Veritas Risk Advisor User's Guide

544 Pages·2017·14.78 MB·English

™
Veritas Risk Advisor User’s
Guide
AIX, ESX, HP-UX, Linux, Solaris, Windows
Server
7.3
2
Veritas Risk Advisor User’s Guide
Legal Notice
Copyright © 2018 Veritas Technologies LLC. All rights reserved.
Document version: 7.3
Last updated: 2018-6-13
Veritas, the Veritas Logo, and Veritas Storage Foundation are trademarks or
registered trademarks of Veritas Technologies LLC or its affiliates in the U.S.
and other countries. Other names may be trademarks of their respective owners.
j-Interop: Pure Java - COM Bridge
The product described in this document is distributed under licenses restricting
its use, copying, distribution, and decompilation/reverse engineering. No part of
this document may be reproduced in any form by any means without prior
written authorization of Veritas Technologies LLC and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED
CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY
IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE
EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID.
VERITAS TECHNOLOGIES LLC SHALL NOT BE LIABLE FOR INCIDENTAL OR
CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING,
PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION
CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT
NOTICE.
The Licensed Software and Documentation are deemed to be commercial
computer software as defined in FAR 12.212 and subject to restricted rights as
defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted
Rights" and DFARS 227.7202, et seq. "Commercial Computer Software and
Commercial Computer Software Documentation," as applicable, and any
successor regulations, whether delivered by Veritas as on premises or hosted
services. Any use, modification, reproduction release, performance, display or
disclosure of the Licensed Software and Documentation by the U.S. Government
shall be solely in accordance with the terms of this Agreement.
Veritas Technologies LLC
500 East Middlefield Road
Mountain View, CA 94043
http://www.veritas.com
3
Technical Support
Veritas Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our
online Knowledge Base. The Technical Support group works collaboratively with
the other functional areas within Veritas to answer your questions in a timely
fashion. For example, the Technical Support group works with Product
Engineering and Veritas Security Response to provide alerting services and
virus definition updates.
Veritas’s maintenance offerings include the following:
 A range of support options that give you the flexibility to select the right
amount of service for any size organization
 Telephone and Web-based support that provides rapid response and
up-to-the-minute information
 Upgrade assurance that delivers automatic software upgrade protection
 Global support that is available 24 hours a day, 7 days a week
 Advanced features, including Account Management Services
For information about Veritas’s Maintenance Programs, you can visit our Web
site at the following URL:
www.veritas.com/techsupp
Contacting Technical Support
Customers with a current maintenance agreement may access Technical
Support information at the following URL:
http://www.veritas.com/business/support/assistance_care.jsp
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be
at the computer on which the problem occurred, in case it is necessary to
replicate the problem.
When you contact Technical Support, please have the following information
available:
 Product release level
 Hardware information
 Available memory, disk space, and NIC information
 Operating system
 Version and patch level
 Network topology
 Router, gateway, and IP address information
 Problem description:
4
 Error messages and log files
 Troubleshooting that was performed before contacting Veritas
 Recent software configuration changes and network changes
Licensing and registration
If your Veritas product requires registration or a license key, access our
technical support Web page at the following URL:
www.veritas.com/techsupp
Customer service
Customer service information is available at the following URL:
www.veritas.com/techsupp
Customer Service is available to assist with the following types of issues:
 Questions regarding product licensing or serialization
 Product registration updates, such as address or name changes
 General product information (features, language availability, local dealers)
 Latest information about product updates and upgrades
 Information about upgrade assurance and maintenance contracts
 Information about the Veritas Buying Programs
 Advice about Veritas's technical support options
 Nontechnical presales questions
 Issues that are related to CD-ROMs or manuals
Documentation feedback
Your feedback on product documentation is important to us. Send suggestions
for improvements and reports on errors or omissions to
[email protected].
Include the title and document version (located on the second page), and chapter
and section titles of the text on which you are reporting.
5
Maintenance agreement resources
If you want to contact Veritas regarding an existing maintenance agreement,
please contact the maintenance agreement administration team for your region
as follows:
Asia-Pacific and Japan [email protected]
Europe, Middle-East, and Africa [email protected]
North America and Latin America [email protected]
Additional enterprise services
Veritas offers a comprehensive set of services that allow you to maximize your
investment in Veritas products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
Veritas Early Warning Solutions These solutions provide early warning of cyber attacks,
comprehensive threat analysis, and countermeasures to prevent
attacks before they occur.
Managed Security Services These services remove the burden of managing and monitoring
security devices and events, ensuring rapid response to real
threats.
Consulting Services Veritas Consulting Services provide on-site technical expertise
from Veritas and its trusted partners. Veritas Consulting
Services offer a variety of prepackaged and customizable options
that include assessment, design, implementation, monitoring,
and management capabilities. Each is focused on establishing
and maintaining the integrity and availability of your IT
resources.
Educational Services Educational Services provide a full array of technical training,
security education, security certification, and awareness
communication programs.
To access more information about Enterprise services, please visit our Web site
at the following URL:
www.veritas.com
Select your country or language from the site index.
