Skybox 6000 User manual

Skybox Appliance 6000

Quick Start Guide

11.6.110

CentOS Linux release 7.9.2009 (Core)

Skybox Security, Inc. | 2077 Gateway Place, Suite 200, San Jose, CA 95110 USA | +1 866 675 9269 | skyboxsecurity.com

Skybox version 11.6.100 2

reserved.

Due to continued product development, the information contained in this document may

change without notice. The information and intellectual property contained herein are

confidential and remain the exclusive intellectual property of Skybox Security. If you find any

problems in the documentation, please report them to us in writing. Skybox Security does not

warrant that this document is error-free.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in

any form or by any means—electronic, mechanical, photocopying, recording, or otherwise—

without the prior written permission of Skybox Security.

Skybox®, Skybox®Security, Skybox Firewall Assurance, Skybox Network Assurance, Skybox

Vulnerability Control, Skybox Change Manager, Skybox Appliance

5500/6000/7000/8000/8050/11000/12100/12200, and the Skybox Security logo are either

registered trademarks or trademarks of Skybox Security, Inc., in the United States and/or other

countries. All other trademarks are the property of their respective owners.

Skybox version 11.6.100 3

Contents

Contents 3

Overview 5

Basic architecture 5

Related documentation includes:

lSkybox online help

lSkybox documentation

Note: If you are not using the latest version of Skybox, you can find the documentation for

your version at https://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/<major version/<minor version>/Docs. For example,

https://downloads.skyboxsecurity.com/files/Installers/Skybox_

View/11.5/11.5.100/Docs

Skybox version 11.6.100 6

Chapter 2

Skybox Appliance specifications

This chapter contains product specifications and packaging information for your Skybox

Appliance.

In this chapter

Before you open the box 6

What’s in the box 6

Physical specifications 7

Environmental specifications 7

MTBF estimates for Skybox Appliance 8

Front panel 8

Back panel connectors 10

File system partitions 11

Before you open the box

Inspect the shipping carton to ensure that the packaging is not damaged and verify that all

tamper evident seals are intact. Verify that the Skybox Appliance serial number, purchase

order number, and FedEx tracking number match the information provided by Skybox

Customer Support.

What’s in the box

The following items are in the shipping carton:

lSkybox Appliance

lRack mount kit

lFront bezel

l2 AC power cords

lRJ45 to DB9 serial console cable

lSkybox Quick Start Guide

l2 DVDs

oSkybox: Installs Skybox on your Skybox Appliance; the DVD contains the Skybox

software and additional Appliance documentation

oRestore Appliance: Restores Skybox Appliance to factory settings

Skybox Appliance 6000 Quick Start Guide

Skybox version 11.6.100 7

Physical specifications

The physical features of Skybox are listed in the following table.

FEATURE DESCRIPTION

Form factor 1U rack mount chassis

Rack dimensions

(H x W x D)

1.70” x 17.245” x 27.93” (43.2 mm x 438 mm x 709.37 mm)

Weight lSystem weight: 31.8 lb (14.42 kg)

lPackaged weight: 42.4 lb (19.23 kg)

Power supply 750 W redundant AC

Data storage RAID 5

System cooling l6 dual-rotor, managed system fans

l2 power supply fans

Front panel features l1 power button with integrated LED

l1 system ID button with integrated LED

l1 system status LED

l4 NIC LEDs

l1 HDD activity LED

l1 system cold reset button

l2 USB 2.0 connectors

l1 video connector

lBezel with lock support

External I/O connectors

(back panel)

lDB-15 video connector

lRJ45 serial port A connector

l3 USB 2.0 Ports

l4 RJ-45 1000baseT network interfaces (1 GB Ethernet LAN)

Note: Ports I/O and RMM4 are not supported.

Compliant standards Ctick, NRTL, CE, FCC, EMC, BSMI, KC, and more

For detailed information, see Regulatory and safety information.

Environmental specifications

Environmental specifications for Skybox are listed in the following table.

