Arista Networks SS300ATC50 SPECTRAGUARD SENSOR User Manual USERS MANUAL

AirTight Networks, Inc. SPECTRAGUARD SENSOR USERS MANUAL

USERS MANUAL

ȱInstallation Guide ȱSpectraGuard ® Enterprise An AirTight® Product ȱWireless Vulnerability Management and Intrusion Prevention Version 5.7 ȱȱAirTight® Networks, Inc., 339 N. Bernardo Avenue, # 200, Mountain View, CA 94043 https://www.airtightnetworks.com Product documentation is being enhanced continuously based on customer feedback. To obtain a latest copy of this document, visitwww.airtightnetworks.com/home/support.html
ȱȱThisȱpageȱhasȱbeenȱintentionallyȱleftȱblank.
ȱSpectraGuard® EnterpriseInstallationȱGuideȱCAUTION This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Any changes or modifications not expressly approved by the party responsible for compliance could void the authority to operate equipment. Warning "Industry Canada regulatory information Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. "The user is cautioned that this device should be used only as specified within this manual to meet RF exposure requirements. Use of this device in a manner inconsistent with this manual could lead to excessive RF exposure conditions." FEDERAL COMMUNICATIONS COMMISSION  INTERFERENCE STATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part  15  of  the  FCC  Rules.  These  limits  are  designed  to  provide  reasonable  protection  against  harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio  communications.  However,  there  is  no  guarantee  that  interference  will  not  occur  in  a  particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:  - Reorient or relocate the receiving antenna.  - Increase the separation between the equipment and receiver.  - Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. RF exposure warning   ·    This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna  or  transmitter.  End-users  and  installers  must  be  provide  with  antenna  installation instructions and transmitter operating conditions for satisfying RF exposure compliance.
DisclaimerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱiiȱTHEȱINFORMATIONȱINȱTHISȱGUIDEȱISȱSUBJECTȱTOȱCHANGEȱWITHOUTȱANYȱPRIORȱNOTICE.ȱAIRTIGHT®ȱNETWORKS,ȱINC.ȱISȱNOTȱLIABLEȱFORȱANYȱSPECIAL,ȱINCIDENTAL,ȱINDIRECT,ȱORȱCONSEQUENTIALȱDAMAGESȱWHATSOEVERȱ(INCLUDING,ȱWITHOUTȱLIMITATION,ȱDAMAGESȱFORȱLOSSȱOFȱBUSINESSȱPROFITS,ȱBUSINESSȱINTERRUPTION,ȱLOSSȱOFȱBUSINESSȱINFORMATION,ȱORȱANYȱOTHERȱPECUNIARYȱLOSS)ȱARISINGȱOUTȱOFȱTHEȱUSEȱOFȱORȱINABILITYȱTOȱUSEȱTHISȱPRODUCT.ȱTHISȱPRODUCTȱHASȱTHEȱCAPABILITYȱTOȱBLOCKȱWIRELESSȱTRANSMISSIONSȱFORȱTHEȱPURPOSEȱOFȱPROTECTINGȱYOURȱNETWORKȱFROMȱMALICIOUSȱWIRELESSȱACTIVITY.ȱBASEDȱONȱTHEȱPOLICYȱSETTINGS,ȱYOUȱHAVEȱTHEȱABILITYȱTOȱSELECTȱWHICHȱWIRELESSȱTRANSMISSIONSȱAREȱBLOCKEDȱAND,ȱTHEREFORE,ȱTHEȱCAPABILITYȱTOȱBLOCKȱANȱEXTERNALȱWIRELESSȱTRANSMISSION.ȱIFȱIMPROPERLYȱUSED,ȱYOURȱUSAGEȱOFȱTHISȱPRODUCTȱMAYȱVIOLATEȱUSȱFCCȱPARTȱ15ȱANDȱOTHERȱLAWS.ȱBUYERȱACKNOWLEDGESȱTHEȱLEGALȱRESTRICTIONSȱONȱUSAGEȱANDȱUNDERSTANDSȱANDȱWILLȱCOMPLYȱWITHȱUSȱFCCȱRESTRICTIONSȱASȱWELLȱASȱOTHERȱGOVERNMENTȱREGULATIONS.ȱAIRTIGHTȱISȱNOTȱRESPONSIBLEȱFORȱANYȱWIRELESSȱINTERFERENCEȱCAUSEDȱBYȱYOURȱUSEȱOFȱTHEȱPRODUCT.ȱAIRTIGHTȱANDȱITSȱAUTHORIZEDȱRESELLERSȱORȱDISTRIBUTORSȱWILLȱASSUMEȱNOȱLIABILITYȱFORȱANYȱDAMAGEȱORȱVIOLATIONȱOFȱGOVERNMENTȱREGULATIONSȱARISINGȱFROMȱYOURȱUSAGEȱOFȱTHEȱPRODUCT,ȱEXPECTȱASȱEXPRESSLYȱDEFINEDȱINȱTHEȱINDEMNITYȱSECTIONȱOFȱTHISȱDOCUMENT.ȱLIMITATIONȱOFȱLIABILITYȱAirTightȱwillȱnotȱbeȱliableȱtoȱcustomerȱorȱanyȱotherȱpartyȱforȱanyȱindirect,ȱincidental,ȱspecial,ȱconsequential,ȱexemplary,ȱorȱrelianceȱdamagesȱarisingȱoutȱofȱorȱrelatedȱtoȱtheȱuseȱofȱSpectraGuard®ȱEnterpriseȱunderȱanyȱlegalȱtheory,ȱincludingȱbutȱnotȱlimitedȱtoȱlostȱprofits,ȱlostȱdata,ȱorȱbusinessȱinterruption,ȱevenȱifȱAirTightȱknowsȱofȱorȱshouldȱhaveȱknownȱofȱtheȱpossibilityȱofȱsuchȱdamages.ȱRegardlessȱofȱtheȱcauseȱofȱactionȱorȱtheȱformȱofȱaction,ȱAirTight’sȱtotalȱcumulativeȱliabilityȱforȱactualȱdamagesȱarisingȱoutȱofȱorȱrelatedȱtoȱtheȱuseȱofȱSpectraGuard®ȱEnterpriseȱwillȱnotȱexceedȱtheȱpriceȱpaidȱforȱSpectraGuard®ȱEnterprise.ȱCopyrightȱ©ȱ2003–2008ȱAirTight®ȱNetworks,ȱInc.ȱAllȱRightsȱReserved.ȱAirTight®ȱNetworks,ȱTheȱAirTightȱlogo,ȱandȱSpectraGuard®ȱareȱregisteredȱtrademarksȱofȱAirTight®ȱNetworks.ȱAllȱotherȱproductsȱandȱservicesȱareȱtrademarks,ȱregisteredȱtrademarks,ȱandȱserviceȱmarksȱorȱregisteredȱserviceȱmarksȱofȱtheirȱrespectiveȱowners.ȱThisȱproductȱcontainsȱcomponentsȱfromȱOpenȱSourceȱsoftware.ȱTheseȱcomponentsȱareȱgovernedȱbyȱtheȱtermsȱandȱconditionsȱofȱtheȱGNUȱPublicȱLicense.ȱToȱreadȱtheseȱtermsȱandȱconditionsȱvisitȱhttp://www.gnu.org/copyleft/gpl.html.ȱThisȱproductȱisȱprotectedȱbyȱoneȱorȱmoreȱofȱU.S.ȱpatentȱNos.ȱ7,002,943,ȱ7,154,874,ȱ7,216,365,ȱ7,333,800,ȱ7,333,481,ȱ7,339,914,ȱ7,406,320,ȱAustralianȱpatentȱNo.ȱ200429804ȱandȱanyȱothersȱlistedȱatȱwww.airtightnetworks.com/patents.ȱMoreȱpatentsȱpending.ȱȱFederalȱCommunicationȱCommissionȱInterferenceȱStatementȱThisȱequipmentȱhasȱbeenȱtestedȱandȱfoundȱtoȱcomplyȱwithȱtheȱlimitsȱforȱaȱClassȱBȱdigitalȱdevice,ȱpursuantȱtoȱPartȱ15ȱofȱtheȱFCCȱRules.ȱTheseȱlimitsȱareȱdesignedȱtoȱprovideȱreasonableȱprotectionȱagainstȱharmfulȱinterferenceȱinȱaȱresidentialȱinstallation.ȱThisȱequipmentȱgeneratesȱusesȱandȱcanȱradiateȱradioȱfrequencyȱenergyȱand,ȱifȱnotȱinstalledȱandȱusedȱinȱaccordanceȱwithȱtheȱinstructions,ȱmayȱcauseȱharmfulȱinterferenceȱtoȱradioȱcommunications.ȱHowever,ȱthereȱisȱnoȱguaranteeȱthatȱinterferenceȱwillȱnotȱoccurȱinȱaȱparticularȱinstallation.ȱIfȱthisȱequipmentȱdoesȱcauseȱharmfulȱinterferenceȱtoȱradioȱorȱtelevisionȱreception,ȱwhichȱcanȱbeȱdeterminedȱbyȱturningȱtheȱequipmentȱoffȱandȱon,ȱtheȱuserȱisȱencouragedȱtoȱtryȱtoȱcorrectȱtheȱinterferenceȱbyȱoneȱofȱtheȱfollowingȱmeasures:ȱxReorientȱorȱrelocateȱtheȱreceivingȱantenna.ȱxIncreaseȱtheȱseparationȱbetweenȱtheȱequipmentȱandȱreceiver.ȱxConnectȱtheȱequipmentȱintoȱanȱoutletȱonȱaȱcircuitȱdifferentȱfromȱthatȱtoȱwhichȱtheȱreceiverȱisȱconnected.ȱxConsultȱtheȱdealerȱorȱanȱexperiencedȱradio/TVȱtechnicianȱforȱhelp.ȱThisȱdeviceȱcompliesȱwithȱPartȱ15ȱofȱtheȱFCCȱRules.ȱOperationȱisȱsubjectȱtoȱtheȱfollowingȱtwoȱconditions:ȱ(1)ȱThisȱdeviceȱmayȱnotȱcauseȱharmfulȱinterference,ȱandȱ(2)ȱthisȱdeviceȱmustȱacceptȱanyȱinterferenceȱreceived,ȱincludingȱinterferenceȱthatȱmayȱcauseȱundesiredȱoperation.ȱFCCȱCaution:ȱAnyȱchangesȱorȱmodificationsȱnotȱexpresslyȱapprovedȱbyȱtheȱpartyȱresponsibleȱforȱcomplianceȱcouldȱvoidȱtheȱuserȇsȱauthorityȱtoȱoperateȱthisȱequipment.ȱIMPORTANTȱNOTE:ȱ
DisclaimerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱiiiFCCȱRadiationȱExposureȱStatement:ȱThisȱequipmentȱcompliesȱwithȱFCCȱradiationȱexposureȱlimitsȱsetȱforthȱforȱanȱuncontrolledȱenvironment.ȱThisȱequipmentȱshouldȱbeȱinstalledȱandȱoperatedȱwithȱminimumȱdistanceȱ20ȱcmȱbetweenȱtheȱradiatorȱ&ȱyourȱbody.ȱIfȱthisȱdeviceȱisȱgoingȱtoȱbeȱoperatedȱinȱ5.15ȱ~ȱ5.25ȱGHzȱfrequencyȱrange,ȱthenȱitȱisȱrestrictedȱinȱindoorȱenvironmentȱonly.ȱThisȱtransmitterȱmustȱnotȱbeȱcoȬlocatedȱorȱoperatingȱinȱconjunctionȱwithȱanyȱotherȱantennaȱorȱtransmitter.ȱThis product must be installed by a professional technician/installer.Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device.The County Code Selection feature is disabled for products marketed in the US/Canada.This Class [B] digital apparatus complies with Canadian ICES-003.Cet appareil numerique de la classe [B] est conforme a la norme NMB-003 du Canada. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen thatthe equivalent isotropically radiated power (EIRP) is not more than that required for successfulcommunication.This device has been designed to operate with an antenna having a maximum gain of [20] dBi. Antennahaving a higher gain is strictly prohibited per regulations of Industry Canada. The required antennaimpedance is 50 ohms.To reduce potential radio interference to other users, the antenna type and its gain should be so chosen thatthe equivalent isotropically radiated power (e.i.r.p.) is not more than that permitted for successfulcommunication.
If this device is going to be operated in 5.15 ~ 5.25GHz frequency range, then it is restricted in indoor environment only.    FCC NOTICE: To comply with FCC part 15 rules in the United States, the system must be professionally installed to ensure compliance with the Part 15 certification. It is the responsibility of the operator and professional installer to ensure that only certified systems are deployed in the United States. The use of the system in any other combination (such as co-located antennas transmitting the same information) is expressly forbidden. Only the antennas listed below are allowed to be used with the radio. Ant.  Antenna Type Model Name  Product description 2.4/5 GHz Gain (dBi)Tx/Rx mode  REMARK 1  Omni Ant.  3CWE591  3Com® 6/8dBi Dual-Band Omni Antenna  6/8  1T1R/ 1T1R concurrent  Main Ant. for test2  Omni Ant.  S24513BPX CUSHCRAFT 2.4~2.5& 4.9~5.9 GHz DUAL BAND OMNI ANTENNA 6/6.5  1T1R/ 1T1R concurrent  - 3  Omni Ant.  SS-200-AT-AN-30 Airtight 2.4~2.5& 4.9~5.9 GHz Dual-band Omnidirectional Indoor/outdoor antenna6/6.5  1T1R/ 1T1R concurrent  - 4  Omni Ant.  TGX-102XNXXX  Joymax Base Station Antenna  6/6  1T1R/ 1T1R concurrent  - 5  Panel Ant.  3CWE596  3Com® 18/20dBi Dual-Band Panel Antenna 18/20  2T2R/ 2T2R concurrent  Main Ant. for test6  Panel Ant.  3CWE598  3Com® 8/10dBi Dual-Band Panel Antenna 8/10  2T2R/ 2T2R concurrent  - 7  Panel Ant.  SL24513P12SMF CUSHCRAFT Tri-mode, dual band 802.11b/a/g ceiling mounted Omnidirectional panel antenna 3/3  2T2R/ 2T2R concurrent  - 8  Panel Ant.  SS-200-AT-AN-10 Airtight dual band 802.11b/a/g Omnidirectional  Indoor panel antenna 3/3  2T2R/ 2T2R concurrent  - 9  Monopole Ant.  3CWE590  3Com 2dBi Dual-Band Omni Antenna Kit    2/2  2T3R  Main Ant. for test10  PCB Ant.  TFF-A015MPAX-361  Integrated PCB Antenna 3/3  2T3R  Main Ant. for test
EndȱUserȱLicenseȱAgreementȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱivȱEndȱUserȱLicenseȱAgreementȱBEFOREȱYOUȱCLICKȱ“IȱHAVEȱREADȱANDȱAGREEȱTOȱTHEȱLICENSINGȱAGREEMENTȱABOVE”ȱORȱOTHERWISEȱUSEȱORȱACTIVATEȱTHEȱAIRTIGHTȱPRODUCTS,ȱREADȱTHISȱAGREEMENTȱCAREFULLY.ȱȱITȱISȱAȱLEGALLYȱBINDINGȱAGREEMENTȱANDȱCONTROLSȱYOURȱANDȱYOURȱCOMPANY’SȱUSEȱOFȱTHEȱAIRTIGHTȱPRODUCTS.ȱWHENȱYOUȱCLICKȱȈIȱHAVEȱREADȱANDȱAGREEȱTOȱTHEȱLICENSINGȱAGREEMENTȱABOVEȈȱORȱOTHERWISEȱDOWNLOAD,ȱUSEȱORȱACTIVATEȱTHEȱAIRTIGHTȱPRODUCTS,ȱTHISȱAGREEMENTȱGOVERNSȱYOURȱUSE.ȱȱTHISȱAGREEMENTȱISȱENFORCEABLEȱAGAINSTȱYOUȱANDȱANYȱENTITYȱTHATȱOBTAINSȱORȱUSESȱTHEȱAIRTIGHTȱPRODUCTSȱTHROUGHȱYOUȱONȱTHEIRȱBEHALF.ȱȱIFȱYOUȱORȱANYȱENTITYȱTHATȱYOUȱREPRESENTȱDOESȱNOTȱAGREEȱTOȱALLȱOFȱTHEȱTERMSȱOFȱTHISȱAGREEMENT,ȱCLICKȱTHEȱBOXȱTHATȱSAYSȱ“IȱDOȱNOTȱAGREEȱTOȱTHEȱLICENSINGȱAGREEMENTȱABOVE”ȱANDȱDOȱNOTȱOTHERWISEȱDOWNLOAD,ȱINSTALLȱORȱACTIVATEȱTHEȱAIRTIGHTȱPRODUCTS.ȱȱIFȱYOUȱPAIDȱFORȱTHEȱAIRTIGHTȱPRODUCT(S)ȱANDȱDIDȱNOTȱHAVEȱANȱOPPORTUNITYȱTOȱREVIEWȱTHISȱAGREEMENTȱPRIORȱTOȱPURCHASINGȱITȱANDȱDOȱNOTȱAGREEȱTOȱTHISȱAGREEMENT,ȱCONTACTȱYOURȱPLACEȱOFȱPURCHASEȱTOȱRETURNȱTHEȱPRODUCTȱFORȱAȱREFUNDȱINȱACCORDANCEȱWITHȱITSȱREFUNDȱPOLICIES.ȱSEEȱSECTIONȱ11ȱREGARDINGȱYOURȱCONSENTȱTOȱAIRTIGHT’SȱUSEȱOFȱCERTAINȱCOLLECTEDȱDATA.ȱ1. DEFINITIONSȱ1.1ȱ“You”ȱorȱ“Your”ȱshallȱmeanȱanyȱperson,ȱentityȱorȱorganizationȱthatȱusesȱAirTightȱproducts.ȱ1.2ȱ“AirTight,”ȱshallȱmeanȱAirTightȱNetworks,ȱInc.ȱ1.3ȱ“AirTightȱCompetitor”ȱaȱpersonȱorȱentityȱinȱtheȱbusinessȱofȱwirelessȱsecurityȱproductsȱorȱservicesȱsubstantiallyȱsimilarȱtoȱAirTight’sȱproductsȱorȱservices.ȱ1.4ȱ“YourȱCustomers”ȱmeansȱyourȱcurrentȱorȱpotentialȱcustomersȱexcludingȱanyȱAirTightȱCompetitor.ȱ1.5ȱ“Documentation”ȱshallȱmeanȱtheȱendȬuserȱtechnicalȱdocumentationȱthatȱAirTightȱsuppliesȱwithȱtheȱHardwareȱ(ifȱany)ȱandȱSoftware.ȱȱAdvertisingȱandȱmarketingȱmaterialsȱareȱnotȱDocumentation.ȱ1.6ȱ“Error”ȱshallȱmeanȱaȱreproducibleȱfailureȱofȱtheȱSoftwareȱorȱHardwareȱtoȱperformȱinȱsubstantialȱconformityȱwithȱitsȱDocumentation.ȱ1.7ȱ“Hardware”ȱshallȱmeanȱtheȱhardwareȱcontainingȱAirTightȱsoftware.ȱNotȱallȱAirTightȱProductsȱcomeȱwithȱhardware.ȱ1.8ȱ“IntellectualȱPropertyȱRights”ȱshallȱmeanȱcopyrights,ȱtrademarks,ȱserviceȱmarks,ȱtradeȱsecrets,ȱpatents,ȱpatentȱapplications,ȱmoralȱrights,ȱcontractualȱrightsȱofȱnonȬdisclosureȱorȱanyȱotherȱintellectualȱpropertyȱorȱproprietaryȱrights,ȱhoweverȱarising,ȱthroughoutȱtheȱworld.ȱȱ1.9ȱ“Release”ȱshallȱmeanȱanyȱUpdateȱorȱUpgradeȱifȱandȱwhenȱtheseȱareȱmadeȱavailableȱbyȱAirTight.ȱȱInȱtheȱeventȱofȱaȱdisputeȱasȱtoȱwhetherȱaȱparticularȱReleaseȱisȱanȱUpdateȱorȱanȱUpgrade,ȱAirTightȇsȱpublishedȱdesignationȱwillȱbeȱfinal.ȱ1.10ȱ“Software”ȱshallȱmeanȱtheȱsoftwareȱ(inȱobjectȱcodeȱformat)ȱcreatedȱorȱlicensedȱbyȱAirTightȱandȱlicensedȱtoȱyouȱeitherȱasȱaȱstandȱaloneȱproductȱorȱloadedȱonȱAirTightȱHardware,ȱandȱanyȱReleaseȱthereto.ȱ1.11ȱ“Update”ȱshallȱmean,ȱifȱandȱwhenȱavailable,ȱanyȱerrorȱcorrections,ȱfixes,ȱworkaroundsȱorȱotherȱmaintenanceȱreleasesȱwithȱrespectȱtoȱtheȱSoftwareȱprovidedȱbyȱAirTightȱthatȱdoȱnotȱaddȱfunctionalityȱtoȱtheȱSoftware.ȱ1.12ȱ“Upgrade”ȱshallȱmean,ȱifȱandȱwhenȱavailable,ȱnewȱreleasesȱorȱversionsȱofȱtheȱSoftwareȱthatȱmateriallyȱimproveȱtheȱfunctionalityȱof,ȱorȱaddȱmaterialȱfunctionalȱcapabilitiesȱto,ȱtheȱSoftware.ȱAirTightȱmayȱchargeȱadditionalȱlicenseȱfeesȱforȱUpgrades.ȱ
EndȱUserȱLicenseȱAgreementȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱv2. CONTROLLINGȱAGREEMENT:ȱThisȱelectronicȱAgreementȱisȱtheȱentireȱagreementȱbetweenȱyouȱandȱAirTightȱandȱsupersedesȱallȱpriorȱorȱcontemporaneousȱagreements,ȱunderstandings,ȱandȱcommunications,ȱwhetherȱwrittenȱorȱoralȱunlessȱsuchȱagreementȱisȱexecutedȱbyȱanȱofficerȱofȱAirTight.ȱȱInȱsuchȱevent,ȱthatȱagreementȱshallȱonlyȱsupersedeȱthisȱAgreementȱtoȱtheȱextentȱsuchȱagreementȱconflictsȱwithȱthisȱAgreement.ȱȱAnyȱtermsȱandȱconditionsȱinȱyourȱpaperȱorȱelectronicȱpurchaseȱorder,ȱrequestȱforȱproposalȱorȱquotation,ȱorȱaȱresponseȱtoȱthoseȱdocumentsȱareȱsupersededȱbyȱthisȱelectronicȱAgreement.ȱȱIfȱaȱthirdȱpartyȱresellerȱacceptsȱyourȱpurchaseȱorderȱandȱanȱofficerȱofȱAirTightȱdoesȱnotȱsignȱitȱandȱreturnȱitȱtoȱyou,ȱAirTightȱisȱnotȱacceptingȱitsȱtermsȱandȱconditions.ȱȱAirTightȱisȱnotȱobligatedȱunderȱanyȱreseller’sȱagreementȱwithȱyouȱunlessȱanȱofficerȱofȱAirTightȱsignsȱtheȱagreement.ȱCertainȱthirdȱpartyȱsoftwareȱmayȱbeȱnecessaryȱtoȱoperateȱorȱrunȱtheȱSoftware,ȱyouȱareȱresponsibleȱforȱobtainingȱandȱlicensingȱsuchȱthirdȱpartyȱsoftware.ȱThirdȱpartyȱsoftwareȱisȱgovernedȱbyȱtheȱlicenseȱagreementȱprovidedȱbyȱthatȱthirdȱparty.ȱ3. LICENSEȱGRANTȱ3.1ȱLimitedȱLicense.ȱAllȱSoftwareȱisȱlicensed,ȱnotȱsoldȱandȱsubjectȱtoȱthisȱAgreement.ȱȱAllȱHardwareȱisȱsoldȱsubjectȱtoȱtheȱlicenseȱgrantedȱinȱthisȱAgreement.ȱȱForȱeachȱunitȱofȱHardwareȱand/orȱSoftwareȱthatȱyouȱpurchase,ȱAirTightȱgrantsȱyouȱaȱnonȬexclusive,ȱnonȬtransferableȱ(exceptȱasȱprovidedȱinȱtheȱSectionȱentitledȱAssignment),ȱnonȬsublicensableȱlicenseȱduringȱtheȱtermȱofȱthisȱAgreement,ȱtoȱinstallȱandȱexecuteȱsuchȱSoftwareȱandȱHardware.ȱTheȱSoftwareȱandȱHardwareȱareȱlicensedȱforȱyourȱownȱinternalȱbusinessȱpurposesȱunlessȱyouȱhaveȱpurchasedȱorȱbeenȱgivenȱaȱdemonstrationȱversionȱorȱauditȱversionȱofȱtheȱSoftware.ȱIfȱyouȱhaveȱaȱdemonstrationȱversionȱofȱtheȱSoftware,ȱyouȱmayȱuseȱtheȱSoftwareȱsolelyȱtoȱprovideȱdemonstrationsȱtoȱYourȱCustomers.ȱIfȱyouȱhaveȱanȱauditȱversionȱofȱtheȱSoftware,ȱyouȱmayȱuseȱitȱtoȱprovideȱservicesȱtoȱYourȱCustomers.ȱYouȱmayȱmakeȱandȱretainȱoneȱcopyȱofȱtheȱSoftwareȱforȱbackȬupȱandȱdisasterȱrecoveryȱpurposesȱsoȱlongȱasȱyouȱclearlyȱmarkȱitȱasȱaȱ“backȬup”ȱorȱsimilarȱlanguage.ȱ3.2ȱRestrictionsȱonȱUse.ȱExceptȱasȱexpresslyȱprovidedȱforȱinȱthisȱAgreement,ȱyouȱshallȱnot:ȱ(a)ȱadapt,ȱalter,ȱpubliclyȱdisplay,ȱpubliclyȱperform,ȱtranslate,ȱcreateȱderivativeȱworksȱofȱorȱotherwiseȱmodifyȱtheȱSoftware;ȱ(b)ȱsublicense,ȱlease,ȱrent,ȱloan,ȱdistributeȱorȱotherwiseȱtransferȱtheȱSoftwareȱtoȱanyȱthirdȱpartyȱ(exceptȱasȱprovidedȱinȱtheȱSectionȱentitledȱAssignment);ȱ(c)ȱallowȱthirdȱpartiesȱtoȱaccessȱorȱuseȱtheȱSoftwareȱorȱHardware,ȱincludingȱbutȱnotȱlimitedȱtoȱASP,ȱOEM,ȱorȱtimeȬsharingȱarrangements.ȱYouȱshallȱnotȱreverseȱengineer,ȱdecompile,ȱdisassembleȱorȱotherwiseȱattemptȱtoȱderiveȱtheȱsourceȱcodeȱforȱtheȱSoftwareȱexceptȱtoȱtheȱextentȱexpresslyȱpermittedȱbyȱapplicableȱlawȱtoȱobtainȱinformationȱnecessaryȱtoȱrenderȱtheȱSoftwareȱinteroperableȱwithȱotherȱsoftware;ȱprovided,ȱhowever,ȱthatȱyouȱmustȱfirstȱrequestȱsuchȱinformationȱfromȱAirTightȱandȱAirTightȱmay,ȱinȱitsȱdiscretion,ȱeitherȱprovideȱsuchȱinformationȱtoȱyouȱorȱimposeȱreasonableȱconditions,ȱincludingȱaȱreasonableȱfee,ȱonȱsuchȱuseȱofȱtheȱsourceȱcodeȱforȱtheȱSoftwareȱtoȱensureȱthatȱAirTightȇsȱandȱitsȱsuppliersȇȱproprietaryȱrightsȱinȱtheȱsourceȱcodeȱforȱtheȱSoftwareȱareȱprotected;ȱYouȱshallȱnotȱremove,ȱalterȱorȱobscureȱanyȱproprietaryȱnoticesȱonȱtheȱSoftwareȱorȱDocumentation.ȱUnderȱnoȱcircumstancesȱmayȱyouȱinstallȱorȱexecuteȱtheȱSoftwareȱonȱmoreȱthanȱoneȱcomputerȱatȱtheȱsameȱtime.ȱExceptȱtoȱtheȱextentȱnecessaryȱtoȱprovideȱaȱdemonstrationȱorȱservicesȱtoȱYourȱCustomerȱwhenȱyouȱhaveȱpurchasedȱorȱbeenȱgivenȱtheȱdemonstrationȱversionȱorȱauditȱversionȱofȱtheȱSoftware,ȱrespectively,ȱyouȱshallȱnotȱcaptureȱscreenshotsȱofȱtheȱSoftwareȱandȱshareȱitȱwithȱotherȱpeopleȱwithoutȱAirTight’sȱwrittenȱconsent.ȱ3.3ȱInstallation.ȱYouȱareȱresponsibleȱforȱinstallingȱtheȱSoftwareȱandȱHardwareȱ(ifȱany)ȱunlessȱyouȱpurchaseȱinstallationȱservicesȱfromȱAirTightȱorȱaȱthirdȱpartyȱpursuantȱtoȱaȱseparateȱagreement.ȱ4. PROPRIETARYȱRIGHTS.ȱYouȱacknowledgeȱandȱagreeȱthatȱtheȱSoftwareȱandȱHardware,ȱincludingȱbutȱnotȱlimitedȱtoȱtheirȱsequence,ȱstructure,ȱorganizationȱandȱsourceȱcode,ȱcontainsȱIntellectualȱPropertyȱRightsȱofȱAirTightȱandȱitsȱsuppliers.ȱȱTheȱSoftwareȱisȱlicensedȱandȱnotȱsoldȱtoȱyou,ȱandȱnoȱtitleȱorȱownershipȱtoȱsuchȱSoftwareȱorȱtheȱIntellectualȱPropertyȱRightsȱembodiedȱthereinȱpassesȱasȱaȱresultȱofȱthisȱAgreementȱorȱanyȱactȱpursuantȱtoȱthisȱAgreement.ȱȱTheȱSoftwareȱ(andȱallȱIntellectualȱPropertyȱRightsȱtherein)ȱisȱtheȱexclusiveȱpropertyȱofȱAirTightȱandȱitsȱsuppliers,ȱandȱallȱrightsȱinȱandȱtoȱtheȱSoftwareȱnotȱexpresslyȱgrantedȱtoȱyouȱinȱthisȱAgreement,ȱareȱreserved.ȱȱAirTightȱownsȱallȱcopiesȱofȱtheȱSoftware,ȱhoweverȱmade.ȱTheȱSoftware,ȱHardwareȱandȱrelatedȱmaterialsȱcontainȱtradeȱsecretsȱofȱAirTightȱandȱyouȱshallȱnotȱprovideȱtheȱSoftware,ȱHardware,ȱDocumentation,ȱorȱdetailsȱregardingȱtheȱoperationȱofȱtheȱSoftwareȱand/orȱHardware,ȱorȱanyȱotherȱAirTightȱconfidentialȱand/orȱproprietaryȱinformationȱtoȱanyȱthirdȱparty.ȱ5. LIMITEDȱWARRANTYȱ5.1ȱWarranty.ȱForȱaȱperiodȱofȱoneȱyearȱfromȱyourȱreceiptȱofȱtheȱHardwareȱand/orȱSoftwareȱ(theȱ“WarrantyȱPeriod”),ȱAirTightȱwarrantsȱtoȱyouȱandȱforȱyourȱsoleȱbenefitȱthat,ȱsubjectȱtoȱtheȱSectionȱentitledȱExclusions,ȱtheȱSoftwareȱandȱHardwareȱwhenȱusedȱasȱpermittedȱunderȱthisȱAgreementȱandȱinȱaccordanceȱwithȱtheȱinstructionsȱinȱtheȱDocumentation,ȱwillȱoperateȱsubstantiallyȱwithoutȱError.ȱ
EndȱUserȱLicenseȱAgreementȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱviȱ5.2ȱExclusions.ȱAirTightȱwillȱhaveȱnoȱobligationȱtoȱcorrect,ȱandȱAirTightȱmakesȱnoȱwarrantyȱwithȱrespectȱto,ȱErrorsȱcausedȱby:ȱ(a)ȱimproperȱinstallationȱofȱtheȱSoftwareȱorȱHardware;ȱ(b)ȱchangesȱthatȱyouȱhaveȱmadeȱtoȱtheȱSoftwareȱorȱHardware;ȱ(c)ȱuseȱofȱtheȱSoftwareȱorȱHardwareȱinȱaȱmannerȱinconsistentȱwithȱtheȱDocumentation;ȱ(d)ȱtheȱcombinationȱofȱtheȱSoftwareȱorȱHardwareȱwithȱhardwareȱorȱsoftwareȱnotȱprovidedȱbyȱAirTight;ȱ(e)ȱmalfunction,ȱmodificationȱorȱrelocationȱofȱyourȱservers;ȱorȱ(f)ȱyourȱfailureȱtoȱmakeȱreasonableȱbackups.ȱ5.3ȱRemedyȱforȱErrors.ȱForȱErrorsȱreportedȱtoȱAirTightȱduringȱtheȱWarrantyȱPeriod,ȱyourȱexclusiveȱremedyȱandȱAirTightȇsȱsoleȱliabilityȱforȱbreachȱofȱthisȱwarrantyȱisȱthatȱAirTightȱshall,ȱatȱitsȱownȱexpense,ȱ(a)ȱuseȱcommerciallyȱreasonableȱeffortsȱtoȱmakeȱavailableȱtoȱyou,ȱbyȱInternetȱdownload,ȱUpdatesȱthatȱareȱintendedȱtoȱcorrectȱsuchȱErrorsȱandȱthatȱAirTightȱmakesȱgenerallyȱavailable;ȱ(b)ȱatȱitsȱelection,ȱrepairȱorȱreplaceȱanyȱdefectiveȱHardwareȱreturnedȱtoȱAirTightȱwithinȱtheȱWarrantyȱPeriod.ȱȱAnyȱremedyȱprovidedȱunderȱthisȱSectionȱ5.3ȱwillȱnotȱextendȱtheȱoriginalȱWarrantyȱPeriod.ȱȱAirTightȱshallȱhaveȱnoȱobligationȱregardingȱErrorsȱreported,ȱorȱreturnsȱmade,ȱafterȱtheȱWarrantyȱPeriod.ȱȱ5.4ȱDisclaimer.ȱEXCEPTȱFORȱTHEȱEXPRESSȱWARRANTYȱINȱSECTIONȱ5.1,ȱAIRTIGHTȱANDȱITSȱAFFILIATESȱDISCLAIMȱALLȱOTHERȱWARRANTIES,ȱWHETHERȱEXPRESS,ȱIMPLIEDȱORȱSTATUTORY,ȱINCLUDINGȱBUTȱNOTȱLIMITEDȱTOȱTHEȱIMPLIEDȱWARRANTIESȱOFȱMERCHANTABILITY,ȱFITNESSȱFORȱAȱPARTICULARȱPURPOSE,ȱACCURACY,ȱRESULT,ȱEFFORT,ȱTITLEȱANDȱNONȬINFRINGEMENT.ȱȱTHEREȱISȱNOȱWARRANTYȱTHATȱTHEȱSOFTWAREȱWILLȱBEȱERRORȱFREE,ȱORȱTHATȱTHEȱSOFTWAREȱORȱHARDWAREȱWILLȱOPERATEȱWITHOUTȱINTERRUPTIONȱORȱWILLȱFULFILLȱANYȱOFȱYOURȱPARTICULARȱPURPOSESȱORȱNEEDS.ȱAIRTIGHTȱPROVIDESȱNOȱWARRANTYȱFORȱANYȱTHIRDȱPARTYȱSOFTWARE.ȱ6. LIMITATIONȱOFȱLIABILITY.ȱTOȱTHEȱMAXIMUMȱEXTENTȱPERMITTEDȱBYȱAPPLICABLEȱLAW:ȱȱAIRTIGHT,ȱITSȱAFFILIATES,ȱSUPPLIERSȱANDȱMANUFACTURERSȱSHALLȱNOTȱBEȱLIABLEȱTOȱYOUȱORȱANYȱOTHERȱPARTYȱFORȱANYȱINDIRECT,ȱINCIDENTAL,ȱSPECIAL,ȱCONSEQUENTIAL,ȱEXEMPLARYȱORȱRELIANCEȱDAMAGESȱARISINGȱOUTȱOFȱORȱRELATEDȱTOȱTHISȱAGREEMENT,ȱTHEȱHARDWAREȱORȱTHEȱSOFTWARE,ȱUNDERȱANYȱLEGALȱTHEORY,ȱINCLUDINGȱBUTȱNOTȱLIMITEDȱTOȱLOSTȱPROFITS,ȱLOSTȱDATA,ȱBUSINESSȱINTERRUPTION,ȱPERSONALȱINJURY,ȱFORȱLOSSȱOFȱPRIVACY,ȱNEGLIGENCE,ȱANDȱFORȱANYȱOTHERȱPECUNIARYȱORȱOTHERȱLOSSȱWHATSOEVER,ȱEVENȱIFȱAIRTIGHTȱKNOWSȱOFȱORȱSHOULDȱHAVEȱKNOWNȱOFȱTHEȱPOSSIBILITYȱOFȱSUCHȱDAMAGES.ȱȱEXCEPTȱFORȱAIRTIGHTȇSȱOBLIGATIONSȱUNDERȱTHEȱSECTIONȱENTITLEDȱINDEMNIFICATION,ȱAIRTIGHTȇS,ȱITSȱAFFILIATES’,ȱSUPPLIERS’ȱANDȱMANUFACTURERS’ȱTOTALȱCUMULATIVEȱLIABILITYȱFORȱACTUALȱDAMAGESȱARISINGȱOUTȱOFȱORȱRELATEDȱTOȱTHISȱAGREEMENT,ȱTHEȱHARDWARE,ȱORȱTHEȱSOFTWARE,ȱSHALLȱNOTȱEXCEEDȱTHEȱPRICEȱAIRTIGHTȱRECEIVEDȱFORȱSUCHȱHARDWAREȱORȱSOFTWARE,ȱREGARDLESSȱOFȱTHEȱCAUSEȱORȱFORMȱOFȱACTION.ȱTHISȱSECTIONȱSHALLȱAPPLYȱEVENȱIFȱYOURȱEXCLUSIVEȱREMEDYȱHASȱFAILEDȱOFȱITSȱESSENTIALȱPURPOSE.ȱYOUȱACKNOWLEDGEȱANDȱAGREEȱTHATȱTHEȱPRICESȱANDȱFEESȱREFLECTȱTHEȱALLOCATIONȱOFȱRISKȱSETȱFORTHȱINȱTHISȱAGREEMENTȱANDȱTHATȱAIRTIGHTȱWOULDȱNOTȱENTERȱINTOȱTHISȱAGREEMENTȱWITHOUTȱTHESEȱLIMITATIONSȱONȱITSȱLIABILITY.ȱ7. INFRINGEMENTȱINDEMNIFICATIONȱ7.1ȱAirTight’sȱObligation.ȱSubjectȱtoȱtheȱSectionsȱentitledȱConditionsȱandȱExclusions,ȱifȱaȱthirdȱpartyȱmakesȱaȱclaimȱagainstȱyouȱallegingȱthatȱtheȱHardwareȱorȱSoftwareȱinfringesȱanyȱU.S.ȱpatentȱorȱcopyrightȱregisteredȱorȱissuedȱasȱofȱtheȱStartȱDate,ȱAirTightȱshall:ȱ(a)ȱpayȱallȱreasonableȱcostsȱtoȱdefendȱyou;ȱandȱ(b)ȱpayȱanyȱdamagesȱassessedȱagainstȱyouȱinȱaȱfinalȱjudgmentȱbyȱaȱcourtȱofȱcompetentȱjurisdictionȱorȱanyȱsettlementȱthatȱAirTightȱhasȱagreedȱuponȱwithȱsuchȱthirdȱparty.ȱ7.2ȱConditions.ȱAirTightȱshallȱbeȱobligatedȱtoȱpayȱtheseȱcostsȱonlyȱifȱyou:ȱ(a)ȱnotifyȱAirTightȱpromptlyȱinȱwritingȱofȱanyȱsuchȱclaim;ȱ(b)ȱgiveȱAirTightȱfullȱinformationȱandȱassistanceȱinȱsettlingȱand/orȱdefendingȱtheȱclaim;ȱandȱ(c)ȱgiveȱAirTightȱfullȱauthorityȱandȱcontrolȱofȱtheȱdefenseȱandȱsettlementȱofȱanyȱsuchȱclaim.ȱYouȱmayȱalsoȱparticipateȱinȱtheȱdefenseȱatȱyourȱownȱexpense.ȱ7.3ȱExclusions.ȱAirTightȱshallȱnotȱbeȱliableȱfor:ȱ(a)ȱanyȱcostsȱorȱexpensesȱincurredȱbyȱyouȱwithoutȱAirTight’sȱpriorȱwrittenȱauthorization;ȱ(b)ȱanyȱuseȱofȱtheȱHardwareȱorȱSoftwareȱnotȱinȱaccordanceȱwithȱthisȱAgreementȱorȱtheȱDocumentation;ȱ(c)ȱforȱanyȱclaimȱbasedȱonȱtheȱuseȱorȱaȱcombinationȱofȱtheȱHardwareȱorȱSoftwareȱwithȱanyȱotherȱsoftware,ȱfirmware,ȱhardwareȱorȱdataȱnotȱprovidedȱorȱapprovedȱbyȱAirTight;ȱ(d)ȱuseȱofȱanyȱReleaseȱofȱtheȱSoftwareȱotherȱthanȱtheȱmostȱcurrentȱReleaseȱmadeȱavailableȱtoȱyou;ȱorȱ(e)ȱanyȱalterationsȱorȱmodificationȱofȱtheȱHardwareȱorȱSoftwareȱbyȱanyȱpersonȱotherȱthanȱAirTightȱorȱitsȱauthorizedȱagents.ȱ7.4.ȱCure.ȱInȱtheȱeventȱAirTightȱisȱrequired,ȱorȱinȱAirTight’sȱsoleȱopinionȱisȱlikelyȱtoȱbeȱrequired,ȱtoȱindemnifyȱyouȱunderȱ
EndȱUserȱLicenseȱAgreementȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱviitheȱSectionȱentitledȱAirTight’sȱObligation,ȱAirTightȱshallȱdoȱoneȱofȱtheȱfollowing:ȱ(a)ȱobtainȱtheȱrightȱforȱyouȱtoȱcontinueȱusingȱtheȱHardwareȱorȱSoftware;ȱ(b)ȱreplaceȱorȱmodifyȱtheȱHardwareȱorȱSoftwareȱwithȱaȱfunctionalȱequivalentȱthatȱisȱnonȬinfringing;ȱorȱ(c)ȱterminateȱthisȱAgreementȱandȱrefundȱanyȱfeeȱAirTightȱreceived,ȱproratedȱoverȱ3ȱyears,ȱorȱtheȱperiodȱofȱyourȱlicenseȱifȱshorterȱthanȱ3ȱyears.ȱ8. RISKSȱANDȱYOURȱOBLIGATIONS.ȱAirTightȱproductsȱmayȱbeȱcapableȱofȱoperatingȱatȱfrequenciesȱbeyondȱthoseȱallowedȱinȱyourȱregionȱandȱlocatingȱandȱdisablingȱtargetedȱwirelessȱdevicesȱandȱcomputers.ȱYOUȱUSEȱAIRTIGHTȱPRODUCTSȱATȱYOURȱOWNȱRISK.ȱIfȱaȱthirdȱpartyȱmakesȱaȱclaimȱagainstȱAirTightȱarisingȱoutȱofȱyourȱuseȱofȱtheȱAirTightȱproductsȱorȱyourȱbreachȱofȱthisȱAgreement,ȱyouȱshall:ȱ(a)ȱpayȱallȱcostsȱtoȱdefendȱAirTight;ȱandȱ(b)ȱpayȱanyȱdamagesȱassessedȱagainstȱAirTightȱinȱaȱfinalȱjudgmentȱbyȱaȱcourtȱofȱcompetentȱjurisdictionȱorȱanyȱsettlementȱthatȱyouȱagreedȱuponȱwithȱsuchȱthirdȱparty.ȱIfȱyouȱfailȱtoȱmeetȱyourȱobligationsȱunderȱthisȱSection,ȱAirTightȱshallȱhaveȱfullȱauthorityȱandȱcontrolȱofȱtheȱdefenseȱand/orȱsettlementȱofȱanyȱsuchȱclaimȱatȱyourȱexpense.ȱȱ9. EXPORTȱRESTRICTIONS.ȱYouȱacknowledgeȱthatȱtheȱSoftwareȱisȱsubjectȱtoȱU.S.ȱexportȱjurisdiction.ȱYouȱagreeȱtoȱcomplyȱwithȱallȱapplicableȱinternationalȱandȱnationalȱlawsȱthatȱapplyȱtoȱtheȱSoftware,ȱincludingȱtheȱU.S.ȱExportȱAdministrationȱRegulations,ȱasȱwellȱasȱendȬuser,ȱendȬuse,ȱandȱdestinationȱrestrictionsȱissuedȱbyȱU.S.ȱandȱotherȱgovernments.ȱYouȱassumeȱsoleȱresponsibilityȱforȱanyȱrequiredȱexportȱapprovalȱand/orȱlicensesȱandȱallȱrelatedȱcosts.ȱYouȱshallȱnotȱacquire,ȱship,ȱtransferȱorȱreȬexport,ȱdirectlyȱorȱindirectly,ȱtheȱHardwareȱand/orȱSoftwareȱtoȱproscribed,ȱembargoed,ȱorȱprohibitedȱcountriesȱorȱtheirȱnationals,ȱdeniedȱdestinations,ȱnorȱuseȱitȱforȱnuclearȱactivities,ȱchemicalȱbiologicalȱweaponsȱorȱmissileȱprojects.ȱProscribedȱcountries,ȱdestinations,ȱandȱpeopleȱareȱsetȱforthȱinȱtheȱUnitedȱStatesȱExportȱAdministrationȱRegulations,ȱandȱtheȱOfficeȱofȱForeignȱAssetȱControl’sȱSpeciallyȱDesignatedȱNationalsȱlist,ȱandȱareȱsubjectȱtoȱchangeȱwithoutȱfurtherȱnoticeȱfromȱAirTight.ȱ10. U.S.ȱGOVERNMENTȱENDȱUSERS.ȱTheȱSoftwareȱcoveredȱunderȱthisȱAgreement,ȱisȱaȱ“commercialȱitem”ȱasȱthatȱtermȱisȱdefinedȱatȱ48ȱC.F.R.ȱ2.101,ȱconsistingȱofȱ“commercialȱcomputerȱsoftware”ȱandȱ“commercialȱcomputerȱsoftwareȱdocumentation”ȱasȱsuchȱtermsȱareȱusedȱinȱ48ȱC.F.R.ȱ12.212.ȱConsistentȱwithȱ48ȱC.F.R.ȱ12.212ȱandȱ48ȱC.F.R.ȱ227.7202Ȭ1ȱthroughȱ227.7202Ȭ4,ȱallȱU.S.ȱGovernmentȱendȱusersȱacquireȱtheȱSoftwareȱandȱanyȱotherȱsoftwareȱandȱdocumentationȱcoveredȱunderȱthisȱAgreementȱwithȱonlyȱthoseȱrightsȱsetȱforthȱtherein.ȱȱ11. CONSENTȱTOȱUSEȱOFȱDATA.ȱYouȱagreeȱthatȱAirTightȱandȱitsȱaffiliatesȱmayȱcollectȱandȱuseȱinformationȱthatȱisȱpersonallyȱidentifiableȱtoȱyou.ȱWeȱcollectȱtwoȱtypesȱofȱinformation.ȱȱxTechnicalȱInformationȱregardingȱtheȱAirTightȱproductsȱandȱyourȱhardwareȱorȱsoftware,ȱincluding,ȱbutȱnotȱlimitedȱto,ȱserverȱinstallationȱandȱactivationȱinformation,ȱlicenseȱkeyȱexpiration,ȱserverȱlogs,ȱMediaȱAccessȱControlȱ(MAC)ȱaddresses,ȱInternetȱProtocolȱ(IP)ȱaddresses,ȱwirelessȱnetworkȱ(WLAN)ȱinformationȱandȱsensorȱdetails.ȱTheȱproductȱfeaturesȱallowingȱusȱtoȱcollectȱTechnicalȱInformationȱareȱenabledȱbyȱdefaultȱtoȱconnectȱviaȱtheȱInternetȱtoȱAirTight’sȱand/orȱitsȱaffiliates’ȱcomputerȱsystemsȱautomatically,ȱandȱmayȱoccurȱwithoutȱseparateȱnoticeȱtoȱyou.ȱYouȱconsentȱtoȱtheȱoperationȱofȱtheseȱfeatures.ȱYouȱmayȱchooseȱnotȱtoȱgiveȱusȱthisȱinformationȱbyȱnotȱactivatingȱorȱinstallingȱtheȱproduct.ȱȱxPersonalȱInformationȱ(name,ȱaddress,ȱtelephoneȱnumber,ȱcompanyȱnameȱandȱemailȱaddress),ȱcollected,ȱforȱexample,ȱasȱpartȱofȱshipping,ȱservicingȱorȱregisteringȱaȱproduct.ȱIfȱweȱcollectȱPersonalȱInformationȱweȱwillȱexpresslyȱaskȱyouȱforȱit.ȱYouȱmayȱchooseȱnotȱtoȱgiveȱusȱthisȱinformationȱatȱtheȱtimeȱweȱrequestȱit,ȱbutȱitȱmayȱpreventȱusȱfromȱshippingȱorȱservicingȱtheȱproduct.ȱȱAirTightȱandȱitsȱaffiliatesȱmayȱuseȱTechnicalȱandȱPersonalȱInformationȱsolelyȱtoȱimproveȱourȱproductsȱorȱtoȱprovideȱcustomizedȱservicesȱorȱtechnologiesȱtoȱyou.ȱAirTightȱwillȱnotȱdiscloseȱthisȱinformationȱinȱaȱformȱthatȱpersonallyȱidentifiesȱyouȱexceptȱtoȱthirdȱpartyȱprovidersȱthatȱweȱutilizeȱtoȱserviceȱorȱshipȱtheȱproducts.ȱWeȱmayȱdiscloseȱtheȱcollectedȱinformationȱifȱrequiredȱtoȱbyȱlawȱorȱcourtȱorder.ȱInformationȱthatȱisȱcollectedȱbyȱorȱsentȱtoȱAirTightȱmayȱbeȱstoredȱandȱprocessedȱinȱtheȱUnitedȱStates,ȱIndiaȱorȱanyȱotherȱcountryȱinȱwhichȱAirTight,ȱitsȱaffiliates,ȱsubsidiariesȱorȱagentsȱmaintainȱfacilities.ȱYouȱmayȱcontactȱusȱregardingȱtheȱcollectionȱandȱuseȱofȱTechnicalȱandȱPersonalȱInformationȱorȱthisȱprovisionȱatȱsupport@airtightnetworks.comȱorȱbyȱwritingȱusȱatȱ339ȱNo.ȱBernardoȱAvenue,ȱSuiteȱ200,ȱMountainȱView,ȱCAȱ94043ȱUSA.ȱ12. GENERALȱ12.1ȱTerm.ȱThisȱAgreementȱshallȱstartȱonȱtheȱdateȱyouȱclickȱ“Iȱhaveȱreadȱandȱagreeȱtoȱtheȱlicensingȱtermsȱabove,”ȱ“IȱAgree”ȱorȱotherwiseȱinstallȱorȱactivateȱtheȱSoftwareȱorȱHardwareȱ(theȱ“StartȱDate”)ȱandȱshallȱcontinueȱinȱfullȱforceȱandȱeffectȱuntilȱitȱexpiresȱpursuantȱtoȱtheȱperiodȱofȱuseȱthatȱyouȱpurchasedȱorȱunlessȱearlierȱterminatedȱasȱdescribedȱinȱtheȱSectionȱ
EndȱUserȱLicenseȱAgreementȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱviiiȱentitledȱTermination.ȱ12.2ȱTermination.ȱWithoutȱprejudiceȱtoȱanyȱotherȱrights,ȱAirTightȱmayȱterminateȱthisȱAgreementȱifȱyouȱdoȱnotȱcomplyȱwithȱit.ȱYouȱmayȱterminateȱthisȱAgreementȱatȱanytime.ȱUponȱterminationȱofȱthisȱAgreementȱforȱanyȱreason:ȱ(a)ȱallȱlicenseȱrightsȱgrantedȱinȱthisȱAgreementȱwillȱimmediatelyȱterminateȱandȱyouȱmustȱpromptlyȱstopȱallȱuseȱofȱtheȱSoftware;ȱ(b)ȱAirTightȇsȱobligationȱtoȱprovideȱservicesȱunderȱanyȱserviceȱagreementȱterminates;ȱ(c)ȱyouȱmustȱeraseȱallȱcopiesȱofȱtheȱSoftwareȱfromȱyourȱcomputers,ȱandȱdestroyȱallȱcopiesȱofȱtheȱSoftwareȱandȱDocumentationȱonȱtangibleȱmediaȱinȱyourȱpossessionȱorȱcontrol.ȱTerminationȱofȱthisȱAgreementȱwillȱnotȱaffectȱyourȱrightȱtoȱotherwiseȱuseȱorȱtransferȱtheȱHardwareȱpurchasedȱfromȱAirTightȱonceȱtheȱSoftwareȱisȱremoved.ȱ12.3ȱSurvival.ȱTheȱSectionsȱentitledȱControllingȱAgreement,ȱProprietaryȱRights,ȱLimitedȱWarranty,ȱLimitationȱofȱLiability,ȱRisksȱandȱYourȱObligations,ȱExportȱRestrictions,ȱTermination,ȱGoverningȱLawȱandȱVenueȱandȱSeverabilityȱshallȱsurviveȱtheȱexpirationȱorȱterminationȱofȱthisȱAgreement.ȱAirTight’sȱobligationsȱunderȱtheȱSectionȱentitledȱInfringementȱIndemnificationȱshallȱsurviveȱonlyȱforȱclaimsȱbasedȱonȱuseȱofȱtheȱHardwareȱorȱSoftwareȱduringȱtheȱlicensedȱterm.ȱȱ12.4ȱAssignment.ȱYouȱmayȱnotȱassignȱorȱtransfer,ȱbyȱoperationȱofȱlaw,ȱmergerȱorȱotherwise,ȱanyȱofȱyourȱrightsȱorȱdelegateȱanyȱofȱyourȱdutiesȱunderȱthisȱAgreementȱ(includingȱwithoutȱlimitation,ȱtheȱlicensesȱwithȱrespectȱtoȱtheȱSoftware)ȱtoȱanyȱthirdȱpartyȱwithoutȱAirTight’sȱpriorȱwrittenȱconsent.ȱAnyȱattemptedȱassignmentȱorȱtransferȱinȱviolationȱofȱtheȱforegoingȱwillȱbeȱvoid.ȱAirTightȱmayȱassignȱitsȱrightsȱorȱdelegateȱitsȱobligationsȱunderȱthisȱAgreement.ȱ12.5ȱGoverningȱLawȱandȱVenue.ȱThisȱAgreementȱwillȱbeȱgovernedȱbyȱtheȱlawsȱofȱtheȱStateȱofȱCalifornia.ȱTheȱUnitedȱNationsȱConventionȱonȱContractsȱforȱtheȱInternationalȱSaleȱofȱGoodsȱdoesȱnotȱapplyȱtoȱthisȱAgreement.ȱAnyȱactionȱorȱproceedingȱarisingȱfromȱorȱrelatingȱtoȱthisȱAgreementȱmustȱbeȱbroughtȱexclusivelyȱinȱaȱfederalȱorȱstateȱcourtȱseatedȱinȱSantaȱClara,ȱCalifornia,ȱandȱinȱnoȱotherȱvenue.ȱEachȱpartyȱirrevocablyȱconsentsȱtoȱtheȱpersonalȱjurisdictionȱandȱvenueȱin,ȱandȱagreesȱtoȱserviceȱofȱprocessȱissuedȱby,ȱanyȱsuchȱcourt.ȱNotwithstandingȱtheȱforegoing,ȱAirTightȱreservesȱtheȱrightȱtoȱfileȱaȱsuitȱorȱactionȱinȱanyȱcourtȱofȱcompetentȱjurisdictionȱasȱAirTightȱdeemsȱnecessaryȱtoȱprotectȱitsȱintellectualȱpropertyȱandȱproprietaryȱrights.ȱ12.6ȱEquitableȱRelief.ȱYouȱagreeȱthatȱtheȱSoftwareȱandȱHardwareȱcontainsȱAirTight’sȱvaluableȱtradeȱsecretsȱandȱproprietaryȱinformationȱandȱthatȱanyȱactualȱorȱthreatenedȱdisclosureȱorȱmisappropriationȱofȱsuchȱinformationȱwouldȱconstituteȱimmediate,ȱirreparableȱharmȱtoȱAirTightȱforȱwhichȱmonetaryȱdamagesȱwouldȱbeȱanȱinadequateȱremedy.ȱTherefore,ȱinȱadditionȱtoȱanyȱotherȱrightsȱandȱremediesȱwhichȱmayȱbeȱavailableȱtoȱAirTightȱatȱlawȱorȱinȱequity,ȱanyȱsuchȱactualȱorȱthreatenedȱdisclosureȱmayȱbeȱstoppedȱthroughȱinjunctiveȱproceedingsȱwithoutȱtheȱpostingȱofȱaȱbond.ȱ12.7ȱWaiversȱandȱAmendments.ȱAllȱwaiversȱmustȱbeȱinȱwriting.ȱAnyȱwaiverȱorȱfailureȱtoȱenforceȱanyȱprovisionȱofȱthisȱAgreementȱonȱoneȱoccasionȱwillȱnotȱbeȱdeemedȱaȱwaiverȱofȱanyȱotherȱprovisionȱorȱofȱsuchȱprovisionȱonȱanyȱotherȱoccasion.ȱThisȱAgreementȱmayȱbeȱamendedȱonlyȱbyȱaȱwrittenȱdocumentȱsignedȱbyȱyouȱandȱAirTight.ȱ12.8ȱSeverability.ȱIfȱanyȱprovisionȱofȱthisȱAgreementȱisȱheldȱtoȱbeȱvoid,ȱinvalid,ȱunenforceableȱorȱillegal,ȱtheȱotherȱprovisionsȱshallȱcontinueȱinȱfullȱforceȱandȱeffect.ȱȱ
TableȱofȱContentsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱixTableȱofȱContentsȱCHAPTER 1 GETTING STARTED...................................................................................................................................11.1 BEFORE YOU BEGIN .......................................................................................................................................................11.2 HOW TO GET MORE INFORMATION ..................................................................................................................................11.3 CONTACT INFORMATION.................................................................................................................................................1CHAPTER 2 PACKAGE CONTENTS ..............................................................................................................................2CHAPTER 3 SERVER AND SENSOR OVERVIEW .......................................................................................................43.1 FRONT PANEL OF THE SERVER ........................................................................................................................................43.2 REAR PANEL OF THE SERVER ..........................................................................................................................................53.3 FRONT PANEL OF SENSOR...............................................................................................................................................63.3.1 Sensor SS-200-AT...................................................................................................................................................63.3.2 Sensor SS-300-AT...................................................................................................................................................73.4 REAR PANEL OF SENSOR SS-200-AT..............................................................................................................................83.5 REAR AND SIDE PANELS OF SENSOR SS-300-AT ............................................................................................................9CHAPTER 4 INSTALLING THE SERVER......................................................................................................................94.1 CONNECTING THE SERVER..............................................................................................................................................94.1.1 Mount the Server Appliance ...................................................................................................................................94.1.2 Power up the Server ...............................................................................................................................................94.1.3 Connect the Server to the Network.......................................................................................................................104.2 ACCESSING THE SERVER...............................................................................................................................................104.2.1 Accessing the Server using SSH (Recommended) ................................................................................................ 114.2.2 Accessing the Server using a Serial Cable ........................................................................................................... 114.3 ACCESSING THE SERVER INITIALIZATION AND SETUP WIZARD.....................................................................................144.3.1 Configure the Backspace Key...............................................................................................................................144.3.2 Step 1: Change Config Shell Password ................................................................................................................144.3.3 Step 2: Change Network Settings .........................................................................................................................154.3.4 Step 3: Set Server Time Zone, Date and Time Settings .........................................................................................164.3.5 Step 4: Set Server ID Settings...............................................................................................................................194.3.6 Set up the Server DNS Entry ................................................................................................................................214.4 LAUNCHING THE SYSTEM CONSOLE (GUI) ..................................................................................................................214.4.1 System Requirements............................................................................................................................................214.5 ACTIVATING THE LICENSE ............................................................................................................................................24CHAPTER 5 INSTALLING THE SENSOR....................................................................................................................255.1 ZERO CONFIGURATION OF SENSORS .............................................................................................................................255.2 CONNECTING THE SENSOR ...........................................................................................................................................255.2.1 Mount the SS-200-AT Sensor................................................................................................................................255.2.1.1 Ceiling Mounting ............................................................................................................................................................ 255.2.1.2 Flat Surface Installation .................................................................................................................................................. 275.2.2 Mount the SS-300-AT Sensor................................................................................................................................285.2.2.1 Ceiling/Wall Mounting.................................................................................................................................................... 285.2.2.2 Flat Surface Installation .................................................................................................................................................. 285.2.3 Power up the Sensor.............................................................................................................................................295.2.4 Connect the Sensor to the Network ......................................................................................................................30CHAPTER 6 MANUALLY CONFIGURING THE SENSOR........................................................................................306.1 INTRODUCTION.............................................................................................................................................................306.2 CONFIGURING SENSOR THROUGH CONFIG SHELL ........................................................................................................306.2.1 Invoke HyperTerminal (or minicom) ....................................................................................................................306.2.1.1 Launching HyperTerminal .............................................................................................................................................. 306.2.1.2 Defining a New HyperTerminal Connection................................................................................................................... 316.2.1.3 Specifying HyperTerminal Connection Details............................................................................................................... 32
TableȱofȱContentsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱxȱ6.2.1.4 Editing Serial Port Settings ............................................................................................................................................. 326.2.2 Log in and Change the Default Password............................................................................................................336.2.3 Set Server Discovery ............................................................................................................................................336.2.4 Set Sensor Mode...................................................................................................................................................336.2.5 Configure Network Settings..................................................................................................................................34CHAPTER 7 SETTING UP THE SERVER CONSOLE ................................................................................................357.1 LOGGING INTO THE CONSOLE.......................................................................................................................................357.1.1 Step 1: Starting the Setup Wizard .........................................................................................................................357.1.2 Step 2: Changing your Account Password ...........................................................................................................367.1.3 Step 3: Preparing your System for Configuration ................................................................................................377.1.4 Step 4: Configuring Notification Settings.............................................................................................................407.1.5 Step 5: Setting up Locations and Sensors.............................................................................................................457.1.5.1 Adding a New Location .................................................................................................................................................. 467.1.5.2 Attaching an image ......................................................................................................................................................... 597.1.5.3 Placing Locations on a Location Folder with an Attached Image ................................................................................... 597.1.5.4 Importing a Planner file into a Location Node................................................................................................................ 607.1.6 Step 6: Classifying APs ........................................................................................................................................607.1.6.1 Specify Authorized SSIDs............................................................................................................................................... 617.1.6.2 Select Wi-Fi Networks .................................................................................................................................................... 647.1.6.3 RSSI based Classification ............................................................................................................................................... 647.1.7 Step 7: Classifying Clients....................................................................................................................................697.1.8 Step 8: Configuring Intrusion Prevention Policy .................................................................................................727.1.8.1 Intrusion Prevention Policy............................................................................................................................................. 727.1.8.2 Intrusion Prevention Level .............................................................................................................................................. 747.1.9 Step 9: Configuring Events and Reports ..............................................................................................................757.1.9.1 Security ........................................................................................................................................................................... 757.1.9.2 Monitoring ...................................................................................................................................................................... 757.1.9.3 Adding a Report.............................................................................................................................................................. 787.1.9.4 Adding a Section to a Report .......................................................................................................................................... 817.1.9.5 Creating a Report Schedule............................................................................................................................................. 837.1.10 Step 10: Calibrating Location Tracking ...........................................................................................................857.1.11 Step 11: Locking the System Configuration ......................................................................................................877.1.12 Step 12: Completion of Setup Wizard................................................................................................................89CHAPTER 8 CONFIG SHELL COMMANDS................................................................................................................918.1 SERVER CONFIG SHELL COMMANDS ............................................................................................................................918.2 SENSOR CONFIG SHELL COMMANDS ............................................................................................................................95CHAPTER 9 TROUBLESHOOTING .............................................................................................................................979.1 SERVER TROUBLESHOOTING ........................................................................................................................................979.2 SENSOR TROUBLESHOOTING ........................................................................................................................................99ȱȱ
TableȱofȱFiguresȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱxiTableȱofȱFiguresȱFIGURE 1. SERVER PACKAGE CONTENTS ..................................................................................................................................................... 2FIGURE 2. SENSOR SS-200-AT PACKAGE CONTENTS................................................................................................................................... 3FIGURE 3. FRONT PANEL OF THE SERVER ..................................................................................................................................................... 4FIGURE 4. REAR PANEL OF THE SERVER....................................................................................................................................................... 5FIGURE 5. FRONT PANEL OF SENSOR SS-200-AT......................................................................................................................................... 6FIGURE 6. FRONT VIEW OF SENSOR SS-300-AT .......................................................................................................................................... 7FIGURE 7. REAR PANEL OF SENSOR ............................................................................................................................................................. 8FIGURE 8. REAR PANEL OF SENSOR SS-300-AT .......................................................................................................................................... 9FIGURE 9. SIDE PANEL OF SENSOR SS-300-AT.......................................................................................................................................... 10FIGURE 10. MOUNT THE SERVER................................................................................................................................................................... 9FIGURE 11. POWER UP THE SERVER ............................................................................................................................................................. 10FIGURE 12. CONNECT THE SERVER TO THE NETWORK ................................................................................................................................. 10FIGURE 13. OPEN SSH ............................................................................................................................................................................... 11FIGURE 14. CONNECT THE SERVER TO YOUR COMPUTER USING A SERIAL CABLE ......................................................................................... 11FIGURE 15. LAUNCH HYPERTERMINAL APPLICATION .................................................................................................................................. 12FIGURE 16. DEFINE A NEW HYPERTERMINAL CONNECTION FOR THE SYSTEM .............................................................................................. 12FIGURE 17. SPECIFY HYPERTERMINAL CONNECTION DETAILS..................................................................................................................... 13FIGURE 18. EDIT SERIAL PORT SETTINGS .................................................................................................................................................... 13FIGURE 19. MAP THE BACKSPACE KEY ........................................................................................................................................................ 14FIGURE 20. SERVER INITIALIZATION AND SETUP WIZARD SCREEN ............................................................................................................... 14FIGURE 21. CHANGE CONFIG SHELL PASSWORD.......................................................................................................................................... 15FIGURE 22. CHANGE NETWORK SETTINGS .................................................................................................................................................. 16FIGURE 23. CONFIRM NETWORK SETTINGS CHANGES ................................................................................................................................. 16FIGURE 24. SPECIFY CONTINENT AND COUNTRY FOR TIME ZONE SETTINGS................................................................................................. 17FIGURE 25. SELECT TIME ZONE REGION ..................................................................................................................................................... 18FIGURE 26. SPECIFY IP ADDRESS OF NTP SERVER FOR SYNCHRONIZATION.................................................................................................. 18FIGURE 27. SPECIFY TIME ZONE USING POSIX TZ FORMAT .......................................................................................................................... 19FIGURE 28. SPECIFY DATE AND TIME .......................................................................................................................................................... 19FIGURE 29. SET SERVER ID......................................................................................................................................................................... 20FIGURE 30. SERVER SETUP COMPLETION SCREEN ....................................................................................................................................... 20FIGURE 31. GENERATING CERTIFICATE FOR WEB SERVER ............................................................................................................................ 21FIGURE 32. WEB SITE CERTIFICATE VERIFICATION ...................................................................................................................................... 22FIGURE 33. INSTALLING JRE....................................................................................................................................................................... 22FIGURE 34. POP-UP BLOCKER MESSAGE ..................................................................................................................................................... 22FIGURE 35. DETECTING JAVA  RUNTIME ENVIRONMENT (JRE) ..................................................................................................................... 23FIGURE 36. WEB SITE CERTIFICATE WARNING ............................................................................................................................................ 23FIGURE 37. HOSTNAME MISMATCH WARNING ............................................................................................................................................. 23FIGURE 38. DIGITAL SIGNATURE VERIFIED.................................................................................................................................................. 24FIGURE 39. ACTIVATE LICENSE ................................................................................................................................................................... 24FIGURE 40. ALIGNING THE SENSOR AND MOUNT SLOTS .............................................................................................................................. 26FIGURE 41. FIXING THE MOUNTING BRACKET TO THE SENSOR .................................................................................................................... 26FIGURE 42. TAB ORIENTATIONS FOR US INSTALLATIONS .............................................................................................................................. 26FIGURE 43. PRESSING THE MOUNT AGAINST THE T- BAR .............................................................................................................................. 27FIGURE 44. INITIAL TWISTING OF THE MOUNT ............................................................................................................................................ 27FIGURE 45. FINAL TWISTING OF THE MOUNT WITH THE US TAB SUPPORTING THE MOUNT............................................................................ 27FIGURE 46. FLAT SURFACE INSTALLATION................................................................................................................................................... 28FIGURE 47. HOLES FOR INSERTING SCREWS ................................................................................................................................................. 28FIGURE 48. INSERTING TABS ON THE TABLE STAND....................................................................................................................................... 29FIGURE 49. LOCKING THE STAND TO THE SENSOR ....................................................................................................................................... 29FIGURE 50. SENSOR MOUNT ON A TABLE .................................................................................................................................................... 29FIGURE 51. POWER UP THE SENSOR............................................................................................................................................................. 30FIGURE 52. CONNECT THE SENSOR TO THE NETWORK ................................................................................................................................. 30FIGURE 53. CONNECTING THE SENSOR TO YOUR COMPUTER USING A SERIAL CABLE .................................................................................... 30FIGURE 54. OPENING HYPERTERMINAL ...................................................................................................................................................... 31FIGURE 55. DEFINE A NEW HYPERTERMINAL CONNECTION FOR SENSOR ..................................................................................................... 31FIGURE 56. SPECIFY HYPERTERMINAL CONNECTION DETAILS..................................................................................................................... 32FIGURE 57. EDIT SERIAL PORT SETTINGS .................................................................................................................................................... 32FIGURE 58. SET SERVER DISCOVERY COMMAND ........................................................................................................................................... 33FIGURE 59. SET SENSOR MODE COMMAND ................................................................................................................................................... 34
TableȱofȱFiguresȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱxiiȱFIGURE 60. CONSOLE LOGIN SCREEN.......................................................................................................................................................... 35FIGURE 61. END USER LICENSE AGREEMENT SCREEN ................................................................................................................................. 35FIGURE 62. SYSTEM SETUP WIZARD WELCOME SCREEN ............................................................................................................................. 36FIGURE 63. CHANGE PASSWORD ................................................................................................................................................................. 37FIGURE 64. EVENT DE-ACTIVATION............................................................................................................................................................. 38FIGURE 65. INTRUSION PREVENTION DE-ACTIVATION.................................................................................................................................. 39FIGURE 66. DEVICE LIST UNLOCKING ......................................................................................................................................................... 40FIGURE 67. SMTP CONFIGURATION............................................................................................................................................................ 41FIGURE 68. SYSLOG CONFIGURATION ......................................................................................................................................................... 42FIGURE 69. SYSLOG CONFIGURATION DIALOG ............................................................................................................................................ 43FIGURE 70. SNMP CONFIGURATION ........................................................................................................................................................... 44FIGURE 71. SNMP CONFIGURATION DIALOG .............................................................................................................................................. 45FIGURE 72. LOCATIONS SCREEN.................................................................................................................................................................. 46FIGURE 73. ADDING A NEW LOCATION........................................................................................................................................................ 47FIGURE 74. SPECIFYING LOCATION PROPERTIES .......................................................................................................................................... 47FIGURE 75. SENSOR CONFIGURATION.......................................................................................................................................................... 48FIGURE 76. CHANNEL SETTINGS TAB .......................................................................................................................................................... 49FIGURE 77. CHANNEL FREQUENCY TABLE................................................................................................................................................... 50FIGURE 78. ANTENNA PORT ASSIGNMENT TAB ............................................................................................................................................ 51FIGURE 79. SENSOR PASSWORD CONFIGURATION TAB ................................................................................................................................. 52FIGURE 80. OFFLINE SENSOR CONFIGURATION TAB..................................................................................................................................... 53FIGURE 81. OFFLINE SENSOR CONFIGURATION:DEVICE CLASSIFICATION POLICY TAB................................................................................. 54FIGURE 82. OFFLINE SENSOR CONFIGURATION:INTRUSION PREVENTION POLICY TAB ................................................................................. 55FIGURE 83. IMPORT DEVICES -SENSORS ..................................................................................................................................................... 56FIGURE 84. IMPORT SENSOR LIST................................................................................................................................................................ 57FIGURE 85. DEVICES SCREEN –SENSORS .................................................................................................................................................... 58FIGURE 86. LOCATIONS SCREEN.................................................................................................................................................................. 59FIGURE 87. PLACING SENSORS ON THE FLOORMAP...................................................................................................................................... 60FIGURE 88. AUTHORIZED WLAN SETUP..................................................................................................................................................... 61FIGURE 89. CREATING A CONFIGURATION TEMPLATE FOR AN AUTHORIZED SSID ........................................................................................ 62FIGURE 90. NO-WI-FINETWORKS .............................................................................................................................................................. 64FIGURE 91. RSSI BASED CLASSIFICATION ................................................................................................................................................... 65FIGURE 92. APAUTO-CLASSIFICATION POLICY........................................................................................................................................... 66FIGURE 93. IMPORT DEVICES –APS............................................................................................................................................................ 67FIGURE 94. IMPORT AUTHORIZED AP LIST .................................................................................................................................................. 68FIGURE 95. DEVICES SCREEN –APS........................................................................................................................................................... 68FIGURE 96. LOCATIONS SCREEN.................................................................................................................................................................. 69FIGURE 97. CLIENT AUTO-CLASSIFICATION POLICY .................................................................................................................................... 70FIGURE 98. IMPORT DEVICES –CLIENTS ..................................................................................................................................................... 71FIGURE 99. DEVICES SCREEN –CLIENTS..................................................................................................................................................... 72FIGURE 100. INTRUSION PREVENTION POLICY .......................................................................................................................................... 73FIGURE 101. INTRUSION PREVENTION LEVEL ............................................................................................................................................ 74FIGURE 102. EVENT CONFIGURATION –SECURITY .................................................................................................................................... 75FIGURE 103. EVENT CONFIGURATION –MONITORING ............................................................................................................................... 76FIGURE 104. EVENT ADVANCED SETTINGS ................................................................................................................................................ 77FIGURE 105. EMAIL NOTIFICATION ........................................................................................................................................................... 77FIGURE 106. EMAIL CONFIGURATION DIALOG........................................................................................................................................... 78FIGURE 107. REPORTS SCREEN ................................................................................................................................................................. 78FIGURE 108. REPORT DETAILS SCREEN ..................................................................................................................................................... 79FIGURE 109. REPORT DETAILS SCREEN SHOWING REPORT SUMMARY TAB ................................................................................................. 80FIGURE 110. REPORT DETAILS SCREEN SHOWING REPORT SECTIONS TAB .................................................................................................. 81FIGURE 111. ADDING A SECTION TO A REPORT .......................................................................................................................................... 82FIGURE 112. SCHEDULING A REPORT FOR ONE TIME DELIVERY................................................................................................................. 83FIGURE 113. SCHEDULING A REPORT FOR RECURRING GENERATION .......................................................................................................... 84FIGURE 114. SPECIFYING ADDITIONAL EMAIL ADDRESSES FOR REPORT DELIVERY .................................................................................... 85FIGURE 115. LOCATIONS SCREEN –CALIBRATION ..................................................................................................................................... 85FIGURE 116. RF CALIBRATION DIALOG .................................................................................................................................................... 86FIGURE 117. EVENT ACTIVATION .............................................................................................................................................................. 87FIGURE 118. INTRUSION PREVENTION ACTIVATION ................................................................................................................................... 88FIGURE 119. DEVICE LIST LOCKING ......................................................................................................................................................... 89FIGURE 120. DASHBOARD SCREEN ........................................................................................................................................................... 90ȱ
GettingȱStartedȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ1Chapterȱ1 GettingȱStartedȱ1.1 BeforeȱYouȱBeginȱThankȱyouȱforȱpurchasingȱSpectraGuardȱEnterpriseȱ(referredȱtoȱasȱ‘system’ȱhereafterȱinȱthisȱdocument)ȱfromȱAirTight®ȱNetworks,ȱInc.ȱTheȱsystemȱassistsȱyouȱtoȱeffectivelyȱmonitor,ȱtroubleshoot,ȱadminister,ȱandȱprotectȱyourȱwirelessȱnetwork.ȱPleaseȱreadȱtheȱEULAȱbeforeȱinstallingȱtheȱServer.ȱInstallingȱtheȱServerȱconstitutesȱyourȱacceptanceȱofȱtheȱtermsȱandȱconditionsȱofȱtheȱEULAȱmentionedȱaboveȱinȱthisȱdocument.ȱThisȱproductȱcannotȱbeȱrentedȱorȱleased–youȱareȱtheȱsoleȱownerȱofȱtheȱproduct.ȱThisȱinstallationȱguideȱgivesȱanȱoverviewȱofȱtheȱpowerȱconnectorȱandȱportsȱonȱtheȱServerȱandȱexplainsȱhowȱtoȱconfigureȱit.ȱThisȱguideȱcontainsȱtheȱfollowingȱchapters:ȱxPackageȱContents:ȱListsȱtheȱcomponentsȱincludedȱinȱtheȱsystemȱpackage.ȱxServerȱandȱSensorȱ(Sensor)ȱOverview:ȱProvidesȱanȱoverviewȱofȱtheȱServerȱandȱSensor.ȱxConfiguringȱtheȱServer:ȱDescribesȱhowȱtoȱpowerȱtheȱServer,ȱconnectȱtheȱServerȱtoȱtheȱnetworkȱandȱyourȱcomputer,ȱandȱconfigureȱtheȱServer.ȱxInstallingȱtheȱSensor:ȱDescribesȱhowȱtoȱconnectȱandȱinstallȱtheȱSensor.ȱxManualȱConfigurationȱofȱSensor:ȱDescribesȱhowȱtoȱconfigureȱtheȱSensorȱthroughȱtheȱConfigȱShell.ȱxSettingȱupȱtheȱSystem:ȱDescribesȱhowȱtheȱsystemȱConsoleȱisȱlaunchedȱandȱsetup.ȱxConfigȱShellȱCommands:ȱListsȱaȱpreȬdefinedȱsetȱofȱcommandsȱthatȱallowȱyouȱtoȱconfigureȱandȱviewȱtheȱstatusȱofȱtheȱServerȱandȱSensors.ȱxTroubleshooting:ȱProvidesȱtroubleshootingȱtipsȱwhileȱinstallingȱtheȱServerȱandȱSensor.ȱ1.2 HowȱtoȱgetȱmoreȱinformationȱToȱreceiveȱimportantȱnewsȱonȱproductȱupdates,ȱpleaseȱvisitȱourȱwebsiteȱatȱsupport@airtightnetworks.com.ȱ1.3 ContactȱInformationȱAirTight®ȱNetworks,ȱInc.ȱ339ȱN,ȱBernardoȱAvenue,ȱSuiteȱ#200,ȱMountainȱView,ȱCAȱ94043ȱTel:ȱ(650)ȱ961Ȭ1111ȱFax:ȱ(650)ȱ963Ȭ3388ȱForȱtechnicalȱsupportȱsendȱanȱemailȱtoȱsupport@airtightnetworks.com.ȱ
PackageȱContentsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ2ȱChapterȱ2 PackageȱContentsȱThisȱchapterȱlistsȱtheȱcomponentsȱincludedȱinȱtheȱServerȱandȱSensorȱ(bothȱ802.11ȱa/b/gȱorȱ802.11ȱa/b/g/n)ȱpackages.ȱNote:ȱTheȱconventionsȱtoȱbeȱfollowedȱinȱtheȱGuideȱare:ȱ1>ȱ802.11ȱa/b/g:ȱSSȬ200ȬATandȱ2>ȱ802.11ȱa/b/g/n:ȱSSȬ300ȬAT.ȱPleaseȱensureȱthatȱtheȱfollowingȱitemsȱareȱincludedȱinȱtheȱServerȱpackage.ȱIfȱtheȱpackageȱisȱnotȱcomplete,ȱpleaseȱcontactȱAirTight®ȱNetworks,ȱInc.ȱTechnicalȱSupportȱatȱsupport@airtightnetworks.com,ȱorȱreturnȱtheȱpackageȱtoȱtheȱvendorȱorȱdealerȱwhereȱyouȱpurchasedȱtheȱproduct.ȱxServerȱwithȱSoftwareȱxSystemȱDocumentationȱCDȬROMȱcontaining:ȱ¾SpectraGuardȱEnterpriseȱUserȱGuideȱ¾SpectraGuardȱEnterpriseȱInstallationȱGuideȱ¾SpectraGuardȱEnterpriseȱQuickȱSetupȱGuideȱ¾SpectraGuardȱEnterpriseȱReportsȱ¾SpectraGuardȱEnterpriseȱReleaseȱNotesȱ¾UpgradeȱInstructionsȱforȱSpectraGuardȱEnterpriseȱ¾HighȱAvailabilityȱConfigurationȱforȱSpectraGuardȱEnterpriseȱ¾NetworkȱDetectorȱConfigurationȱforȱSpectraGuardȱEnterpriseȱxPowerȱCordȱxNetworkȱInterfaceȱ(Ethernet)ȱCableȱxSerialȱCableȱxRackȱMountingȱAccessoriesȱȱFigure  1. Server Package Contents Theȱcontentsȱofȱtheȱa/b/gȱSensorȱpackageȱareȱasȱfollows:ȱxSensorȱxEthernetȱCableȱxWallȱMountingȱAccessoriesȱ
PackageȱContentsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ3ȱȱFigure  2. Sensor SS-200-AT Package Contents Note:ȱTheȱMACȱaddressȱofȱtheȱSensorȱisȱshownȱonȱaȱlabelȱatȱtheȱbottomȱofȱtheȱproductȱandȱtheȱpackagingȱboxȱ
ServerȱandȱSensorȱOverviewȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ4ȱChapterȱ3 ServerȱandȱSensorȱOverviewȱThisȱchapterȱprovidesȱanȱoverviewȱofȱtheȱServerȱandȱSensorȱandȱdescribesȱinȱdetailȱaboutȱtheȱfollowing.ȱxFrontȱPanelȱofȱtheȱServerȱandȱSensorȱxRearȱPanelȱofȱtheȱServerȱandȱSensorȱ3.1 FrontȱPanelȱofȱtheȱServerȱTheȱfrontȱpanelȱofȱtheȱServerȱhasȱaȱPowerȱswitchȱandȱLEDsȱthatȱindicateȱitsȱstate.ȱTheȱfollowingȱfigureȱshowsȱtheȱlocationȱofȱtheȱPowerȱswitchȱandȱLEDsȱonȱtheȱfrontȱpanelȱofȱtheȱServer.ȱȱFigure  3. Front Panel of the Server TheȱfollowingȱtableȱdescribesȱtheȱbehaviorȱofȱtheȱPowerȱswitch.ȱTable 1. Behavior of Power Switch Action  System Behavior  Recommended User Action Push Power switch for two seconds Graceful shutdown of the Server (similar to restarting the Server) No action is required as the Server restarts automatically. Push Power switch for more than three seconds Hard shutdown of the Server (similar to disconnecting the power cable) Press the Power switch again to power on the Server. Do not press the Power switch for a longer time as this may cause damage to the hard disk and thereby cause severe data loss. ȱTheȱfollowingȱtableȱdescribesȱtheȱstatusȱLEDsȱonȱtheȱfrontȱpanelȱofȱtheȱServer.ȱ
ServerȱandȱSensorȱOverviewȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ5ȱTable 2. Front Panel LEDs LED LED Color  Meaning of LED Solid Green  Indicates that the Server is powered on and working normally PowerOff Indicates that the Server is not powered on or not receiving power Blinking Green Indicates that the hard disk drive is being accessed Hard Disk Off Indicates that the hard disk drive is not being accessed Blinking Green Indicates that the Server is connected to the network Network Interface Card Off Indicates that the Server is not connected to the networkBlinking GreenIndicates that the Server is a part of a high availability cluster High Availability Interface  Off Indicates that the Server is not a part of a high availability cluster ȱ3.2 RearȱPanelȱofȱtheȱServerȱTheȱrearȱpanelȱofȱtheȱServerȱhasȱaȱpowerȱconnectorȱandȱportsȱthatȱenableȱyouȱtoȱpowerȱupȱtheȱServerȱandȱconnectȱitȱtoȱtheȱnetworkȱandȱaȱcomputer.ȱNote:ȱOtherȱconnectorsȱsuchȱasȱparallelȱport,ȱ25ȬȱpinȱSerialȱport,ȱkeyboardȱconnector,ȱsoundȱcard,ȱandȱsoȱonȱareȱshownȱinȱtheȱfollowingȱfigure.ȱHowever,ȱtheseȱconnectorsȱareȱdisabledȱandȱcannotȱbeȱused.ȱȱFigure  4. Rear Panel of the Server TheȱrearȱpanelȱofȱtheȱServerȱhasȱaȱSerialȱ(RSȱ232ȱFȬF)ȱport,ȱaȱNetworkȱInterfaceȱportȱ(RJȬ45ȱ10/100/1000ȱEthernet),ȱaȱHighȱAvailabilityȱ(HA)ȱportȱ(RJȬ45ȱ10/100/1000ȱEthernet),ȱandȱaȱPowerȱconnector.ȱTheȱPowerȱconnectorȱisȱusedȱtoȱpowerȱtheȱServerȱusingȱ110Ȭ240Vȱ50/60ȱHzȱACȱinput.ȱTheȱfollowingȱtableȱdescribesȱtheȱSerial,ȱNetworkȱInterface,ȱandȱHighȱAvailabilityȱports.ȱTable 3. Rear Panel Ports Port  Description  Connector Type Settings/Protocol Serial Enables a serial (RS-232) connection to establish terminal sessions using terminal emulation programs such as HyperTerminal for Windows or minicom for Linux DB-9 Settings:Bits per second: 9600 Data Bits: 8 Parity: None Stop Bits: 1 Flow Control: None Protocol: RS-232
ServerȱandȱSensorȱOverviewȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ6ȱHighAvailability Interface  Used to connect the Server to a high availability cluster   RJ-45 Settings: 10/100/1000 MbpsProtocol: EthernetNetwork Interface Used to connect the Server to the wired LAN through a hub or a switch Allows the Server to talk to Sensors  RJ-45 Settings: 10/100/1000 MbpsProtocol: Ethernetȱ3.3 FrontȱPanelȱofȱSensorȱ3.3.1 SensorȱSSȬ200ȬATȱTheȱfrontȱpanelȱofȱtheȱSensorȱhasȱLEDsȱthatȱindicateȱtheȱworkingȱofȱtheȱSensor.ȱȱFigure  5. Front Panel of Sensor SS-200-AT TheseȱLEDsȱareȱdescribedȱinȱtheȱfollowingȱtable.ȱTable 4. LED details for  Sensor SS-200-AT and SS-300-AT LED1 or Power LED2 or LANLED3 or 802.11aLED4 or 802.11b/gDescription Solid GreenSolid GreenSolid GreenSolid GreenThe Sensor is receiving power and is working normally. The Sensor is connected to the Server. Solid GreenSolid GreenSolid Green Fast Blink  The Sensor is performing Troubleshooting on 802.11b/g. Solid GreenSolid GreenSolid Green Slow Blink  The Sensor is performing Intrusion Prevention on 802.11b/g. Solid GreenSolid Green Fast Blink  Solid GreenThe Sensor is performing Troubleshooting on 802.11a. Solid GreenSolid Green Fast Blink  Fast Blink  The Sensor is performing Troubleshooting on 802.11a and 802.11b/g. Solid GreenSolid Green Fast Blink  Slow Blink The Sensor is performing Troubleshooting on 802.11a and Intrusion Prevention on 802.11b/g. Solid GreenSolid GreenSlowBlink Solid GreenThe Sensor is performing Intrusion Prevention on 802.11a. Solid GreenSolid GreenSlowBlink  Fast Blink The Sensor is performing Intrusion Prevention on 802.11a and Troubleshooting on 802.11b/g. Solid GreenSolid GreenSlowBlink  Slow Blink  The Sensor is performing Intrusion Prevention on 802.11a and 802.11b/g. Solid Green Slow Blink  SlowBlink  Slow Blink  The Sensor upgrade is in progress.
ServerȱandȱSensorȱOverviewȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ7ȱSolid OrangeSolid Green Any Any The Sensor is unable to get Ethernet link. Solid Orange Fast Blink  Any Any The Sensor did not receive a valid IP address via the DHCP. Solid Orange Slow Blink  Any Any The Sensor is unable to connect to the Server.Solid Orange Any Solid Green Any There is an error on 802.11a/b/g interfaces. Solid Orange Any Any Solid GreenThe Sensor is experiencing a software error.Off Off Off Off The Sensor is not powered on or it is in the process of starting up. ȱ3.3.2 SensorȱSSȬ300ȬATȱTheȱfrontȱpanelȱofȱtheȱSensorȱhasȱLEDsȱthatȱindicateȱtheȱworkingȱofȱtheȱSensorȱȱFigure  6. Front View of Sensor SS-300-AT Table 5. LED Details for Sensor SS-300-AT LED1 or Power LED2 or LANLED3 or 802.11anLED4 or 802.11b/gnDescription Solid GreenSolid GreenSolid GreenSolid GreenThe Sensor is receiving power and is working normally. The Sensor is connected to the Server. Solid GreenSolid GreenSolid Green Fast Blink  The Sensor is performing Troubleshooting on 802.11b/g/n. Solid GreenSolid GreenSolid Green Slow Blink  The Sensor is performing Intrusion Prevention on 802.11b/g/n. Solid GreenSolid Green Fast Blink  Solid GreenThe Sensor is performing Troubleshooting on 802.11a/n. Solid GreenSolid Green Fast Blink  Fast Blink  The Sensor is performing Troubleshooting on 802.11a/n and 802.11b/g/n. Solid GreenSolid Green Fast Blink  Slow Blink The Sensor is performing Troubleshooting on 802.11a/n and Intrusion Prevention on 802.11b/g/n. Solid GreenSolid Green Slow Blink  Solid GreenThe Sensor is performing Intrusion Prevention on 802.11a/n. Solid GreenSolid Green Slow Blink  Fast Blink The Sensor is performing Intrusion Prevention on 802.11a/n and Troubleshooting on 802.11b/g/n. Solid GreenSolid Green Slow Blink  Slow Blink The Sensor is performing Intrusion Prevention on 802.11a/n and 802.11b/g/n.
ServerȱandȱSensorȱOverviewȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ8ȱSolid Green Slow Blink  Slow Blink  Slow Blink  The Sensor upgrade is in progress. Solid OrangeSolid Green Any Any The Sensor is unable to get Ethernet link. Solid Orange Fast Blink  Any Any The Sensor did not receive a valid IP address via the DHCP. Solid Orange Slow Blink  Any Any The Sensor is unable to connect to the Server.Solid Orange Any Solid Green Any There is an error on 802.11a/b/g/n interfaces. Solid Orange Any Any Solid GreenThe Sensor is experiencing a software error.Off Off Off Off The Sensor is not powered on or it is in the process of starting up. ȱ3.4 RearȱPanelȱofȱSensorȱSSȬ200ȬATȱTheȱrearȱpanelȱofȱtheȱSensorȱSSȬ200ȬATȱhasȱaȱpowerȱconnectorȱandȱportsȱthatȱenableȱyouȱtoȱpowerȱupȱtheȱdeviceȱandȱconnectȱitȱtoȱtheȱnetworkȱorȱaȱcomputer.ȱȱFigure  7. Rear Panel of Sensor TheȱSensorȱhasȱtheȱfollowingȱports:ȱxSerialȱport:ȱConnectsȱtheȱSensorȱtoȱserialȱterminalȱemulationȱprogramsȱsuchȱasȱHyperȱTerminalȱforȱWindowsȱorȱminicomȱforȱLinux.ȱxEthernetȱport:ȱConnectsȱtheȱSensorȱtoȱtheȱnetwork.ȱxResetȱswitch:ȱResetsȱtheȱSensorȱtoȱfactoryȱdefaults.ȱToȱresetȱtheȱSensor,ȱpressȱtheȱResetȱswitchȱandȱpowerȱcycleȱ(removeȱtheȱpowerȱcableȱonceȱandȱconnectȱitȱbackȱagain)ȱtheȱSensorȱtillȱallȱLEDsȱblinkȱgreen.ȱPressingȱ<Reset>ȱwhileȱtheȱSensorȱisȱrunningȱwillȱnotȱhaveȱanyȱeffect.ȱTheȱfollowingȱsettingsȱareȱreset:ȱ¾ConfigȱShellȱPasswordȱisȱresetȱtoȱconfig.ȱ¾ServerȱDiscoveryȱvalueȱisȱerasedȱandȱchangedȱtoȱtheȱdefault,ȱwifiȬsecurityȬserver.ȱ¾AllȱtheȱVLANȱconfigurationsȱareȱlost.ȱ¾SensorȱmodeȱisȱchangedȱtoȱSensorȱOnly.ȱ¾IfȱstaticȱIPȱwasȱconfiguredȱonȱtheȱSensor,ȱtheȱIPȱisȱerasedȱandȱDHCPȱmodeȱisȱset.ȱAfterȱreset,ȱallȱtheȱLEDsȱwillȱblinkȱonce,ȱimplyingȱthatȱtheȱresetȱisȱsuccessful.ȱ
ServerȱandȱSensorȱOverviewȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ9ȱTable 6. Rear Panel Port Settings for SS-200-AT Port  Description  Connector Type  Speed/Protocol Serial Enables a serial connection to establish terminal sessions; used for launching Config Shell sessions DB-9 Settings:Bits per second: 9600 Data Bits: 8 Parity: None Stop Bits: 1 Flow Control: None Protocol: RS-232 Ethernet Enables the device to be connected to the wired LAN through a switch or a hub. This connection allows the Sensor to communicate with the Server RJ-45 Settings:10/100 Mbps Protocol:Ethernet ȱNote:ȱTheȱSpeed/ProtocolȱsettingsȱmentionedȱinȱtheȱaboveȱtableȱareȱtheȱsameȱforȱHypeȱTerminalȱandȱminicom.ȱ3.5 RearȱandȱSideȱPanelsȱofȱSensorȱSSȬ300ȬATȱTheȱrearȱpanelȱofȱtheȱSensorȱSSȬ300ȬATȱhasȱanȱEthernetȱportȱthatȱenablesȱtheȱdeviceȱtoȱbeȱconnectedȱtoȱtheȱwiredȱLANȱthroughȱaȱswitchȱorȱaȱhubȱandȱalsoȱprovidesȱtheȱpowerȱforȱtheȱdeviceȱusingȱ802.3afȱstandard.ȱȱȱFigure  8. Rear Panel of Sensor SS-300-AT TheȱSensorȱhasȱtheȱfollowingȱports:ȱxEthernetȱport:ȱConnectsȱtheȱSensorȱtoȱtheȱnetworkȱandȱalsoȱprovidesȱtheȱpower.ȱTable 7. Rear Panel Port Settings for SS-300-AT Port  Description  Connector Type  Speed/Protocol Ethernet This enables the device to be connected to the wired LAN through a switch or a hub. This connection allows the SpectraGuard Sensor to communicate with the SpectraGuard Enterprise® Server.This port also provides the power for the device using 802.3af standard RJ-45 10/100/1000 Mbps Ethernet Power over Ethernet ȱNote:ȱTheȱSpeed/ProtocolȱsettingsȱmentionedȱinȱtheȱaboveȱtableȱareȱtheȱsameȱforȱHypeȱTerminalȱandȱminicom.ȱ
ServerȱandȱSensorȱOverviewȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ10ȱȱTheȱsideȱpanelȱofȱtheȱSensorȱSSȬ300ȬATȱhasȱaȱResetȱSwitchȱandȱaȱSerialȱPort.ȱȱȱFigure  9. Side Panel of Sensor SS-300-AT Theȱsideȱpanelȱhasȱtheȱfollowingȱports:ȱxSerialȱport:ȱConnectsȱtheȱSensorȱtoȱserialȱterminalȱemulationȱprogramsȱsuchȱasȱHyperȱTerminalȱforȱWindowsȱorȱminicomȱforȱLinuxȱxResetȱswitch:ȱResetsȱtheȱSensorȱtoȱfactoryȱdefaults.ȱToȱresetȱtheȱSensor,ȱpressȱtheȱResetȱswitchȱandȱpowerȱcycleȱ(removeȱtheȱpowerȱcableȱonceȱandȱconnectȱitȱbackȱagain)ȱtheȱSensorȱtillȱallȱLEDsȱblinkȱgreen.ȱPressingȱ<Reset>ȱwhileȱtheȱSensorȱisȱrunningȱwillȱnotȱhaveȱanyȱeffect.ȱTheȱfollowingȱsettingsȱareȱreset:ȱ¾ConfigȱShellȱPasswordȱisȱresetȱtoȱconfig.ȱ¾ServerȱDiscoveryȱvalueȱisȱerasedȱandȱchangedȱtoȱtheȱdefault,ȱwifiȬsecurityȬserver.ȱ¾AllȱtheȱVLANȱconfigurationsȱareȱlost.ȱ¾SensorȱmodeȱisȱchangedȱtoȱSensorȱOnly.ȱ¾IfȱstaticȱIPȱwasȱconfiguredȱonȱtheȱSensor,ȱtheȱIPȱisȱerasedȱandȱDHCPȱmodeȱisȱset.ȱAfterȱreset,ȱallȱtheȱLEDsȱwillȱblinkȱonce,ȱimplyingȱthatȱtheȱresetȱisȱsuccessful.ȱTable 8. Side Panel Port Settings for SS-300-AT Port  Description  Connector Type  Speed/Protocol Reset  Allows resetting of SpectraGuard Sensor™ to factory settings. Pin-hole push-button Hold down and power cycle the Sensor to resetConsole Enables a serial connection to establish terminal sessions. Used for launching Config Shell sessions. RJ-45  RS 232 Serial Bits per second: 115200Data Bits: 8 Parity: None Stop Bits: 1 Flow Control: None
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ9Chapterȱ4 InstallingȱtheȱServerȱYouȱneedȱtoȱsetȱupȱtheȱServerȱbeforeȱusingȱitȱtoȱmonitorȱandȱprotectȱyourȱnetwork.ȱThisȱchapterȱexplainsȱhowȱtoȱconnectȱandȱconfigureȱtheȱServer.ȱ4.1 ConnectingȱtheȱServerȱThisȱinvolvesȱmountingȱtheȱServerȱappliance,ȱpoweringȱitȱup,ȱandȱconnectingȱitȱtoȱtheȱnetwork.ȱ4.1.1 MountȱtheȱServerȱApplianceȱPlaceȱtheȱServerȱonȱtheȱrackȱandȱmountȱitȱusingȱtheȱrackȱmountingȱaccessories.ȱȱFigure  10. Mount the Server 4.1.2 PowerȱupȱtheȱServerȱTheȱServerȱapplianceȱrunsȱatȱ110Ȭ240V,ȱ3Ȭ5A,ȱ50Ȭ60ȱHzȱACȱpower.ȱAirTight®ȱNetworksȱrecommendsȱthatȱyouȱprovideȱsurgeȬfreeȱstableȱpowerȱtoȱtheȱServer.ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ10ȱȱFigure  11. Power up the Server ToȱpowerȱupȱtheȱServer,ȱperformȱtheȱfollowingȱsteps:ȱ1. ConnectȱoneȱendȱofȱtheȱPowerȱcableȱtoȱtheȱPowerȱsocketȱonȱtheȱrearȱpanelȱofȱtheȱServer.ȱ2. ConnectȱtheȱotherȱendȱofȱtheȱPowerȱcableȱtoȱaȱ110Ȭ240V,ȱ50/60ȱHzȱACȱpowerȱsource.ȱ3. PressȱtheȱPowerȱswitchȱonȱtheȱfrontȱpanelȱofȱtheȱServer.ȱNote:ȱOnȱconnectingȱtheȱPowerȱcable,ȱtheȱPowerȱLEDȱshouldȱturnȱsolidȱgreen.ȱ4.1.3 ConnectȱtheȱServerȱtoȱtheȱNetworkȱConnectȱtheȱServerȱtoȱtheȱdesiredȱnetworkȱsegmentȱ(subnet).ȱTheȱServerȱshouldȱbeȱableȱtoȱcommunicateȱwithȱallȱtheȱnetworkȱsegmentsȱthatȱitȱtriesȱtoȱprotect.ȱWarning!ȱTheȱdefaultȱIPȱaddressȱofȱtheȱServerȱisȱ192.168.1.246.ȱPleaseȱensureȱthatȱnoȱotherȱdeviceȱonȱyourȱnetworkȱusesȱtheȱsameȱIPȱaddressȱasȱtheȱServer.ȱConnectȱtheȱNetworkȱInterfaceȱPortȱonȱtheȱServerȱtoȱtheȱdesiredȱsubnetȱusingȱtheȱEthernetȱcableȱprovidedȱtoȱyouȱasȱshownȱinȱtheȱfollowing.ȱDoȱnotȱconnectȱtheȱHighȱAvailabilityȱ(HA)ȱInterfaceȱPortȱtoȱtheȱsubnet.ȱȱFigure  12. Connect the Server to the Network ToȱconnectȱtheȱServerȱtoȱtheȱnetwork,ȱperformȱtheȱfollowingȱsteps:ȱ1. ConnectȱoneȱendȱofȱtheȱNetworkȱInterfaceȱcableȱtoȱtheȱNetworkȱInterfaceȱportȱonȱtheȱrearȱpanelȱofȱtheȱServer.ȱ2. ConnectȱtheȱotherȱendȱofȱtheȱNetworkȱInterfaceȱcableȱtoȱtheȱNetworkȱInterfaceȱjackȱlocatedȱonȱtheȱwall.ȱNote:ȱOnȱconnectingȱtheȱNetworkȱInterfaceȱcable,ȱtheȱNetworkȱInterfaceȱCardȱLEDȱshouldȱturnȱsolidȱgreen.ȱ4.2 AccessingȱtheȱServerȱYouȱcanȱaccessȱtheȱServerȱinȱtwoȱways:ȱxUsingȱSSHȱSecureȱShellȱ(SSH)ȱClientȱtoȱaccessȱtheȱServerȱ(Recommended)ȱxUsingȱaȱSerialȱRSȬ232ȱcableȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ114.2.1 AccessingȱtheȱServerȱusingȱSSHȱ(Recommended)ȱToȱaccessȱtheȱServerȱusingȱSSH,ȱperformȱtheȱfollowingȱsteps:ȱ1. ConnectȱyourȱcomputerȱtoȱtheȱsameȱsubnetȱwhereȱtheȱServerȱisȱconnected.ȱNote:ȱTheȱdefaultȱIPȱaddressȱofȱtheȱServerȱisȱ192.168.1.246.ȱ2. Changeȱyourȱcomputer’sȱIPȱaddressȱtoȱ192.168.1.XXX,ȱforȱexample,ȱ192.168.1.244.ȱ3. OpenȱSSHȱonȱyourȱcomputerȱandȱpressȱ<Enter>ȱorȱ<Space>ȱonȱtheȱSSHȱSecureȱShellȱdialog.ȱ4. AccessȱtheȱdefaultȱServerȱIPȱaddress,ȱ192.168.1.246ȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱFigure  13. Open SSH 5. LoginȱusingȱtheȱUsername:ȱconfigȱandȱPassword:ȱconfig.ȱ4.2.2 AccessingȱtheȱServerȱusingȱaȱSerialȱCableȱAlternatively,ȱyouȱcanȱaccessȱtheȱServerȱusingȱaȱSerialȱRSȬ232ȱcableȱasȱshownȱinȱtheȱfollowingȱfigureȱandȱthenȱfollowingȱtheȱstepsȱlistedȱbelowȱtheȱfigure.ȱȱFigure  14. Connect the Server to your Computer using a Serial Cable
