M86 Security 300 User manual

M86 Security Reporter
INSTALLATION GUIDE
Models: 300, 500, 700, 705, 730, 735
Software Version: 3.0.00
Document Version: 10.30.10

II M86 SECURITY INSTALLATION GUIDE
M86 SECURITY REPORTER INSTALLATION GUIDE FOR
300, 500, 700, 705, 730, 735 MODELS
© 2010 M86 Security
All rights reserved. Printed in the United States of America
This document may not, in whole or in part, be copied, photocopied, reproduced, trans-
lated, or reduced to any electronic medium or machine readable form without prior writ-
ten consent from M86 Security.
Every effort has been made to ensure the accuracy of this document. However, M86
Security makes no warranties with respect to this documentation and disclaims any
implied warranties of merchantability and fitness for a particular purpose. M86 Security
shall not be liable for any error or for incidental or consequential damages in connec-
tion with the furnishing, performance, or use of this manual or the examples herein.
Due to future enhancements and modifications of this product, the information
described in this documentation is subject to change without notice.
Trademarks
Other product names mentioned in this manual may be trademarks or registered trade-
marks of their respective companies and are the sole property of their respective man-
ufacturers.
Part# SR-IG-101030

M86 SECURITY INSTALLATION GUIDE iii
CONTENTS
M86 SR A PPLIANCE I NTRODUCTION ................................................................1
About this Document...................................................................................................... 2
Security Reporter Models 705 and 735. ........................................................................ 3
System x3620 M3 Type 7376 Installation and User’s Guide ...................................................3
System x3620 M3 Rack Installation Instructions ...................................................................... 3
Integrated Management Module User’s Guide ........................................................................3
Conventions Used in this Document. ........................................................................... 4
S ERVICE I NFORMATION ....................................................................................5
M86 Technical Support Call Procedures. ..................................................................... 5
IBM System x3620 M3 Support...................................................................................... 5
P RELIMINARY S ETUP P ROCEDURES .................................................................6
Unpack the Unit from the Carton................................................................................... 6
Select a Site for the Server............................................................................................. 7
300 Model Server Setup Procedures .......................................................................................7
Set Top Applications ..........................................................................................................7
Optional 1U 2-Unit Tray Kit Applications ........................................................................... 7
Rack Mount the Server. .................................................................................................. 8
Rack Setup Precautions ...........................................................................................................8
Rack Mount Instructions for 500 Model Servers ...................................................................... 9
Rack Setup Suggestions ...................................................................................................9
Install the Inner Slides .......................................................................................................9
Install the Outer Slides ......................................................................................................9
Install the Slide Assemblies to the Rack .......................................................................... 10
Install the Chassis into the Rack . .................................................................................... 11
Rack Mount Instructions for 700 and 730 Model Servers ......................................................12
Rack Setup Suggestions .................................................................................................12
Identify the Sections of the Rack Rails ............................................................................12
Install the Inner Rails . ......................................................................................................13
Install the Outer Rails ......................................................................................................13
Install the Server into the Rack ........................................................................................15
Install the Server into a Telco Rack .................................................................................16
Install the Bezel on the 500, 700, and 730 Model Chassis ....................................................17
Check the Power Supply. ............................................................................................. 18
Power Supply Precautions .....................................................................................................18
General Safety Information. ......................................................................................... 18
Server Operation and Maintenance Precautions ................................................................... 18
AC Power Cord and Cable Precautions .................................................................................19
Electrical Safety Precautions .................................................................................................19
Motherboard Battery Precautions ..........................................................................................20
I NSTALL THE S ERVER ....................................................................................21