PROPERTY LIMITS

Operating

temperature

+10°C to +35°C with the maximum rate of change not to exceed 10°C per hour

Non-operating

temperature

-40°C to +70°C

Non-operating

humidity

90%, non-condensing at 35°C

Chapter 2 Skybox Appliance specifications

Skybox version 11.6.100 8

PROPERTY LIMITS

Acoustic noise Sound pressure: 55 dBA (rack mount) in an idle state at typical office ambient

temperature. (23 +/- 2 degrees C)

Sound power: 7.0 dBA in operating conditions at typical office ambient

temperature. (23 +/- 2 degrees C)

Shock lOperating: Half sine, 2 g peak, 11 msec

lUnpackaged: Trapezoidal, 25 g, velocity change 136 inches/second (≧40

lb to <80 lb)

lNon-palletized free fall height: 24 inches (≧40 lb to <80 lb)

Vibration,

unpackaged

5 Hz to 500 Hz, 2.20 g RMS random

ESD +/-12 KV except I/O port +/- 8 KV per Intel®Environmental test specification

System cooling

requirement

2027.7 BTU/hour

EMI operating Required to meet EMI emission requirements, tested as part of system

MTBF estimates for Skybox Appliance

The estimated mean time between failures (MTBF) and Failures in Time (FIT) for Skybox

Appliance 6000 are listed in the following table.

COMPONENT MTBF (HOURS) ESTIMATED FIT

Backplane board 935189 1069

PCI Riser Card 7303481 137

Front Panel board 8272282 121

Intel®Server Board S2600GZ 196253 5095

750W redundant power supplies (1+1) 806081 1241

Dedicated NIC module 2869529 348

Cooling fans 83131 12029

Total FIT rate 20178

System MTBF hrs @ 40°C 49560

System MTBF hrs @ 35°C 63214

System MTBF hrs @ 25°C 82325

Note: The estimates listed here are for Appliance in 35°C ambient air with a rise of up to 10°C

at the Server Board.

Front panel

Skybox Appliance 6000 front panel includes 2 USB connectors, a power button, and LEDs.

Skybox Appliance 6000 Quick Start Guide

Skybox version 11.6.100 9

Power button and LEDs

LETTER FEATURE

A System ID button with integrated LED

B NMI button (recessed; tool required for use)

C NIC1 activity LED

D NIC3 activity LED

E System cold reset button

F System status LED

G Power button with integrated LED

H Hard drive activity LED

I NIC4 activity LED

J NIC2 activity LED

Front panel LED functions

LED COLOR /

STATE

DESCRIPTION

Power/Sleep

Green / on Power on

Green /

blinking

Sleep

Off Power off

NIC LEDs

Green / on Network link but no network activity

Green /

blinking

Network activity

Off No link

Chapter 2 Skybox Appliance specifications

Skybox version 11.6.100 10

LED COLOR /

STATE

DESCRIPTION

System Status

Green / on System ready/no alarm

Green /

blinking

System ready but degraded: Redundancy lost (for example, a power

supply or fan failure); non-critical temperature or voltage threshold

reached; battery failure; or predictive power supply failure.

Amber /

Critical Alarm: Critical power modules failure, critical fans failure,

voltage (power supply), critical temperature and voltage

Amber /

blinking

Non-Critical Alarm: Redundant fan failure, redundant power module

failure, non-critical temperature, and voltage

Off Power off: System unplugged

Power on: System powered off and in standby, no prior degraded/non-

critical/critical state

Back panel connectors

Skybox Appliance 6000 back panel includes the connectors shown in the following figure.

Port mapping

The mappings between physical ports on the back panel of Skybox Appliance and logical ports

are listed in the following table.

BACK PANEL CONNECTOR LOGICAL PORT TO WHICH IT IS MAPPED

NIC1 eno1

NIC2 eno2

NIC3 eno3

NIC4 eno4

By default:

lNIC1 / eno1 is enabled and configured as DHCP

lNIC2 / eno2 is enabled and configured as static with the IP address: 192.168.1.1 /24

Skybox Appliance 6000 Quick Start Guide

Skybox version 11.6.100 11

You can change these values.