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ12ȱ1. ForȱWindowsȱXP,ȱlaunchȱtheȱHyperTerminalȱapplicationȱbyȱclickingȱStartÆȱProgramsÆȱAccessoriesÆȱCommunicationsÆȱHyperTerminalȱonȱyourȱdesktop.ȱȱȱFigure  15. Launch HyperTerminal Application 2. DefineȱaȱnewȱHyperTerminalȱconnection.ȱxSelectȱanȱiconȱtoȱidentifyȱtheȱnewȱconnection.ȱxTypeȱtheȱuserȱdefinedȱnameȱforȱtheȱHyperTerminalȱconnectionȱinȱtheȱNameȱfieldȱxClickȱ<OK>ȱonȱtheȱConnectionȱDescriptionȱdialog.ȱȱFigure  16. Define a New HyperTerminal Connection for the system 3. SpecifyȱtheȱHyperTerminalȱconnectionȱdetailsȱbyȱselectingȱorȱenteringȱtheȱappropriateȱconnectionȱdetailsȱandȱclickingȱ<OK>ȱonȱtheȱConnectȱToȱdialog.ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ13ȱFigure  17. Specify HyperTerminal Connection Details 4. Editȱtheȱserialȱportȱsettingsȱasȱfollowsȱorȱclickȱ<RestoreȱDefaults>ȱtoȱensureȱproperȱcommunicationȱbetweenȱtheȱServerȱandȱyourȱcomputer.ȱxBitsȱperȱsecond:ȱ9600ȱxDataȱbits:ȱ8ȱxParity:ȱNoneȱxStopȱbits:ȱ1ȱxFlowȱcontrol:ȱNoneȱȱFigure  18. Edit Serial Port Settings 5. Clickȱ<OK>ȱonȱtheȱCOMȱPropertiesȱdialog.ȱ6. Pressȱ<Enter>ȱorȱ<Space>ȱonȱtheȱHyperTerminalȱscreen.ȱTheȱloginȱpromptȱappears.ȱ7. LoginȱusingȱtheȱUsername:ȱconfigȱandȱPassword:ȱconfig.ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ14ȱImportant:ȱIfȱyouȱareȱconfiguringȱtheȱServerȱforȱHAȱmode,ȱyouȱcanȱskipȱtheȱServerȱInitializationȱandȱSetupȱwizardȱandȱgoȱtoȱtheȱconfigȱprompt.ȱChangeȱtheȱconfigȱshellȱpassword,ȱsetȱtheȱtimeȱzone,ȱdateȱandȱtime,ȱsetȱtheȱServerȱID,ȱandȱthenȱuseȱtheȱsetȱhaȱcommandȱtoȱconfigureȱtheȱServerȱinȱHAȱmode.ȱ4.3 AccessingȱtheȱServerȱInitializationȱandȱSetupȱWizardȱTheȱsimpleȱandȱintuitiveȱServerȱInitializationȱandȱSetupȱWizardȱallowsȱyouȱtoȱmapȱtheȱBackspaceȱkey,ȱchangeȱtheȱconfigurationȱpassword,ȱsetȱtheȱdateȱandȱtimeȱandȱtheȱtimeȱzone,ȱchangeȱtheȱnetworkȱsettings,ȱandȱsetȱtheȱServerȱIDȱofȱtheȱServer.ȱYouȱcanȱretainȱtheȱdefaultȱvaluesȱatȱeachȱstepȱbyȱpressingȱ<Enter>.ȱJustȱfollowȱtheȱinstructionsȱinȱtheȱInitializationȱandȱSetupȱWizardȱtoȱconfigureȱtheȱServer.ȱTheȱwizardȱguidesȱyouȱthroughȱtheȱrestȱofȱtheȱsetupȱofȱtheȱServer.ȱ4.3.1 ConfigureȱtheȱBackspaceȱKeyȱMapȱtheȱBackspaceȱkeyȱtoȱworkȱproperlyȱusingȱtheȱsetȱeraseȱcommandȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱFigure  19. Map the Backspace key TheȱServerȱInitializationȱandȱSetupȱWizardȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱFigure  20. Server Initialization and Setup Wizard Screen 4.3.2 Stepȱ1:ȱChangeȱConfigȱShellȱPasswordȱForȱsecurityȱreasons,ȱAirTightȱrecommendsȱthatȱyouȱchangeȱtheȱconfigȱshellȱpassword.ȱTheȱServerȱdeliberatelyȱavoidsȱstrongȱpasswordȱcheckingȱbecauseȱitȱdoesȱnotȱwantȱtoȱforceȱpasswordsȱthatȱareȱdifficultȱtoȱremember.ȱTheȱfollowingȱfigureȱshowsȱhowȱtoȱchangeȱtheȱconfigȱshellȱpassword.ȱȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ15Figure  21. Change Config Shell Password 4.3.3 Stepȱ2:ȱChangeȱNetworkȱSettingsȱTheȱnetworkȱsettingsȱofȱtheȱServerȱspecifyȱitsȱuniqueȱIPȱaddressȱonȱtheȱnetwork.ȱSensorsȱuseȱthisȱIPȱaddressȱtoȱidentifyȱtheȱServer.ȱTheȱdefaultȱIPȱaddressȱassignedȱtoȱtheȱServerȱisȱ192.168.1.246.ȱImportant:ȱNoteȱtheȱnetworkȱsettingsȱonȱpaper.ȱIfȱyouȱforgetȱtheȱnetworkȱsettings,ȱyouȱcanȱnoȱlongerȱaccessȱtheȱServerȱoverȱtheȱnetworkȱafterȱitȱisȱrebooted.ȱUseȱtheȱSerialȱcableȱtoȱaccessȱtheȱServerȱandȱchangeȱitsȱnetworkȱsettings.ȱToȱchangeȱtheȱnetworkȱsettings,ȱprovideȱtheȱfollowingȱinput.ȱxIPȱAddress:ȱChooseȱanȱIPȱaddressȱthatȱisȱcompatibleȱwithȱtheȱnetworkȱsegmentȱonȱwhichȱtheȱServerȱisȱtoȱbeȱconnected.ȱTheȱServerȱshouldȱbelongȱtoȱtheȱsameȱsubnet.ȱxSubnetȱMask:ȱEnterȱtheȱmaskȱofȱtheȱnetworkȱsegmentȱtoȱwhichȱtheȱServerȱisȱtoȱbeȱconnected.ȱxGatewayȱIPȱAddress:ȱEnterȱtheȱIPȱaddressȱofȱtheȱgateway,ȱforȱtheȱsubnetȱonȱwhichȱthisȱServerȱisȱtoȱbeȱconnected.ȱEthernetȱtrafficȱfromȱtheȱsubnetȱisȱforwardedȱtoȱanotherȱnetworkȱthroughȱtheȱgateway.ȱxPrimaryȱDNSȱIPȱAddress:ȱSpecifyȱtheȱIPȱaddressȱofȱtheȱprimaryȱDNSȱServerȱusedȱbyȱtheȱenterpriseȱserverȱtoȱresolveȱDNSȱentries.ȱxSecondaryȱDNSȱIPȱAddress:ȱSpecifyȱtheȱIPȱaddressȱofȱtheȱsecondaryȱ(alternate)ȱDNSȱServerȱusedȱbyȱtheȱenterpriseȱserverȱtoȱresolveȱDNSȱentries.ȱxTertiaryȱDNSȱIPȱAddress:ȱSpecifyȱtheȱIPȱaddressȱofȱtheȱtertiaryȱ(alternate)ȱDNSȱServerȱusedȱbyȱtheȱenterpriseȱserverȱtoȱresolveȱDNSȱentries.ȱxDNSȱSuffix:ȱAppendȱthisȱsuffixȱtoȱtheȱunqualifiedȱdomainȱnameȱtoȱgenerateȱaȱfullyȱqualifiedȱdomainȱname.ȱTheȱfollowingȱfiguresȱshowȱhowȱtoȱchangeȱtheȱnetworkȱsettings.ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ16ȱȱFigure  22. Change Network Settings ȱFigure  23. Confirm Network Settings Changes 4.3.4 Stepȱ3:ȱSetȱServerȱTimeȱZone,ȱDateȱandȱTimeȱSettingsȱToȱsetȱtheȱTimeȱZoneȱ(TZ)ȱcorrectly,ȱselectȱaȱcontinent,ȱaȱcountry,ȱandȱthenȱaȱtimeȱzoneȱregion.ȱYouȱcanȱuseȱtheȱNetworkȱTimeȱProtocolȱNTPȱ(NTP)ȱtoȱsynchronizeȱtheȱServerȱclockȱwithȱanotherȱServerȱorȱreferenceȱtimeȱsourceȱbyȱspecifyingȱtheȱIPȱaddressȱorȱtheȱURLȱofȱtheȱNTPȱServer.ȱTheȱfollowingȱfiveȱfiguresȱshowȱhowȱtoȱchangeȱtheȱtimeȱzoneȱsettingsȱandȱtheȱdateȱandȱtimeȱsettings.ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ17ȱFigure  24. Specify Continent and Country for Time Zone Settings
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ18ȱȱFigure  25. Select Time Zone Region ȱFigure  26. Specify IP Address of NTP Server for Synchronization YouȱcanȱalsoȱspecifyȱtheȱtimeȱzoneȱusingȱtheȱPosixȱTZȱ1formatȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱ ȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱȱ1ȱInȱPosixȱTZȱsystems,ȱaȱuserȱcanȱspecifyȱtheȱtimeȱzoneȱbyȱmeansȱofȱtheȱTZȱenvironmentȱvariable.ȱTheȱformatȱusedȱwhenȱthereȱisȱnoȱDaylightȱSavingȱTimeȱ(orȱsummerȱtime)ȱinȱtheȱlocalȱtimeȱzoneȱisȱstdȱoffset,ȱwhereȱ‘std’ȱspecifiesȱtheȱnameȱofȱtheȱtimeȱzoneȱandȱ‘offset’ȱspecifiesȱtheȱtimeȱvalueȱoneȱmustȱaddȱtoȱtheȱlocalȱtimeȱtoȱgetȱaȱCoordinatedȱUniversalȱTimeȱvalue.ȱItȱhasȱaȱsyntaxȱ[+ȱ|Ȭ]ȱhhȱ[:ȱmmȱ[:ȱss]].ȱThisȱisȱpositiveȱifȱtheȱlocalȱtimeȱzoneȱisȱwestȱofȱtheȱPrimeȱMeridianȱandȱnegativeȱifȱitȱisȱeast.ȱTheȱhourȱmustȱbeȱbetweenȱ0ȱandȱ24,ȱandȱtheȱminuteȱandȱsecondsȱbetweenȱ0ȱandȱ59.ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ19ȱFigure  27. Specify Time Zone using Posix TZ format ȱFigure  28. Specify Date and Time Important:ȱOnȱtheȱDateȱandȱTimeȱsettingsȱscreen,ȱifȱtheȱdayȱexceedsȱ31ȱandȱtheȱmonthȱexceedsȱ12,ȱtheȱsystemȱautomaticallyȱsetsȱtheȱdayȱtoȱ31ȱandȱmonthȱtoȱ12.ȱ4.3.5 Stepȱ4:ȱSetȱServerȱIDȱSettingsȱTheȱServerȱIDȱisȱidentifiesȱaȱuniqueȱServerȱinstanceȱwhenȱthereȱareȱmultipleȱServerȱinstancesȱonȱtheȱnetwork.ȱSensorsȱcanȱbeȱconfiguredȱtoȱcommunicateȱwithȱaȱspecificȱServerȱinstance.ȱTheȱdefaultȱServerȱIDȱisȱ1.ȱRecommended:ȱServerȱIDȱsettingȱisȱimportantȱonlyȱifȱyouȱhaveȱaȱmultiȱServerȱinstallation.ȱIfȱyouȱhaveȱonlyȱoneȱServer,ȱtheȱServerȱIDȱshouldȱbeȱleftȱatȱtheȱdefaultȱvalueȱ1.ȱTheȱfollowingȱfigureȱshowsȱhowȱtoȱsetȱtheȱServerȱID.ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ20ȱȱFigure  29. Set Server ID TheȱServerȱinitializationȱcompletionȱmessageȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱFigure  30. Server Setup Completion Screen
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ21ȱFigure  31. Generating Certificate for Web Server PressȱyȱtoȱrebootȱtheȱServerȱforȱtheȱchangesȱtoȱtakeȱeffect.ȱIfȱyouȱchooseȱtoȱrebootȱlaterȱpressȱn.ȱTheȱServerȱConfigȱShell.promptȱappears.ȱYouȱneedȱtoȱrebootȱtheȱServerȱonȱcompletionȱofȱtheȱInitializationȱandȱSetupȱWizardȱbeforeȱyouȱaccessȱtheȱServerȱConsoleȱ(“GUI”).ȱNote:ȱOnȱtheȱServerȱConfigȱShellȱprompt,ȱtypeȱtheȱcommandȱhelpȱtoȱviewȱtheȱlistȱofȱavailableȱcommands.ȱ4.3.6 SetȱupȱtheȱServerȱDNSȱEntryȱAddȱaȱDNSȱentryȱ‘wifiȬsecurityȬserver’ȱinȱyourȱorganization’s/enterpriseȱDNSȱServer.ȱThisȱentryȱshouldȱpointȱtoȱtheȱNetworkȱInterfaceȱIPȱAddressȱofȱtheȱServerȱconfiguredȱinȱStepȱ2:ȱChangeȱNetworkȱSettings.ȱAddingȱthisȱentryȱservesȱtwoȱpurposes:ȱxSensorsȱcanȱconnectȱtoȱtheȱServerȱwithȱzeroȱconfigurationȱifȱtheyȱareȱconnectedȱtoȱaȱDHCPȱenabledȱsubnet.ȱxYouȱcanȱaccessȱtheȱServerȱusingȱtheȱaddressȱ‘https://wifiȬsecurityȬserver’.ȱ4.4 LaunchingȱtheȱSystemȱConsoleȱ(GUI)ȱ4.4.1 SystemȱRequirementsȱEnsureȱthatȱtheȱfollowingȱhardwareȱandȱsoftwareȱisȱavailableȱonȱyourȱcomputerȱbeforeȱlaunchingȱtheȱsystem.ȱTable 9. Hardware Requirements Hardware  Requirements Processor  Intel P4 X86 architecture platform (or equivalent) Processor Speed  1.4 GHz (minimum) Memory 512 MB (minimum) Screen Resolution  1024X768 (recommended) ȱTable 10. Software Requirements Software  Requirements Operating System (OS)  Windows 2000 or XP Browser Internet Explorer (IE) 5.5 or higher Java Runtime Environment (JRE) version JRE 1.6.0 or above ȱ
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ22ȱRecommended:ȱInȱIE,ȱunderȱToolsÆInternetȱOptionsÆȱAdvanced,ȱdeselectȱtheȱoption,ȱReuseȱwindowsȱforȱlaunchingȱshortcuts.ȱAdditionally,ȱunderȱToolsÆPopȬupȱBlocker,ȱselectȱTurnȱOffȱPopȬupȱBlocker.ȱToȱlaunchȱtheȱConsole,ȱperformȱtheȱfollowingȱsteps:ȱ1. LaunchȱaȱWebȱbrowserȱsuchȱasȱIEȱ5.5ȱorȱhigherȱonȱaȱclientȱcomputerȱonȱtheȱnetworkȱthatȱhasȱWindowsȱ2000ȱorȱXPȱOperatingȱSystemȱ(OS).ȱ2. EnterȱtheȱdefaultȱIPȱAddressȱforȱtheȱServer,ȱthatȱis,ȱ192.168.1.246.ȱ3. Clickȱ<Yes>ȱonȱeachȱofȱtheȱsecurityȱmessageȱpopȬupȱdialogsȱtoȱproceed.ȱȱFigure  32. Web Site Certificate Verification Theȱdialogȱshownȱbelowȱappearsȱunderȱtheȱfollowingȱconditions:ȱxIfȱtheȱcorrectȱversion,ȱthatȱis,ȱSunȱJREȱ1.6.0ȱisȱnotȱdetectedȱonȱyourȱcomputerȱxIfȱtheȱversionȱinstalledȱhasȱnotȱbeenȱactivatedȱforȱusageȱȱFigure  33. Installing JRE 4. DisableȱallȱpopȬupȱblockersȱactiveȱonȱyourȱWebȱbrowserȱtoȱeliminateȱtheȱwarningȱmessageȱshownȱinȱtheȱfollowingȱfigure.ȱȱFigure  34. Pop-up Blocker Message
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ23ȱFigure  35. Detecting Java Runtime Environment (JRE) ȱFigure  36. Web Site Certificate Warning 5. AddȱaȱDNSȱentryȱforȱtheȱhostnameȱwifiȬsecurityȬserverȱandȱtheȱIPȱaddressȱofȱtheȱServerȱinȱtheȱhostsȱfileȱofȱtheȱclientȱcomputerȱtoȱeliminateȱtheȱwarningȱshownȱinȱtheȱfollowingȱfigure.ȱTheȱhostsȱfileȱisȱlocatedȱatȱtheȱfollowingȱpath:ȱxC:\WINNT\system32\drivers\etc\hosts,ȱforȱWindowsȱ2000ȱxC:\windows\system32\drivers\etc\hosts,ȱforȱWindowsȱXPȱ6. SaveȱtheȱhostsȱfileȱandȱrestartȱtheȱbrowserȱtoȱinvokeȱtheȱConsole.ȱȱFigure  37. Hostname Mismatch Warning
InstallingȱtheȱServerȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ24ȱȱFigure  38. Digital Signature Verified 4.5 ActivatingȱtheȱLicenseȱ1. SaveȱtheȱlicenseȱkeyȱfileȱshippedȱwithȱtheȱServerȱonȱyourȱdesktop.ȱ2. Browseȱtoȱtheȱlicenseȱkeyȱfileȱandȱselectȱit.ȱClickȱ<Apply>.ȱȱFigure  39. Activate License Ifȱtheȱlicenseȱkeyȱisȱvalid,ȱyouȱwillȱseeȱtheȱLoginȱscreen.ȱOtherwise,ȱyouȱwillȱseeȱanȱerrorȱmessage.ȱ
InstallingȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ25Chapterȱ5 InstallingȱtheȱSensorȱȱSensorȱisȱtheȱprobeȱthatȱmonitorsȱyourȱnetworkȱandȱcommunicatesȱwithȱtheȱServerȱtoȱguardȱyourȱcorporateȱnetworkȱagainstȱoverȬtheȬairȱattacks.ȱTheȱSensorȱmustȱbeȱpluggedȱtoȱyourȱcorporateȱnetworkȱtoȱperformȱtheȱaboveȱoperations.ȱSensorȱcanȱbeȱconfiguredȱinȱoneȱofȱtheȱfollowingȱthreeȱmodes:ȱxSensorȱOnlyȱ(SO)ȱMode:ȱThisȱisȱtheȱdefaultȱmode.ȱInȱthisȱmode,ȱtheȱSensorȱshouldȱbeȱconnectedȱintoȱanȱaccessȱportȱonȱaȱswitch.ȱItȱthenȱmonitorsȱaȱsingleȱVLANȱthatȱisȱconfiguredȱonȱthatȱaccessȱport.ȱTheȱwirelessȱinterfaceȱofȱtheȱSensorȱisȱenabled.ȱxNetworkȱDetectorȱ(ND)ȱMode:ȱThisȱmodeȱneedsȱtoȱbeȱexplicitlyȱconfigured.ȱInȱthisȱmode,ȱtheȱNDȱshouldȱbeȱconnectedȱintoȱaȱtrunkȱportȱ(802.1Qȱcapable)ȱonȱaȱswitch.ȱItȱthenȱmonitorsȱmultipleȱVLANsȱthatȱareȱconfiguredȱonȱthatȱtrunkȱportȱandȱareȱchosenȱbyȱtheȱuserȱusingȱtheȱNDȱCLI.ȱTheȱwirelessȱinterfaceȱofȱtheȱNDȱisȱdisabled.ȱAnȱSSȬ200ȬATȱSensorȱinȱNDȱmodeȱcanȱmonitorȱupȱtoȱ32ȱVLANs.ȱSimilarly,ȱanȱSSȬ300ȬATȱcanȱmonitorȱuptoȱ100ȱVLANs.ȱxSensor/NDȱComboȱ(SNDC)ȱMode:ȱThisȱmodeȱneedsȱtoȱbeȱexplicitlyȱconfigured.ȱInȱthisȱmode,ȱtheȱSensorȱshouldȱbeȱconnectedȱintoȱaȱtrunkȱportȱ(802.1Qȱcapable)ȱonȱaȱswitch.ȱItȱthenȱmonitorsȱmultipleȱVLANsȱthatȱareȱconfiguredȱonȱthatȱtrunkȱportȱandȱareȱchosenȱbyȱtheȱuserȱusingȱtheȱNDȱCLI.ȱTheȱwirelessȱinterfaceȱofȱtheȱSensorȱisȱenabled.ȱAȱSSȬ200ȬATȱSensorȱinȱSNDCȱmodeȱcanȱmonitorȱupȱtoȱ4ȱVLAN.ȱSimilarly,ȱanȱSSȬ300ȬATȱcanȱmonitorȱuptoȱ16ȱVLANs.ȱImportant:ȱToȱpreventȱabuseȱandȱintrusionȱbyȱunauthorizedȱpersonnel,ȱitȱisȱextremelyȱimportantȱtoȱinstallȱtheȱSensorȱsuchȱthatȱitȱisȱdifficultȱtoȱunplugȱtheȱdeviceȱfromȱtheȱnetworkȱorȱfromȱtheȱpowerȱoutlet.ȱ5.1 ZeroȱConfigurationȱofȱSensorsȱZeroȱconfigurationȱisȱrequiredȱifȱtheȱfollowingȱconditionsȱareȱsatisfied:ȱxTheȱSensorȱisȱinȱSOȱmode.ȱxAȱDNSȱentryȱ‘wifiȬsecurityȬserver’ȱisȱsetȱupȱonȱallȱDNSȱServers.ȱThisȱentryȱshouldȱpointȱtoȱtheȱIPȱaddressȱofȱtheȱServer.ȱByȱdefaultȱtheȱSensorȱlooksȱforȱtheȱServerȱDNSȱentryȱ‘wifiȬsecurityȬserver’.ȱxSensorȱisȱplacedȱonȱaȱsubnetȱthatȱisȱDHCPȱenabled.ȱImportant:ȱIfȱaȱSensorȱisȱplacedȱonȱaȱnetworkȱsegmentȱthatȱisȱseparatedȱfromȱtheȱServerȱbyȱaȱfirewall,ȱyouȱmustȱfirstȱopenȱportȱ3851ȱforȱUserȱDatagramȱProtocolȱ(UDP)ȱandȱTransportȱControlȱProtocolȱ(TCP)ȱbidirectionalȱtrafficȱonȱthatȱfirewall.ȱThisȱportȱnumberȱisȱassignedȱtoȱAirTight®ȱNetworks.ȱIfȱmultipleȱSensorsȱareȱsetȱupȱtoȱconnectȱtoȱmultipleȱServers,ȱzeroȱconfigurationȱisȱnotȱpossible.ȱInȱthisȱcaseȱmanualȱconfigurationȱofȱSensorsȱisȱneeded.ȱReferȱtoȱManuallyȱConfiguringȱtheȱSensorȱforȱdetails.ȱTheȱstepsȱtoȱinstallȱtheȱSensorȱwithȱnoȱconfigurationȱ(zeroȱconfiguration)ȱareȱasȱfollows.ȱxMountȱtheȱSensorȱxPowerȱupȱtheȱSensorȱxConnectȱtheȱSensorȱtoȱtheȱnetworkȱ5.2 ConnectingȱtheȱSensorȱThisȱinvolvesȱmountingȱtheȱSensor,ȱpoweringȱitȱup,ȱandȱconnectingȱitȱtoȱtheȱnetwork.ȱ5.2.1 MountȱtheȱSSȬ200ȬATȱSensorȱTakeȱaȱconfiguredȱSensor,ȱthatȱis,ȱmakeȱsureȱthatȱtheȱSensorȱisȱgivenȱaȱstaticȱIPȱorȱtheȱsettingsȱhaveȱbeenȱchangedȱforȱDHCP.ȱNoteȱtheȱMACȱaddressȱandȱtheȱIPȱaddressȱofȱtheȱSensorȱinȱaȱsafeȱplaceȱbeforeȱitȱisȱinstalledȱinȱaȱhardȬtoȬreachȱlocation.ȱTheȱMACȱaddressȱofȱtheȱSensorȱisȱprintedȱonȱaȱlabelȱatȱtheȱbottomȱofȱtheȱproductȱandȱtheȱpackagingȱbox.ȱRecommended:ȱYouȱshouldȱlabelȱtheȱSensorsȱusingȱMACȱaddressesȱorȱatȱleastȱyourȱownȱconvention.ȱForȱexample,ȱuseȱserialȱnumbers,ȱsoȱthatȱyouȱcanȱeasilyȱidentifyȱtheȱSensors.ȱ5.2.1.1 CeilingȱMountingȱToȱmountȱtheȱSensorȱtoȱaȱceiling,ȱperformȱtheȱfollowingȱsteps:ȱ1. Placeȱtheȱmountingȱbracket/mountȱonȱtheȱSensorȱandȱalignȱtheȱbracketȱslotsȱwithȱthoseȱonȱtheȱSensorȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱ
InstallingȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ26ȱȱFigure  40. Aligning the Sensor and Mount Slots 2. SlideȱtheȱmountȱandȱbendȱtheȱtwoȱretainingȱplatesȱforwardȱtoȱpreventȱtheȱSensorȱfromȱslidingȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱFigure  41. Fixing the Mounting Bracket to the Sensor Note:ȱYouȱneedȱtoȱuseȱonlyȱoneȱofȱtheȱtwoȱtabsȱonȱtheȱmountȱatȱaȱtime.ȱForȱU.SȱInstallations,ȱuseȱtheȱtabȱnearestȱtheȱedgeȱforȱdropȱceiling/tȬbarsȱthatȱareȱapproximatelyȱ1ȱinchȱwide.ȱYouȱneedȱtoȱbendȱtheȱinnerȱtabȱforȱtheȱsmallerȱEuropeanȱdropȱceilingsȱsoȱitȱisȱflush/flatȱwithȱtheȱbottomȱofȱtheȱmount.ȱTherefore,ȱtheȱinnerȱtabȱdoesȱnotȱprotrudeȱatȱall.ȱYouȱneedȱtoȱbendȱdownȱtheȱtabȱforȱUSȱdropȱceilingsȱsoȱthatȱitȱprotrudesȱapproximatelyȱ¼ȱinchȱfromȱtheȱbottom.ȱForȱEuropeanȱInstallations,ȱuseȱtheȱinnerȱtabȱforȱdropȱceilings/tȬbarsȱthatȱareȱapproximatelyȱ½ȱinchȱwide.ȱȱFigure  42. Tab orientations for US Installations 3. PressȱtheȱSensor/bracketȱmountȱagainstȱtheȱtȬbarȱatȱanȱangleȱwithȱtheȱtȬbarȱrunningȱbetweenȱtheȱtwoȱtabsȱthatȱwillȱeventuallyȱgrabȱtheȱdropȱceilingȱtȬbarȱasȱshownȱinȱtheȱfollowingȱfigure.ȱ
InstallingȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ27ȱFigure  43. Pressing the Mount against the T-Bar 4. Turn/twistȱtheȱmountȱsoȱthatȱtheȱtwoȱtabsȱbeginȱtoȱengageȱtheȱtȬbarȱandȱtheȱtȬbarȱpassesȱoverȱtheȱEuropeanȱtab,ȱwhichȱwasȱpushedȱdownȱflush.ȱTheȱtȬbarȱshouldȱalsoȱpushȱagainstȱtheȱUSȱtab,ȱwhichȱwasȱbentȱupȱapproximatelyȱ¼ȱinchȱasȱshownȱinȱtheȱfollowingȱfigure.ȱȱFigure  44. Initial Twisting of the Mount 5. Turn/twistȱtheȱmountȱallȱtheȱway,ȱsoȱthatȱtheȱtwoȱtabsȱcompletelyȱengageȱtheȱtȬbar.ȱTheȱUSȱtabȱbendsȱupȱapproximatelyȱ¼ȱinchȱandȱpushesȱagainstȱtheȱsideȱofȱtheȱtȬbarȱpreventingȱtheȱmountȱfromȱtwistingȱbackwardȱandȱdisengagingȱformȱtheȱtȬbarȱasȱshownȱinȱtheȱfollowingȱfigures.ȱȱFigure  45. Final Twisting of the Mount with the US tab supporting the Mount 5.2.1.2 FlatȱSurfaceȱInstallationȱYouȱcanȱplaceȱtheȱSensorȱonȱaȱflatȱsurfaceȱsuchȱasȱaȱtable,ȱdesktop,ȱorȱfilingȱcabinet.ȱDoȱnotȱinstallȱtheȱSensorȱonȱanyȱtypeȱofȱmetalȱsurface.ȱIfȱyouȱchooseȱaȱflatȱsurfaceȱmount,ȱselectȱaȱlocationȱthatȱisȱclearȱofȱobstructionsȱandȱprovidesȱgoodȱreception.ȱ
InstallingȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ28ȱȱFigure  46. Flat Surface Installation Recommended:ȱAirTightȱdoesȱnotȱrecommendȱwallȱmountingȱofȱtheȱSensorȱasȱitȱusesȱomniȱdirectionalȱantennas.ȱ5.2.2 MountȱtheȱSSȬ300ȬATȱSensorȱTakeȱaȱconfiguredȱSensor,ȱthatȱis,ȱmakeȱsureȱthatȱtheȱSensorȱisȱgivenȱaȱstaticȱIPȱorȱtheȱsettingsȱhaveȱbeenȱchangedȱforȱDHCP.ȱNoteȱtheȱMACȱaddressȱandȱtheȱIPȱaddressȱofȱtheȱSensorȱinȱaȱsafeȱplaceȱbeforeȱitȱisȱinstalledȱinȱaȱhardȬtoȬreachȱlocation.ȱTheȱMACȱaddressȱofȱtheȱSensorȱisȱprintedȱonȱaȱlabelȱatȱtheȱbottomȱofȱtheȱproduct.ȱRecommended:ȱYouȱshouldȱlabelȱtheȱSensorsȱusingȱMACȱaddressesȱorȱatȱleastȱyourȱownȱconvention.ȱForȱexample,ȱuseȱserialȱnumbers,ȱsoȱthatȱyouȱcanȱeasilyȱidentifyȱtheȱSensors.ȱ5.2.2.1 Ceiling/WallȱMountingȱToȱinstallȱtheȱSensorȱonȱaȱwallȱorȱceiling,ȱuseȱtheȱmountingȱbracketȱthatȱcomesȱwithȱtheȱdevice.ȱFollowȱtheseȱsteps:ȱ1. ȱFollowingȱtheseȱguidelines,ȱscrewȱtheȱmountingȱbracketȱtoȱaȱwallȱorȱceiling:ȱxTheȱmountingȱbracketȱtabsȱshouldȱbeȱpointingȱupward.ȱxIfȱmountingȱtoȱdrywall,ȱuseȱtheȱ4ȱscrewsȱandȱ4ȱwallȱanchors.ȱxIfȱmountingȱtoȱanȱEUȱelectricalȱboxȱ(60.3mm),ȱuseȱ2ȱthreadedȱscrewsȱandȱinsertȱintoȱtheȱholesȱmarkedȱ“A ” ȱinȱtheȱdiagramȱshownȱbelow.ȱxIfȱmountingȱtoȱaȱUSȱelectricalȱboxȱ(83.3mm),ȱuseȱ2ȱthreadedȱscrewsȱandȱinsertȱintoȱtheȱholesȱmarkedȱ“B”ȱinȱtheȱdiagramȱshownȱbelow.ȱȱFigure  47. Holes for inserting screws 2. ConnectȱtheȱEthernetȱcableȱ(forȱpowerȱandȱnetworkȱconnection)ȱtoȱtheȱLANȱportȱonȱtheȱbackȱofȱtheȱSensor.ȱ3. ToȱmountȱtheȱSensorȱontoȱtheȱmountingȱbracket,ȱinsertȱtheȱmountingȬbracketȱtabsȱintoȱtheȱslotsȱonȱtheȱbackȱofȱtheȱAP.ȱIMPORTANT:ȱIfȱyouȱareȱmountingȱtheȱSensorȱonȱaȱwall,ȱyouȱcannotȱuseȱtheȱslotsȱonȱtheȱbottomȱnarrowȱedgeȱofȱtheȱdevice.ȱInstead,ȱtheȱslotsȱonȱtheȱbackȱofȱtheȱSensorȱmustȱbeȱused.ȱ5.2.2.2 FlatȱSurfaceȱInstallationȱToȱinstallȱtheȱSensorȱonȱaȱflatȱsurfaceȱsuchȱasȱaȱtableȱorȱdesktop,ȱfollowȱtheseȱsteps:ȱ
InstallingȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ291. InsertȱtheȱtabsȱonȱtheȱtableȱstandȱintoȱtheȱslotsȱonȱtheȱsideȱofȱtheȱSensor,ȱasȱshownȱinȱtheȱillustration.ȱAlignȱtheȱcableȱroutingȱcutȱoutȱtowardȱtheȱupperȱpartȱofȱtheȱstand.ȱȱFigure  48. Inserting tabs on the table stand 2. ToȱlockȱtheȱstandȱtoȱtheȱSensor,ȱslideȱtheȱstandȱbackȱandȱtheȱSensorȱforward,ȱasȱshownȱhere:ȱȱFigure  49. Locking the Stand to the Sensor 3. PlaceȱtheȱSensorȱandȱtableȱstandȱonȱtheȱtable.ȱȱFigure  50. Sensor Mount on a Table 4. ConnectȱtheȱEthernetȱcableȱforȱpowerȱandȱnetworkȱconnectionȱtoȱtheȱLANȱportȱonȱtheȱbackȱofȱtheȱAP.ȱ5.2.3 PowerȱupȱtheȱSensorȱAnȱSSȬ200ȬATȱSensorȱrunsȱonȱaȱ5VȱDCȱconnection.ȱUseȱtheȱpowerȱadapterȱprovidedȱtoȱpowerȱtheȱSensorȱfromȱanȱ110V~240Vȱ50/60ȱHzȱACȱpowerȱconnection.ȱToȱpowerȱupȱtheȱSensor,ȱperformȱtheȱfollowingȱsteps:ȱ
InstallingȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ30ȱ1. PlugȱtheȱpowerȱcableȱintoȱtheȱDCȱpowerȱreceptacleȱatȱtheȱrearȱofȱtheȱSensor.ȱ2. Plugȱtheȱotherȱendȱofȱtheȱpowerȱcableȱintoȱanȱ110V~240Vȱ50/60ȱHzȱACȱpowerȱsource.ȱȱFigure  51. Power up the Sensor Waitȱforȱtwoȱminutes!ȱ3. CheckȱtheȱStatusȱLEDs.ȱYouȱwillȱseeȱLED1ȱturnȱOrangeȱandȱLED2ȱturnȱgreen,ȱindicatingȱthatȱtheȱSensorȱisȱpoweredȱonȱcorrectlyȱandȱwaitingȱtoȱbeȱconnectedȱtoȱtheȱnetwork.ȱAnȱSSȬ300ȬATȱSensorȱcanȱbeȱPoweredȱonȱbyȱ802.3afȱClassȱ0ȱPowerȱOverȱEthernetȱofȱNominalȱinputȱvoltageȱ48VȱDC.ȱ5.2.4 ConnectȱtheȱSensorȱtoȱtheȱNetworkȱEnsureȱthatȱtheȱServerȱisȱalreadyȱrunningȱonȱyourȱnetwork.ȱAddȱtheȱDNSȱentryȱ‘wifiȬsecurityȬserver’ȱonȱallȱDNSȱServers.ȱThisȱentryȱshouldȱpointȱtoȱtheȱIPȱaddressȱofȱtheȱServer.ȱToȱconnectȱtheȱSensorȱtoȱtheȱnetwork,ȱperformȱtheȱfollowingȱsteps:ȱ1. EnsureȱthatȱDHCPȱisȱrunningȱonȱtheȱsubnetȱtoȱwhichȱtheȱSensorȱwillȱbeȱconnected.ȱ2. ConnectȱoneȱendȱofȱtheȱNetworkȱInterfaceȱcableȱtoȱtheȱEthernetȱportȱatȱtheȱrearȱofȱtheȱSensor.ȱ3. ConnectȱtheȱotherȱendȱofȱtheȱNetworkȱInterfaceȱcableȱtoȱanȱEthernetȱjackȱthatȱisȱconnectedȱtoȱtheȱdesiredȱsubnet.ȱImportant:ȱIfȱDHCPȱisȱnotȱenabledȱonȱaȱsubnet,ȱSensorsȱcannotȱconnectȱtoȱthatȱsubnetȱwithȱzeroȱconfiguration.ȱReferȱtoȱManuallyȱConfiguringȱtheȱSensorȱforȱdetailsȱonȱmanualȱconfigurationȱofȱSensor.ȱȱFigure  52. Connect the Sensor to the Network Waitȱforȱtwoȱminutes!ȱCheckȱtheȱStatusȱLEDsȱonȱtheȱSensor.ȱIfȱallȱLEDsȱglowȱgreen,ȱthenȱtheȱSensorȱisȱoperationalȱandȱconnectedȱtoȱtheȱServer.ȱLogȱonȱtoȱtheȱServerȱthroughȱSSH.ȱRunȱtheȱ‘getȱsensorȱlist’ȱcommand.ȱYouȱwillȱseeȱaȱlistȱofȱallȱSensorsȱthatȱareȱrecognizedȱbyȱtheȱServer.ȱTheȱSensorȱisȱconfiguredȱandȱreadyȱtoȱgo.ȱCheckȱtheȱConsoleȱtoȱensureȱthatȱthisȱSensorȱhasȱbeenȱdetected.ȱIfȱallȱtheȱSensorsȱhaveȱconnectedȱwithȱzeroȱconfiguration,ȱyouȱneedȱnotȱreadȱthisȱinstallationȱguideȱfurther.ȱ
InstallingȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ31Note:ȱIfȱLED1ȱturnsȱOrange,ȱitȱmeansȱthatȱtheȱzeroȱconfigurationȱwasȱnotȱsuccessfulȱandȱtheȱSensorȱmustȱbeȱconfiguredȱmanually.ȱReferȱtoȱManuallyȱConfiguringȱtheȱSensorȱforȱdetails
ManuallyȱConfiguringȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ30ȱChapterȱ6 ManuallyȱConfiguringȱtheȱSensorȱImportant:ȱIfȱtheȱinstallationȱinȱInstallingȱtheȱSensorȱwasȱsuccessful,ȱstop!ȱYouȱdoȱnotȱneedȱtoȱconfigureȱtheȱSensorȱmanually.ȱ6.1 IntroductionȱManualȱconfigurationȱofȱaȱSensorȱisȱtypicallyȱrequiredȱinȱtheȱfollowingȱcases:ȱxSensorȱneedsȱtoȱbeȱconfiguredȱinȱNDȱorȱSNDCȱmode.ȱxSensorȱOnlyȱ(SO)ȱdevicesȱcannotȱconnectȱtoȱtheȱServerȱthroughȱzeroȱconfiguration.ȱTheȱDNSȱentryȱforȱtheȱServerȱhasȱbeenȱchangedȱtoȱanȱentryȱotherȱthanȱȈwifiȬsecurityȬserverȈȱorȱthereȱisȱnoȱDNSȱServerȱpresentȱinȱtheȱnetwork.ȱThisȱisȱapplicableȱforȱmultiȬserverȱinstallations.ȱxSensorȱisȱplacedȱonȱaȱsubnetȱthatȱisȱnotȱDHCPȱenabled.ȱ6.2 ConfiguringȱSensorȱthroughȱConfigȱShellȱToȱuseȱtheȱConfigȱShell,ȱconnectȱaȱSerialȱ(RSȬ232)ȱcableȱbetweenȱyourȱcomputerȱandȱtheȱSensor.ȱTheȱConfigȱShellȱsupportsȱaȱpreȬdefinedȱsetȱofȱcommandsȱusedȱtoȱconfigureȱtheȱSensor.ȱȱFigure  53. Connecting the Sensor to your computer using a Serial Cable TheȱstepsȱtoȱconfigureȱtheȱSensorȱmanuallyȱareȱasȱfollows:ȱ1. InvokeȱHyperȱTerminalȱ(orȱminicom)ȱ2. Logȱinȱandȱchangeȱtheȱdefaultȱpasswordȱ3. SetȱServerȱDiscoveryȱ4. SetȱSensorȱModeȱ5. SetȱNetworkȱSettingsȱforȱthatȱSensorȱModeȱTheȱaboveȱstepsȱareȱexplainedȱinȱdetailȱbelow.ȱ6.2.1 InvokeȱHyperTerminalȱ(orȱminicom)ȱToȱconfigureȱtheȱSensor,ȱfollowȱtheȱstepsȱdescribedȱbelowȱtoȱinvokeȱtheȱConfigȱShell.ȱ6.2.1.1 LaunchingȱHyperTerminalȱToȱstartȱHyperTerminal,ȱclickȱStartÆProgramsÆAccessoriesÆCommunicationsÆHyperTerminalȱasȱshownȱinȱtheȱfollowingȱfigure.ȱ
ManuallyȱConfiguringȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ31ȱFigure  54. Opening HyperTerminal Note:ȱIfȱyouȱareȱusingȱaȱLinuxȱlaptop,ȱyouȱcanȱuseȱminicomȱtoȱconnectȱtoȱtheȱConfigȱShell.ȱ6.2.1.2 DefiningȱaȱNewȱHyperTerminalȱConnectionȱȱȱFigure  55. Define a New HyperTerminal Connection for Sensor
ManuallyȱConfiguringȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ32ȱxSelectȱanȱiconȱtoȱidentifyȱtheȱnewȱconnection.ȱxTypeȱtheȱrequiredȱnameȱforȱtheȱHyperTerminalȱconnectionȱinȱtheȱNameȱfieldȱxClickȱ<OK>ȱonȱtheȱConnectionȱDescriptionȱdialog.ȱ6.2.1.3 SpecifyingȱHyperTerminalȱConnectionȱDetailsȱȱȱFigure  56. Specify HyperTerminal Connection Details xSelectȱorȱenterȱtheȱappropriateȱconnectionȱdetails.ȱxClickȱ<OK>ȱonȱtheȱConnectȱToȱdialog.ȱNote:ȱTheȱnameȱofȱtheȱserialȱportȱwillȱchangeȱasȱperȱtheȱsettingsȱofȱyourȱcomputer.ȱ6.2.1.4 EditingȱSerialȱPortȱSettingsȱȱȱFigure  57. Edit Serial Port Settings
ManuallyȱConfiguringȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ33xEditȱtheȱserialȱportȱsettingsȱasȱfollowsȱorȱclickȱ<RestoreȱDefaults>ȱtoȱensureȱproperȱcommunicationȱbetweenȱtheȱSensorȱandȱyourȱcomputer.ȱ¾Bitsȱperȱsecond:ȱ9600ȱ¾Dataȱbits:ȱ8ȱ¾Parity:ȱNoneȱ¾Stopȱbits:ȱ1ȱ¾Flowȱcontrol:ȱNoneȱxClickȱ<OK>ȱonȱtheȱCOMȱPropertiesȱdialog.ȱxPressȱ<Enter>ȱorȱ<Space>ȱonȱtheȱHyperTerminalȱscreen.ȱ6.2.2 LogȱinȱandȱChangeȱtheȱDefaultȱPasswordȱLogȱinȱtoȱtheȱConfigȱShellȱusingȱtheȱuserȱnameȱconfigȱandȱpasswordȱconfig.ȱChangeȱtheȱdefaultȱpasswordȱusingȱtheȱcommandȱpasswd.ȱYouȱcanȱchangeȱtheȱSensorȱpasswordȱusingȱSensorȱtemplates.ȱReferȱtoȱsectionȱ8.4.4:ȱSensorȱConfigurationȱinȱtheȱSpectraguardȱEnterpriseȱUserȱGuideȱforȱmoreȱdetails.ȱRecommended;ȱAirTightȱrecommendsȱthatȱyouȱchangeȱtheȱdefaultȱpasswordȱforȱsecurityȱreasons,ȱalthoughȱitȱisȱnotȱmandatory.ȱ6.2.3 SetȱServerȱDiscoveryȱTheȱnextȱstepȱisȱtoȱsetȱtheȱServerȱDiscoveryȱinformation.ȱThereȱareȱtwoȱtypesȱofȱServerȱDiscovery.ȱxServerȱIPȱbasedȱdiscoveryȱ(preferred)ȱxServerȱIDȱbasedȱdiscoveryȱ(deprecated)ȱxServiceȱLocationȱProtocolȱ(SLP)ȱbasedȱdiscoveryȱ(ifȱwifiȬsecurityȬserverȱserviceȱhasȱbeenȱconfigured)ȱUseȱtheȱcommandȱsetȱserverȱdiscoveryȱtoȱpointȱtheȱSensorȱtoȱtheȱcorrectȱServer.ȱȱFigure  58. set server discovery command Note:ȱIfȱIP/HostnameȱbasedȱdiscoveryȱisȱbeingȱusedȱandȱthereȱisȱmoreȱthanȱoneȱServerȱonȱtheȱnetwork,ȱthenȱyouȱmustȱenterȱtheȱIPȱaddressȱofȱtheȱappropriateȱServer.ȱ6.2.4 SetȱSensorȱModeȱTheȱnextȱstepȱisȱtoȱsetȱtheȱmodeȱofȱtheȱSensor.ȱThereȱareȱthreeȱpossibleȱmodes:ȱxSOȱMode:ȱThisȱisȱtheȱdefaultȱmode.ȱInȱthisȱmode,ȱtheȱSensorȱshouldȱbeȱconnectedȱintoȱanȱaccessȱportȱonȱaȱswitch.ȱItȱthenȱmonitorsȱaȱsingleȱVLANȱthatȱisȱconfiguredȱonȱthatȱaccessȱport.ȱTheȱwirelessȱinterfaceȱofȱtheȱSensorȱisȱenabled.ȱxNDȱMode:ȱThisȱmodeȱneedsȱtoȱbeȱexplicitlyȱconfigured.ȱInȱthisȱmode,ȱtheȱNDȱshouldȱbeȱconnectedȱintoȱaȱtrunkȱportȱ(802.1Qȱcapable)ȱonȱaȱswitch.ȱItȱthenȱmonitorsȱmultipleȱVLANsȱthatȱareȱconfiguredȱonȱthatȱtrunkȱportȱandȱareȱchosenȱbyȱtheȱuserȱusingȱtheȱNDȱCLI.ȱTheȱwirelessȱinterfaceȱofȱtheȱNDȱisȱdisabled.ȱAȱSensorȱinȱNDȱmodeȱcanȱmonitorȱupȱtoȱ32ȱVLANsȱandȱdetectȱupȱtoȱ32ȱVLANs.ȱ
ManuallyȱConfiguringȱtheȱSensorȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ34ȱxSNDCȱMode:ȱThisȱmodeȱneedsȱtoȱbeȱexplicitlyȱconfigured.ȱInȱthisȱmode,ȱtheȱSensorȱshouldȱbeȱconnectedȱintoȱaȱtrunkȱportȱ(802.1Qȱcapable)ȱonȱaȱswitch.ȱItȱthenȱmonitorsȱmultipleȱVLANsȱthatȱareȱconfiguredȱonȱthatȱtrunkȱportȱandȱareȱchosenȱbyȱtheȱuserȱusingȱtheȱNDȱCLI.ȱTheȱwirelessȱinterfaceȱofȱtheȱSensorȱisȱenabled.ȱAȱSensorȱinȱSNDCȱmodeȱcanȱmonitorȱupȱtoȱ4ȱVLANsȱandȱdetectȱupȱtoȱ4ȱVLANs.ȱUseȱtheȱsetȱmodeȱcommandȱtoȱsetȱtheȱSensorȱmode.ȱȱFigure  59. set sensor mode command 6.2.5 ConfigureȱNetworkȱSettingsȱOnceȱtheȱmodeȱisȱset,ȱyouȱhaveȱtoȱenableȱtheȱNetworkȱSettings.ȱxSensorȱOnlyȱMode:ȱForȱthisȱmode,ȱuseȱtheȱcommandȱsetȱipȱconfig.ȱThisȱcommandȱrunsȱthroughȱtheȱcurrentȱVLANȱandȱtheȱIPȱconfigȱwizard.ȱxNetworkȱDetector/Sensor/NDȱComboȱMode:ȱForȱthisȱmode,ȱuseȱtheȱcommandȱsetȱvlanȱconfig.ȱThisȱcommandȱconfiguresȱtheȱIPȱaddressesȱonȱtheȱND.ȱReferȱtoȱChapterȱ3:ȱGuidelinesȱforȱConfiguringȱandȱInstallingȱNDȱandȱSNDCȱinȱtheȱdocumentȱ‘NetworkȱDetectorȱConfigurationȱforȱSpectraGuardȱEnterprise_5.7’ȱforȱfurtherȱdetails.
