RSA enVision 60 Series Operating manual

RSA enVision
Hardware Setup and Maintenance Guide
60 Series

Copyright © 2011 EMC Corporation. All Rights Reserved. Published in the USA.
September 2011
Contact Information
Go to the RSA corporate web site for regional Customer Support telephone and fax numbers: www.rsa.com
Trademarks
RSA, the RSA Logo, RSA enVision, RSA Event Explorer and EMC are either registered trademarks or trademarks of EMC
Corporation in the United States and/or other countries. All other trademarks used herein are the property of their respective
owners. For a list of EMC trademarks, go to www.rsa.com/legal/trademarks_list.pdf.
License agreement
This software and the associated documentation are proprietary and confidential to EMC, are furnished under license, and
may be used and copied only in accordance with the terms of such license and with the inclusion of the copyright notice
below. This software and the documentation, and any copies thereof, may not be provided or otherwise made available to any
other person.
No title to or ownership of the software or documentation or any intellectual property rights thereto is hereby transferred. Any
unauthorized use or reproduction of this software and the documentation may be subject to civil and/or criminal liability.
This software is subject to change without notice and should not be construed as a commitment by EMC.
Third-party licenses
This product may include software developed by parties other than RSA. The text of the license agreements applicable to
third-party software in this product may be viewed in the thirdpartylicenses.pdf file.
Portions of this application include technology used under license from Visual Mining, Inc. 2000 - 2010.
Portions of this application include iAnywhere technology, 2001 - 2010.
Note on encryption technologies
This product may contain encryption technology. Many countries prohibit or restrict the use, import, or export of encryption
technologies, and current use, import, and export regulations should be followed when using, importing or exporting this
product.
Distribution
Use, copying, and distribution of any EMC software described in this publication requires an applicable software license.
EMC believes the information in this publication is accurate as of its publication date. The information is subject to change
without notice.
THE INFORMATION IN THIS PUBLICATION IS PROVIDED "AS IS." EMC CORPORATION MAKES NO
REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS
PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE.

Contents 3
RSA enVision Hardware Setup and Maintenance Guide
Contents
Preface................................................................................................................................... 7
About This Guide................................................................................................................7
RSA enVision Documentation............................................................................................ 7
Related Documentation....................................................................................................... 8
Support and Service ............................................................................................................ 8
Before You Call Customer Support............................................................................. 9
Chapter 1: Introduction to RSA enVision.......................................................11
Overview of RSA enVision ...............................................................................................11
RSA enVision Sites............................................................................................................11
Chapter 2: Appliance Layout................................................................................. 13
Overview of RSA enVision Appliance Layout................................................................. 13
Front Panel ........................................................................................................................ 13
LCD Panel Features ................................................................................................... 15
Hard Drive Indicators ................................................................................................ 16
Back Panel......................................................................................................................... 17
Power Indicator Codes............................................................................................... 19
Chapter 3: Single Appliance Site........................................................................ 21
Single Appliance Site Overview ....................................................................................... 21
Set Up a Single Appliance Site......................................................................................... 21
Configure the RSA DAS 2000.......................................................................................... 23
Configure Free Space on RSA enVision DAS-2000 ........................................................ 24
Chapter 4: Multiple Appliance Site.................................................................... 27
Multiple Appliance Site Overview ................................................................................... 27
Set Up a Multiple Appliance Site ..................................................................................... 27
Cabling Examples ............................................................................................................. 31
Enhanced Availability....................................................................................................... 37
Chapter 5: Remote Collector Site....................................................................... 39
Remote Collector Site Overview ...................................................................................... 39
Set Up a Remote Collector Site ........................................................................................ 39
Chapter 6: Adding an Appliance to an Existing Site.............................. 41
Preparing to Add an Appliance......................................................................................... 41
Determine Whether to Update Files on D-SRV1 ...................................................... 42
Update Files on D-SRV1 ........................................................................................... 42
Add an LC, A-SRV, or D-SRV to a Site .......................................................................... 43
Add an RC to a Site........................................................................................................... 45
Chapter 7: NAS Configuration.............................................................................. 47
Supported NAS Storage for RSA enVision ...................................................................... 47
Storage Specifications....................................................................................................... 49
NAS Configuration Values for VNX................................................................................ 50