File system partitions

By default, the Skybox Appliance file system is partitioned as follows:

l/tmp partition – 5%

l/ (root) partition – 10%

l/var partition – 30%

lSwap partition: The swap size is set to half the total RAM but no more than 8% of total

storage

l/opt partition – remainder of storage

Skybox version 11.6.100 12

Chapter 3

Setting up Skybox Appliance

This chapter explains how to set up Skybox Appliance.

In this chapter

Hardware installation 12

Starting Skybox Appliance 13

Available Installation Processes 13

System configuration 14

What’s next 18

Hardware installation

Warning: These Appliance models include high wattage and high clock speed CPUs. Failure

to maintain an ambient operating temperature of 27° C (80° F) or lower voids the

manufacturer’s warranty.

Before you start

Before installing the rack mount kit, observe these safety guidelines:

1. Turn off all peripheral devices connected to Skybox Appliance.

2. Turn off Skybox Appliance by pressing the Power button on the front of the chassis and

then unplug the AC power cords from the chassis or wall outlet.

3. Label and disconnect all peripheral cables and all telecommunications lines connected to

I/O connectors or ports on the back of the chassis.

4. Provide electrostatic discharge (ESD) protection by wearing an antistatic wrist strap

attached to a chassis ground—an unpainted metal surface—when handling components.

Required tools and supplies

lPhillips (cross head) screwdriver (#1 bit and #2 bit)

l(Recommended) Antistatic wrist strap and conductive foam pad

Installation

To install your Skybox Appliance, refer to the installation instructions included with the rack

mount kit.

Skybox Appliance 6000 Quick Start Guide

Skybox version 11.6.100 13

Starting Skybox Appliance

To start Skybox Appliance

1. Connect the AC power cords to the AC connectors on the Skybox Appliance back panel

and connect the other ends to a power supply.

Note: You can use Skybox with either a 110- or 220-volt power supply.

2. On the Skybox Appliance front panel, press the Power button.

3. Lock the front bezel in place using the key provided.

Available Installation Processes

There are several installation options available. These options must be selected when Skybox

Appliance is booted up, before Skybox Appliance is configured.

Since these options can change the behavior of your server or change the functionality of

Skybox Appliance, we recommend that they be used only by an advanced user who already is

familiar with Skybox and Skybox Appliances.

We also recommend that the user consults with Skybox Professional Services prior to

selecting any of these installation options.

Advanced Installation Options

Skybox Appliance, by default, boots from a local drive with predefined parameters and is

installed as a Skybox Server, including a local Collector.

Several options are available to modify the default installation process:

lModify the Skybox Server and Collector Parameters: Installs Skybox Server with Collector

and allows you to modify several of the parameters in the installation process.

lSkybox Collector Only: Install Skybox Appliance as a Skybox Collector without installing the

Skybox Server. This option optimizes the partitioning scheme for Appliances to run as a

Collector.

lStandalone Elasticsearch node: Installs Skybox Appliance as an Elasticsearch node and

enhances the scalability of the Elasticsearch-based Skybox Web Client

These options are available from the boot menu of the Skybox Appliance ISO.

If none of the installation options are selected, after several seconds Skybox Appliance

performs Boot From Local Drive.

Chapter 3 Setting up Skybox Appliance

Skybox version 11.6.100 14

To install Skybox Appliance as a specific type of server, see Selecting the Server Installation.

System configuration

Before running the Skybox Server, configure Skybox Appliance to be part of your network and

perform initial system configuration.

Configuring connection

Before using Skybox Appliance Administration, configure connection of Skybox to your

network locally using any of:

lThe RMM interface on your Skybox Appliance

lA console (mouse, keyboard, and screen) connection

lA serial port connection

lA network connection via static NIC

Note: To view a figure showing the connectors used in the following procedures, see Back

panel connectors.

Configuration via the RMM interface

You can connect to Skybox Appliance via its RMM interface by connecting a network cable to

the RMM port.