CONTENTS
iv M86 SECURITY INSTALLATION GUIDE
Step 1: Setup Procedures. ........................................................................................... 21
Quick Start Setup Requirements ............................................................................................ 21
LCD Panel Setup Requirements ............................................................................................ 21
Step 1A: Quick Start Setup Procedures...................................................................... 22
Storage Device Setup (for Attached Storage Units) ............................................................... 22
Link the Workstation to the SR ...............................................................................................22
Monitor and Keyboard Setup ...........................................................................................22
Serial Console Setup .......................................................................................................22
Power on the SR ....................................................................................................................23
Power up a 300 Model ..................................................................................................... 23
Power up a 500, 700, or 730 Model . ...............................................................................24
Power up a 705 or 735 Model .........................................................................................24
HyperTerminal Setup Procedures ..........................................................................................25
Login screen ...........................................................................................................................28
Quick Start menu screen ........................................................................................................28
Quick Start setup ....................................................................................................................29
Configure network interface LAN1 ................................................................................... 30
Configure network interface LAN2 ...................................................................................30
Configure default gateway ...............................................................................................30
Configure DNS servers .................................................................................................... 30
Configure host name ....................................................................................................... 30
Time Zone regional setting .............................................................................................. 31
Configure setup wizard user ............................................................................................31
Non-Quick Start procedures or settings ........................................................................... 32
Reboot system ...........................................................................................................32
Change Quick Start password ...................................................................................32
Reset Admin account .................................................................................................32
System Status screen ............................................................................................................33
Log Off, Disconnect the Peripherals ......................................................................................33
Step 1B: LCD Panel Setup Procedures....................................................................... 34
Storage Device Setup (for Attached Storage Units) ............................................................... 34
LCD Panel ..............................................................................................................................34
LCD panel keypad ...........................................................................................................34
LCD Menu . ......................................................................................................................35
M86 menu ..............................................................................................................................35
IP / LAN1 and 2 . ..............................................................................................................36
Gateway ..........................................................................................................................36
DNS 1 and 2 ....................................................................................................................36
Host Name .......................................................................................................................37
Regional Setting (Time Zone, date, time) ........................................................................37
Configure Setup Wizard User ..........................................................................................37
Non-Quick Start procedures or settings ........................................................................... 38
SR Patch Level ..........................................................................................................38
Reset Admin Account.................................................................................................38
Reboot........................................................................................................................ 38
Shutdown ...................................................................................................................38
LCD Options menu .................................................................................................................39
Heartbeat .........................................................................................................................39
Backlight ..........................................................................................................................39
LCD Controls ...................................................................................................................39
Step 2: Physically Connect the Unit to the Network.................................................. 40
Bandwidth Management ........................................................................................................40
Step 3: Access the SR and its Applications Online................................................... 41

CONTENTS
M86 SECURITY INSTALLATION GUIDE v
Access the SR via its LAN 1 IP Address ................................................................................ 41
Accept the Security Certificate in Firefox ...............................................................................42
Temporarily Accept the Security Certificate in IE ...................................................................44
Accept the Security Certificate in Safari .................................................................................45
Accept the End User License Agreement ..............................................................................46
Log in to the Security Reporter Wizard ..................................................................................47
Use the SR Wizard to Specify Application Settings ...............................................................47
Enter Main Administrator Criteria ..................................................................................... 47
Enter Bandwidth Range ...................................................................................................48
Enter Web Filter Setup Criteria ........................................................................................48
SWG Setup Criteria .........................................................................................................48
Save settings ...................................................................................................................48
Step 4: Generate SSL Certificate................................................................................. 49
Generate a Self-Signed Certficate for the SR ........................................................................ 49
IE Security Certificate Installation Procedures .......................................................................51
Accept the Security Certificate in IE ................................................................................ 51
Windows XP or Vista with IE 7 or 8............................................................................51
Windows 7 with IE 8................................................................................................... 55
Map the SR’s IP Address to the Server’s Host Name .....................................................56
Step 5: Add Web Filter, SWG to Device Registry....................................................... 58
Add a Web Filter Device ........................................................................................................58
Add an SWG Device ..............................................................................................................59
Step 6: Set up Web Filter, SWG Log Transfers. ......................................................... 60
Web Filter Setup ....................................................................................................................60
Web Filter Configuration ..................................................................................................60
Web Filter Log Transfer Verification . ...............................................................................61
Set Self-Monitoring .......................................................................................................... 62
SWG Setup ............................................................................................................................63
SWG Configuration for Software Version 10.0 ................................................................63
Configure SWG to Send Logs to the SR....................................................................63
Policy Settings............................................................................................................ 64
SWG Configuration for Software Version 9.2.5 . ..............................................................65
Configure SWG to Send Logs to the SR....................................................................65
Policy Settings ........................................................................................................... 66
Single Sign-On Access, Default Username/Password. ............................................. 67
Single Sign-On Access ..........................................................................................................67
Default Usernames and Passwords .......................................................................................67
C ONCLUSION ................................................................................................68
B
EST R EPORTING P RACTICES .......................................................................69
Report Manager Usage Scenarios............................................................................... 70
I. Summary Report and Drill Down Report exercise ..............................................................70
Step A: Use Summary Reports for a high level activity overview ...................................70
Step B: Further investigate using a Summary Drill Down Report ................................... 71
Step C: Create a new report using yesterday’s date scope .............................................72
Step D: Create a double-break report with two sets of criteria .......................................73
Step E: Create a Detail Drill Down Report to obtain a list of URLs ..................................74
II. Double-break Report and Export Report exercise .............................................................75
Step A: Drill down to view the most visited sites in a category ........................................75
Step B: Modify the report view to only display top 10 site records .................................. 76