4Contents
RSA enVision Hardware Setup and Maintenance Guide
Creation of Storage Pools .......................................................................................... 51
Network Interface Configuration............................................................................... 51
Creation of the File Systems...................................................................................... 51
Creation of the Standalone CIFS Server.................................................................... 52
Creation of the CIFS Shares ...................................................................................... 54
iSCSI Configuration Settings..................................................................................... 56
Enable E-mail Connect Home ................................................................................... 57
Proxy Address Resolution Protocol........................................................................... 57
NAS Configuration Values for Celerra............................................................................. 58
Creation of Storage Pools .......................................................................................... 58
Network Interface Configuration............................................................................... 59
Creation of the File Systems...................................................................................... 59
Creation of the Standalone CIFS Server.................................................................... 61
Creation of the CIFS Shares ...................................................................................... 63
iSCSI Configuration Settings..................................................................................... 64
Enable Celerra Connect Home .................................................................................. 67
Proxy Address Resolution Protocol........................................................................... 67
Chapter 8: Factory Reimaging and Typing................................................... 69
Overview of Factory Reimaging and Typing ................................................................... 69
Factory Reimaging and Typing an Appliance .................................................................. 69
Disable Virtual Drives ............................................................................................... 69
Reimage the Appliances ............................................................................................ 70
Factory Type the Appliances ..................................................................................... 71
Appendix A: Hardware Specifications............................................................. 73
Hardware Location Requirements .................................................................................... 73
ES Appliance Specifications............................................................................................. 74
LS Appliance Specifications............................................................................................. 75
Appliance Specifications................................................................................................... 76
ES Storage Array Specifications....................................................................................... 78
LS Storage Array Specifications....................................................................................... 79
Rack Specifications for ENV-NAS53-1 and ENV-NAS53-2 ................................... 82
Rack Specifications for RSA NAS 3500 and RSA NAS 7000.................................. 83
LS Network Switch Specifications ................................................................................... 84
Appliance Rack Specifications ......................................................................................... 85
Safety and Regulatory Statements .................................................................................... 86
Caution....................................................................................................................... 86
Appendix B: Changing Passwords................................................................... 87
Passwords for RSA enVision and NAS ............................................................................ 87
Change Passwords on the NAS......................................................................................... 88
Change Passwords on the enVision Appliance Using the Password Manager Utility ..... 89
Verify Remote Collector Connectivity ............................................................................. 91
Change the DRAC (root) Password .................................................................................. 91
Verify Read/Write Permissions After Changing Passwords............................................. 91

Contents 5
RSA enVision Hardware Setup and Maintenance Guide
Verify Permissions on D-SRVs ................................................................................. 91
Verify Permissions on Collectors .............................................................................. 92
Verify Permissions on A-SRVs ................................................................................. 92
Additional Passwords........................................................................................................ 93
Troubleshooting ................................................................................................................ 94
Change Passwords that were Accidentally Updated Manually ................................. 94
Glossary............................................................................................................................. 97