The RMM interface is preconfigured to obtain an IP address via DHCP.

Configuring the RMM administrator

You must change the administrator password on RMM.

To change the RMM administrator password

1. Reboot your Skybox Appliance.

2. During the boot process, press F2 to open the BIOS setup.

3. From the menu, select Server Management.

Skybox Appliance 6000 Quick Start Guide

Skybox version 11.6.100 15

4. Select BMC LAN configuration.

5. Select User Configuration to configure the RMM user.

On the User Configuration page:

a. Click User ID and select an unused user ID to be the RMM user.

b. Configure the user:

lPrivilege: Select Administrator.

lUser Status: Select Enabled.

lUser Name: Type a name for the user.

Note: The name of the anonymous user cannot be changed.

lUser Password: Type the password twice.

6. When you are finished, press F10 to save and exit the configuration.

Skybox Appliance boots with the RMM interface configured with the user that you provided.

Troubleshooting the RMM IP address

To change the IP address of the RMM interface

1. Reboot your Skybox Appliance.

2. During the boot process, press F2 to open the BIOS setup.

3. From the menu, select Server Management.

4. Select BMC LAN configuration.

lIf you are using DHCP: The system assigns a name to the RMM interface and its IP

address; you can configure the name at the bottom of the page, in the BMC hostname

field.

lIf you are using a Static address: Provide the IP address, netmask, and gateway IP

address.

5. When you are finished, press F10 to save and exit the configuration.

Skybox Appliance boots with the RMM interface configured with the user that you provided.

Configuration via console

To configure connection using a mouse, keyboard, and screen

1. Connect one end of a standard network cable to the NIC 1 (eno1) port on the Skybox

Appliance back panel; connect the other end of the cable to a network socket.

2. Connect a mouse, keyboard, and screen to the connectors on the Skybox Appliance back

panel.

3. Log in to Skybox Appliance as the root user. The default password for your 1st login is

skyboxview.

On the initial log in, you must change the default password.

4. Configure a network interface with an IP address, netmask, and default gateway:

Chapter 3 Setting up Skybox Appliance

Skybox version 11.6.100 16

a. Run set_appliance_network

b. Select a network interface to configure.

c. Select the IP mode (static or DHCP).

lIf you select static mode, provide the IP address, netmask, and default gateway.

5. If you are using DHCP, run ifconfig and note the IP address assigned to your Appliance.

You will need it later.

Configuration via serial port

To configure connection using a serial port connection

1. Connect one end of the serial cable to a serial port on the management machine; connect

the other end to the serial port on the Skybox Appliance.

2. On the management machine start a terminal emulation program, select the port that you

connected to in the previous step, and configure the following port settings:

lBits per second: 9600

lData bits: 8

lParity: none

lStop bits: 1

lFlow control: none

l(If using PuTTY as your terminal emulator) Character set translation on received data:

UTF-8

3. Press the Power button on the Skybox Appliance front panel and verify that the Power LED

is green.

4. Log in to your Skybox Appliance as the root user. The default password for your 1st login is

skyboxview.

On the initial log in, you must change the default password.

5. Configure a network interface with an IP address, netmask, and default gateway:

a. Run set_appliance_network

b. Select a network interface to configure.

c. Select the IP mode (static or DHCP).

lIf you select static mode, provide the IP address, netmask, and default gateway.

6. If you are using DHCP, run ifconfig and note the IP address assigned to your Skybox

Appliance. You will need it later.

Configuration via network port

You can connect to Skybox Appliance via the preconfigured static network port (eno2), whose

IP address is 192.168.1.1 /24.

To configure connection via eno2

1. Configure the IP address of the client side to a different IP address on the same network.

For example, 192.168.1.50 /24.

Skybox Appliance 6000 Quick Start Guide

Skybox version 11.6.100 17

2. In your browser, connect via the IP address for eno2: https://192.168.1.1:444/

3. Log in to your Skybox Appliance. The default user name is skyboxview; the default

password is skyboxview.

On the initial login, you are required to change the default password.