CONTENTS
vi M86 SECURITY INSTALLATION GUIDE
Step C: Export the report view in the PDF output format ................................................77
III. Save and schedule a report exercise ................................................................................ 78
Step A. Save a report ......................................................................................................78
Step B. Schedule a recurring time for the report to run ................................................... 79
IV. Create a Custom Category Group and generate reports ..................................................80
Step A: Create a Custom Category Group ......................................................................80
Step B: Run a report for a specified Custom Category Group .........................................81
V. Create a custom User Group and generate reports ..........................................................82
Step A: Create a custom User Group ..............................................................................82
Step B: Generate a report for a custom User Group .......................................................83
Real Time Reports Usage Scenarios........................................................................... 84
I. Screen navigation exercise .................................................................................................84
Step A: Navigate panels in the Gauges section .............................................................. 84
Step B: Navigate panels in the Policy section .................................................................85
II. Drill down into a gauge exercise ........................................................................................85
Step A: Select the gauge with the highest score .............................................................85
Step B: Investigate a user’s activity in a specified gauge ................................................ 87
Step C: Investigate the user’s Internet activity in other gauges ....................................... 88
III. Create a gauge exercise ...................................................................................................89
Step A: Access the Add/Edit Gauges panel ....................................................................89
Step B: Add a URL Gauge ..............................................................................................90
IV. Create an email alert exercise ..........................................................................................92
Step A: Add a new alert ...................................................................................................92
Step B: Select Email Alert Action . ................................................................................... 94
Step C: Receiving an email alert . ....................................................................................95
Security Reports Usage Scenarios. ............................................................................ 96
I. Explore the four basic Security Reports types ....................................................................96
Step A: Navigate to the Blocked Viruses report ..............................................................96
Step B: Navigate to the Security Policy Violations report ................................................ 97
Step C: Navigate to the Traffic Analysis report ................................................................97
Step D: Navigate to the Rule Transactions report ...........................................................98
Step E: Modify the current report view ............................................................................98
II. Create a customized Security Report ..............................................................................100
Exercise A: Use the current view to generate a custom report ......................................100
Exercise B: Use the Report Wizard to run a custom report ...........................................102
III. Export a Security Report .................................................................................................103
Step A: Specify records to include in the report ............................................................103
Step B: Specify Break Type and URL limitation criteria .................................................103
Step C: Download or email the report ...........................................................................103
Option 1: Download the report .................................................................................103
Option 2: Email the report ........................................................................................103
Step D: View the exported Security Report ...................................................................104
IV. Save a Security Report ...................................................................................................105
Step A: Select Report Settings, Save option .................................................................105
Step B: Specify criteria in the Report Details frame .......................................................106
Step C: Select the users or group in the Users frame ...................................................106
Step D: Populate the Email Settings frame . ..................................................................107
Step E: Save the report .................................................................................................107
V. Schedule a Security Report to run ................................................................................... 107
Exercise A: Use the current report view to schedule a run event ..................................107
Exercise B: Use the Wizard to create and schedule reports . ........................................110
Access the Report Schedule panel . ..............................................................................111
View Details for a Scheduled Report Run Event......................................................111
I MPORTANT I NFORMATION ABOUT USING THE SR IN THE E VALUATION M ODE 113

CONTENTS
M86 SECURITY INSTALLATION GUIDE vii
Evaluation Mode Pop-Up............................................................................................ 113
Report Manager Server Information Panel. .............................................................. 114
LED I NDICATORS AND B UTTONS .................................................................115
Front Control Panels on 500, 700 and 730 Models. ................................................. 115
Rear Panel on the 700 and 730 Model....................................................................... 116
Front Control Panel on a 300 Model.......................................................................... 116
Chassis Panels on a 705 and 735 Model................................................................... 116
R EGULATORY S PECIFICATIONS AND D ISCLAIMERS .......................................117
Declaration of the Manufacturer or Importer............................................................ 117
Safety Compliance ...............................................................................................................117
Electromagnetic Compatibility (EMC) ..................................................................................117
Federal Communications Commission (FCC) Class A Notice (USA) ..................................117
FCC Declaration of Conformity ............................................................................................117
Electromagnetic Compatibility Class A Notice .....................................................................117
Industry Canada Equipment Standard for Digital Equipment (ICES-003) .....................117
EC Declaration of Conformity ...............................................................................................118
European Community Directives Requirement (CE) .....................................................118
A PPENDIX A: F IBRE C HANNEL C ONNECTED S TORAGE D EVICE .....................119
Preliminary Setup Procedures................................................................................... 119
Unpack the Unit from the Carton ..........................................................................................119
Other Required Installation Items .........................................................................................119
Rack Mount the Server ........................................................................................................120
Rack Mount Components ..............................................................................................120
Rack Setup Precautions ................................................................................................120
Step 1 . ...........................................................................................................................121
Step 2 ............................................................................................................................121
Step 3 ............................................................................................................................121
Step 4 . ...........................................................................................................................122
Step 5 ............................................................................................................................122
Step 6 ............................................................................................................................122
Install the Unit. ............................................................................................................ 123
Link the SR Unit with the Fibre Channel Connected Device ................................................123
Shut Down, Restart Procedures ........................................................................................... 124
Shut Down the Storage Device Unit ..............................................................................124
Restart the Storage Device Unit ....................................................................................124
Physical Components................................................................................................. 125
LED Display .........................................................................................................................126
Temperature and Ventilation Status ..............................................................................126
Power Supply Status .....................................................................................................126
Management Alarm .......................................................................................................126
Silence Button ...............................................................................................................126
Disc Drive Alarm ............................................................................................................126
Disk Drive Activity .......................................................................................................... 126