Preface 7
RSA enVision Hardware Setup and Maintenance Guide
Preface
About This Guide
This guide contains information on setting up and maintaining your RSA enVision
hardware appliance. Use this guide in conjunction with the Configuration Guide. It is
intended for system administrators who need to setup an enVision appliance.
RSA enVision Documentation
For information about the RSA enVision platform, see the following documentation:
Release Notes.Provides information about what is new and changed in this
release, as well as workarounds for known issues. The latest version of the
Release Notes is available on RSA SecurCare Online at
https://knowledge.rsasecurity.com.
Overview Guide. Provides an introduction to RSA enVision platform features and
capabilities.
Hardware Setup and Maintenance Guide.Provides instructions on setting up and
maintaining RSA enVision appliances. Intended audience is the system
administrator.
Configuration Guide.Provides instructions on configuring an RSA enVision site.
Intended audience is the system administrator.
Migration Guide.Provides instructions on migrating data from a previous version
of the RSA enVision platform to the current version.
Virtual Deployment Guide. Provides instructions on installing an RSA enVision
single appliance site or Remote Collector on a virtual infrastructure.
Administrator’s Guide. Provides instructions on the basic setup and maintenance
of the RSA enVision platform. Includes instructions for the most common
administrator tasks.
User’s Guide. Provides information that helps users to get started using the
RSA enVision platform. Includes instructions for the most common user tasks.
Backup and Recovery Guide. Provides instructions on backing up an
RSA enVision system and recovering from a hardware failure.
Security Configuration Guide. Provides an overview of security configuration
settings in the RSA enVision platform.
Universal Device Support Guide. Describes how to add log collection and
analysis support for event sources that the RSA enVision platform does not
support.
RSA enVision Help. Provides comprehensive instructions on setting up
RSA enVision processing options and using RSA enVision analysis tools.

8Preface
RSA enVision Hardware Setup and Maintenance Guide
RSA continues to assess and improve the documentation. Check RSA SecurCare
Online for the latest documentation.
Related Documentation
For information about the RSA enVision Event Explorer module, see the following
documentation:
Release Notes.Provides information about what is new and changed in this
release, as well as workarounds for known issues.
Installation Guide.Provides instructions on installing the RSA enVision Event
Explorer module on your client machine in separate guides for Microsoft
Windows and Apple Macintosh operating systems. Intended audience is the end
user.
RSA enVision Event Explorer Help. Provides comprehensive instructions on
setting up and using the RSA enVision Event Explorer module.
For information about the RSA enVision EventSource Integrator, see the following
documentation:
Release Notes. Provides information about what is new and changed in this
release, as well as workarounds for known issues.
Overview Guide. Provides an introduction to RSA enVision EventSource
Integrator features and capabilities.
RSA enVision EventSource Integrator Help. Provides comprehensive
instructions on using RSA enVision Event Source Integrator.
Support and Service
RSA SecurCare Online offers a knowledgebase that contains answers to common
questions and solutions to known problems. SecureCare Online also offers
information on new releases, important technical news, and software downloads.
The RSA Secured Partner Solutions Directory provides information about third-party
hardware and software products that have been certified to work with RSA products.
The directory includes Implementation Guides with step-by-step instructions and
other information about interoperation of RSA products with these third-party
products.
RSA SecurCare Online https://knowledge.rsasecurity.com
Customer Support Information www.rsa.com/support
RSA Secured Partner Solutions Directory www.rsasecured.com

Preface 9
RSA enVision Hardware Setup and Maintenance Guide
Before You Call Customer Support
Make sure that you have direct access to the computer running the RSA enVision
software.
Please have the following information available when you call:
One of the following:
•On a 60-series appliance, the serial number of the appliance.
You can find the seven-character serial number on the chassis tag on the back
of the appliance, or open a Dell Openmanage Server Administrator session,
and click System > Properties > Summary to find the serial number in the
chassis service tag field.
•On a virtual appliance, the serial number of the RSA enVision software.
Open the C:\WINDOWS\system32\drivers\etc\Nie-oe.dat file, and locate
the line that begins with “S/N=”.
RSA enVision software version number.
The name and version of the operating system under which the problem occurs.
On a virtual appliance, the VMware ESX or ESXi server details.