The Skybox Appliance Administration main page opens.

4. Configure a network interface with an IP address, netmask, and default gateway:

Note: Network Interfaces includes a tab for docker0. This tab is preparation for an

Appliance feature that is to be added in a future release. Do not change the settings for

docker0.

a. Navigate to the Network tab and select Network Configuration.

b. Select a network interface to configure.

c. Select the IP mode (static or DHCP).

lIf you select static mode, provide the IP address, netmask, and default gateway.

5. Select Network Configuration Summary and note the IP address assigned to your Skybox

Appliance. You will need it later.

Configuring Skybox Appliance

To configure Skybox Appliance

1. In a browser, connect to Skybox Appliance Administration using the following URL:

https://<Appliance IP address>:444

where <Appliance IP address> is the IP address that you configured in

Configuring

connection

2. The default user name is skyboxview; the default password is skyboxview.

On the initial login, you must change the default password.

The Skybox Appliance Administration main page opens.

First-time configuration

There are 2 system users defined at the operating system level: root and skyboxview. The

default password for both is skyboxview.

In the preceding Configuring connection steps, depending on the method used, you changed

the password of one user. Now change the password of the other user. You must also

configure the date and time. All other settings are optional; you can configure them later.

To change the passwords

1. On the Security tab, select Appliance Passwords.

2. To change the root password of the machine, click Change Root Password.

3. To change the Skybox Appliance Administration password, click Change Skyboxview

Password.

Chapter 3 Setting up Skybox Appliance

Skybox version 11.6.100 18

To configure the date and time

1. On the System tab, select Date and Time Configuration.

2. To configure the date and time manually:

a. Select Manual Date and Time Configuration.

b. Click Change Date and Time; set the date and time for the Skybox time zone.

c. Click Change Time Zone; set the time zone for the location of your Skybox Appliance,

so that reports and other data are timestamped correctly.

3. To set the date and time from NTP servers:

a. Select Automatic Date and Time Configuration Using NTP Server.

b. Click Change NTP Servers; add the IP address or DNS of up to 3 NTP servers to use.

If you specify multiple NTP servers, Skybox Appliance synchronizes to the average time

of the servers.

c. Click Change Time Zone; set the time zone for the location of your Skybox Appliance,

so that reports and other data are timestamped correctly.

What’s next

After installing and configuring Skybox Appliance, you must install Skybox Manager on at least

1 remote machine (see Skybox Manager Installation). Skybox Manager is required to

configure certain admin components in the product. However, almost all user functions are

done in Skybox Web Client and not in Skybox Manager. Skybox Manager is a Java client and

should be installed on a Windows PC. The Skybox Manager installer is obtained directly from

the Support tab of Skybox Appliance Administration.

Using Skybox for change tracking

You can use Skybox to track changes on firewalls. Although much change information can be

collected directly from the firewalls, additional information (including a timestamp and the user

who made the change) is taken from syslog change events that are sent to the syslog server

on your Skybox Appliance. You collect the change events using Change Tracking Events –

Syslog Import tasks.

syslog server

The syslog server on Skybox Appliance is preconfigured and is enabled by default.

Updates to the configuration files of the syslog server are included in Skybox Appliance

operating system updates.

Skybox version 11.6.100 19

Chapter 4

Configuring Skybox Appliance

This chapter explains how to configure Skybox Appliance.

In this chapter

Configuration and management options 19

Setting up network interface bonding 20

Setting up SNMP configuration 22

RADIUS authentication 23

LDAP authentication 24

Changing the TLS version 26

Sending CentOS logs to a remote syslog server 28

Configuration and management options

Skybox Appliance configuration options are described in the following table.

PANE DESCRIPTION

About tab

System Information Information about Skybox configuration

Network tab

Configuration changes made in this tab are only saved after you click Save Network Configuration.

Network

Configuration

Enables you to configure network settings (connection method, IP address,

netmask, and gateway) and bonding for each network interface connection,

and to configure the DNS servers.

