NTP Software File Auditor - DefendX

NTP Software File Auditor Installation RequirementsThis guide covers the pre-install items to be considered in preparation for asuccessful install of NTP Software File Auditor . When the installation is complete,the product is functional. Customers should read through this guide in its entiretyfor important notes to get the most out of the software.Copyright 2016 NTP Software1

Table of ContentsExecutive Summary. 3Important Pre-Install Points . 4Windows Edition . 5NetApp FAS Edition . 5EMC VNX Edition . 6Hitachi Edition . 7Things To Remember . 7About NTP Software . 8NTP Software Professional Services . 8Legal & Contact Information . 9Copyright 2016 NTP Software2

Executive SummaryBelow is a summary of system and other technical requirements in preparation for asuccessful install of NTP Software File Auditor:Windows Server Management HostCPU2.2GHZ or higherMEMORY2-4 GBDISK SPACE50 -100MB Available HDD Space (for installation)1GB per every 1,000,000 I/Os (for database)OPERATING SYSTEMWindows 2008, Windows 2008 R2, Windows 2012, Windows2012 R2VIRTUAL SUPPORTVMware (Version 3.5 or higher), MS Hyper-V, XENWEB COMPONENTSMicrosoft IIS (Internet Information Services) version 6.0 orlater(OPTIONAL; CAN BE INSTALLED ONMicrosoft .Net Framework version 2.0SEPARATE SERVER IF DESIRED)DATABASE COMPONENTSMicrosoft SQL Server version 2005, 2008, 2008 R2, and 2012.(OPTIONAL; CAN BE INSTALLED ON Mix Mode Authentication (Required)SEPARATE SERVER IF DESIRED)SQL Reporting Services (SSRS) (Required)NetApp Filer NAS (required for NetApp installation)OPERATING SYSTEMData OnTap version 7.3 or laterSERVICE ACCOUNTDomain User & member of local Administrators group on FilerEMC VNX NAS (required for EMC installation)OPERATING SYSTEMDART version 5.6.36.2 or laterLOGIN CREDENTIALSLogin Credentials to Control StationSERVICE ACCOUNTDomain User & member of local Administrators group on CIFSServerOTHER COMPONENTSEMC CEE (Common Event Enabler) version 4.2.2 or later(Required)EMC CIFS Management ToolsHitachi NAS (required for Hitachi NAS installation)OPERATING SYSTEMHOS version 6.1.1684.18 or laterSERVICE ACCOUNTDomain User & member of local Administrators group on CIFSServerCopyright 2016 NTP Software3

Important Pre-Install PointsBelow are key items that were discussed to consider in preparation for a successfulinstall of NTP Software File Auditor : At the start of the installation, File Auditor checks that the NTP Software SmartPolicy Manager Service (also referred to as EASE) is present and if not will promptfor that component to be installed before the File Auditor installation continues.The Smart Policy Manager is responsible for storing and replicating policies in yourenvironment. This component is required prior to continuing with the installation ofthe File Auditor Service. When the installation is complete the NTP Software File Auditor Service and SmartPolicy Manager Service will be present on the Server. The services require an Active Directory service account that is a member of theDomain Users group and the service account must be a member of theAdministrator group on the local server(s) where File Auditor is installed. Thisservice account must be granted the right to run as a service. Policies can be configured to send emails to notify users, but this requires additionalinputs to the configuration:o In order to resolve user names to emails the system will require access toa directory that maps user names to email addresses. In mostorganizations this role is fulfilled by Active Directory and only requires thename of the domain or of one or two domain controllerso In order to send the emails File Auditor must have access to an SMTPrelay server and be permitted to send messages for delivery through thisrelay server. In some environments this will require additionalconfiguration or setup to authorize the File Auditor Server to sendmessages When the installation is performed it will create 2 SQL Server databases. During thisinstall it helps if the SA account is available to create the databases and the requiredSQL user, after the installation there is no further need for the SA account. The Web Server can be running IIS 6.x, 7.x, or 8.x and must have ASP.Net 2.0 andASP as well as Windows and Basic authentication installed. The SQL Server can be running any version of Microsoft SQL Server from SQL Server2005 through SQL Server 2012 R2Copyright 2016 NTP Software4