1: Introduction to RSA enVision 11
RSA enVision Hardware Setup and Maintenance Guide
1Introduction to RSA enVision
•Overview of RSA enVision
•RSA enVision Sites
Overview of RSA enVision
The RSA enVision platform is a feature-rich compliance and security application. It
allows you to capture and analyze log information automatically from your network,
security, application, operating, and storage environments. The enVision LogSmart
Internet Protocol Database (IPDB) collects and protects all the data automatically,
from any network device, without filtering or agents. RSA enVision gives you an
accurate picture of how your network is being used, and by whom. It independently
monitors your network to verify security policies, generates alerts for possible
compliance breaches, and analyzes and reports on network performance.
RSA enVision is tightly coupled with its underlying appliance operating system and
hardware, and together they make up a highly scalable platform that provides
guaranteed levels of performance.
RSA enVision is made up of three components:
Application. Supports interactive users and runs the suite of analysis tools.
Collector. Captures incoming events.
Database. Manages access and retrieval of captured events.
RSA enVision Sites
RSA enVision is deployed on a site basis. The enVision components are deployed
based on the type of site that you have. The two types of sites are:
Single appliance site. The ES series appliances are designed to operate in a
stand-alone, non-distributed mode. They have all three enVision
components―Application, Collector, and Database―installed on one appliance.
The single appliance is a site. Some single appliance sites have an external storage
system.
For information on single appliance sites, see Chapter 3, “Single Appliance Site.”

12 1: Introduction to RSA enVision
RSA enVision Hardware Setup and Maintenance Guide
Multiple appliance site. The LS series appliances are designed to operate in a
distributed installation. Each enVision component―Application, Collector, and
Database―is on its own appliance. The appliances together form a site.
Distributed multiple appliance sites allow multiple installations of any of the three
appliance types to be deployed to manage the variety of network infrastructures
found in production environments. All multiple appliance sites have external
storage systems.
For information on multiple appliance sites, see Chapter 4, “Multiple Appliance
Site.”
For information on connecting a remote collector site with a multiple appliance
site, see Chapter 5, “Remote Collector Site.”

2: Appliance Layout 13
RSA enVision Hardware Setup and Maintenance Guide
2Appliance Layout
•Overview of RSA enVision Appliance Layout
•Front Panel
•Back Panel
Overview of RSA enVision Appliance Layout
The appliance layouts of the ES and LS series appliance hardware types are the same.
The internal specifications of the ES and LS series appliance hardware differ. For
information on hardware specifications, see Appendix A, “Hardware Specifications.”
Front Panel
The following figure shows the front panel of the RSA enVision appliance.
21 4 5 6 7 983
10
Item Indicator, Button, or
Connector Icon Description
1 Information tag Slide-out label panel for system information,
including the enVision appliance model
number.
2 Power-on
indicator,
power button
Lights when the system power is on.
The power button is configured to disable
accidental power down of the appliance.

14 2: Appliance Layout
RSA enVision Hardware Setup and Maintenance Guide
3 NMI button Use to troubleshoot software and device driver
errors.
Use this button only if directed to do so by
Customer Support or by the operating system
documentation. (Use the end of a paper clip to
press this button.)
4USB
connectors (2)
Use to connect USB 2.0-compliant devices to
the system.
5Video
connector
Use to connect a monitor to the system.
6LCDmenu
buttons
Allows you to navigate the control panel LCD
menu.
7 LCD panel Provides system ID, status information, and
system error messages.
The LCD lights blue during normal system
operation. The LCD lights amber when the
system needs attention, and the LCD panel
displays an error code followed by descriptive
text.
Note: If the system is connected to AC power
and an error has been detected, the LCD lights
amber regardless of whether the system has
been powered on.
8 System
identification
button
Use to locate a particular system within a rack.
When you push this button, the LCD panel on
the front and the system status indicator on the
back flash blue until you push the button again.
There is also a system identification button on
the back panel.
9 Optical drive
(CD/DVD)
One CD/DVD drive.
10 Hard Drive
Bays (6)
Six 3.5-inch hot-swappable hard drive bays.
The LS series A-SRV is fully populated with
six hard drives while all other appliance types
contain only two hard drives.
Item Indicator, Button, or
Connector Icon Description

2: Appliance Layout 15
RSA enVision Hardware Setup and Maintenance Guide
LCD Panel Features
The LCD panel provides system information and status messages to indicate that the
system is operating correctly or that the system needs attention.
The LCD backlight lights blue during normal operating conditions and lights amber to
indicate an error condition. When the system is in standby mode, the LCD backlight is
off. To turn on the LCD backlight, press the Select button on the LCD panel.
The following figure shows the LCD panel.
123 4
Item Description
1 Moves the cursor back in one-step increments.
2 Selects the menu item highlighted by the cursor.
3 Moves the cursor forward in one-step increments.
During message scrolling:
•Press once to increase scrolling speed.
•Press again to stop.
•Press again to return to default scrolling speed.
4 Use to locate a particular system within a rack. When you push this button, the
LCD panel on the front and the system status indicator on the back flash blue
until you push the button again. There is also a system identification button on
the back panel.