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ35Chapterȱ7 SettingȱupȱtheȱServerȱConsoleȱTheȱConfigurationȱWizardȱguidesȱyouȱthroughȱtheȱstepsȱrequiredȱtoȱsetȱupȱtheȱsystem.ȱTheȱsystemȱisȱmanagedȱthroughȱaȱJavaȱappletȱthatȱisȱlaunchedȱinȱtheȱInternetȱExplorerȱ5.5+ȱWebȱbrowser.ȱThisȱHTMLȱinterfaceȱisȱknownȱasȱtheȱ‘ConsoleȱorȱGraphicalȱUserȱInterfaceȱ(GUI)’.ȱThisȱchapterȱdescribesȱhowȱtheȱConsoleȱisȱlaunchedȱandȱsetup.ȱ7.1 LoggingȱintoȱtheȱConsoleȱ1. OnȱtheȱLoginȱscreen,ȱtypeȱtheȱLoginȱID:ȱadminȱandȱtheȱPassword:ȱadminȱandȱclickȱ<Login>ȱorȱpressȱ<Enter>.ȱȱȱFigure  60. Console Login Screen 2. TheȱEndȱUserȱLicenseȱAgreementȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱReadȱtheȱagreementȱcarefullyȱandȱselectȱ‘IȱhaveȱreadȱandȱagreeȱtoȱtheȱLicensingȱAgreementȱabove’.ȱClickȱ<Next>.ȱȱFigure  61. End User License Agreement Screen 7.1.1 Stepȱ1:ȱStartingȱtheȱSetupȱWizardȱ3. TheȱWelcomeȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱThisȱwizardȱtakesȱyouȱthroughȱtheȱstepsȱtoȱhelpȱyouȱinitializeȱtheȱsystem.ȱClickȱ<Next>ȱonȱeachȱscreenȱtoȱproceedȱtoȱtheȱnextȱstep.ȱToȱgoȱbackȱtoȱaȱpreviousȱstep,ȱclickȱ<Previous>.ȱToȱexitȱtheȱsetupȱwizardȱatȱanyȱpoint,ȱclickȱ<Exit>.ȱYouȱcanȱtakeȱaȱtourȱofȱthisȱwizardȱlaterȱthroughȱtheȱConsoleȱfromȱAdministrationÆGlobalȱTabÆSystemȱSettingsÆWizardsȱandȱconfigureȱtheȱappropriateȱsettings.ȱClickȱ<Start>.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ36ȱȱFigure  62. System Setup Wizard Welcome Screen 7.1.2 Stepȱ2:ȱChangingȱyourȱAccountȱPasswordȱ4. TheȱChangeȱPasswordȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱChangeȱyourȱaccountȱloginȱpassword.ȱSpecifyȱanȱemailȱaddressȱforȱtheȱuserȱadminȱtoȱbeȱusedȱlaterȱtoȱtestȱSMTPȱServerȱsettingsȱandȱotherȱemailȱnotifications.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ37ȱFigure  63. Change Password UnderȱPasswordȱDetails,ȱyouȱcanȱspecifyȱtheȱfollowing:ȱxEmailȱAddressȱxOldȱPasswordȱxNewȱPasswordȱxConfirmȱPasswordȱUnderȱUserȱPreferences,ȱyouȱcanȱchangeȱyourȱsessionȱtimeoutȱinterval,ȱlanguageȱsettings,ȱorȱtimeȱzone.ȱxSessionȱTimeout:ȱEnablesȱyouȱtoȱspecifyȱtheȱtimeȱafterȱwhichȱtheȱuserȱisȱloggedȱoutȱautomaticallyȱifȱtheȱsystemȱdoesȱnotȱdetectȱanyȱactivityȱ¾SessionȱNeverȱExpires:ȱSelectȱthisȱcheckboxȱifȱyouȱdoȱnotȱwantȱtheȱsessionȱtoȱexpireȱ¾SessionȱTimeout:ȱEnablesȱyouȱtoȱspecifyȱtheȱnumberȱofȱminutesȱafterȱwhichȱtheȱsystemȱautomaticallyȱlogsȱoutȱtheȱcurrentlyȱloggedȱinȱuserȱwhenȱthereȱisȱnoȱactivityȱonȱtheȱConsoleȱforȱtheȱSessionȱTimeoutȱperiodȱ(Minimum:ȱ10ȱminutes;ȱMaximum:ȱ120ȱminutes)ȱxLanguageȱpreference:ȱSelectȱEnglishȱorȱMultilingualȱsupportȱfromȱtheȱdropȬdownȱlistȱxTimeȱZone:ȱSelectȱtheȱappropriateȱtimeȱzoneȱforȱtheȱuserȱToȱsaveȱtheȱnewȱpasswordȱandȱuserȱpreferences,ȱclickȱ<Apply>.ȱ7.1.3 Stepȱ3:ȱPreparingȱyourȱSystemȱforȱConfigurationȱ5. TheȱEventȱActivationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱToȱavoidȱtransientȱeventsȱduringȱtheȱsetupȱprocess,ȱdeȬactivateȱthisȱfeatureȱforȱallȱlocationsȱwhereȱchangesȱareȱtoȱbeȱmade.ȱTheȱsystemȱpromptsȱyouȱtoȱturnȱthisȱfeatureȱbackȱonȱatȱtheȱendȱofȱtheȱSetupȱWizard.ȱIfȱyouȱexitȱtheȱSetupȱWizardȱprematurely,ȱyouȱmustȱmanuallyȱreȬactivateȱthisȱfeature.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ38ȱȱFigure  64. Event De-activation 6. TheȱIntrusionȱPreventionȱActivationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱToȱavoidȱunwantedȱintrusionȱpreventionȱactivityȱduringȱtheȱsetupȱprocess,ȱdeȬactivateȱthisȱfeatureȱforȱallȱlocationsȱwhereȱchangesȱareȱtoȱbeȱmade.ȱTheȱsystemȱpromptsȱyouȱtoȱturnȱthisȱfeatureȱbackȱonȱatȱtheȱendȱofȱtheȱSetupȱWizard.ȱIfȱyouȱexitȱtheȱSetupȱWizardȱprematurely,ȱyouȱmustȱmanuallyȱreȬactivateȱthisȱfeature.ȱAuthorizedȱAPsȱshouldȱbeȱinȱtheȱAuthorizedȱfolderȱbeforeȱactivatingȱintrusionȱprevention.ȱTheirȱnetworkȱconnectivityȱiconȱmayȱshowȱtheȱstatusȱasȱWired,ȱUnwired,ȱorȱIndeterminate.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ39ȱFigure  65. Intrusion Prevention De-activation 7. TheȱDeviceȱListȱLockingȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱIfȱyouȱhadȱpreviouslyȱlockedȱtheȱlistȱofȱAuthorizedȱAPsȱandȱClientsȱatȱaȱlocationȱbyȱcheckingȱtheȱtwoȱcheckboxesȱLockȱAPȱListȱforȱlocationȱ‘<selectedȱlocation’>ȱandȱLockȱClientȱListȱforȱlocationȱ‘<selectedȱlocation’>,ȱyouȱmustȱunlockȱtheȱlistsȱforȱallȱtheȱlocationsȱwhereȱyouȱexpectȱtoȱaddȱAuthorizedȱAPsȱorȱClientsȱduringȱtheȱsetupȱwizard.ȱIfȱyouȱlockȱaȱparticularȱdeviceȱlist,ȱnoȱmoreȱdevicesȱofȱthatȱtypeȱcanȱbeȱsubsequentlyȱautomaticallyȱAuthorizedȱforȱthatȱlocation.ȱAsȱAPsȱareȱnotȱautomaticallyȱmovedȱtoȱtheȱAuthorizedȱfolder,ȱlockingȱtheȱAuthorizedȱAPȱlistȱmeansȱthatȱnoȱwiredȱAPsȱwillȱbeȱtaggedȱasȱPotentiallyȱAuthorizedȱatȱthisȱlocation;ȱtheyȱwillȱbecomeȱPotentiallyȱRogueȱandȱmayȱbeȱautomaticallyȱmovedȱtoȱtheȱRogueȱfolderȱbasedȱonȱtheȱAPȱAutoȬClassificationȱpolicy.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ40ȱȱFigure  66. Device List Unlocking 7.1.4 Stepȱ4:ȱConfiguringȱNotificationȱSettingsȱ8. TheȱSMTPȱConfigurationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱYouȱmustȱsetȱSimpleȱMailȱTransferȱProtocolȱ(SMTP)ȱServerȱsettingsȱtoȱsendȱnotificationȱofȱeventsȱviaȱemail.ȱAirTightȱrecommendsȱthatȱyouȱtestȱtheȱSMTPȱsettingsȱbeforeȱapplyingȱtheȱchanges.ȱYouȱmustȱhaveȱadministratorȱprivilegesȱtoȱsetȱtheseȱvalues.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ41ȱFigure  67. SMTP Configuration Note:ȱIfȱyouȱwantȱtheȱsystemȱtoȱnotifyȱyouȱbyȱanȱeventsȱemail,ȱyouȱneedȱtoȱspecifyȱSMTPȱServerȱdetails.ȱTheȱsystemȱdoesȱnotȱemailȱeventsȱbyȱdefault.ȱIfȱyouȱdoȱnotȱwantȱtoȱreceiveȱemailȱforȱtheȱevents,ȱselectȱ<RestoreȱDefaults>ȱandȱ<Apply>.ȱSMTPȱConfigurationȱcontainsȱtheȱfollowingȱoptions:ȱxSMTPȱServerȱ(IPȱaddress/Hostname:ȱPort):ȱSpecifiesȱtheȱIPȱaddressȱorȱtheȱhostnameȱandȱtheȱportȱnumberȱofȱtheȱSMTPȱServerȱtoȱbeȱusedȱbyȱtheȱsystemȱforȱsendingȱemailȱalerts.ȱ(Default:ȱ127.0.0.1:25)ȱTheȱfollowingȱareȱtheȱauthenticationȱprotocolsȱforȱSMTPȱServer:ȱ¾PLAINȱ(Forȱsendmailȱ8.10ȱandȱabove)ȱ¾LOGINȱ(Forȱsendmailȱ8.10ȱandȱabove)ȱ¾NTLMȱ(Windowsȱproprietaryȱauthenticationȱmethod)ȱxEmailȱAddressȱinȱFromȱfield:ȱSpecifiesȱtheȱsourceȱaddressȱfromȱwhichȱemailȱalertsȱareȱsent.ȱxAuthenticationȱRequired:ȱIfȱenabled,ȱspecifiesȱwhetherȱtheȱSMTPȱServerȱrequiresȱauthentication.ȱ¾Username:ȱSpecifiesȱtheȱuserȱnameȱforȱSMTPȱServerȱauthentication.ȱ¾Password:ȱSpecifiesȱtheȱpasswordȱforȱSMTPȱServerȱauthentication.ȱToȱsendȱaȱtestȱemail,ȱclickȱ<TestȱSMTPȱSettings>.ȱThisȱtestȱemailȱwillȱbeȱsentȱtoȱtheȱemailȱaddressȱofȱtheȱloggedȱinȱuser,ȱinȱthisȱcaseȱuserȱadmin.ȱ9. TheȱSyslogȱConfigurationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱSyslogȱConfigurationȱallowsȱtheȱsystemȱtoȱsendȱeventsȱtoȱdesignatedȱSyslogȱreceivers.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ42ȱȱFigure  68. Syslog Configuration xSyslogȱIntegrationȱStatus:ȱIfȱSyslogȱintegrationȱisȱenabled,ȱtheȱsystemȱsendsȱmessagesȱtoȱtheȱconfiguredȱSyslogȱServers.ȱElse,ȱSyslogȱintegrationȱservicesȱareȱshutȱoff.ȱ¾IfȱyouȱselectȱSyslogȱIntegrationȱEnabled,ȱyouȱcanȱmanageȱSyslogȱServers.ȱTheȱsystemȱenablesȱSyslogȱbyȱdefault.ȱ¾CurrentȱStatus:ȱDisplaysȱtheȱCurrentȱStatusȱofȱtheȱSyslogȱServer:ȱRunningȱorȱStopped.ȱAnȱErrorȱstatusȱisȱshownȱinȱoneȱofȱtheȱfollowingȱcases:ȱOneȱofȱtheȱconfiguredȱandȱenabledȱSyslogȱServersȱhasȱaȱhostname,ȱwhichȱcannotȱbeȱresolvedȱSystemȱServerȱisȱstoppedȱInternalȱerror,ȱinȱwhichȱcaseȱyouȱneedȱtoȱcontactȱTechnicalȱSupportȱxUnderȱManageȱSyslogȱSevers,ȱclickȱ<Add>ȱtoȱopenȱSyslogȱConfigurationȱdialogȱwhereȱyouȱcanȱaddȱSyslogȱServerȱdetails.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ43ȱFigure  69. Syslog Configuration Dialog SyslogȱConfigurationȱcontainsȱtheȱfollowingȱfields:ȱxSyslogȱServerȱ(IPȱAddress/Hostname):ȱSpecifiesȱtheȱIPȱaddressȱorȱtheȱhostnameȱofȱtheȱSyslogȱServerȱtoȱwhichȱeventsȱshouldȱbeȱsent.ȱNote:ȱConfiguredȱSyslogȱServersȱwillȱuseȱtheȱDNSȱnamesȱandȱDNSȱsuffixesȱconfiguredȱbyȱtheȱuserȱinȱtheȱServerȱInitializationȱandȱSetupȱWizardȱonȱtheȱServerȱConfigȱShell.ȱxPortȱNumber:ȱSpecifiesȱtheȱportȱnumberȱofȱtheȱSyslogȱServerȱtoȱwhichȱtheȱsystemȱsendsȱevents.ȱ(Default:ȱ514)ȱxMessageȱFormat:ȱSpecifiesȱtheȱformatȱinȱwhichȱtheȱeventȱisȱsent:ȱIntrusionȱDetectionȱMessageȱExchangeȱFormatȱ(IDMEF)ȱorȱPlainȱtext.ȱ(Default:ȱPlainȱtext)ȱNote:ȱIfȱyouȱupgradeȱaȱServer,ȱpreȬ5.6ȱtoȱ5.6,ȱallȱpreviouslyȱconfiguredȱSyslogȱServersȱwouldȱsendȱeventsȱinȱPlainȱtextȱMessageȱFormatȱbyȱdefault.ȱYouȱcanȱselectȱtheȱIDMEFȱformatȱbyȱeditingȱtheȱSyslogȱServerȱsettings.ȱxEnabled?:ȱSpecifiesȱifȱtheȱeventsȱareȱtoȱbeȱsentȱtoȱthisȱSyslogȱServer.ȱ(Default:ȱEnabled)ȱClickȱ<Add>ȱtoȱaddȱtheȱdetailsȱforȱaȱnewȱSyslogȱServer.ȱClickȱ<Cancel>ȱtoȱcloseȱtheȱwindowȱandȱdiscardȱallȱchangesȱthatȱwereȱmade.ȱDoubleȬclickȱaȱrowȱorȱclickȱ<Edit>ȱtoȱopenȱSyslogȱConfigurationȱdialogȱsimilarȱtoȱtheȱoneȱshownȱabove.ȱClickȱ<Save>ȱtoȱsaveȱallȱsettings.ȱClickȱ<Cancel>ȱtoȱcloseȱtheȱwindowȱandȱdiscardȱallȱchangesȱthatȱwereȱmade.ȱClickȱ<Delete>ȱtoȱdiscardȱtheȱdetailsȱofȱanȱexistingȱSyslogȱServer.ȱ10. TheȱSNMPȱConfigurationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱSNMPȱConfigurationȱallowsȱtheȱsystemȱtoȱsendȱeventsȱasȱSNMPȱtrapsȱtoȱdesignatedȱSNMPȱtrapȱreceivers.ȱItȱalsoȱallowsȱSNMPȱmanagersȱtoȱqueryȱServerȱoperatingȱparametersȱusingȱIFȬMIB,ȱMIBȬII,ȱandȱHostȱResourcesȱMIB.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ44ȱȱFigure  70. SNMP Configuration xSNMPȱIntegrationȱStatus:ȱIfȱSNMPȱintegrationȱisȱenabled,ȱtheȱsystemȱsendsȱSNMPȱtrapsȱtoȱtheȱconfiguredȱSNMPȱServers.ȱOtherȱsystemsȱcanȱdoȱanȱSNMPȱGetȱtoȱthisȱServer.ȱElse,ȱSNMPȱintegrationȱservicesȱareȱshutȱoff.ȱ¾IfȱyouȱselectȱSNMPȱIntegrationȱEnabled,ȱyouȱcanȱeditȱandȱmanageȱSNMPȱServerȱdetails.ȱTheȱsystemȱenablesȱSNMPȱbyȱdefault.ȱ¾CurrentȱStatus:ȱDisplaysȱtheȱCurrentȱStatusȱofȱtheȱSNMPȱServer:ȱRunning,ȱError,ȱorȱStopped.ȱxUnderȱSNMPȱSettings,ȱconfigureȱSNMPȱGetsȱorȱTraps.ȱ¾SNMPȱGetsȱEnabled:ȱAllowsȱSNMPȱmanagersȱtoȱqueryȱServerȬoperatingȱparametersȱusingȱIFȬMIB,ȱMIBȬII,ȱandȱHostȱResourcesȱMIB.ȱ¾SNMPȱTrapsȱEnabled:ȱAllowsȱSNMPȱtrapsȱtoȱbeȱsentȱtoȱconfiguredȱSNMPȱServers.ȱAdditionally,ȱselectȱtheȱSNMPȱversionsȱtoȱbeȱenabledȱandȱconfigureȱtheȱrelevantȱsettings.ȱ¾SNMPȱv1,ȱv2:ȱIfȱselected,ȱspecifyȱtheȱCommunityȱStringȱforȱtheȱSNMPȱagent.ȱ(Default:ȱpublic)ȱ¾SNMPȱv3:ȱIfȱselected,ȱspecifyȱtheȱEngineȱID,ȱUsername,ȱandȱPassword.ȱ(DefaultȱUsername:ȱadmin;ȱDefaultȱPassword:ȱpassword)ȱxUnderȱSNMPȱMIBs,ȱselectȱtheȱfollowingȱSNMPȱMIBsȱtoȱbeȱenabledȱandȱconfigureȱtheȱrelevantȱsettings.ȱ¾IFȱMIBȱ¾HostȱResourcesȱMIBȱ¾AirTightȬMIB:ȱEnablesȱtheȱexternalȱSNMPȱagentȱtoȱreceiveȱtrapsȱ¾MIBȬII:ȱIfȱselected,ȱconfigureȱtheȱSystemȱContact,ȱSystemȱName,ȱandȱSystemȱLocation.ȱ(DefaultȱSystemȱName:ȱWifiȱSecurityȱSever)ȱNote:ȱTheȱInternetȱAssignedȱNumbersȱAuthorityȱ(IANA)ȱassignedȱPrivateȱEnterpriseȱNumberȱforȱAirTight®ȱNetworks,ȱInc.ȱisȱ16901.ȱxUnderȱSNMPȱTrapȱDestinationȱServers,ȱclickȱ<Add>toȱopenȱSNMPȱConfigurationȱdialogȱwhereȱyouȱcanȱaddȱSNMPȱServerȱdetails.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ45ȱFigure  71. SNMP Configuration Dialog SNMPȱDestinationȱServerȱDetailsȱcontainsȱtheȱfollowingȱfields:ȱxDestinationȱServerȱ(IPȱAddress/Hostname)*:ȱSpecifiesȱtheȱIPȱaddressȱorȱtheȱhostnameȱofȱtheȱSNMPȱServerȱtoȱwhichȱeventsȱshouldȱbeȱsent.ȱNote:ȱConfiguredȱSNMPȱServersȱwillȱuseȱtheȱDNSȱnamesȱandȱDNSȱsuffixesȱconfiguredȱbyȱtheȱuserȱinȱtheȱServerȱInitializationȱandȱSetupȱWizardȱonȱtheȱServerȱConfigȱShell.ȱxSNMPȱProtocolȱVe rs i on :ȱSpecifiesȱtheȱSNMPȱprotocolȱversionȱforȱtheȱSNMPȱagent.ȱ(Default:ȱSNMPȱv1,ȱv2)ȱxPortȱNumber:ȱSpecifiesȱtheȱportȱnumberȱonȱtheȱreceivingȱsystemȱtoȱwhichȱtheȱSNMPȱtrapȱisȱsent.ȱ(Default:ȱ162)ȱxEnabled?:ȱSpecifiesȱifȱtheȱSNMPȱServerȱisȱenabledȱtoȱreceiveȱSNMPȱtraps.ȱ(Default:ȱEnabled)ȱNote:ȱYouȱmustȱspecifyȱaȱdifferentȱportȱnumberȱifȱanotherȱapplicationȱusesȱtheȱdefaultȱport.ȱClickȱ<Add>ȱtoȱaddȱtheȱdetailsȱforȱaȱnewȱSNMPȱServer.ȱDoubleȬclickȱaȱrowȱorȱselectȱaȱrowȱandȱclickȱ<Edit>ȱtoȱopenȱSNMPȱConfigurationȱdialogȱsimilarȱtoȱtheȱoneȱshownȱabove..ȱClickȱ<Save>ȱtoȱsaveȱallȱsettings.ȱSelectȱaȱrowȱandȱclickȱ<Delete>ȱtoȱdiscardȱtheȱdetailsȱofȱanȱexistingȱSNMPȱServer.ȱ7.1.5 Stepȱ5:ȱSettingȱupȱLocationsȱandȱSensorsȱ11. TheȱLocationsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱCreateȱaȱhierarchyȱofȱallȱtheȱlocationsȱthatȱtheȱsystemȱwillȱmonitorȱandȱsecureȱbyȱaddingȱlocationȱfoldersȱandȱnodes.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ46ȱȱFigure  72. Locations Screen TheȱLocationsȱscreenȱoperatesȱinȱtwoȱmodes:ȱDesignerȱmodeȱandȱViewerȱmode.ȱTheȱDesignerȱmodeȱisȱactiveȱbyȱdefault.ȱAȱlocationȱhierarchyȱofȱyourȱsetupȱmayȱcompriseȱlocationȱfoldersȱandȱlocationȱnodes.ȱxLocationȱfoldersȱrepresentȱorganizationalȱcomponentsȱsuchȱasȱbuildings,ȱcities,ȱorȱcountries.ȱ¾Root:ȱThisȱisȱtheȱrootȱlocation.ȱTheȱfactoryȱdefaultȱnameȱforȱthisȱlocationȱisȱLocations.ȱYouȱcanȱrenameȱthisȱlocation.ȱHowever,ȱyouȱcannotȱdeleteȱorȱmoveȱthisȱlocation.ȱ¾Unknown:ȱThisȱisȱtheȱdefaultȱlocationȱfolderȱofȱtheȱrootȱlocation.ȱYouȱcannotȱcreate,ȱdelete,ȱrename,ȱmove,ȱorȱaddȱaȱlocationȱtoȱtheȱUnknownȱfolder.ȱWhenȱtheȱsystemȱdetectsȱaȱnewȱuntaggedȱSensor,ȱitȱtagsȱthisȱSensorȱtoȱtheȱUnknownȱlocationȱfolder.ȱInȱotherȱwords,ȱwhenȱtheȱlocationȱtagȱofȱaȱlocationȬawareȱentityȱisȱnotȱknownȱorȱcannotȱbeȱdetermined,ȱitȱisȱtaggedȱtoȱtheȱUnknownȱfolder.ȱxLocationȱnodesȱrepresentȱcomponentȱdetailsȱsuchȱasȱaȱfloorȱinȱaȱbuilding.ȱForȱexample,ȱHawaiiȱConferenceȱRoom,ȱBldgȱ15–CubicleȱG2,ȱorȱExecutiveȱArea.ȱ7.1.5.1 AddingȱaȱNewȱLocationȱUseȱtheȱfollowingȱstepsȱtoȱaddȱaȱlocation:ȱa. InȱtheȱLocationȱtree,ȱselectȱtheȱlocationȱunderȱwhichȱyouȱwishȱtoȱaddȱaȱnewȱlocation.ȱb. Doȱoneȱofȱtheȱfollowing:ȱxRightȬclickȱandȱfromȱtheȱresultingȱcontextȬsensitiveȱmenu,ȱselectȱAddȱNewȱLocation.ȱxClickȱtheȱAddȱNewȱLocationȱiconȱ( )ȱbelowȱtheȱDesignerȱmodeȱtab.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ47ȱFigure  73. Adding a New Location ȱFigure  74. Specifying Location Properties c. InȱtheȱAddȱNewȱLocationȱdialog,ȱselectȱtheȱtypeȱofȱlocation,ȱthatȱis,ȱLocationȱFolderȱorȱLocationȱNode.ȱd. Enterȱaȱnameȱforȱtheȱnewȱlocationȱandȱoptionallyȱenterȱtheȱfollowingȱdetails.ȱxSelectȱImageȱFile:ȱClickȱ<Browse>ȱtoȱnavigateȱtoȱtheȱpathȱofȱtheȱimageȱthatȱyouȱwishȱtoȱattachȱtoȱtheȱlocationȱfolderȱorȱnode.ȱxUnit:ȱSpecifyȱtheȱunitȱofȱmeasurementȱ(feetȱorȱmeters)ȱforȱtheȱlocationȱnode.ȱxLength:ȱSpecifyȱtheȱlengthȱofȱtheȱlocationȱnode.ȱxWidth:ȱSpecifyȱtheȱwidthȱofȱtheȱlocationȱnode.ȱxSelectȱSPM:ȱClickȱ<Browse>ȱtoȱnavigateȱtoȱtheȱpathȱofȱtheȱ.SPMȱfileȱthatȱyouȱwishȱtoȱimportȱfromȱSpectraGuardȱPlannerȱ(Planner)ȱintoȱtheȱnewȱlocationȱnode.ȱNote:ȱUnit,ȱLength,ȱWidth,ȱandȱSelectȱSPMȱoptionsȱareȱavailableȱonlyȱforȱaȱlocationȱnode.ȱTheyȱareȱgrayedȱoutȱforȱaȱlocationȱfolder.ȱe. Clickȱ<OK>ȱtoȱcreateȱaȱnewȱlocation.ȱAlternatively,ȱclickȱ<Cancel>ȱtoȱavoidȱcreatingȱaȱnewȱlocation.ȱ12. TheȱSensorȱConfigurationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱThisȱenablesȱyouȱtoȱcreateȱdifferentȱSensorȱconfigurationȱtemplates.ȱThisȱallowsȱtheȱuserȱtoȱapplyȱdifferentȱsettingsȱtoȱdifferentȱSensorsȱbyȱapplyingȱdifferentȱtemplates.ȱEachȱconfigurationȱtemplateȱallowsȱsettingsȱforȱoperatingȱregion,ȱchannelsȱtoȱmonitor,ȱchannelsȱtoȱdefend,ȱantennaȱconfiguration,ȱSensorȱpassword,ȱandȱofflineȱSensorȱoperation.ȱAtȱanyȱlocation,ȱyouȱcanȱchooseȱaȱtemplateȱasȱaȱdefaultȱtemplate.ȱThisȱtemplateȱwillȱbeȱappliedȱtoȱanyȱnewȱSensorȱtaggedȱtoȱthatȱlocation.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ48ȱȱFigure  75. Sensor Configuration Note:ȱSensorsȱpriorȱtoȱVersionȱ5.2ȱdoȱnotȱsupportȱadditionalȱchannelsȱ(802.11jȱ&ȱTurboȱchannels),ȱAntennaȱPortȱAssignment,ȱandȱSensorȱPasswordȱConfigurationȱfeatures.ȱIfȱyouȱapplyȱtemplatesȱcontainingȱtheseȱsettingsȱtoȱolderȱSensors,ȱolderȱSensorsȱwillȱignoreȱtheȱadditionalȱsettings.ȱClickȱ<AddȱNewȱSensorȱTemplate>ȱtoȱopenȱtheȱSensorȱConfigurationȱTemplateȱdialog.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ49ȱFigure  76. Channel Settings Tab UnderȱCreateȱConfigurationȱTemplate,ȱspecifyȱtheȱfollowing:ȱxName:ȱUniqueȱnameȱofȱtheȱSensorȱConfigurationȱtemplateȱ(lessȱthanȱ40ȱcharacters)ȱxDescription:ȱBriefȱdescriptionȱofȱtheȱSensorȱConfigurationȱtemplateȱ(lessȱthanȱ500ȱcharacters)ȱNote:ȱTheȱsystemȱstoresȱtheȱdefaultȱSensorȱconfigurationȱinȱaȱpredefinedȱtemplateȱSystemȱTemplate.ȱYouȱcannotȱdeleteȱtheȱSystemȱTemplateȱnorȱeditȱitsȱname;ȱitȱisȱunique.ȱWhenȱaȱSensorȱisȱaddedȱorȱdiscovered,ȱitȱisȱautomaticallyȱassignedȱtheȱconfigurationȱsettingsȱinȱthisȱtemplate.ȱYouȱareȱallowedȱtoȱeditȱtheȱconfigurationȱsettingsȱinȱtheȱSystemȱTemplateȱtoȱeffectȱdefaultȱconfigurationȱofȱtheirȱchoice.ȱWheneverȱyouȱdeleteȱaȱuserȬdefinedȱSensorȱconfigurationȱtemplate,ȱallȱtheȱSensorsȱassociatedȱwithȱthatȱtemplateȱareȱassignedȱtheȱSystemȱTemplate.ȱYouȱcanȱoverrideȱtheȱtemplateȱappliedȱtoȱaȱSensorȱmanuallyȱfromȱtheȱDevicesȱSensorsȱtab.ȱIfȱyouȱmodifyȱtheȱsettingsȱinȱaȱtemplate,ȱtheȱnewȱsettingsȱareȱappliedȱtoȱtheȱSensorsȱtoȱwhichȱthisȱtemplateȱisȱapplied.ȱChannelȱSettingsȱChannelȱSettingsȱdisplaysȱtheȱ802.11a/802.11b/gȱandȱTurboȱchannelsȱonȱwhichȱscanningȱandȱdefendingȱisȱenabled/disabled.ȱSensorsȱscanȱWLANȱtrafficȱonȱchannelsȱspecifiedȱunderȱChannelsȱtoȱMonitorȱandȱdefendȱtheȱnetworkȱagainstȱvariousȱWLANȱthreatsȱonȱchannelsȱspecifiedȱunderȱChannelsȱtoȱDefend.ȱxUnderȱChannelȱSettingsȱtab,ȱspecifyȱtheȱfollowing:ȱ¾SelectȱOperatingȱRegion:ȱSpecifiesȱtheȱregion:ȱcountry:ȱofȱoperation.ȱEachȱregionȱhasȱitsȱownȱlawsȱgoverningȱtheȱuseȱofȱtheȱunlicensedȱfrequencyȱspectrumȱforȱ802.11ȱcommunicationsȱandȱTurboȱmode.ȱTheȱsystemȱautomaticallyȱselectsȱtheȱchannelsȱthatȱareȱallowedȱbyȱtheȱregulatoryȱdomainȱinȱselectedȱregion.ȱ(DefaultȱOperatingȱRegion:ȱUnitedȱStates)ȱ¾ClickȱtheȱlinkȱChannelȱFrequencyȱTableȱtoȱviewȱaȱlistȱofȱchannels,ȱprotocols,ȱfrequencies,ȱandȱcapabilities.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ50ȱȱFigure  77. Channel Frequency Table ¾ChannelsȱtoȱMonitor:ȱSpecifiesȱtheȱchannelsȱtoȱbeȱusedȱbyȱSensorsȱtoȱmonitorȱWLANȱtraffic.ȱSelectȱtheȱcheckboxȱSelectȱAllȱStandardȱChannelsȱtoȱselectȱaȱsupersetȱofȱallȱtheȱchannels.ȱForȱ802.11a,ȱtheȱstandardȱsetsȱofȱchannelsȱareȱ184ȱ–ȱ216ȱandȱ34ȱȬȱ165.ȱByȱdefault,ȱthisȱcheckboxȱisȱselected.ȱSelectȱtheȱcheckboxȱSelectȱAllȱAllowedȱChannelsȱtoȱselectȱallȱtheȱallowedȱchannelsȱinȱtheȱselectedȱoperatingȱregion.ȱByȱdefault,ȱthisȱcheckboxȱisȱselected.ȱSelectȱtheȱcheckboxȱAdditionally,ȱselectȱintermediateȱchannelsȱforȱ802.11ȱaȱonlyȱtoȱselectȱtheȱchannelsȱbetweenȱtheȱallowedȱchannelsȱthatȱareȱnonȬallowedȱinȱtheȱselectedȱoperatingȱregion.ȱSelectingȱtheȱoptionȱhelpsȱtheȱsystemȱdetectȱdevicesȱoperatingȱonȱillegalȱchannels.ȱForȱ802.11a,ȱtheȱintermediateȱchannelsȱareȱ185,ȱ186,ȱ187,ȱ35,ȱ37,ȱandȱsoȱon.ȱByȱdefault,ȱthisȱcheckboxȱisȱdeselected.ȱ¾TurboȱMode:ȱCertainȱAtherosȱChipsetȱbasedȱdevicesȱuseȱwiderȱfrequencyȱbandsȱonȱcertainȱchannelsȱinȱ802.11ȱb/gȱandȱ802.11aȱbandȱofȱchannels.ȱTheȱsystemȱisȱcapableȱofȱmonitoringȱchannelsȱthatȱsupportȱTurboȱModeȱofȱoperationȱandȱdetectingȱanyȱunauthorizedȱcommunicationȱonȱtheseȱchannels.ȱYouȱcanȱselectȱspecificȱorȱallȱchannelsȱtoȱmonitorȱwirelessȱactivityȱonȱTurboȱchannels.ȱThereȱareȱtenȱTurboȱchannelsȱinȱaȬmode.ȱTheseȱchannelsȱareȱ40,ȱ42,ȱ48,ȱ50,ȱ56,ȱ58,ȱ152,ȱ153,ȱ160,ȱandȱ161.ȱThereȱisȱonlyȱoneȱTurboȱchannelȱinȱb/gȬmodeȱi.e.ȱ6.ȱ¾ChannelsȱtoȱDefend:ȱSpecifiesȱtheȱchannelsȱtoȱbeȱusedȱbyȱSensorsȱtoȱdefendȱWLANȱtrafficȱtoȱprotectȱyourȱnetworkȱagainstȱvariousȱWLANȱthreats.ȱNote:ȱItȱisȱmandatoryȱthatȱchannelsȱselectedȱforȱdefendingȱbeȱselectedȱforȱscanning.ȱIfȱaȱchannelȱisȱselectedȱforȱdefendingȱandȱisȱnotȱalreadyȱselectedȱforȱscanning,ȱtheȱsystemȱautomaticallyȱselectsȱthatȱchannelȱforȱscanningȱasȱwell.ȱIfȱyouȱdeselectȱaȱchannelȱfromȱChannelsȱtoȱMonitor,ȱthenȱthisȱchannelȱisȱalsoȱdeselectedȱfromȱChannelsȱtoȱDefendȱsection.ȱAntennaȱPortȱAssignmentȱAntennaȱconnectivityȱsettingȱisȱanȱadvancedȱsettingȱandȱshouldȱbeȱusedȱwithȱutmostȱcare.ȱThisȱsettingȱallowsȱyouȱtoȱprovideȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ51additionalȱinformationȱaboutȱtheȱtypeȱofȱantennasȱconnectedȱtoȱtheȱSensor.