6
Contents
Chapter 1 Introducing Veritas Risk Advisor
What is VRA? ........................................................................................................17
VRA benefits .........................................................................................................19
VRA components ..................................................................................................20
IT Discovery and Scanning engine ............................................................20
Data Dependency engine ............................................................................20
Gap Analysis engine ....................................................................................21
Gap and risk detection ................................................................................21
Report generator ..........................................................................................21
Chapter 2 Getting started with VRA
Installing VRA ......................................................................................................24
Configuring VRA ..................................................................................................27
Full scan cycle .......................................................................................................28
Data discovery and collection ....................................................................29
Gap analysis ..................................................................................................29
Viewing, investigating, and tuning ...................................................................30
Monitoring the Dashboard .........................................................................30
Handling a ticket ..........................................................................................30
Topology module ..........................................................................................31
Reports ...........................................................................................................31
Ticket lifecycle ..............................................................................................31
Automatic opening and closing of tickets ........................................31
Handling an open ticket ......................................................................32
Chapter 3 Installing or upgrading VRA
Installation procedure .........................................................................................33
Pre-installation requirements ....................................................................33
Preparing the computer for installation or upgrade ..............................34
Installing VRA ..............................................................................................34
Logging in ......................................................................................................36
Upgrading ......................................................................................................37
Uninstalling ..................................................................................................38
Installing a Collector ...................................................................................38
Installing an Agent ......................................................................................40
8 Contents
Security considerations ......................................................................................41
VRA security .................................................................................................42
User management ................................................................................42
Oracle database security .....................................................................42
Server hardening .................................................................................42
Data collection ......................................................................................43
Chapter 4 A quick tour of the VRA interface
Main window ........................................................................................................46
Dashboard .............................................................................................................47
Topology module .................................................................................................47
Tickets module .....................................................................................................49
Reports module ....................................................................................................50
SLA module ...........................................................................................................51
Comparison module ............................................................................................52
Configuration module .........................................................................................53
Session pane .........................................................................................................54
Controlling the window display layout ............................................................56
Controlling table displays ..................................................................................57
Chapter 5 Using the Dashboard
Viewing Dashboard information .......................................................................60
Scan Coverage Summary area ...................................................................60
Scan Coverage Details area ........................................................................61
Collector Status area ...................................................................................61
Ticket Summary area ..................................................................................62
Ticket Tabs area ...........................................................................................62
Business Summary area ..............................................................................63
Chapter 6 Configuring VRA
VRA probes ...........................................................................................................66
Configuration Wizard .........................................................................................67
Management console definition ................................................................67
Configuring EMC ECC consoles .........................................................68
Configuring IBM HMC consoles .........................................................68
Configuring VMware vCenter consoles ............................................68
Configuring VMware NSX Manager consoles ..................................69
Configuring Microsoft System Center Virtual Machine Manager 69
Configuring Oracle Enterprise Manager consoles ..........................69
Configuring Cisco UCS Manager consoles .......................................70
Deleting a management console ........................................................77
Adding hosts .........................................................................................77
Contents 9
Storage discovery .........................................................................................80
Storage Array Types pane ..................................................................81
All Storage Arrays pane ......................................................................83
Configuring Group 1 storage array types .........................................87
Configuring Group 2 storage array types .........................................91
Configuring Group 3 storage array types .........................................98
Configuring EMC ScaleIO .................................................................105
Configuring SAN switches ...............................................................109
Site definition – configuring sites ..........................................................120
Adding a site from a CSV file ...........................................................123
Hosts groups and policies – configuring hosts .....................................124
Managing host policies .....................................................................130
Managing host groups ......................................................................131
Adding databases ..............................................................................133
Database groups and policies – configuring databases .......................136
Managing database policies .............................................................139
Managing database groups ..............................................................140
Managing automatic association of databases to groups and policies
142
Viewing the status of an entity ...............................................................145
Configuring distributed collection .................................................................147
Configuring collectors ..............................................................................147
Configuring agents ...................................................................................152
Configuring standby definitions .....................................................................154
Adding a standby definition from a CSV file ........................................157
Configuring standby policies ..................................................................158
Attaching a standby policy ..............................................................160
Configuring high availability (HA) clusters ..................................................161
Scheduling ..........................................................................................................164
Scan Scheduling ........................................................................................164
Scheduling a scan task .............................................................................168
Scheduling a data analysis task ..............................................................174
Scheduling full cycle scans ......................................................................176
Scheduling a Restart Task .......................................................................180
Report scheduling .....................................................................................182
Adding a new email report schedule ..............................................183
Email settings ............................................................................................185
Configuring policies ..........................................................................................186
Adding a policy ..........................................................................................186
Editing a policy ..........................................................................................190
Configuring credentials ...........................................................................191
Configuring a proxy ..................................................................................196
Configuring sudo .......................................................................................198
10 Contents
Configuring business entities ..........................................................................199
Defining business entity types ................................................................209
Defining business entity roles .................................................................211
Defining SLA policies ........................................................................................213
Editing SLA Assignments .........................................................................229
Configuring expansion packages ....................................................................230
Defining data collection packages ...........................................................230
Defining host comparison expansion packages ....................................244
Defining risk detection expansion packages .........................................249
Defining reporting packages ....................................................................259
System log ...........................................................................................................262
Scan Status .................................................................................................263
Scan troubleshooting ................................................................................264
Configuring advanced settings ........................................................................268
Configuring user management settings .................................................268
Configuring profiles ..........................................................................272
Configuring user roles .......................................................................275
Configuring user scopes ....................................................................328
Importing users from a CSV file ......................................................334
Configuring active directory ............................................................335
Configuring external ticketing ................................................................343
Configuring an external ticketing connector ................................344
Managing labels .........................................................................................350
Configuring Database Views ....................................................................352
Automatic mode .................................................................................353
Manual mode ......................................................................................356
Configuring gap management settings ..................................................358
Configuring licenses ..................................................................................361
Viewing license details ......................................................................363
Configuring system properties ................................................................365
Additional collection .........................................................................366
Aggregation ........................................................................................367
Automatic import ..............................................................................367
Business Entity Import .....................................................................369
Cloakware Configuration ..................................................................370
Collection ............................................................................................370
Collection - Admin .............................................................................373
Collection - Security ..........................................................................373
Collection timeouts ............................................................................373
Command line interface ....................................................................378
Host Comparison ................................................................................378
Configuration .....................................................................................379
Cyber-Ark configuration ...................................................................379