Note: For non-virtual Appliances, this pane includes a link to a figure showing

the back panel to help you to understand the connections.

Note: Network Interfaces includes a tab for docker0. This tab is preparation for

an Appliance feature that is to be added in a future release. Do not change the

settings for docker0.

Network

Configuration

Summary

Displays a summary of the Skybox Appliance configuration.

Click Export to save this information to an HTML file.

System tab

Date and Time

Configuration

Enables you to view and change the date and time in the Skybox Appliance’s

time zone.

Note:

Skybox Appliance 6000 Quick Start Guide

Skybox version 11.6.100 20

PANE DESCRIPTION

lIf you set this information manually, set the date and time and then

the time zone for the location of Skybox Appliance, so that reports

and other data are timestamped correctly.

lAutomatic configuration synchronizes Skybox with an NTP server.

Provide the IP address or DNS of the NTP server to use. (You can

use up to 3 NTP servers.)

Set the time zone after setting the NTP server.

Syslog Server lEnables sending CentOS logs automatically from Skybox Appliance to a

remote syslog server (see Sending CentOS logs to a remote syslog server).

lStarts or stops the Skybox Appliance syslog server service and enables you

to configure TCP and UDP listeners (see Customizing the syslog server).

Host Name Enables you to change the name of the Skybox Appliance.

Change System

Mode

Toggles between Server mode (Skybox Appliance functions as the Skybox

Server and a Skybox Collector) and Collector mode (Skybox Appliance

functions only as a Skybox Collector).

SNMP Select Enable SNMP Service to set up SNMP configuration, host

configuration, and sending traps (see Setting up SNMP configuration).

You can also download the Skybox Appliance MIBs.

Security tab

Appliance

Passwords

Enables you to change the root password for Skybox Appliance, the password

for Skybox Appliance Administration, and the RMM password.

LDAP Enables you to set up Skybox Appliance to support authentication via LDAP

(see LDAP authentication).

SSH Toggles the SSH service on and off and enables the root user to log in via SSH.

Control tab

Skybox Services Toggles the Skybox Server and Skybox Collector on and off.

Appliance

Operations

Enables you to reboot or shut down Skybox Appliance.

Support tab

Logs Enables you to view Server, Collector, and other logs of Skybox Appliance.

Get Packlogs: Runs the packlogs utility and saves the packlogs (ZIP) file to a

local directory so that you can send the logs to Skybox Support.

Skybox Manager Enables you to download Skybox Manager for installation.

Setting up network interface bonding

Skybox Appliances support network interface bonding for redundancy and for higher

bandwidth.

To create a network interface bonding

1. On the Network tab, click Network Configuration.

2. Select Network Interfaces.

Other manuals for 6000

This manual suits for next models

Table of contents

Other skybox Network Hardware manuals

skybox

skybox APPLIANCE 8000 User manual

Popular Network Hardware manuals by other brands

ZyXEL Communications

ZyXEL Communications NSA-220 Plus user guide

Conceptronic

Conceptronic CPNP200P Quick installation guide

ADTRAN

ADTRAN T200 H2TU-R Installation and Maintenance

Exsys

Exsys EX-60310 manual

Thales

Thales Cryptel-IP CE 621 Quick reference guide

Steren

Steren COM-810 instruction manual

TE HumPRC Series user guide

Agora

Agora H1 instructions

Eiki

Eiki LC-X71 owner's manual

Lantronix

Lantronix WIBOX 2100 quick start guide

Brickcom

Brickcom NR-2104 user manual

Quartz

Quartz Q1601 System manual

Emerson

Emerson AXP 1410 Installation and use

MIKRODEV

MIKRODEV RTU Series Hardware manual

Milestone

Milestone Husky M50 Advanced Administrator's manual

One Identity

One Identity Safeguard for Privileged Sessions T1 installation guide

YOKOGAWA

YOKOGAWA Centum VP technical information

Amphenol

Amphenol LINC-1RUK-48LCA1-100F installation guide

skybox 6000 User manual

Popular Network Hardware manuals by other brands