The SQL Server should be configured to support Mixed Mode Authentication. This isrequired by default, but can be worked around if this is not possible. The Remote Connection to the SQL Server should be enabled. The SQL Server user should have db datareader and execute permissions on the FileAuditor database. During the installation, the Windows user will need to have access to the ReportingService on the database server.Windows EditionFor the Windows Edition of File Auditor there is some additional configuration required: The Remote Connection to the SQL Server should be enabled.The SQL Server user should have db datareader and execute permissions on the FileAuditor database.The Reporting Service on the database server must grant access to the currentlylogged Windows user while installing the application.Different versions must be used depending on the version of Windows you areusing:o If you have a 32-bit edition of Windows, then you need to install File Auditorx86 edition.o If you have a 64-bit edition of Windows, then you need to install File Auditorx64 edition.o If you have an Itanium-based system, then you need to install File AuditorItanium edition.Before running NTP Software File Auditor for Windows Edition installer, make sureyou have the following ready for a smooth installation:o The Microsoft SQL Server user name and password for authentication.o Access to server.o The license key you were given when you purchased the File Auditor product.NetApp FAS EditionFor the NetApp Edition of File Auditor there is an additional service installed and someadditional configuration: The NAS Connector Service manages the communication between the File AuditorServer and the Filer.o The NAS Connector Service requires that the service account is a memberof the local administrator group on the Copyright 2016 NTP Software5

7-Mode - Filer(s) and/or vFiler(s) being managed. CDOT – SVM(s) being managedo For CDOT, a cluster account with the ontapi privilege is requiredo The Filer(s) and/or vFiler(s) must have FPolicy enabled. FPolicy is theinterface that allows File Auditor to be notified with file operationso The greatest threat to our solution when managing Filers is latency onthe connection to the Filer. The Filer will disconnect if our server doesnot reply quickly enough to screening requests and the most likely causeof this is latency on the connection. For this reason we recommend adedicated network connection between the File Auditor Server and theFiler.EMC VNX EditionFor the EMC Edition of File Auditor there is an additional service installed and someadditional configuration: The EMC Connector Service manages the communication between the File AuditorServer and the NAS.o There needs to be a CIFS Server that is on the physical data mover (i.e.Server 2) that our services can use as a bridge to manage CIFS Serversthat are on Virtual Data Movers. The CIFS Server that is on the physicaldata mover does not require a File System assigned to it, but it does helpwith diagnostics.o The EMC Connector Service requires that the service account is amember of the local administrator group on the CIFS Server(s) beingmanaged.o The NAS must have the Server CEPP service enabled and the CEPP.CONFfile must be configured according to the instructions in the installationguide.o EMC will need to provide to you the appropriate versions of theirCommon Event Enabler (CEE) or VNX Event Enabler (VEE) as well as theData Mover Management MMC. EMC account with nasdamin rights to the VNX control station.Copyright 2016 NTP Software6

Hitachi EditionFor the Hitachi Edition of File Auditor there is some additional configuration required: To prepare the HNAS Server, the following must be taken into consideration:o For each EVS (Virtual Server) that is managed by NTP Software File Auditor,at least one CIFS server name must be created and must join the samedomain as the File Auditor machine.o The logon account used to register with the Hitachi NAS Server (the accountthat will be assigned to the NTP Software File Auditor service) needs to be amember of the Hitachi NAS Server's local group Backup Operators. This canbe added from the Hitachi NAS Server Command Line Interface (CLI) usingthe following command:localgroup add "Backup Operators" FQDomainName\AccountName o The File-Filtering feature must be enabled in the EVS. To enable the FileFiltering feature, use the following command:fsm set allow-ntp-file-filtering trueThings To Remember Our software will not affect the system performance on the storage system nor willa reboot be required to complete the installation.The storage will not be taken offline or restarted in any way. There will be zero downtime for the users accessing the storage.When the installation is complete, the product is functional but not enabled. FileAuditor will not manage the environment until policies are configured and enabled.The current Installation Guide and User Manual are included in the software thatyou will download as part of your purchase.Copyright 2016 NTP Software7

About NTP SoftwareNTP Software puts users in charge of their file data and is the only company providingfile data management solutions that deliver all of the enterprise-class features neededto understand, manage, monitor, and secure file data completely. NTP Software is aglobal leader and has been chosen by the majority of Fortune 1000 companies andthousands of customers in private and public sectors for providing leadership throughsuperior solutions, professional services, experience, and trusted advice. NTP Softwaredelivers a single solution across the entire data storage environment, from individualfiles and users to an entire global enterprise across thousands of systems and sites. NTPSoftware reduces the cost and complexity associated with the exponential growth of filedata and is located on the web at www.ntpsoftware.com.NTP Software Professional ServicesNTP Software’s Professional Services offers consulting, training, and design services tohelp customers with their storage management challenges. We have helped hundredsof customers to implement cost-effective solutions for managing their storageenvironments. Our services range from a simple assessment to in-depth financialanalyses.For further assistance in creating the most cost-effective Storage ManagementInfrastructure, please contact your NTP Software Representative at 603-622-4400.Copyright 2016 NTP Software8