CONTENTS
viii M86 SECURITY INSTALLATION GUIDE
A PPENDIX B: O PTIONAL E THERNET T AP I NSTALLATION ...............................127
Preliminary Setup Procedures................................................................................... 127
Unpack the Ethernet Tap Unit from the Box ........................................................................127
Other Required Installation Items .........................................................................................127
Install the Ethernet Tap Unit. ..................................................................................... 127
I NDEX .........................................................................................................129

M86 SR APPLIANCE INTRODUCTION
M86 SECURITY INSTALLATION GUIDE 1
M86 SR APPLIANCE INTRODUCTION
Thank you for choosing to install and evaluate the M86 Security Reporter appli-
ance. The Security Reporter (SR) from M86 Security consists of the best in breed
of M86 Professional Edition reporting software consolidated into one unit, with the
capability to generate productivity reports of end user Internet activity from M86
Web Filter and/or M86 Secure Web Gateway (SWG) appliance(s), and security
reports from an SWG.
Using a Web Filter, you have the option to use an SR 300, 500, 700 or 730 Equus
model, or an SR 705 or 735 IBM model.
Using an SWG, you have the option to use an SR 705 or 735 IBM model.
Using both a Web Filter and an SWG, you have the option to use either an SR 705
or 735 IBM model.
Logs of end user Internet activity from a Web Filter and/or SWG are fed into SR,
giving you an overall picture of end user productivity in a bar chart dashboard, and
the ability to interrogate massive datasets through flexible drill-down technology,
until the desired view is obtained. This “view” can be memorized and saved to a
user-defined report menu for repetitive, scheduled execution and distribution.
Web Filter logs provide content for dynamic, real time graphical snapshots of
network Internet traffic. Drilling down into the URL categories or bandwidth gauges
dashboard quickly identifies the source of user-generated Web threats. SWG logs
provide content for bar charts detecting security threats on the network so that
prompt action can be taken to terminate them before they become a liability on
your network.
Using the SR, threats to your network are readily targeted, thus arming you with
the capability to take immediate action to halt the source, secure your network, and
protect your organization against lost productivity, network bandwidth issues, and
possible legal problems that can result from the misuse of Internet and intranet
resources.
Quick setup procedures to implement the best reporting practices are included in
the Best Reporting Practices section that follows the Conclusion of this guide.

M86 SR APPLIANCE INTRODUCTION ABOUT THIS DOCUMENT
2M86 SECURITY INSTALLATION GUIDE
About this Document
This document is divided into the following sections:
•Introduction - This section is comprised of an overview of the SR product and
how to use this document
•Service Information - This section provides M86 Security contact information
•Preliminary Setup Procedures - This section includes instructions on how to
physically set up the SR appliance in your network environment
•Install the Server - This section explains how to configure the SR for reporting
•Conclusion - This section indicates that the installation steps have been
completed
•Best Reporting Practices - This section includes reporting scenarios and
instructions for implementing the best reporting practices to capture a snapshot
of end user activity on your network that tells you whether or not policies are
being enforced
•Evaluation Mode - This section gives information on using the SR in the eval-
uation mode
•LED Indicators and Buttons - This section explains how to read LED indica-
tors and use LED buttons for troubleshooting the unit
•Regulatory Specifications and Disclaimers - This section cites safety and
emissions compliance information for specified SR models
•Appendices - Appendix A explains how to set up the optional NAS (Fibre
Channel Connected Storage Device or “SAN”) unit. Appendix B explains how to
install the optional Ethernet Tap device on your network for bandwidth moni-
toring.
•Index - An alphabetized list of some topics included in this document