importing AD User Groups
- Synchronizing AD with CC-SG
- About LDAP and CC-SG
- Add an LDAP (Netscape) Module to CC-SG
- About TACACS+ and CC-SG
- Add a TACACS+ Module
  - TACACS+ General Settings
- About RADIUS and CC-SG
- Add a RADIUS Module
  - RADIUS General Settings
  - Two-Factor Authentication Using RADIUS
Reports
- Using Reports
- Audit Trail Report
- Error Log Report
- Access Report
- Availability Report
- Active Users Report
- Locked Out Users Report
- All Users Data Report
- User Group Data Report
- Device Asset Report
- Device Group Data Report
- Query Port Report
- Node Asset Report
- Active Nodes Report
- Node Creation Report
- Node Group Data Report
- AD User Group Report
- Scheduled Reports
- Upgrade Device Firmware Report
System Maintenance
- Maintenance Mode
  - Scheduled Tasks and Maintenance Mode
- Entering Maintenance Mode
- Exiting Maintenance Mode
- Backing Up CC-SG
  - What is the difference between Full backup and Standard backup?
- Saving and Deleting Backup Files
  - Save a Backup File
  - Delete a Backup File
- Restoring CC-SG
- Resetting CC-SG
- Restarting CC-SG
- Upgrading CC-SG
  - Clear the Browser's Cache
  - Clear the Java Cache
- CC-SG Shutdown
- Restarting CC-SG after Shutdown
- Powering Down CC-SG
- Ending CC-SG Session
  - Log Out of CC-SG
  - Exit CC-SG
Advanced Administration
- Configuring a Message of the Day
- Configuring Applications for Accessing Nodes
  - About Applications for Accessing Nodes
  - Checking and Upgrading Application Versions
  - Older Version of Application Opens After Upgrading
  - Add an Application
  - Delete an Application
  - Prerequisites for Using AKC
- Configuring Default Applications
  - About Default Applications
  - View the Default Application Assignments
  - Set the Default Application for an Interface or Port Type
- Managing Device Firmware
  - Upload Firmware
  - Delete Firmware
- Configuring the CC-SG Network
  - About Network Setup
  - About CC-SG LAN Ports
  - What is IP Failover mode?
  - What is IP Isolation mode?
  - Recommended DHCP Configurations for CC-SG
- Configuring Logging Activity
  - Purge CC-SG's Internal Log
- Configuring the CC-SG Server Time and Date
- Connection Modes: Direct and Proxy
  - About Connection Modes
  - Configure Direct Mode for All Client Connections
  - Configure Proxy Mode for All Client Connections
  - Configure a Combination of Direct Mode and Proxy Mode
- Device Settings
  - Enable AKC Download Server Certificate Validation Overview
- Configuring Custom JRE Settings
- Configuring SNMP
  - MIB Files
- Configuring CC-SG Clusters
  - Requirements for CC-SG Clusters
  - Access a CC-SG Cluster
  - Create a Cluster
  - Configure Cluster Settings
  - Switch the Primary and Secondary Node Status
  - Recover a Cluster
  - Delete a Cluster
- Configuring a Neighborhood
  - What is a Neighborhood?
  - Create a Neighborhood
  - Edit a Neighborhood
  - Refresh a Neighborhood
  - Delete a Neighborhood
- Security Manager
  - Remote Authentication
  - AES Encryption
  - Configure Browser Connection Protocol: HTTP or HTTPS/SSL
  - Set the Port Number for SSH Access to CC-SG
  - Login Settings
  - Configure the Inactivity Timer
  - Portal
  - Certificates
  - Access Control List
- Notification Manager
  - Configure an External SMTP Server
- Task Manager
  - Task Types
  - Schedule Sequential Tasks
  - Email Notifications for Tasks
  - Scheduled Reports
  - Find and View Tasks
  - Schedule a Task
  - Schedule a Device Firmware Upgrade
  - Change a Scheduled Task
  - Reschedule a Task
  - Schedule a Task that is Similar to Another Task
  - Delete a Task
- SSH Access to CC-SG
  - Get Help for SSH Commands
  - SSH Commands and Parameters
  - Command Tips
  - Create an SSH Connection to a Serial-Enabled Device
  - Use SSH to Connect to a Node via a Serial Out-of-Band Interface
  - End SSH Connections
- Serial Admin Port
  - About Terminal Emulation Programs
  - Finding Your CC-SG Serial Number
- Web Services API
- CC-NOC
Diagnostic Console
- Accessing Diagnostic Console
  - Access Diagnostic Console via VGA/Keyboard/Mouse Port
  - Access Diagnostic Console via SSH
- Status Console
- Administrator Console
Power IQ Integration
- Power Control of Power IQ IT Devices
  - Configuring Power IQ Services
  - Configuring Power Control of Power IQ IT Devices
- Importing and Exporting Dominion PX Data from Power IQ
  - Import Power Strips from Power IQ
  - Export Dominion PX Data to Use in Power IQ
Specifications for V1 and E1
- V1 Model
  - V1 General Specifications
  - V1 Environmental Requirements
- E1 Model
  - E1 General Specifications
  - E1 Environmental Requirements
CC-SG and Network Configuration
- Required Open Ports for CC-SG Networks: Executive Summary
- CC-SG Communication Channels
User Group Privileges
SNMP Traps
CSV File Imports
- Common CSV File Requirements
- Audit Trail Entries for Importing
- Troubleshoot CSV File Problems
Troubleshooting
Diagnostic Utilities
- Memory Diagnostic
- Debug Mode
- CC-SG Disk Monitoring
Two-Factor Authentication
- Supported Environments for Two-Factor Authentication
- Two-Factor Authentication Setup Requirements
- Two-Factor Authentication Known Issues
FAQs
- General FAQs
- Authentication FAQs
- Security FAQs
- Accounting FAQs
- Performance FAQs
- Grouping FAQs
- Interoperability FAQs
- Authorization FAQs
- User Experience FAQs
Keyboard Shortcuts
Naming Conventions
- User Information
- Node Information
- Location Information
- Contact Information
- Service Accounts
- Device Information
- Port Information
- Associations
- Administration
Diagnostic Console Bootup Messages
Index