ȱYouȱneedȱtoȱchangeȱthisȱsettingȱonlyȱifȱyouȱuseȱSensorsȱthatȱallowȱyouȱtoȱconnectȱantennas.ȱApplyingȱaȱtemplateȱwithȱaȱparticularȱantennaȱsettingȱtoȱaȱSensorȱwithȱincompatibleȱantennaȱconnectionȱcanȱresultȱinȱaȱlossȱofȱsystemȱfunctionalityȱleadingȱtoȱhigherȱsecurityȱrisks.ȱYouȱshouldȱnotȱchangeȱtheȱAntennaȱConnectivityȱSettingsȱforȱaȱtemplateȱthatȱisȱalreadyȱappliedȱtoȱaȱgroupȱofȱSensorsȱorȱisȱaȱDefaultȱSensorȱtemplate.ȱIfȱyouȱneedȱtoȱchangeȱtheseȱsettings,ȱyouȱshouldȱsaveȱtheȱchangesȱasȱaȱnewȱtemplateȱfirst,ȱthenȱchangeȱtheȱantennasȱsettingsȱasȱrequired,ȱsaveȱtheȱtemplateȱandȱapplyȱitȱtoȱaȱgroupȱofȱSensorsȱwhichȱhaveȱtheȱsameȱantennaȱsettingsȱasȱspecifiedȱinȱtheȱtemplate.ȱȱFigure  78. Antenna Port Assignment Tab xUnderȱAntennaȱPortȱAssignmentȱtabȱ¾SelectȱDiversityȱOnȱorȱDiversityȱOffȱDiversityȱOn:ȱThisȱisȱtheȱdefaultȱsetting,ȱwhichȱmeansȱbothȱtheȱantennasȱareȱdualȱband.ȱSelectȱthisȱoptionȱifȱyouȱhaveȱaȱdualȱbandȱ(2.4ȱGHzȱandȱ5ȱGHz)ȱantennaȱconnectedȱtoȱbothȱtheȱportsȱonȱtheȱSensor.ȱAssigningȱthisȱsettingȱtoȱaȱSensorȱwhichȱdoesȱnotȱhaveȱaȱdualȱbandȱantennaȱconnectedȱtoȱbothȱports,ȱcanȱresultȱinȱunpredictableȱSensorȱbehaviorȱleadingȱtoȱlossȱofȱsystemȱfunctionality.ȱMakeȱsureȱthatȱtheȱtemplateȱwithȱ“DiversityȱOn”ȱsettingȱisȱindeedȱappliedȱtoȱSensor(s),ȱwhichȱhaveȱdualȱbandȱantennaȱconnectedȱtoȱthem.ȱDiversityȱOff:ȱSelectȱthisȱoptionȱifȱandȱonlyȱifȱyourȱSensorsȱhaveȱaȱ5ȱGHzȱantennaȱconnectedȱtoȱPortȱ1ȱandȱaȱ2.4ȱGHzȱantennaȱconnectedȱtoȱPortȱ2.ȱTheȱfigureȱinȱtheȱAntennaȱPortȱAssignmentȱtabȱshowsȱhowȱtoȱlocateȱtheȱportsȱtoȱensureȱthatȱtheȱsingleȱbandȱantennasȱareȱcorrectlyȱconnected.ȱAssigningȱthisȱsettingȱtoȱaȱSensorȱthatȱdoesȱnotȱhaveȱsingleȱbandȱantennasȱconnectedȱasȱmentionedȱaboveȱcanȱresultȱinȱunpredictableȱSensorȱbehaviorȱleadingȱtoȱlossȱofȱsystemȱfunctionality.ȱMakeȱsureȱthatȱtheȱtemplateȱwithȱDiversityȱOffȱsettingȱisȱindeedȱappliedȱtoȱSensor(s)ȱthatȱhaveȱtwoȱdifferentȱsingleȱbandȱantennasȱsupportingȱ2.4ȱGHzȱandȱ5ȱGHzȱfrequencyȱbandsȱandȱconnectedȱasȱmentionedȱabove.ȱSensorȱPasswordȱConfigurationȱSensorȱPasswordȱsettingȱallowsȱyouȱtoȱmanageȱtheȱpasswordȱforȱuserȱconfigȱonȱtheȱSensorȱCommandȱLineȱInterfaceȱ(CLI).ȱByȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ52ȱdefiningȱaȱpasswordȱinȱtheȱSensorȱtemplate,ȱyouȱcanȱmanageȱtheȱpasswordȱforȱaȱgroupȱofȱSensorsȱwithoutȱhavingȱtoȱchangeȱitȱonȱeachȱSensorȱseparately.ȱTypeȱaȱnewȱpasswordȱorȱclickȱ<RestoreȱDefault>ȱtoȱchangeȱtheȱcurrentȱpasswordȱsettings.ȱIfȱyouȱchooseȱ<RestoreȱDefault>,ȱthenȱtheȱpasswordȱsettingȱwillȱbeȱtheȱsameȱasȱthatȱinȱtheȱSystemȱTemplate.ȱNote:ȱIfȱaȱSensorȱtemplateȱcontainsȱaȱblankȱpassword,ȱthenȱtheȱSensors,ȱtoȱwhichȱthisȱtemplateȱisȱassigned,ȱretainȱtheirȱexistingȱpassword.ȱFactoryȱsettingȱofȱtheȱSystemȱTemplateȱcontainsȱaȱblankȱpassword.ȱȱFigure  79. Sensor Password Configuration Tab xUnderȱSensorȱPasswordȱConfigurationȱtabȱspecifyȱtheȱfollowingȱ¾CurrentȱPasswordȱstate:ȱSpecifiesȱthatȱtheȱnewȱpasswordȱmustȱbeȱtheȱsameȱasȱtheȱoneȱspecifiedȱinȱtheȱSystemȱTemplate.ȱ¾NewȱPassword:ȱEnterȱtheȱnewȱpasswordȱtoȱbeȱassignedȱasȱuserȱ‘config’ȱpasswordȱforȱallȱSensorsȱassociatedȱwithȱtheȱSensorȱtemplateȱbeingȱedited.ȱ¾ConfirmȱPassword:ȱReenterȱtheȱpasswordȱtoȱhelpȱconfirmȱtheȱnewȱpasswordȱbeforeȱsaving.ȱOfflineȱSensorȱConfigurationȱThisȱfeatureȱprovidesȱsomeȱsecurityȱcoverageȱevenȱwhenȱthereȱisȱnoȱconnectivityȱbetweenȱaȱSensorȱandȱtheȱServer.ȱTheȱSensorȱprovidesȱsomeȱclassificationȱandȱpreventionȱcapabilitiesȱwhenȱitȱisȱdisconnectedȱfromȱtheȱServer.ȱTheȱSensorȱalsoȱraisesȱevents,ȱstoresȱthem,ȱandȱsendsȱthemȱbackȱtoȱtheȱServerȱonȱreconnection.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ53ȱFigure  80. Offline Sensor Configuration Tab xEnableȱofflineȱSensorȱmode:ȱSelectȱthisȱcheckboxȱtoȱenableȱtheȱofflineȱSensorȱmode.ȱWhenȱthisȱmodeȱisȱenabled,ȱtheȱSensorȱcontinuesȱtoȱdetectȱandȱclassifyȱdevices,ȱraiseȱeventȱalerts,ȱandȱpreventȱongoingȱthreats.ȱ(Default:ȱSelected)ȱxOnlineȬOfflineȱmodeȱswitchȱdelay:ȱSpecifyȱtheȱtimeȱafterȱwhich,ȱifȱtheȱSensorȱdoesȱnotȱreceiveȱanyȱcommunicationȱfromȱtheȱServerȱandȱEnableȱofflineȱSensorȱmodeȱisȱenabled,ȱtheȱSensorȱswitchesȱtoȱtheȱofflineȱmode.ȱ(Minimum:ȱ5ȱminutes;ȱMaximum:ȱ60ȱminutes;ȱDefault:ȱ5ȱminutes)ȱxUnderȱOfflineȱSensorȱParametersȱtab,ȱyouȱcanȱviewȱtheȱfollowing:ȱ¾NumberȱofȱAPsȱtoȱbeȱstored:ȱNumberȱofȱAPsȱthatȱtheȱSensorȱwillȱcontinueȱtoȱdetectȱinȱOfflineȱmodeȱ(Default:ȱ128)ȱ¾NumberȱofȱClientsȱtoȱbeȱstored:ȱNumberȱofȱClientsȱthatȱtheȱSensorȱwillȱcontinueȱtoȱdetectȱinȱOfflineȱmodeȱ(Default:ȱ256)ȱ¾Numberȱofȱeventsȱtoȱbeȱstored:ȱNumberȱofȱeventsȱthatȱtheȱSensorȱwillȱcontinueȱtoȱraiseȱinȱOfflineȱmodeȱ(Default:ȱ256)ȱ¾Numberȱofȱpreventionȱrecordsȱtoȱbeȱstored:ȱNumberȱofȱpreventionȱrecordsȱthatȱtheȱSensorȱwillȱcontinueȱtoȱstoreȱinȱOfflineȱmodeȱtoȱpreventȱongoingȱthreatsȱ(Default:ȱ256)ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ54ȱsueȱFigure  81. Offline Sensor Configuration: Device Classification Policy Tab xUnderȱDeviceȱClassificationȱPolicyȱtabȱspecifyȱtheȱdesiredȱclassificationȱpoliciesȱtoȱmoveȱAPsȱandȱClientsȱfromȱtheȱUncategorizedȱlistȱtoȱtheȱCategorizedȱlist:ȱ¾UnderȱAPȱClassificationȱPolicy,ȱselectȱoneȱorȱmoreȱoptionsȱtoȱenableȱtheȱsystemȱautomaticallyȱmoveȱAPsȱfromȱtheȱUncategorizedȱAPȱlistȱtoȱtheȱCategorizedȱAPȱlist:ȱMoveȱnetworkedȱAPsȱtoȱtheȱRogueȱorȱAuthorizedȱAPȱfolderȱinȱtheȱCategorizedȱAPȱListȱMoveȱnonȬnetworkedȱAPsȱtoȱtheȱExternalȱAPȱfolderȱinȱtheȱCategorizedȱAPȱListȱ¾UnderȱClientȱClassificationȱPolicy,ȱselectȱoneȱorȱmoreȱoptionsȱtoȱenableȱtheȱsystemȱautomaticallyȱclassifyȱClientsȱbasedȱonȱtheirȱassociationsȱwithȱAPs:ȱOnȱassociationȱwithȱanȱAuthorizedȱAP,ȱclassifyȱanȱUncategorizedȱClientȱasȱAuthorizedȱOnȱassociationȱwithȱaȱRogueȱAP,ȱclassifyȱanȱUncategorizedȱClientȱasȱUnauthorizedȱOnȱassociationȱwithȱanȱExternalȱAP,ȱclassifyȱanȱUncategorizedȱClientȱasȱUnauthorizedȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ55ȱFigure  82. Offline Sensor Configuration: Intrusion Prevention Policy Tab xUnderȱIntrusionȱPreventionȱPolicyȱtabȱenableȱintrusionȱpreventionȱagainstȱtheȱfollowingȱthreats:ȱ¾RogueȱAPsȱAPsȱcategorizedȱasȱRogueȱUncategorizedȱAPsȱthatȱareȱconnectedȱtoȱtheȱnetworkȱ¾MisconfiguredȱAPsȱAPsȱcategorizedȱasȱAuthorizedȱbutȱusingȱnoȱsecurityȱmechanismȱ(Open)ȱAPsȱcategorizedȱasȱAuthorizedȱbutȱusingȱweakȱsecurityȱmechanismȱ(WEP)ȱ¾ClientȱMisȬassociationsȱAuthorizedȱClientȱconnectionsȱtoȱAPsȱcategorizedȱasȱExternalȱ¾UnauthorizedȱAssociationsȱUnauthorizedȱClientȱconnectionsȱtoȱAPsȱcategorizedȱasȱAuthorizedȱ¾AdhocȱConnectionsȱAuthorizedȱClientsȱparticipatingȱinȱanyȱadhocȱnetworkȱ¾Honeypot/EvilȱTwinȱAPsȱAuthorizedȱClientȱconnectionȱtoȱHoneypot/EvilȱTwinȱAPsȱAdditionally,ȱspecifyȱtheȱintrusionȱpreventionȱlevelȱthatȱallowsȱyouȱtoȱchooseȱaȱtradeȬoffȱbetweenȱtheȱdesiredȱlevelȱofȱpreventionȱandȱtheȱdesiredȱnumberȱofȱmultipleȱsimultaneousȱpreventionsȱacrossȱradioȱchannels.ȱYouȱcanȱchooseȱeitherȱofȱtheȱfollowingȱpreventionȱlevels:ȱxBlockȱxDisruptȱxInterruptȱxDegradeȱReferȱtoȱtheȱsectionȱIntrusionȱPreventionȱLevelȱforȱmoreȱdetails.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ56ȱClickȱ<Save>ȱtoȱsaveȱallȱsettings.ȱClickȱtheȱȱiconȱtoȱeditȱanȱexistingȱSensorȱtemplate.ȱWhenȱanȱexistingȱSensorȱtemplateȱisȱeditedȱaȱConfirmationȱ–ȱSaveȱdialogȱappearsȱindicatingȱtheȱmodifications,ȱbyȱselectingȱtheȱtabsȱthatȱwereȱmodified.ȱYouȱareȱallowedȱtoȱuncheckȱaȱtabȱifȱyouȱwishȱtoȱcancelȱthoseȱmodifications.ȱClickȱ<OK>ȱtoȱsaveȱtheȱchangesȱforȱtheȱselectedȱtab.ȱNote:ȱNameȱandȱDescriptionȱofȱtheȱSensorȱtemplateȱareȱautomaticallyȱsaved.ȱClickȱ<SaveȱAs>ȱtoȱsaveȱtheȱSensorȱtemplateȱwithȱaȱdifferentȱnameȱwithoutȱmodifyingȱtheȱoriginalȱtemplate.ȱClickȱ<RestoreȱDefault>ȱtoȱrevertȱtoȱtheȱSystemȱTemplate.ȱTheȱsystemȱenablesȱyouȱtoȱselectȱtabsȱtoȱcontrolȱtheȱsettingsȱthatȱwillȱbeȱrestoredȱtoȱtheȱdefaultȱvalues.ȱIfȱyouȱclickȱ<RestoreȱDefault>ȱonȱtheȱSystemȱTemplate,ȱparametersȱunderȱtheȱselectedȱtabsȱareȱrestoredȱtoȱtheirȱfactoryȱdefaultȱsettings.ȱAȱConfirmationȱ–ȱRestoreȱDefaultȱdialogȱappearsȱwithȱaȱlistȱofȱtabsȱselected,ȱforȱwhichȱdefaultȱsettingsȱwillȱbeȱapplied.ȱImportant:ȱTheȱsystemȱhasȱtheȱabilityȱtoȱscanȱandȱdefendȱonȱ4.920Ȭ4.980ȱGHzȱandȱ5.470Ȭ5.725ȱGHzȱchannelsȱinȱUS/CanadaȱandȱIEEEȱ802.11jȱchannelsȱ4.920Ȭ4.980ȱGHzȱandȱ5.040Ȭ5.080GHzȱchannelsȱinȱJapan.ȱClickȱtheȱ ȱiconȱtoȱviewȱanȱexistingȱSensorȱtemplate.ȱClickȱtheȱ ȱiconȱtoȱdeleteȱanȱexistingȱSensorȱtemplate.ȱ13. TheȱImportȱSensorȱListȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱImportingȱaȱSensorȱlistȱisȱanȱefficientȱalternativeȱtoȱmanuallyȱmovingȱSensorsȱtoȱtheȱdesiredȱlocationsȱwhileȱsettingȱupȱtheȱsystem.ȱTheȱsuccessfullyȱimportedȱSensorsȱareȱautomaticallyȱtaggedȱtoȱtheȱchosenȱlocationsȱwhenȱtheyȱconnectȱtoȱtheȱServer.ȱȱFigure  83. Import Devices - Sensors UnderȱImportȱSensorȱList,ȱclickȱ<ImportȱSensorȱList>ȱtoȱopenȱImportȱSensorȱListȱdialog.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ57ȱFigure  84. Import Sensor List InȱtheȱImportȱSensorȱListȱdialog:ȱUnderȱTagȱDevices,ȱselectȱoneȱofȱtheȱfollowing:ȱxAutoȱTagȱDevices:ȱToȱautomaticallyȱtagȱtheȱSensorȱtoȱtheȱcorrespondingȱlocation.ȱxManuallyȱTagȱDevicesȱto::ȱClickȱ<Change>ȱtoȱmanuallyȱtagȱtheȱSensorȱtoȱtheȱdesiredȱlocation.ȱUnderȱEnterȱSensorȱdetailsȱxToȱaddȱaȱSensor’sȱdetails,ȱtypeȱtheȱSensor’sȱMACȱaddressȱandȱNameȱandȱclickȱ<AddȱtoȱList>>>>.ȱxToȱaddȱaȱSensor’sȱdetailsȱfromȱaȱfile,ȱclickȱ<Browse>.ȱOnȱtheȱSelectȱSensor_Device_List_Fileȱdialog,ȱselectȱtheȱ.txtȱfileȱfromȱtheȱdesiredȱlocationȱandȱclickȱ<Open>.ȱThenȱclickȱ<AddȱtoȱList>>>>.ȱUnderȱAuthorizedȱSensorȱImportȱListȱxToȱdeleteȱaȱSensor’sȱdetails,ȱselectȱtheȱcorrespondingȱrowȱandȱclickȱ<Delete>.ȱToȱimportȱSensorsȱfromȱtheȱSensorȱImportȱList,ȱclickȱ<OK>.ȱNote:ȱWhenȱyouȱimportȱSensorsȱfromȱaȱlist,ȱyouȱcanȱdeleteȱtheseȱSensorsȱonlyȱfromȱtheȱDevicesȱscreen.ȱ14. TheȱDevicesÆSensorsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱSensorsȱproactivelyȱscanȱtheȱnetworkȱandȱgenerateȱevents.ȱSensorsȱcommunicateȱeventȱinformationȱtoȱtheȱsystem.ȱThisȱscreenȱguidesȱyouȱtoȱmoveȱallȱtheȱSensorsȱfromȱtheȱUnknownȱlocationȱtoȱtheirȱcorrectȱlocations.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ58ȱȱFigure  85. Devices Screen – Sensors RightȬclickȱaȱSensorȱrowȱtoȱmoveȱaȱSensor.ȱSelectȱChangeȱLocationȱfromȱtheȱresultantȱcontextȬsensitiveȱmenuȱtoȱmanuallyȱtagȱtheȱSensorȱtoȱtheȱdesiredȱlocation.ȱ15. TheȱLocationsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱCreateȱaȱvisualȱviewȱofȱyourȱdeploymentȱbyȱattachingȱpicturesȱandȱfloormapsȱtoȱlocations.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ59ȱFigure  86. Locations Screen 7.1.5.2 AttachingȱanȱimageȱUseȱtheȱfollowingȱstepsȱtoȱattachȱanȱimage:ȱa. InȱtheȱLocationȱtree,ȱselectȱtheȱlocationȱtoȱwhichȱyouȱwishȱtoȱattachȱanȱimage.ȱb. Doȱoneȱofȱtheȱfollowing:ȱxRightȬclickȱandȱfromȱtheȱresultingȱcontextȬsensitiveȱmenu,ȱselectȱAttachȱImage.ȱxClickȱtheȱAttachȱImageȱonȱfloorȱiconȱ()ȱinȱtheȱrightȱcorner.ȱc. OnȱtheȱSelectȱanȱimageȱfileȱtoȱattachȱtoȱattachȱoverȱaȱplannedȱlocationȱdialog,ȱbrowseȱtoȱtheȱappropriateȱimageȱandȱthenȱclickȱ<Open>.ȱ7.1.5.3 PlacingȱLocationsȱonȱaȱLocationȱFolderȱwithȱanȱAttachedȱImageȱTheȱsystemȱenablesȱyouȱtoȱplaceȱlocationsȱonȱaȱlocationȱfolderȱthatȱhasȱanȱattachedȱimage.ȱThisȱhelpsȱyouȱidentifyȱtheȱphysicalȱpositionȱofȱeachȱofȱtheȱlocations.ȱTheȱlocationsȱplacedȱonȱtheȱattachedȱimageȱareȱindicatedȱbyȱcoloredȱcircles.ȱAȱgreenȱcircleȱindicatesȱthatȱtheȱlocationȱisȱSecure,ȱwhileȱaȱredȱcircleȱindicatesȱthatȱtheȱlocationȱisȱVulnerable.ȱUseȱtheȱfollowingȱstepsȱtoȱplaceȱlocationsȱonȱtheȱattachedȱimageȱandȱviewȱtheirȱdetails:ȱa. InȱtheȱLocationȱtree,ȱselectȱaȱlocationȱfolder.ȱb. UnderȱAvailableȱLocations,ȱdragȱandȱdropȱtheȱrequiredȱlocationsȱonȱtheȱattachedȱimage.ȱc. Toȱviewȱdetailsȱaboutȱtheȱlocationȱholdȱtheȱmouseȱcursorȱoverȱtheȱcoloredȱcircle.ȱd. Toȱgoȱtoȱaȱparticularȱlocationȱplacedȱonȱtheȱimage,ȱdoȱoneȱofȱtheȱfollowing:ȱxClickȱtheȱcoloredȱcircleȱrepresentingȱtheȱlocation.ȱxPointȱtoȱcoloredȱcircleȱrepresentingȱtheȱlocation,ȱrightȬclickȱandȱselectȱJumpȱtoȱthisȱlocation.ȱNote:ȱYouȱcanȱtraverseȱtoȱaȱparticularȱlocationȱnodeȱbyȱfollowingȱstepȱdȱuntilȱyouȱreachȱtheȱdesiredȱlocationȱnode.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ60ȱ7.1.5.4 ImportingȱaȱPlannerȱfileȱintoȱaȱLocationȱNodeȱTheȱsystemȱenablesȱyouȱtoȱspecifyȱaȱlayoutȱforȱeachȱlocationȱnodeȱusingȱaȱblankȱcanvas,ȱaȱlayoutȱimage,ȱorȱaȱ.SPMȱfileȱexportedȱfromȱPlanner.ȱUseȱtheȱfollowingȱstepsȱtoȱimportȱaȱPlannerȱfile:ȱa. InȱtheȱLocationȱtree,ȱselectȱtheȱlocationȱnodeȱintoȱwhichȱyouȱwishȱtoȱimportȱtheȱ.SPMȱfileȱandȱthenȱrightȬclick.ȱb. Doȱoneȱofȱtheȱfollowing:ȱxFromȱtheȱresultingȱcontextȬsensitiveȱmenu,ȱselectȱImportȱLocation.ȱxClickȱtheȱImportȱLocationȱiconȱ()ȱbelowȱtheȱViewerȱmodeȱtab.ȱc. InȱtheȱSelectȱSpectraGuardȱPlannerȱ(.spm)ȱFileȱdialog,ȱbrowseȱtoȱtheȱappropriateȱPlannerȱexportedȱ.SPMȱfileȱandȱthenȱclickȱ<Open>.ȱ16. TheȱLocationsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱYouȱcanȱplaceȱSensorsȱonȱtheȱfloormapsȱbyȱdraggingȱandȱdroppingȱthem.ȱIfȱyouȱhaveȱimportedȱanȱSPMȱfileȱfromȱPlannerȱthatȱcontainsȱfloorȱinformationȱandȱSensorȱplacements,ȱSensorsȱcontainedȱinȱthatȱfileȱwillȱbeȱplacedȱautomatically.ȱȱFigure  87. Placing Sensors on the Floormap YouȱmustȱcompleteȱthisȱstepȱtoȱviewȱliveȱRFȱcoverageȱmapsȱforȱaȱlocationȱnodeȱandȱperformȱonȬfloorȱlocationȱtrackingȱofȱvisibleȱ802.11ȱdevices.ȱUseȱtheȱfollowingȱstepsȱtoȱplaceȱSensorsȱonȱtheȱfloormap:ȱa. InȱtheȱLocationȱtree,ȱselectȱaȱlocationȱnode.ȱb. UnderȱAvailableȱDevices,ȱselectȱtheȱSensorsȱtab,ȱthenȱdragȱandȱdropȱtheȱSensorsȱonȱyourȱfloormap.ȱ7.1.6 Stepȱ6:ȱClassifyingȱAPsȱ17. TheȱAuthorizedȱWLANȱSetupȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱOnȱthisȱscreen,ȱspecifyȱAuthorizedȱAPȱdetailsȱusingȱSSIDȱtemplatesȱtoȱsuitȱdifferentȱlocations.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ61ȱFigure  88. Authorized WLAN Setup Selectȱoneȱofȱtheȱfollowingȱtoȱcharacterizeȱaȱparticularȱlocation:ȱxThisȱisȱaȱNoȱWiȬFiȱlocation:ȱIfȱnoȱAuthorizedȱWiȬFiȱAPsȱareȱinstalledȱatȱthisȱlocation.ȱIfȱyouȱconfigureȱaȱlocationȱasȱaȱnoȱWiȬFiȱlocation,ȱtheȱSpecifyȱAuthorizedȱSSIDȱsectionȱisȱgrayedȱout.ȱxWiȬFiȱisȱallowedȱatȱthisȱlocation:ȱToȱspecifyȱtheȱdetailsȱofȱtheȱAuthorizedȱWiȬFiȱAPsȱinȱthisȱlocation.ȱ7.1.6.1 SpecifyȱAuthorizedȱSSIDsȱUnderȱthisȱtab,ȱspecifyȱtheȱAuthorizedȱSSIDsȱatȱthisȱlocation.ȱForȱeachȱSSID,ȱyouȱcanȱspecifyȱtheȱdetailedȱconfiguration.ȱThisȱperȱSSIDȱconfigurationȱisȱcalledȱanȱSSIDȱtemplate.ȱCreatingȱaȱConfigurationȱTemplateȱforȱanȱAuthorizedȱ802.11ȱSSIDȱAddȱAuthorizedȱSSIDsȱallowsȱyouȱtoȱcreateȱanȱSSIDȱtemplateȱinȱoneȱofȱtheȱfollowingȱways:ȱxAddȱVisibleȱSSID:ȱToȱcreateȱanȱSSIDȱtemplateȱfromȱaȱlistȱofȱvisibleȱSSIDs.ȱTheȱvisibleȱSSIDȱlistȱisȱbuiltȱusingȱtheȱdataȱreceivedȱfromȱSensors.ȱxAddȱCustomȱSSID:ȱToȱcreateȱaȱtemplateȱusingȱaȱuserȬdefinedȱSSID.ȱClickȱ<AddȱNew>ȱtoȱcreateȱaȱnewȱSSIDȱtemplate.ȱTheȱTemplateȱforȱanȱAuthorizedȱ802.11ȱSSIDȱdialogȱappearsȱwhereȱyouȱcanȱselectȱmultipleȱitemsȱinȱsomeȱfields.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ62ȱȱFigure  89. Creating a Configuration Template for an Authorized SSID xCreateȱSSIDȱTemplateȱallowsȱyouȱtoȱspecifyȱtheȱdetailsȱforȱcreatingȱaȱnewȱSSIDȱasȱfollows:ȱ¾AuthorizedȱSSID:ȱDisplaysȱtheȱnameȱofȱtheȱSSIDȱthatȱyouȱhaveȱaddedȱearlierȱ¾ThisȱisȱaȱGuestȱSSID:ȱSelectȱthisȱoptionȱifȱthisȱSSIDȱisȱaȱGuestȱSSIDȱusedȱtoȱprovideȱWiȬFiȱconnectivityȱtoȱvisitorsȱandȱguests.ȱThoughȱAPsȱwithȱGuestȱSSIDȱareȱAuthorized,ȱtheyȱmayȱbeȱtreatedȱdifferentlyȱthanȱAPsȱthatȱareȱusedȱbyȱemployeesȱforȱcorporateȱaccess.ȱMakingȱanȱSSIDȱasȱGuestȱallowsȱyouȱtoȱspecifyȱadditionalȱclassificationȱandȱpreventionȱpoliciesȱrelatedȱtoȱGuestȱSSIDs.ȱReferȱtoȱtheȱsectionsȱClientȱAutoȬClassificationȱandȱIntrusionȱPreventionȱPolicyȱinȱtheȱSpectraGuardȱEnterpriseȱUserȱGuideȱforȱmoreȱdetailsȱonȱclassifyingȱGuestȱSSIDsȱ¾TemplateȱName:ȱNameȱofȱtheȱSSIDȱtemplateȱ¾ApplyȱthisȱSSIDȱtemplateȱatȱcurrentȱlocation:ȱSelectȱthisȱoptionȱtoȱapplyȱthisȱSSIDȱtemplateȱtoȱtheȱcurrentȱlocation.ȱTheȱWLANȱpolicyȱatȱaȱlocationȱconsistsȱofȱSSIDȱtemplatesȱappliedȱatȱthatȱlocation.ȱIfȱtheȱtemplateȱisȱnotȱappliedȱatȱthisȱlocation,ȱitȱwillȱnotȱbeȱaȱpartȱofȱtheȱWLANȱpolicyȱ¾Description:ȱWriteȱaȱshortȱdescriptionȱtoȱhelpȱidentifyȱtheȱSSIDȱtemplateȱxNetworkȱProtocolȱallowsȱyouȱtoȱselectȱtheȱallowedȱ802.11ȱprotocolsȱforȱtheȱSSID:ȱ¾Any:ȱAllowȱAPsȱwithȱanyȱnetworkȱprotocolȱforȱthisȱSSIDȱ¾Select:ȱSpecifyȱtheȱ802.11ȱprotocolȱonȱwhichȱtheȱsystemȱallowsȱtheȱAPsȱconnectedȱtoȱtheȱnetworkȱtoȱoperate–802.11ȱa,ȱ802.11ȱb,ȱandȱ802.11gȱxAuthenticationȱFrameworkȱallowsȱyouȱtoȱselectȱtheȱsecurityȱframeworkȱforȱtheȱSSID:ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ63¾Any:ȱAllowȱAPsȱwithȱanyȱauthenticationȱframeworkȱtoȱconnectȱtoȱtheȱsystemȱ¾Select:ȱSpecifyȱtheȱauthenticationȱframework–PSKȱandȱ802.1xȱ(EAP).ȱTheȱauthenticationȱframeworkȱisȱonlyȱapplicableȱifȱtheȱtemplateȱsupportsȱWPA/WPA2ȱandȱ802.11iȱprivacyȱxEncryptionȱProtocolsȱallowsȱyouȱtoȱselectȱtheȱallowedȱencryptionȱprotocolsȱforȱtheȱSSID:ȱ¾Any:ȱAllowȱAPsȱwithȱanyȱencryptionȱprotocolȱforȱthisȱSSIDȱ¾Select:ȱSpecifyȱtheȱencryptionȱprotocols–WEP40,ȱWEP108,ȱTKIP,ȱandȱCCMP.ȱTKIPȱandȱCCMPȱareȱavailableȱonlyȱifȱtheȱtemplateȱsupportsȱWPA/WPA2ȱandȱ802.11iȱprivacyȱxSecurityȱSettingsȱallowsȱyouȱtoȱselectȱtheȱsecurityȱprotocol(s)ȱforȱtheȱSSID:ȱ¾Any:ȱAllowȱAPsȱwithȱanyȱsecurityȱsettingsȱtoȱconnectȱ¾Select:ȱSpecifyȱtheȱprivacyȱmechanism–Open,ȱWEP,ȱWPA,ȱandȱ802.11iȱforȱtheȱAPsȱconnectedȱtoȱtheȱSSIDȱxCiscoȱMFPȱallowsȱyouȱtoȱmakeȱclassificationȱdecisionsȱonȱCiscoȱManagementȱFrameȱProtection(MFP)ȱcapabilityȱifȱ802.11iȱcheckboxȱisȱselectedȱunderȱSecurityȱSettings:ȱ¾Any:ȱPolicyȱdoesȱnotȱcheckȱforȱMFP;ȱbothȱCiscoȱMFPȱenabledȱandȱdisabledȱAPsȱareȱclassifiedȱasȱAuthorizedȱ¾Select:ȱPolicyȱchecksȱforȱMFPȱCiscoȱMFPȱEnabled:ȱSelectȱtoȱclassifyȱonlyȱCiscoȱMFPȱsupportingȱAPsȱasȱAuthorizedȱAPsȱCiscoȱMFPȱDisabled:ȱSelectȱtoȱclassifyȱnonȬCiscoȱMFPȱsupportingȱAPsȱasȱAuthorizedȱAPsȱxAPȱCapabilitiesȱallowsȱyouȱtoȱselectȱtheȱadditionalȱcapabilitiesȱthatȱAuthorizedȱAPsȱmayȱhave.ȱIfȱyouȱselectȱanyȱofȱtheseȱadvancedȱcapabilities,ȱtheȱclassificationȱlogicȱallowsȱAPsȱwithȱandȱwithoutȱtheseȱcapabilities.ȱSelectȱoneȱofȱtheȱfollowing:ȱ¾Any:ȱAllowȱAPsȱwithȱanyȱspecialȱcapabilityȱforȱthisȱSSIDȱ¾Select:ȱSpecifyȱifȱtheȱAPȱusesȱanyȱTurbo/SuperȱtechniquesȱusedȱbyȱAtherosȱtoȱgetȱhigherȱthroughputs–Turbo,ȱSuperAG,ȱandȱDot11nȱ(802.11n)ȱxAuthenticationȱTypesȱallowsȱyouȱtoȱselectȱtheȱallowedȱauthenticationȱtypesȱthatȱClientsȱcanȱuse.ȱAuthenticationȱtypesȱdoȱnotȱdetermineȱtheȱclassificationȱofȱAPs,ȱbutȱareȱusedȱtoȱraiseȱanȱeventȱifȱaȱClientȱisȱauthenticatedȱviaȱaȱnonȬallowedȱauthenticationȱtype.ȱTheȱsystemȱraisesȱthisȱeventȱonlyȱifȱtheȱsystemȱseesȱauthenticationȱprotocolȱhandshakeȱframes.ȱ¾Any:ȱAllowȱClientsȱwithȱanyȱauthenticationȱtypeȱforȱthisȱSSIDȱ¾Select:ȱSpecifyȱtheȱauthenticationȱtypesȱthatȱClientsȱcanȱuseȱ(onlyȱifȱ802.1xȱisȱselected)–PEAP,ȱEAPȬTLS,ȱLEAP,ȱEAPȬTTLS,ȱEAPȬFAST,ȱandȱEAPȬSIMȱSelectionȱisȱallowedȱxAllowedȱNetworksȱallowsȱyouȱtoȱselectȱtheȱnetworksȱwhereȱAuthorizedȱAPsȱwithȱthisȱSSIDȱareȱconnected:ȱ¾Any:ȱAllowȱAPsȱwithȱthisȱSSIDȱtoȱconnectȱtoȱanyȱnetworkȱ¾SelectȱNetworks:ȱSpecifyȱtheȱnetworksȱwhereȱAuthorizedȱAPsȱwithȱthisȱSSIDȱareȱconnected.ȱYouȱcanȱeitherȱchooseȱfromȱnetworksȱthatȱareȱdiscoveredȱautomaticallyȱbyȱtheȱsystemȱorȱaddȱnewȱnetworksȱthatȱareȱnotȱyetȱdiscoveredȱbyȱtheȱsystemȱClickȱ<SelectȱNetworks>ȱtoȱopenȱAllowedȱNetworksȱforȱSSIDȱdialogȱwhereȱyouȱcanȱmoveȱaȱnetworkȱfromȱNetworksȱMonitoredȱbyȱtheȱSystemȱtoȱAllowedȱNetworksȱforȱthisȱSSIDȱandȱaddȱorȱdeleteȱnetworks.ȱxUnderȱAllowedȱAPȱVendor s,ȱselectȱoneȱofȱtheȱfollowing:ȱ¾Any:ȱAllowȱAPsȱmanufacturedȱbyȱanyȱvendorȱtoȱconnectȱtoȱtheȱsystemȱ¾SelectȱVendors:ȱSelectȱtheȱmanufacturerȱofȱtheȱAPȱwithȱtheȱspecifiedȱSSID.ȱIfȱanȱAPȱwithȱtheȱspecifiedȱSSIDȱisȱdiscoveredȱatȱthisȱlocation,ȱtheȱsystemȱdeclaresȱitȱasȱaȱRogue,ȱunlessȱoneȱofȱtheȱmanufacturersȱlistedȱmanufacturesȱit.ȱSSIDȱTemplatesȱAȱpolicyȱisȱcollectionȱofȱSSIDȱtemplatesȱattachedȱtoȱthatȱlocation.ȱYouȱcanȱapplyȱanȱSSIDȱtemplateȱfromȱtheȱparentȱorȱcreateȱitȱlocally;ȱifȱyouȱwishȱtoȱcustomizeȱtheȱWLANȱpolicyȱforȱthatȱlocation.