16 2: Appliance Layout
RSA enVision Hardware Setup and Maintenance Guide
Hard Drive Indicators
The hard drive carriers have two indicators:
•Drive-activity indicator
•Drive-status indicator
The following figure shows the hard drive indicators.
In RAID configurations, the drive-status indicator lights display different patterns as
drive events occur in the system. The drive indicator patterns for RAID hard drives are
shown in the following table.
Item Description
1 Drive-status indicator (green and amber)
2 Drive-activity indicator (green)
Drive-Status Indicator Pattern Drive Condition
Blinks green two times per second Identify drive/preparing for removal
Off Drive ready for insertion or removal
Blinks green, amber, and off Drive predicted failure
Blinks amber four times per second Drive failed
Blinks green slowly Drive rebuilding
Steady green Drive online
Blinks green three seconds, amber
three seconds, and off six seconds
Rebuild aborted

2: Appliance Layout 17
RSA enVision Hardware Setup and Maintenance Guide
Back Panel
The following figure shows the back panel of the RSA enVision appliance.
1
8 9 10 11 13 14 15127
234 5 6
Item Indicator, Button, or
Connector Icon Description
1 PCIe slot1 PCI Express x4-link (Generation 2) expansion
slot (2.881 inch full-height, 12.2 inch length)
2 PCIe slot 2 PCI Express x4-link (Generation 2) expansion
slot (2.881 inch low-profile, 9.5 inch length)
3 PCIe slot 3 PCI Express x8-link (Generation 2) expansion
slot (4.376 inch full-height, 9.5 inch length)
4 PCIe slot 4 PCI Express x8-link (Generation 2) expansion
slot (4.376 inch full-height, 9.5 inch length)
5 Power supply 1 570-W power supply
6 Power supply 2 570-W power supply
7 VFlash media
slot
Use to connect an external secure digital (SD)
memory for the optional iDRAC6 enterprise
card.
8 iDRAC6
enterprise port
Dedicated management port for the iDRAC6
Enterprise card.
9Serial
connector
Use to connect a serial device to the system.
10 Video
connector
Use to connect a VGA display to the system.
11 USB
connectors (2)
Use to connect USB 2.0-compliant devices to
the system.

18 2: Appliance Layout
RSA enVision Hardware Setup and Maintenance Guide
12 Ethernet
connectors (4)
Integrated 10/100/1000 NIC connectors labeled
Gb1, Gb2, Gb3, Gb4 from left to right.
13 System status
indicator
connector
Use to attach a system indicator extension cable
that is used on a cable management arm.
14 System status
indicator
Power-on indicator.
15 System
identification
button
Use to locate a particular system within a rack.
When you push this button, the LCD panel on
the front and the system status indicator on the
back flash blue until you push the button again.
There is also a system identification button on
the front panel.
Item Indicator, Button, or
Connector Icon Description

2: Appliance Layout 19
RSA enVision Hardware Setup and Maintenance Guide
Power Indicator Codes
An LED indicator on the power button indicates when power is supplied to the system
and the system is operational.
The power supplies have an indicator that shows whether power is present or whether
a power fault has occurred.
The following figure shows the power supply and the power supply status button.
Power supply status
The statuses are as follows:
•Not lit—AC power is not connected.
•Green—Power supply is operational.
•Amber—Problem with power supply.
Green and amber (alternating)—Power supply is mismatched with the other power
supply (a high-output 870-W power supply and an Energy Smart 570-W power supply
are installed in the same system). Replace the power supply that has the flashing
indicator with a power supply that matches the capacity of the other installed power
supply.