ȱOtherȱtemplatesȱmayȱbeȱavailableȱtoȱbeȱattachedȱbutȱareȱnotȱpartȱofȱtheȱWLANȱpolicyȱandȱwillȱnotȱbeȱusedȱforȱAPȱclassification.ȱTheȱSSIDȱTemplatesȱsectionȱlistsȱtheȱSSIDȱtemplatesȱthatȱareȱavailableȱatȱaȱparticularȱlocation.ȱYouȱmustȱapplyȱtheȱtemplatesȱfromȱtheȱavailableȱlistȱtoȱcreateȱtheȱWLANȱpolicyȱatȱthatȱlocation.ȱAȱnewȱAPȱorȱanȱexistingȱAuthorizedȱAPȱisȱcomparedȱagainstȱtheȱappliedȱSSIDȱtemplatesȱtoȱdetermineȱifȱitȱisȱaȱRogueȱorȱMisȬconfiguredȱAP.ȱTheȱSSIDȱtemplatesȱcreatedȱatȱotherȱlocationsȱcanȱbeȱappliedȱtoȱaȱselectedȱlocationȱbutȱcannotȱbeȱeditedȱorȱdeleted.ȱTheȱeditȱandȱdeleteȱoperationsȱareȱpossibleȱonlyȱatȱtheȱlocationȱwhereȱtheȱtemplateȱisȱcreated.ȱTheȱtableȱshowsȱtheȱfollowingȱdetails:ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ64ȱxSSID:ȱNameȱofȱtheȱSSIDȱxGuestȱSSID?:ȱIndicatesȱifȱitȱisȱaȱGuestȱSSIDȱxTemplateȱName:ȱNameȱofȱtheȱSSIDȱtemplateȱxApplyȱHere?:ȱEnablesȱyouȱtoȱapplyȱtheȱSSIDȱtemplateȱtoȱtheȱselectedȱlocation.ȱNewȱandȱexistingȱAuthorizedȱAPsȱareȱevaluatedȱagainstȱallȱappliedȱSSIDȱtemplatesȱtoȱdetermineȱifȱtheyȱareȱRogueȱorȱMisȬconfigured.ȱxȱȱȱ:ȱClickȱtheseȱiconsȱtoȱperformȱtheȱfollowing:ȱ¾CopyȱtheȱselectedȱSSIDȱtemplateȱtoȱanotherȱlocation.ȱ¾EditȱtheȱSSIDȱtemplate.ȱThisȱoptionȱisȱenabledȱonlyȱatȱtheȱlocationȱwhereȱtheȱtemplateȱwasȱcreated.ȱ¾ViewȱtheȱSSIDȱtemplate.ȱ¾Deleteȱtheȱtemplate.ȱThisȱoptionȱisȱenabledȱonlyȱatȱtheȱlocationȱwhereȱtheȱtemplateȱwasȱcreatedȱandȱonlyȱifȱtheȱtemplateȱisȱnotȱappliedȱatȱanyȱotherȱchildȱlocationsȱofȱtheȱlocationȱwhereȱitȱwasȱcreated.ȱ7.1.6.2 SelectȱWiȬFiȱNetworksȱThisȱsectionȱallowsȱyouȱtoȱspecifyȱtheȱlistȱofȱnetworksȱatȱtheȱselectedȱlocationȱwhereȱnoȱWiȬFiȱAPsȱareȱallowedȱtoȱbeȱconnected.ȱTheȱNoȱWiȬFiȱNetworksȱlistȱatȱaȱlocationȱtakesȱprecedenceȱoverȱtheȱlistȱofȱnetworksȱinȱSSIDȱtemplatesȱappliedȱatȱthatȱlocation.ȱInȱotherȱwords,ȱifȱaȱnetworkȱisȱincludedȱinȱaȱlocation’sȱnoȱWiȬFiȱlistȱandȱhappensȱtoȱbeȱinȱtheȱlistȱofȱnetworksȱinȱoneȱorȱmoreȱappliedȱSSIDsȱatȱthatȱlocation,ȱtheȱnetworkȱwillȱbeȱstillȱtreatedȱasȱaȱnoȱWiȬFiȱnetwork.ȱȱFigure  90. No-Wi-Fi Networks xNetworksȱMonitoredȱbyȱtheȱSystem:ȱSpecifiesȱtheȱnetworksȱmonitoredȱbyȱtheȱsystem.ȱxNoȱWiȬFiȱNetworksȱatȱthisȱLocation:ȱSpecifiesȱtheȱnetworksȱtoȱwhichȱnoȱWiȬFiȱAPȱshouldȱbeȱconnectedȱatȱtheȱselectedȱlocation.ȱYouȱcanȱmoveȱaȱnetworkȱfromȱNetworksȱMonitoredȱbyȱtheȱSystemȱtoȱNoȱWiȬFiȱNetworksȱatȱthisȱLocation.ȱClickȱ<Add>ȱtoȱenterȱaȱnewȱnetworkȱaddressȱtoȱaddȱaȱNoȱWiȬFiȱnetworkȱatȱtheȱselectedȱlocation.ȱ7.1.6.3 RSSIȱbasedȱClassificationȱAPsȱareȱfurtherȱclassifiedȱbasedȱonȱtheȱRSSIȱvalueȱthatȱtheȱSensorsȱreceive.ȱIfȱtheȱsignalȱstrenthȱexceedsȱaȱmaximmumȱthreshold,ȱtheȱSensorȱappropriatelyȱclssifiesȱtheȱAP.ȱAirtightȱhiglyȱrecommendsȱthatȱyouȱturnȱonȱnetworkȱconnectivityȱbasedȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ65classificationȱasȱitȱisȱtheȱmostȱreliableȱmechanismȱtoȱclassifyȱwirelessȱdevicesȱwhenȱmostȱofȱyourȱnetworkȱisȱmonitoredȱusingȱSensorsȱandȱNDs.ȱUnderȱRSSIȱThreshold,ȱselectȱoneȱorȱbothȱ(recommend)ȱofȱtheȱfollowingȱcheckboxes:ȱxPreȬclassifyȱAPsȱwithȱsignalȱstrengthȱstrongerȱthanȱthresholdȱasȱRogueȱorȱAuthorizedȱAPsȱtoȱspecifyȱtheȱthresholdȱRSSIȱvalueȱbasedȱonȱwhichȱtheȱsystemȱfurtherȱclassifiesȱAPs.ȱxPreȬclassifyȱAPsȱconnectedȱtoȱmonitoredȱsubnetȱasȱRogueȱorȱAuthorizedȱAPsȱtoȱclassifyȱAPsȱbasedȱonȱtheirȱnetworkȱconnectivity.ȱȱFigure  91. RSSI based Classification 18. TheȱAPȱAutoȬclassificationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱItȱenablesȱyouȱtoȱspecifyȱtheȱAPȱclassificationȱpolicyȱforȱdifferentȱAPȱcategories.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ66ȱȱFigure  92. AP Auto-Classification Policy UnderȱExternalȱAPs,ȱAirTightȱrecommendsȱthatȱyouȱselectȱAutomaticallyȱmoveȱPotentiallyȱExternalȱAPsȱinȱtheȱUncategorizedȱlistȱtoȱtheȱExternalȱFolder.ȱTheȱsystemȱautomaticallyȱremovesȱanȱAPȱfromȱtheȱExternalȱfolderȱandȱmovesȱitȱtoȱanȱappropriateȱAPȱfolderȱifȱitȱlaterȱdetectsȱthatȱtheȱAPȱisȱwiredȱtoȱtheȱenterpriseȱnetwork.ȱUnderȱRogueȱAPs,ȱAirTightȱrecommendsȱthatȱyouȱselectȱAutomaticallyȱmoveȱPotentiallyȱExternalȱAPsȱinȱtheȱUncategorizedȱlistȱtoȱtheȱRogueȱFolder.ȱNote:ȱOnceȱyouȱmoveȱanȱAPȱtoȱtheȱRogueȱfolder,ȱtheȱsystemȱneverȱautomaticallyȱremovesȱitȱfromȱtheȱRogueȱfolder,ȱevenȱifȱitȱlaterȱdetectsȱthatȱtheȱAPȱisȱunwiredȱfromȱtheȱenterpriseȱnetworkȱorȱitsȱsecurityȱsettingsȱhaveȱchanged.ȱ19. TheȱImportȱDevicesȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱImportingȱanȱAuthorizedȱAPȱListȱisȱanȱefficientȱalternativeȱtoȱmanualȱmovementȱofȱtheseȱAPsȱintoȱtheȱAuthorizedȱbin.ȱAfterȱsuccessfullyȱimportingȱtheseȱlists,ȱtheȱsystemȱautomaticallyȱclassifiesȱtheȱAPsȱinȱtheȱrespectiveȱlistsȱasȱAuthorized.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ67ȱFigure  93. Import Devices – APs YouȱcanȱmoveȱAuthorizedȱAPsȱtoȱtheȱAuthorizedȱfolderȱusingȱoneȱofȱtheȱfollowingȱmethods:ȱxMoveȱanȱAPȱtoȱtheȱAuthorizedȱfolderȱusingȱrightȱclickȱandȱMoveȱoptionȱxImportȱtheȱAuthorizedȱAPȱlistȱxSynchronizeȱwithȱanȱAPȱManagementȱServerȱNote:ȱOnceȱyouȱmoveȱanȱAPȱtoȱtheȱAuthorizedȱfolder,ȱtheȱsystemȱneverȱautomaticallyȱremovesȱitȱfromȱtheȱAuthorizedȱfolder,ȱevenȱifȱitȱlaterȱdetectsȱthatȱtheȱAPȱisȱunwiredȱfromȱtheȱenterpriseȱnetwork.ȱUnderȱImportȱAPȱList,ȱclickȱ<ImportȱAuthorizedȱAPȱList>ȱtoȱopenȱImportȱAuthorizedȱAPȱListȱdialog.ȱȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ68ȱFigure  94. Import Authorized AP List InȱtheȱImportȱAuthorizedȱAPȱListȱdialog:ȱUnderȱTagȱDevices,ȱselectȱoneȱofȱtheȱfollowing:ȱxAutoȱTagȱDevices:ȱToȱautomaticallyȱtagȱtheȱAPȱtoȱtheȱcorrespondingȱlocation.ȱxManuallyȱTagȱDevicesȱto::ȱClickȱ<Change>ȱtoȱmanuallyȱtagȱtheȱAPȱtoȱtheȱdesiredȱlocation.ȱUnderȱEnterȱAPȱdetailsȱxToȱaddȱanȱAP’sȱdetails,ȱtypeȱtheȱAP’sȱMACȱaddress,ȱIPȱAddress,ȱandȱNameȱandȱclickȱ<AddȱtoȱList>>>>.ȱxToȱaddȱanȱAP’sȱdetailsȱfromȱaȱfile,ȱclickȱ<Browse>.ȱOnȱtheȱSelectȱAuthorizedȱAP_Device_List_Fileȱdialog,ȱselectȱtheȱ.txtȱfileȱfromȱtheȱdesiredȱlocationȱandȱclickȱ<Open>.ȱThenȱclickȱ<AddȱtoȱList>>>>.ȱUnderȱAuthorizedȱAPȱImportȱListȱxToȱdeleteȱanȱAP’sȱdetails,ȱselectȱtheȱcorrespondingȱrowȱandȱclickȱ<Delete>.ȱToȱimportȱAuthorizedȱAPsȱfromȱtheȱAuthorizedȱAPȱImportȱList,ȱclickȱ<OK>.ȱNote:ȱWhenȱyouȱimportȱAPsȱfromȱaȱlist,ȱpolicyȱsettingsȱinȱtheȱSetupȱWizardȱdoȱnotȱaffectȱtheseȱAPs.ȱ20. TheȱDevicesÆAPsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱTheȱsystemȱenablesȱyouȱtoȱinspect,ȱconfirm,ȱandȱreȬclassifyȱaȱdevice,ȱwhichȱis,ȱmoveȱaȱdeviceȱtoȱaȱdifferentȱfolderȱbasedȱonȱfreshȱinformation.ȱȱFigure  95. Devices Screen – APs UseȱtheȱfollowingȱstepsȱtoȱmoveȱanȱAPȱtoȱaȱspecificȱfolder:ȱa. InȱtheȱAPȱlist,ȱrightȱclickȱtheȱdesiredȱAPȱrow.ȱb. Fromȱtheȱresultingȱcontextȱsensitiveȱmenu,ȱselectȱMoveȱto….ȱc. ClickȱtheȱdesiredȱcategoryȱtoȱwhichȱyouȱwantȱtoȱmoveȱtheȱAP.ȱNote:ȱIfȱyouȱmoveȱanȱAPȱplacedȱonȱaȱfloormap,ȱanȱErrorȱdialogȱappears.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ6921. TheȱLocationsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱTheȱsystemȱenablesȱyouȱtoȱplaceȱAPsȱonȱtheȱfloormapȱtoȱviewȱliveȱRFȱcoverageȱmapsȱforȱaȱlocationȱnodeȱandȱperformȱonȬfloorȱlocationȱtrackingȱofȱvisibleȱ802.11ȱdevices.ȱȱFigure  96. Locations Screen UseȱtheȱfollowingȱstepsȱtoȱplaceȱAPsȱonȱtheȱfloormap:ȱa. InȱtheȱLocationȱtree,ȱselectȱaȱlocationȱnode.ȱb. UnderȱAvailableȱDevices,ȱselectȱtheȱAPsȱtab,ȱthenȱdragȱandȱdropȱtheȱAPsȱonȱyourȱfloormap.ȱ7.1.7 Stepȱ7:ȱClassifyingȱClientsȱ22. TheȱClientȱAutoȬclassificationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱItȱdeterminesȱhowȱClientsȱareȱclassifiedȱuponȱinitialȱdiscoveryȱandȱsubsequentȱassociationsȱwithȱAPs.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ70ȱȱFigure  97. Client Auto-Classification Policy UnderȱInitialȱClientȱClassification,ȱspecifyȱifȱnewlyȱdiscoveredȱClientsȱatȱaȱparticularȱlocation,ȱwhichȱareȱUncategorizedȱbyȱdefaultȱshouldȱbeȱclassifiedȱasȱAuthorizedȱorȱUnauthorized.ȱUnderȱAutomaticȱClientȱClassification,ȱselectȱoneȱorȱmoreȱoptionsȱtoȱenableȱTheȱsystemȱautomaticallyȱreȬclassifyȱUncategorizedȱandȱUnauthorizedȱClientsȱbasedȱonȱtheirȱassociationsȱwithȱAPs.ȱYouȱcanȱcategorizeȱtheȱfollowingȱtypesȱofȱClients.ȱxClientsȱrunningȱSAFEȱ¾AllȱUnauthorizedȱClientsȱrunningȱSpectraGuardȱSAFEȱareȱclassifiedȱasȱAuthorizedȱ¾AllȱUncategorizedȱClientsȱrunningȱSpectraGuardȱSAFEȱareȱclassifiedȱasȱAuthorizedȱxClientsȱconnectingȱtoȱAuthorizedȱAPsȱ¾AllȱUnauthorizedȱClientsȱthatȱconnectȱtoȱanȱAuthorizedȱAPȱareȱreȬclassifiedȱasȱAuthorizedȱ¾AllȱUncategorizedȱClientsȱthatȱconnectȱtoȱanȱAuthorizedȱAPȱareȱclassifiedȱasȱAuthorizedȱYouȱcanȱselectȱtheȱfollowingȱExceptionsȱ¾DoȱnotȱreȬclassifyȱaȱClientȱconnectingȱtoȱaȱGuestȱAPȱasȱAuthorizedȱ¾DoȱnotȱreȬclassifyȱaȱClientȱconnectingȱtoȱaȱMisȬconfiguredȱAPȱasȱAuthorizedȱ¾DoȱnotȱreȬclassifyȱaȱClientȱasȱAuthorizedȱifȱitsȱwirelessȱdataȱpacketsȱareȱnotȱdetectedȱonȱtheȱwiredȱnetworkȱxClientsȱconnectingȱtoȱExternalȱorȱRogueȱAPsȱ¾AllȱUncategorizedȱClientsȱthatȱconnectȱtoȱanȱExternalȱAPȱareȱclassifiedȱasȱUnauthorizedȱ¾AllȱUncategorizedȱClientsȱthatȱconnectȱtoȱaȱRogueȱAPȱareȱclassifiedȱasȱUnauthorizedȱ¾AllȱUncategorizedȱClientsȱthatȱconnectȱtoȱaȱPotentiallyȱExternalȱAPȱareȱclassifiedȱasȱUnauthorizedȱ¾AllȱUncategorizedȱClientsȱthatȱconnectȱtoȱaȱPotentiallyȱRogueȱAPȱareȱclassifiedȱasȱUnauthorizedȱ23. TheȱImportȱDevicesȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱImportingȱanȱAuthorizedȱorȱUnauthorizedȱClientsȱListȱisȱanȱefficientȱalternativeȱtoȱmanualȱmovementȱofȱtheseȱdevicesȱintoȱtheȱAuthorized/Unauthorizedȱbins.ȱAfterȱsuccessfullyȱimportingȱtheseȱlists,ȱtheȱsystemȱautomaticallyȱclassifiesȱtheȱClientsȱinȱtheȱrespectiveȱlistsȱasȱAuthorized/Unauthorized.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ71ȱFigure  98. Import Devices – Clients InȱtheȱImportȱDevicesȱdialog,ȱunderȱImportȱClientȱList,ȱclickȱ<ImportȱAuthorizedȱClientȱList>ȱtoȱopenȱImportȱAuthorizedȱClientȱListȱdialogȱand/orȱclickȱ<ImportȱUnauthorizedȱClientȱList>ȱtoȱopenȱImportȱUnauthorizedȱClientȱListȱdialog.ȱInȱtheȱImportȱAuthorized/UnauthorizedȱClientȱListȱdialog:ȱUnderȱTagȱDevices,ȱselectȱoneȱofȱtheȱfollowing:ȱxAutoȱTagȱDevices:ȱToȱautomaticallyȱtagȱtheȱAPȱtoȱtheȱcorrespondingȱlocation.ȱxManuallyȱTagȱDevicesȱto::ȱClickȱ<Change>ȱtoȱmanuallyȱtagȱtheȱAPȱtoȱtheȱdesiredȱlocation.ȱUnderȱEnterȱClientȱdetailsȱxToȱaddȱaȱClient’sȱdetails,ȱunderȱEnterȱClientȱdetails,ȱtypeȱtheȱClient’sȱMACȱAddress,ȱIPȱAddress,ȱandȱNameȱandȱclickȱ<AddȱtoȱList>>>>.ȱxToȱaddȱaȱClient’sȱdetailsȱfromȱaȱfile,ȱclickȱ<Browse>.ȱOnȱtheȱSelectȱAuthorized/UnauthorizedȱClient_Device_List_Fileȱdialog,ȱselectȱtheȱ.txtȱfileȱfromȱtheȱdesiredȱlocationȱandȱclickȱ<Open>.ȱThenȱclickȱ<AddȱtoȱList>>>>.ȱUnderȱAuthorized/UnauthorizedȱClientȱImportȱListȱxToȱdeleteȱaȱClient’sȱdetails,ȱselectȱtheȱcorrespondingȱrowȱandȱclickȱ<Delete>.ȱToȱimportȱAuthorized/UnauthorizedȱClientsȱfromȱtheȱAuthorized/UnauthorizedȱClientȱImportȱList,ȱclickȱ<OK>.ȱNote:ȱWhenȱyouȱimportȱClientsȱfromȱaȱlist,ȱpolicyȱsettingsȱinȱtheȱSetupȱWizardȱdoȱnotȱaffectȱtheseȱClients.ȱ24. TheȱDevicesÆClientsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱTheȱsystemȱenablesȱyouȱtoȱinspect,ȱconfirm,ȱandȱreȬclassifyȱaȱdevice,ȱwhichȱis,ȱmoveȱaȱdeviceȱtoȱaȱdifferentȱfolderȱbasedȱonȱfreshȱinformation.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ72ȱȱFigure  99. Devices Screen – Clients UseȱtheȱfollowingȱstepsȱtoȱmoveȱaȱClientȱtoȱaȱspecificȱfolder:ȱa. InȱtheȱClientȱlist,ȱrightȱclickȱtheȱdesiredȱClientȱrow.ȱb. Fromȱtheȱresultingȱcontextȱsensitiveȱmenu,ȱselectȱMoveȱto….ȱc. ClickȱtheȱdesiredȱcategoryȱtoȱwhichȱyouȱwantȱtoȱmoveȱtheȱClient.ȱ7.1.8 Stepȱ8:ȱConfiguringȱIntrusionȱPreventionȱPolicyȱ25. TheȱIntrusionȱPreventionȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱ7.1.8.1 IntrusionȱPreventionȱPolicyȱTheȱIntrusionȱPreventionȱpolicyȱdeterminesȱtheȱwirelessȱthreatsȱagainstȱwhichȱtheȱsystemȱprotectsȱtheȱnetworkȱautomatically.ȱTheȱsystemȱautomaticallyȱmovesȱsuchȱthreatȬposingȱAPsȱandȱClientsȱtoȱquarantine.ȱTheȱsystemȱcanȱprotectȱagainstȱmultipleȱthreatsȱsimultaneouslyȱbasedȱonȱtheȱselectedȱIntrusionȱPreventionȱLevel.ȱIfȱtheȱServerȱquarantinesȱanȱAPȱorȱClientȱbasedȱonȱtheȱIntrusionȱPreventionȱpolicy,ȱtheȱDisableȱAutoȬquarantineȱoptionȱensuresȱthatȱtheȱsystemȱwillȱnotȱautomaticallyȱquarantineȱthisȱAPȱorȱClientȱ(regardlessȱofȱtheȱspecifiedȱIntrusionȱPreventionȱpolicies).ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ73ȱFigure  100. Intrusion Prevention Policy Youȱcanȱenableȱintrusionȱpreventionȱagainstȱtheȱfollowingȱthreats:ȱxRogueȱAPs:ȱAPsȱthatȱareȱconnectedȱtoȱyourȱnetworkȱbutȱnotȱauthorizedȱbyȱtheȱadministrator;ȱanȱattackerȱcanȱgainȱaccessȱtoȱyourȱnetworkȱthroughȱtheȱRogueȱAPs.ȱYouȱcanȱalsoȱautomaticallyȱquarantineȱUncategorizedȱIndeterminateȱandȱBannedȱAPsȱconnectedȱtoȱtheȱnetwork.ȱxMisȬconfiguredȱAPs:ȱAPsȱthatȱareȱauthorizedȱbyȱtheȱadministratorȱbutȱdoȱnotȱconformȱtoȱtheȱsecurityȱpolicy;ȱanȱattackerȱcanȱgainȱaccessȱtoȱyourȱnetworkȱthroughȱmisconfiguredȱAPs.ȱThisȱcouldȱhappenȱifȱtheȱAPsȱareȱreset,ȱtamperedȱwith,ȱorȱifȱthereȱisȱaȱchangeȱinȱtheȱsecurityȱpolicy.ȱxClientȱMisȬassociation:ȱAuthorizedȱClientsȱthatȱconnectȱtoȱRogueȱorȱExternalȱ(neighboring)ȱAPs;ȱcorporateȱdataȱonȱtheȱAuthorizedȱClientȱisȱunderȱthreatȱdueȱtoȱsuchȱconnections.ȱAirTightȱrecommendsȱthatȱyouȱprovideȱautomaticȱintrusionȱpreventionȱagainstȱAuthorizedȱClientsȱthatȱconnectȱtoȱExternalȱAPs.ȱxUnauthorizedȱAssociations:ȱUnauthorizedȱandȱBannedȱClientsȱthatȱconnectȱtoȱAuthorizedȱAPs;ȱanȱattackerȱcanȱgainȱaccessȱtoȱyourȱnetworkȱthroughȱAuthorizedȱAPsȱifȱtheȱsecurityȱmechanismsȱareȱweak.ȱUnauthorizedȱorȱUncategorizedȱClientȱconnectionsȱtoȱanȱAuthorizedȱAPȱusingȱaȱGuestȱSSIDȱareȱnotȱtreatedȱasȱunauthorizedȱassociations.ȱxAdȱhocȱConnections:ȱPeerȬtoȬpeerȱconnectionsȱbetweenȱClients;ȱcorporateȱdataȱonȱtheȱAuthorizedȱClientȱisȱunderȱthreatȱifȱitȱisȱinvolvedȱinȱanȱadȱhocȱconnection.ȱxMACȱSpoofing:ȱAnȱAPȱthatȱspoofsȱtheȱwirelessȱMACȱaddressȱofȱanȱAuthorizedȱAP;ȱanȱattackerȱcanȱlaunchȱanȱattackȱthroughȱaȱMACȱspoofingȱAP.ȱxHoneypot/EvilȱTwinȱAPs:ȱNeighboringȱAPsȱthatȱhaveȱtheȱsameȱSSIDȱasȱanȱAuthorizedȱAP;ȱAuthorizedȱClientsȱcanȱconnectȱtoȱHoneypot/EvilȱTwinȱAPs.ȱCorporateȱdataȱonȱtheseȱAuthorizedȱClientsȱisȱunderȱthreatȱdueȱtoȱsuchȱconnections.ȱxDenialȱofȱServiceȱ(DoS)ȱAttacks:ȱDoSȱattacksȱdegradeȱtheȱperformanceȱofȱanȱofficialȱWLAN.ȱxWEPGuardȱTM:ȱActiveȱWEPȱcrackingȱtoolsȱallowȱattackersȱtoȱcrackȱtheȱWEPȱkeyȱandȱgainȱaccessȱtoȱconfidentialȱdataȱinȱaȱmatterȱofȱminutesȱorȱevenȱseconds.ȱCompromisedȱWEPȱkeysȱareȱusedȱtoȱgainȱentryȱintoȱtheȱauthorizedȱWLANȱbyȱspoofingȱtheȱMACȱaddressȱofȱanȱinactiveȱAuthorizedȱClient.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ74ȱ7.1.8.2 IntrusionȱPreventionȱLevelȱTheȱsystemȱcanȱpreventȱanyȱunwantedȱcommunicationȱinȱyourȱ802.11ȱnetwork.ȱItȱprovidesȱyouȱvariousȱlevelsȱofȱpreventionȬblockingȱmechanismsȱofȱvaryingȱeffectiveness.ȱIntrusionȱPreventionȱLevelȱenablesȱyouȱtoȱspecifyȱaȱtradeȬoffȱbetweenȱtheȱdesiredȱlevelȱofȱpreventionȱandȱtheȱdesiredȱnumberȱofȱmultipleȱsimultaneousȱpreventionsȱacrossȱradioȱchannels.ȱTheȱgreaterȱtheȱnumberȱofȱchannelsȱacrossȱwhichȱsimultaneousȱpreventionȱisȱdesired,ȱtheȱlesserȱisȱtheȱeffectivenessȱofȱpreventionȱinȱinhibitingȱunwantedȱcommunication.ȱScanningȱforȱnewȱdevicesȱcontinuesȱregardlessȱofȱtheȱchosenȱpreventionȱlevel.ȱȱFigure  101. Intrusion Prevention Level Youȱcanȱselectȱtheȱfollowingȱpreventionȱlevels:ȱxBlock:ȱAȱsingleȱSensorȱcanȱblockȱunwantedȱcommunicationȱonȱanyȱoneȱchannelȱinȱtheȱ802.11b/gȱbandȱandȱanyȱoneȱchannelȱinȱtheȱ802.11aȱband.ȱxDisrupt:ȱAȱsingleȱSensorȱcanȱdisruptȱunwantedȱcommunicationȱonȱanyȱtwoȱchannelsȱinȱtheȱ802.11b/gȱbandȱandȱanyȱtwoȱchannelsȱinȱtheȱ802.11aȱband.ȱxInterrupt:ȱAȱsingleȱSensorȱcanȱinterruptȱunwantedȱcommunicationȱonȱanyȱthreeȱchannelsȱinȱtheȱ802.11b/gȱbandȱandȱanyȱthreeȱchannelsȱinȱtheȱ802.11aȱband.ȱxDegrade:ȱAȱsingleȱSensorȱcanȱdegradeȱtheȱperformanceȱofȱunwantedȱcommunicationȱonȱanyȱfourȱchannelsȱinȱ802.11b/gȱbandȱandȱanyȱfourȱchannelsȱinȱtheȱ802.11aȱband.ȱBlockȱisȱtheȱmostȱpowerfulȱpreventionȱlevel,ȱthatȱis,ȱitȱcanȱseverelyȱblockȱalmostȱallȱpopularȱInternetȱapplicationsȱincludingȱping,ȱSSH,ȱtelnet,ȱFTP,ȱHTTP,ȱandȱtheȱlike.ȱHowever,ȱatȱthisȱlevel,ȱaȱsingleȱSensorȱcanȱsimultaneouslyȱpreventȱunwantedȱcommunicationȱonȱonlyȱoneȱchannelȱinȱtheȱ802.11b/gȱbandȱandȱoneȱchannelȱinȱtheȱ802.11aȱband.ȱIfȱyouȱwantȱtheȱSensorȱtoȱpreventȱunwantedȱcommunicationȱonȱmultipleȱchannelsȱsimultaneouslyȱinȱtheȱ802.11ȱb/gȱand/orȱtheȱ802.11aȱband,ȱyouȱmustȱselectȱotherȱpreventionȱlevels.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ75Note:ȱPreventionȱTypeȱdeterminesȱtheȱblockingȱstrengthȱtoȱpreventȱcommunicationȱfromȱunwantedȱAPsȱandȱClients.ȱTheȱsystemȱcanȱpreventȱmultipleȱAPsȱandȱClientsȱonȱeachȱchannel.ȱPreventionȱTypeȱisȱnotȱapplicableȱforȱDenialȱofȱServiceȱ(DoS)ȱattacksȱorȱadȱhocȱnetworks.ȱYouȱmustȱselectȱaȱlowerȱblockingȱlevelȱtoȱpreventȱdevicesȱonȱmoreȱchannels.ȱChoosingȱaȱlowerȱblockingȱlevelȱmeansȱthatȱsomeȱpacketsȱfromȱtheȱblockedȱdeviceȱmayȱgoȱthrough.ȱ7.1.9 Stepȱ9:ȱConfiguringȱEventsȱandȱReportsȱ26. TheȱEventȱConfigurationȱfunctionȱscreenȱofȱtheȱEventȱSettingsȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱ7.1.9.1 SecurityȱSecurityȱenablesȱyouȱtoȱviewȱeventsȱrelatedȱtoȱsecurityȱandȱthatȱposeȱaȱthreatȱtoȱyourȱnetwork.ȱȱFigure  102. Event Configuration – Security Securityȱisȱfurtherȱdividedȱintoȱtheȱfollowing:ȱxRogueȱAPȱxMisȬConfiguredȱAPȱxMisbehavingȱClientsȱxPreventionȱxDoSȱxAdȱhocȱNetworkȱxManȬinȬtheȬMiddleȱxMACȱSpoofingȱxReconnaissanceȱxSystemȱ7.1.9.2 MonitoringȱMonitoringȱenablesȱyouȱtoȱviewȱeventsȱrelatedȱtoȱtheȱmonitoringȱofȱyourȱnetworkȱandȱthatȱareȱinformationalȱinȱnature.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ76ȱȱFigure  103. Event Configuration – Monitoring Monitoringȱisȱfurtherȱdividedȱintoȱtheȱfollowing:ȱxAPȱxClientȱxSensorȱxServerȱxTrafficȱxTroubleshootingȱOnceȱyouȱselectȱanyȱofȱtheȱaboveȱcategoriesȱandȱsubȬcategories,ȱaȱlistȱofȱrelatedȱeventsȱappears.ȱTheȱeventsȱlistȱdisplaysȱtheȱfollowingȱcolumns:ȱxDisplay:ȱSelectȱtheȱcheckboxesȱthatȱcorrespondȱtoȱtheȱtypesȱofȱeventsȱthatȱyouȱwantȱtoȱappearȱinȱtheȱmainȱEventsȱscreen.ȱxEȬmail:ȱSelectȱtheȱcheckboxesȱthatȱcorrespondȱtoȱtheȱtypesȱofȱeventsȱforȱwhichȱyouȱwantȱemailsȱnotificationsȱsentȱtoȱallȱusersȱwhoseȱemailȱaddressesȱyouȱhaveȱconfiguredȱinȱtheȱAdministrationÆEventȱSettingsÆEmailȱNotification.ȱxNotify:ȱSelectȱtheȱcheckboxesȱthatȱcorrespondȱtoȱtheȱtypesȱofȱeventsȱforȱwhichȱyouȱwantȱnotificationsȱsentȱtoȱexternalȱagentsȱsuchȱasȱSNMP,ȱSyslog,ȱArcSight,ȱandȱOPSEC.ȱxVulnerability:ȱSelectȱcheckboxesȱtoȱindicateȱwhichȱeventsȱmakeȱtheȱsystemȱVulnerable.ȱTheȱSecurityȱScorecardȱshowsȱVulnerableȱstatusȱifȱanyȱeventsȱofȱtheȱselectedȱtypeȱoccur.ȱxSeverity:ȱSelectȱtheȱseverityȱofȱeachȱeventȱasȱHigh,ȱMedium,ȱorȱLow.ȱThisȱfunctionȱhelpsȱyouȱtoȱorganizeȱeventsȱinȱtheȱmostȱusefulȱway.ȱxEvent:ȱProvidesȱaȱshortȱdescriptionȱofȱeachȱevent.ȱxClick…:ȱȱClickȱȱtoȱviewȱaȱdetailedȱdescriptionȱofȱtheȱcorrespondingȱeventȱcategory.ȱxAdvancedȱSettings:ȱClickȱ<Edit>ȱtoȱopenȱtheȱEventȱAdvancedȱSettingsȱdialogȱandȱchangeȱtheȱconfigurationȱparametersȱofȱtheȱcorrespondingȱeventȱcategory.ȱ<Edit>ȱisȱdisabledȱwhenȱtheȱeventȱhasȱnoȱconfigurationȱparameters.ȱNote:ȱTheȱparametersȱinȱtheȱEventȱAdvancedȱSettingsȱdialogȱchangesȱaccordingȱtoȱtheȱsettingsȱforȱtheȱselectedȱevent.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ77ȱFigure  104. Event Advanced Settings 27. TheȱEmailȱNotificationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱTheȱEmailȱNotificationȱnodeȱenablesȱyouȱtoȱselectȱtheȱemailȱaddressesȱthatȱshouldȱbeȱnotifiedȱwhenȱanȱeventȱoccursȱatȱaȱparticularȱlocation.ȱYouȱcanȱselectȱfromȱtheȱemailȱaddressesȱofȱsystemȱusersȱorȱaddȱaȱcustomȱemailȱaddress.ȱȱFigure  105. Email Notification Clickȱ<Add>toȱopenȱCustomȱEmailȱAddressȱforȱNotificationȱdialogȱwhereȱyouȱcanȱaddȱaȱnewȱemailȱaddress.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ78ȱȱFigure  106. Email Configuration Dialog Clickȱ<OK>ȱtoȱaddȱtheȱnewȱemailȱaddress.ȱSelectȱanȱemailȱaddressȱandȱclickȱ<Delete>ȱtoȱdeleteȱanȱexistingȱemailȱaddress.ȱYouȱcanȱdeleteȱmultipleȱemailȱaddressesȱusingȱclickȬandȬdragȱorȱusingȱtheȱ<Shift>ȱ+ȱ<DownȱArrow>ȱkeysȱandȱthenȱclickingȱ<Delete>.ȱ28. TheȱReportsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱTheȱsystemȱenablesȱyouȱtoȱuseȱreportsȱgeneratedȱbyȱtheȱsystemȱandȱcreateȱcustomȱreports.ȱYouȱcanȱscheduleȱemailȱdeliveryȱofȱaȱSharedȱreport.ȱYouȱcanȱselectȱoneȱtimeȱdeliveryȱorȱrecurringȱdelivery.ȱȱFigure  107. Reports Screen 7.1.9.3 AddingȱaȱReportȱTheȱsystemȱenablesȱyouȱtoȱdefineȱcustomizedȱreportsȱsoȱthatȱyouȱcanȱviewȱpreciseȱdetailsȱthatȱyouȱrequire.ȱUseȱtheȱfollowingȱstepsȱtoȱaddȱaȱreport:ȱa. SelectȱtheȱtabȱMyȱReports.ȱb. UnderȱListȱofȱReports,ȱclickȱ<AddȱReport>.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ79ȱFigure  108. Report Details Screen c. OnȱtheȱReportȱDetailsȱdialog,ȱunderȱReportȱName,ȱenterȱaȱunique,ȱuserȬfriendlyȱnameȱforȱtheȱreport.ȱd. UnderȱReportȱDescription,ȱenterȱbriefȱnotesȱtoȱhelpȱidentifyȱtheȱreport.ȱe. ClickȱUseȱdefaultȱlookȱandȱfeel,ȱtoȱretainȱtheȱdefaultȱtext,ȱtitle,ȱandȱcolorsȱforȱtheȱreports.ȱf. Alternatively,ȱclickȱCustomizeȱlookȱandȱfeel,ȱtoȱcustomizeȱtheȱappearanceȱofȱtheȱreport.ȱg. SelectȱtheȱReportȱHeaderȱtab.ȱxUnderȱReportȱHeader,ȱspecifyȱtheȱfollowingȱparametersȱtoȱbeȱcustomizedȱinȱtheȱgeneratedȱreport:ȱ¾TitleȱText:ȱSpecifyȱtheȱtextȱthatȱshouldȱappearȱinȱtheȱheaderȱonȱtheȱleftȱside.ȱ¾TextȱonȱRight:ȱSpecifyȱtheȱtextȱthatȱshouldȱappearȱinȱtheȱheaderȱonȱtheȱrightȱside.ȱ¾Clickȱ<Pick…>ȱandȱselectȱtheȱForegroundȱandȱBackgroundȱcolorsȱforȱtheȱReportȱHeader.ȱxUnderȱReportȱTitle,ȱspecifyȱtheȱfollowingȱparametersȱtoȱbeȱcustomizedȱinȱtheȱgeneratedȱreport:ȱ¾TitleȱText:ȱSpecifyȱaȱtitleȱthatȱappearsȱbelowȱtheȱheaderȱonȱtheȱleftȱside.ȱTheȱReportȱDescriptionȱfollowsȱthisȱtitle.ȱ¾Clickȱ<Pick…>ȱandȱselectȱtheȱForegroundȱandȱBackgroundȱcolorsȱforȱtheȱReportȱTitle.ȱxSelectȱtheȱcheckbox,ȱDisplayȱReportȱGenerationȱInformationȱtoȱviewȱtheȱfollowingȱinformationȱbelowȱtheȱReportȱTitleȱ¾Durationȱforȱwhichȱtheȱreportȱisȱgeneratedȱ¾Locationȱforȱwhichȱtheȱreportȱisȱgeneratedȱ¾Userȱwhoȱgeneratedȱtheȱreportȱ¾DateȱandȱtimeȱwhenȱtheȱreportȱisȱgeneratedȱxSelectȱtheȱcheckbox,ȱDisplayȱReportȱDescriptionȱTextȱtoȱviewȱaȱdetailedȱdescriptionȱofȱtheȱreport.ȱh. SelectȱtheȱReportȱSummaryȱtab.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ80ȱȱFigure  109. Report Details Screen showing Report Summary Tab xDeȬselectȱtheȱcheckbox,ȱDisplayȱReportȱSummaryȱifȱyouȱdoȱnotȱwishȱtoȱviewȱtheȱReportȱSummaryȱinȱaȱtabularȱform.ȱxAlternatively,ȱselectȱtheȱcheckbox,ȱDisplayȱReportȱSummaryȱtoȱcustomizeȱparametersȱinȱtheȱReportȱSummaryȱtableȱinȱtheȱgeneratedȱreport.ȱ¾SpecifyȱtheȱReportȱSummaryȱTextȱthatȱshouldȱappearȱasȱtheȱReportȱSummaryȱtableȱheading.ȱ¾Clickȱ<Pick…>ȱandȱselectȱtheȱForegroundȱandȱBackgroundȱcolorsȱforȱtheȱReportȱSummaryȱtableȱheading.ȱxUnderȱSummaryȱTable,ȱselectȱtheȱcheckbox,ȱIncludeȱSectionȱwithȱzeroȱresultsȱtoȱviewȱsectionsȱinȱwhichȱtheȱresultȱcountȱisȱzero.ȱxUnderȱSummaryȱTableȱHeader,ȱclickȱ<Pick…>,ȱselectȱtheȱForeground,ȱandȱBackgroundȱcolorsȱforȱtheȱReportȱSummaryȱtableȱrowȱheader.ȱxUnderȱSummaryȱTableȱColumnȱHeaderȱDefinition,ȱselectȱtheȱcheckbox,ȱDisplayȱReportȱSummaryȱTableȱtoȱcustomizeȱtheȱfollowingȱcolumnȱnamesȱinȱtheȱReportȱSummaryȱtableȱinȱtheȱgeneratedȱreport.ȱ¾SectionȱNameȱ¾SectionȱDescriptionȱ¾QueryȱTypeȱ¾ResultȱCountȱ¾JumpȱtoȱxUnderȱSummaryȱCharts,ȱselectȱaȱradioȱbuttonȱtoȱviewȱtheȱchartsȱinȱtheȱdesiredȱformat.ȱi. SelectȱtheȱReportȱSectionsȱtab.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ81ȱFigure  110. Report Details Screen showing Report Sections Tab xUnderȱSectionȱTitle,ȱspecifyȱtheȱfollowingȱparametersȱtoȱbeȱcustomizedȱinȱtheȱgeneratedȱreport:ȱ¾SectionȱNameȱTitle:ȱSpecifyȱtheȱtextȱthatȱshouldȱappearȱasȱaȱcommonȱheadingȱforȱallȱtheȱSectionȱNames.ȱ¾Clickȱ<Pick…>ȱandȱselectȱtheȱForegroundȱandȱBackgroundȱcolorsȱforȱtheȱSectionȱNameȱTitle.ȱxUnderȱSectionȱHeader,ȱspecifyȱtheȱfollowingȱparametersȱtoȱbeȱcustomizedȱinȱtheȱgeneratedȱreport:ȱ¾Clickȱ<Pick…>,ȱselectȱtheȱForeground,ȱandȱBackgroundȱcolorsȱforȱtheȱtableȱrowȱheadersȱinȱtheȱSectionȱSummaryȱandȱSectionȱResultsȱsections.ȱ¾SelectȱDisplayȱSectionȱDescriptionȱtextȱtoȱviewȱaȱbriefȱdescriptionȱforȱeachȱsectionȱofȱtheȱreport.ȱ¾SelectȱDisplayȱSectionȱQueryȱtoȱviewȱallȱtheȱconstraintsȱspecifiedȱinȱtheȱdatabaseȱqueryȱforȱthatȱsection.ȱ¾SelectȱDisplayȱSectionȱSummaryȱtoȱviewȱaȱgraphicalȱandȱtabularȱatȬaȬglanceȱviewȱofȱtheȱresultsȱofȱtheȱsection.ȱ¾SelectȱDisplayȱSectionȱResultsȱtoȱviewȱallȱtheȱentriesȱinȱtheȱdatabaseȱthatȱsatisfyȱtheȱconstraintsȱspecifiedȱbyȱtheȱsectionȱquery.ȱSelectȱDisplayȱdetailsȱofȱSectionȱResultsȱtoȱviewȱadditionalȱdetailsȱforȱeachȱentryȱinȱtheȱSectionȱResultsȱtable.ȱj. ToȱaddȱtheȱreportȱtoȱtheȱListȱofȱReports,ȱclickȱ<Save>.ȱTheȱnewȱreportȱappearsȱunderȱtheȱListȱofȱReportsȱtable.ȱ7.1.9.4 AddingȱaȱSectionȱtoȱaȱReportȱAȱreportȱconsistsȱofȱoneȱorȱmoreȱsections.ȱEachȱsectionȱisȱaȱqueryȱtoȱtheȱdatabase.ȱTheȱsystemȱthenȱsearchesȱitsȱdatabaseȱforȱthoseȱrecordsȱthatȱsatisfyȱtheȱconditionsȱthatȱyouȱimpose.ȱUseȱtheȱfollowingȱstepsȱtoȱaddȱaȱsectionȱtoȱaȱreport:ȱa. FromȱtheȱListȱofȱReportsȱtable,ȱselectȱtheȱreportȱtoȱwhichȱyouȱneedȱtoȱaddȱaȱsection.ȱb. Clickȱ<AddȱSectionȱtoȱReport>.ȱȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ82ȱȱFigure  111. Adding a Section to a Report c. OnȱtheȱAddȱSectionȱtoȱReportȱdialog,ȱenterȱaȱSectionȱNameȱandȱaȱSectionȱDescriptionȱforȱtheȱnewlyȱaddedȱsection.ȱd. SelectȱtheȱcheckboxȱDisplayȱthisȱsectionȱtoȱviewȱthisȱsectionȱinȱtheȱgeneratedȱreport.ȱe. UnderȱSectionȱQueryȱType,ȱselectȱDevice,ȱEvent,ȱorȱSAFEȱasȱtheȱqueryȱtype.ȱf. SelectȱanyȱcombinationȱofȱtheȱAP,ȱClient,ȱandȱSensorȱcheckboxesȱtoȱincludeȱtheseȱdeviceȱtypesȱinȱtheȱreport.ȱTheseȱcheckboxesȱareȱnotȱavailableȱforȱaȱSAFEȱquery.ȱg. DescribeȱtheȱSectionȱQueryȱconstructionȱlogicȱbyȱselectingȱtheȱfollowing:ȱxAȱcolumnȱfromȱSelectȱColumnȱxAȱconditionȱfromȱSelectȱConditionȱxAnȱobjectȱforȱtheȱquery,ȱwhichȱyouȱcanȱselectȱorȱenterȱh. Optionally,ȱselectȱoneȱorȱmoreȱBooleanȱconnectorsȱ(ORȱorȱAND)ȱtoȱjoinȱtwoȱorȱmoreȱqueries.ȱClickȱ<Delete>ȱtoȱdeleteȱaȱquery.ȱi. UnderȱSelectȱColumnsȱtoȱbeȱdisplayedȱinȱSectionȱResults,ȱdoȱtheȱfollowing.ȱxClickȱ<Add>ȱtoȱviewȱaȱlistȱofȱattributesȱandȱselectȱanȱattribute.ȱxSelectȱtheȱcheckboxȱDisplayȱtoȱviewȱtheȱselectedȱattributeȱinȱtheȱgeneratedȱreport.ȱxUnderȱSummary,ȱyouȱcanȱchooseȱtoȱdoȱtheȱfollowing:ȱ¾SelectȱtheȱtypeȱofȱchartȱfromȱtheȱdropȬdownȱlistȱtoȱviewȱaȱgraphȱforȱtheȱselectedȱattribute.ȱ¾SelectȱtheȱcheckboxȱTableȱtoȱviewȱaȱtabulatedȱcountȱforȱtheȱselectedȱattribute.ȱNote:ȱPieȱchartsȱareȱnotȱvisibleȱinȱanȱHTMLȱreport.ȱYouȱcanȱviewȱpieȱchartsȱonlyȱinȱaȱPDFȱreport.ȱxSelectȱanȱattributeȱandȱclickȱ<Delete>ȱtoȱdeleteȱthatȱattribute.ȱxSelectȱanȱattributeȱandȱclickȱ<Up>ȱorȱ<Down>ȱtoȱorganizeȱtheȱattributesȱthatȱappearȱasȱcolumnsȱinȱtheȱSectionȱResultsȱtableȱofȱtheȱgeneratedȱreport.ȱj. Toȱsaveȱtheȱsectionȱtoȱanȱexistingȱreport,ȱclickȱ<SaveȱSectionȱtoȱReport>.ȱToȱsaveȱtheȱsectionȱwithȱaȱnewȱname,ȱclickȱ<SaveȱtoȱReportȱasȱNewȱSection>.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ837.1.9.5 CreatingȱaȱReportȱScheduleȱUseȱtheȱfollowingȱstepsȱtoȱscheduleȱemailȱdeliveryȱofȱaȱreport:ȱa. FromȱtheȱListȱofȱReportsȱtable,ȱselectȱtheȱreportȱthatȱyouȱwantȱtoȱschedule.ȱb. Clickȱ<AddȱSchedule>.ȱTheȱGenerationȱandȱDeliveryȱOptionsȱforȱSelectedȱLocationȱdialogȱappears.ȱȱȱFigure  112. Scheduling a Report for One Time Delivery c. FromȱtheȱFormatȱdropȬdownȱlist,ȱselectȱtheȱoutputȱtypeȱforȱtheȱreport,ȱthatȱis,ȱHTML,ȱXML,ȱorȱPDF.ȱNote:ȱTheȱsystemȱdoesȱnotȱsupportȱPDFȱreportȱgenerationȱonȱolderȱversionsȱofȱIEȱ(versionsȱlowerȱthanȱ7.0).ȱd. SelectȱeitherȱOneȱTimeȱGenerationȱorȱRecurringȱGeneration.ȱxToȱscheduleȱaȱreportȱforȱOneȱTimeȱGeneration,ȱperformȱtheȱfollowing:ȱ¾UnderȱScheduleȱReport,ȱclickȱtheȱcalendarȱiconȱȱtoȱspecifyȱtheȱdateȱandȱtheȱtimeȱonȱwhichȱtoȱgenerateȱtheȱreport.ȱ¾UnderȱReportȱTimeȱPeriod,ȱcustomizeȱtheȱdurationȱforȱwhichȱtheȱreportȱshouldȱbeȱgeneratedȱbyȱdoingȱeitherȱofȱtheȱfollowing:ȱSelectȱLastȱandȱthenȱtheȱnumberȱofȱhours,ȱdays,ȱorȱmonthsȱbeforeȱtheȱreportȱdeliveryȱtime.ȱSelectȱCustomizeȱandȱthenȱtheȱexactȱdateȱandȱtimeȱinȱFromȱDateȱandȱToȱDateȱfields.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ84ȱȱFigure  113. Scheduling a Report for Recurring Generation xToȱscheduleȱaȱreportȱforȱRecurringȱGeneration,ȱperformȱtheȱfollowing:ȱ¾UnderȱScheduleȱReport,ȱfromȱtheȱGenerateȱReportȱEveryȱdropȬdownȱlist,ȱselectȱtheȱnumberȱofȱhours,ȱdays,ȱorȱmonthsȱoverȱwhichȱtoȱdeliverȱtheȱreport.ȱ¾ClickȱtheȱcalendarȱiconȱnextȱtoȱStartȱDateȱtoȱselectȱtheȱstartȱdateȱandȱtimeȱforȱtheȱreport.ȱ¾ClickȱtheȱcalendarȱiconȱnextȱtoȱEndȱDateȱtoȱselectȱtheȱendȱdateȱandȱtimeȱforȱtheȱreport.ȱTheȱEndȱDateȱmustȱbeȱgreaterȱthanȱtheȱStartȱDate.ȱTheȱsystemȱautomaticallyȱselectsȱtheȱEndȱDateȱandȱTimeȱfromȱtheȱStartȱDate.ȱ¾UnderȱReportȱTimeȱPeriod,ȱcustomizeȱtheȱdurationȱforȱwhichȱtheȱreportȱshouldȱbeȱgeneratedȱbyȱselectingȱLastȱandȱthenȱtheȱnumberȱofȱhours,ȱdays,ȱorȱmonthsȱbeforeȱtheȱreportȱdeliveryȱtime.ȱe. UnderȱDeliveryȱOptions,ȱperformȱtheȱfollowing:ȱxSelectȱArchiveȱReportȱandȱthenȱchooseȱtheȱfollowing:ȱ¾NeverȱDeleteȱtoȱretainȱtheȱreportȱforeverȱ¾Deleteȱafterȱ‘n’ȱdaysȱtoȱdeleteȱtheȱreportȱafterȱtheȱspecifiedȱnumberȱofȱdaysȱxSelectȱEmailȱReportȱtoȱemailȱaȱcopyȱofȱtheȱreportȱtoȱtheȱselectedȱuser(s).ȱ¾SelectȱZipȱbeforeȱemailȱtoȱcompressȱtheȱreportȱbeforeȱemailingȱit.ȱf. Clickȱ<AddȱRecipients>ȱtoȱopenȱReportȱDeliveryȱdialog.ȱHere,ȱyouȱcanȱdoȱtheȱfollowing:ȱxSelectȱoneȱorȱmoreȱemailȱaddressesȱunderȱSystemȱUsersȱandȱthenȱclickÆȱtoȱmoveȱtheȱchosenȱemailȱaddress(s)ȱtoȱRecipients.ȱTheȱsystemȱdeliversȱscheduledȱreportsȱtoȱtheȱusersȱunderȱRecipients.ȱxClickȱ<Add>ȱtoȱopenȱAdditionalȱEmailȱAddressesȱdialogȱwhereȱyouȱcanȱspecifyȱaȱcustomȱemailȱaddressȱforȱaȱnonȬsystemȱuserȱwhoȱwillȱreceiveȱaȱscheduledȱreport.ȱInȱthisȱdialog,ȱyouȱcanȱaddȱmultipleȱemailȱaddressesȱoneȱatȱaȱtime.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ85ȱFigure  114. Specifying Additional Email Addresses for Report Delivery g. Clickȱ<OK>ȱtoȱcloseȱtheȱAdditionalȱEmailȱAddressesȱdialog.ȱh. Clickȱ<OK>ȱtoȱcloseȱtheȱReportȱDeliveryȱdialog.ȱi. Toȱscheduleȱtheȱreport,ȱclickȱ<Save>.ȱ7.1.10 Stepȱ10:ȱCalibratingȱLocationȱTrackingȱ29. TheȱLocationsȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱCalibrateȱyourȱsystemȱforȱaccurateȱlocationȱtracking.ȱȱFigure  115. Locations Screen – Calibration
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ86ȱCalibrationȱhelpsȱinȱtuningȱRFȱparametersȱusedȱbyȱtheȱsystemȱtoȱcompareȱtheȱAPȱandȱSensorȱpredictionsȱtoȱactualȱobservations.ȱTheȱsystemȱhasȱaȱrobustȱcalibrationȱtechniqueȱthatȱalsoȱallowsȱmanualȱinterventionȱinȱcaseȱofȱdiscrepancy.ȱUseȱtheȱfollowingȱstepsȱtoȱcalibrateȱRFȱviews:ȱa. Placeȱdevicesȱonȱtheȱfloormap.ȱb. SelectȱtheȱViewerȱtab.ȱc. SelectȱoneȱofȱtheȱAPȱorȱSensorȱviews.ȱd. GenerateȱtheȱdesiredȱRFȱCoverageȱmapȱbyȱclickingȱ<Calibration>.ȱe. Toȱimproveȱpredictions,ȱfineȬtuneȱtheȱMin.ȱSignalȱDecayȱConstantȱandȱtheȱMax.ȱSignalȱDecayȱConstant.ȱNote:ȱMin.ȱSignalȱDecayȱConstantȱspecifiesȱtheȱamountȱofȱsignalȱlossȱthatȱisȱacceptableȱforȱregionsȱcloseȱtoȱtheȱtransmitterȱ(Sensor).ȱMax.ȱSignalȱDecayȱConstantȱspecifiesȱtheȱamountȱofȱsignalȱlossȱthatȱisȱacceptableȱforȱregionsȱawayȱfromȱtheȱtransmitter.ȱSignalȱlossȱisȱdirectlyȱproportionalȱtoȱtheȱsignalȱdecayȱconstants.ȱf. ChangeȱtheȱvaluesȱofȱtheȱSignalȱDecayȱSlopeȱ(Beta)ȱandȱtheȱSignalȱDecayȱInflectionȱ(Alpha).ȱTheȱsystemȱusesȱtheseȱparametersȱwhenȱcomputingȱtheȱRFȱandȱdefinesȱtheȱregionȱaroundȱtheȱtransmitterȱthatȱisȱunobstructed.ȱNote:ȱWhenȱyouȱchangeȱtheȱvaluesȱofȱMin.ȱSignalȱDecayȱConstant,ȱMax.ȱSignalȱDecayȱConstant,ȱSignalȱDecayȱSlopeȱ(Beta),ȱandȱSignalȱDecayȱInflectionȱ(Alpha)ȱtheȱRFȱviewȱandȱLocationȱTrackingȱforȱunobstructedȱregionsȱisȱaffected.ȱInȱtheȱobstructedȱregions,ȱonlyȱLocationȱTrackingȱisȱaffected,ȱRFȱviewȱisȱnotȱaffected.ȱg. Clickȱ<UpdateȱGraph>ȱtoȱviewȱyourȱselectionȱagainstȱtheȱpredictedȱvalues.ȱImportant:ȱTheȱPredictedȱvalueȱcurveȱshouldȱoverlapȱtheȱObservedȱvalueȱcurveȱasȱmuchȱasȱpossible.ȱh. Clickȱ<Calibrate>ȱtoȱcompleteȱcalibrationȱifȱyouȱhaveȱadjustedȱtheȱparametersȱmanuallyȱsuchȱthatȱtheȱtwoȱcurvesȱareȱparallelȱ(butȱnotȱcoinciding).ȱi. Clickȱ<Apply>ȱtoȱcommitȱyourȱchanges.ȱȱFigure  116. RF Calibration Dialog
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ877.1.11 Stepȱ11:ȱLockingȱtheȱSystemȱConfigurationȱ30. TheȱEventȱActivationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱIfȱtheȱsystemȱconfigurationȱisȱnotȱconfirmed,ȱyouȱneedȱtoȱgoȱbackȱtoȱtheȱpreviousȱstepsȱandȱcompleteȱanyȱadditionalȱconfiguration.ȱOtherwise,ȱinȱthisȱstep,ȱyouȱcanȱturnȱonȱevents.ȱTheȱsystemȱwillȱbecomeȱcompletelyȱoperationalȱafterȱactivatingȱintrusionȱprevention.ȱȱFigure  117. Event Activation 31. TheȱIntrusionȱPreventionȱActivationȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱIfȱtheȱsystemȱconfigurationȱisȱnotȱconfirmed,ȱyouȱneedȱtoȱgoȱbackȱtoȱtheȱpreviousȱstepsȱandȱcompleteȱanyȱadditionalȱconfiguration.ȱOtherwise,ȱinȱthisȱstep,ȱyouȱcanȱturnȱonȱintrusionȱprevention.ȱThisȱmakesȱtheȱsystemȱoperational.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ88ȱȱFigure  118. Intrusion Prevention Activation 32. TheȱDeviceȱListȱLockingȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱIfȱyouȱhadȱpreviouslyȱunlockedȱtheȱlistȱofȱAuthorizedȱAPsȱandȱClientsȱatȱaȱlocationȱbyȱdeȬcheckingȱtheȱtwoȱcheckboxesȱLockȱAPȱListȱforȱlocationȱ‘<selectedȱlocation’>ȱandȱLockȱClientȱListȱforȱlocationȱ‘<selectedȱlocation’>,ȱyouȱmayȱlockȱtheȱlistsȱforȱallȱlocationsȱwhereȱyouȱdoȱnotȱexpectȱmoreȱauthorizedȱAPsȱorȱClientsȱtoȱbeȱadded.ȱAirTightȱrecommendsȱthatȱyouȱlockȱtheȱAPȱlist.ȱIfȱyourȱClientsȱareȱauthorizedȱautomatically,ȱdoȱnotȱlockȱtheȱClientȱlists.ȱAnyȱnewȱdeviceȱaddedȱafterȱtheȱlistȱisȱlockedȱhasȱtoȱbeȱmanuallyȱmovedȱtoȱtheȱAuthorizedȱcategory.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ89ȱFigure  119. Device List Locking 7.1.12 Stepȱ12:ȱCompletionȱofȱSetupȱWizardȱ33. Thisȱmarksȱtheȱcompletionȱofȱtheȱsetupȱwizard.ȱTheȱDashboardȱscreenȱappearsȱasȱshownȱinȱtheȱfollowingȱfigure.ȱTheȱServerȱisȱconfiguredȱtoȱprotectȱyourȱnetworkȱagainstȱwirelessȱthreats.ȱ
SettingȱupȱtheȱServerȱConsoleȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ90ȱȱFigure  120. Dashboard Screen
ConfigȱShellȱCommandsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ91Chapterȱ8 ConfigȱShellȱCommandsȱ8.1 ServerȱConfigȱShellȱCommandsȱThisȱchapterȱdescribesȱtheȱcommandsȱinȱtheȱServerȱConfigȱShellȱusedȱtoȱreconfigureȱorȱmaintainȱtheȱServerȱafterȱrunningȱtheȱServerȱConfigurationȱWizard.ȱSomeȱcommandsȱdisplayȱtheȱstatusȱofȱtheȱServer.ȱDatabase Commands Command Description db backup  Backs up the database to the Remote Server specified by youdb clean  Resource clean-up without disruption of services db maintain  Resource clean-up after temporary shutting down of services db reset  Resets the database to factory defaults but maintains network settings db restore  Restores the database from a previous backup on a Remote Serverȱget Commands Command Description get allowed ip  Displays the list of IP addresses or subnets that are allowed to access this device get cert  Generates a self-signed certificate get certreq  Generates a Certificate Signing Request (CSR) get date  Displays the current time zone, date, and time on the Server get debug  Creates a debug information ‘tarball’ file; this file can be used for debugging purposes get ha  Displays High Availability (HA) Cluster configuration and service status get ha help  Displays detailed High Availability (HA) setup help get interface  Displays the Network and HA Interface speed and mode get locationinfo  Extracts information about location hierarchy, imported images, and signal strength for all devices seen by Sensor get log config  Displays the configuration of the logger get monitoring  Displays the number of days that the system should keep the data for all performance monitoring charts get network Displays the Network Interface (eth0) configuration including the IP Address, Subnet mask, Gateway, DNS Address, and DNS Prefix get opsec log  Displays the log messages generated by OPSEC API get route  Displays the routing table
ConfigȱShellȱCommandsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ92ȱget sensor list  Displays a list of Sensors and NDs get server config Displays the complete Server configuration which includes the Server ID, Server Version, Server Build, MAC address of the Network and HA Interface, Server Mode, Server Time Zone, Date and Time Settings, WLSE Integration Settings, Settings of Network Interfaces, and Server Processes get server check  Runs a Server consistency check and display the results. If any fatal item fails, a failure result is recorded get serverid  Displays the Server ID get ssh  Displays the status of the SSH Server get status  Displays the status of Server processes get support  Displays settings that control how, when, where, and what support information is to be sent get version  Displays the version and build information of all the Server components ȱ
ConfigȱShellȱCommandsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ93set Commands Command Description set allowed ip  Sets the list of IP addresses or subnets that are allowed to access this device set cert  Installs a signed SSL certificate issued for the request generated using 'get certreq' set date Sets the current time zone, date, and time information on the Server; the Server needs to be rebooted for the date/time information to take effect set dbserver  Starts/Stops the Database Server set erase  Configures the backspace key set ha  Enables or disables High Availability (HA) service set interface  Sets the Network and HA Interface speed and mode set log config  Sets the configuration of the logger set monitoring  Sets the number of days that the system should keep the data for all performance monitoring charts set network Sets the Network Interface (eth0) configuration including the IP Address, Subnet mask, Gateway, DNS Address, and DNS Prefixset route  Allows addition/deletion of routing table entries set server  Starts/Stops the Application Server set serverid  Sets the Server ID set ssh  Starts/Stops the SSH access to the Server set support  Sets up how, when, where, and what support information is to be sent set webserver  Starts/Stops the Web Server ȱ
ConfigȱShellȱCommandsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ94ȱOther Commands Command Description exit Exits the config shell session help Displays help for all the commands passwd Allows the admin to change the config shell password ping<Hostname/IP Address> Pings a host reboot  Reboots the Server reset factory  Resets the Server to the factory defaults/out of the box status reset password gui  Sets the Graphical User Interface (GUI) password for the user ‘admin’ to the factory default ‘admin’ shutdown  Shuts down the Server gracefully traceroute  Shows the route to a host upgrade Upgrades the Server using the specified upgrade bundle from an HTTP location ȱ
ConfigȱShellȱCommandsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ95ȱ8.2 SensorȱConfigȱShellȱCommandsȱget Commands Command Description get ap  Displays all the currently visible APs get interface  Displays Network Interface speed and mode get ip config  Displays the IP information get log  Displays the log information as it is created get log config  Displays the configuration of the logger get mode  Displays the mode in which the Sensor is currently configured get rf  Displays if RF monitoring for a Sensor is ‘ON’ or ‘OFF’ get serial num  Displays the Board Number get server discovery  Displays the Server discovery/setting information get status  Displays the current running status of all the components get version  Displays the version and build information of all the components get vlan config  Displays the VLAN information (set info and dynamic info) get vlan id  Displays the VLAN IDs seen by the ND get vlan status  Displays the VLAN status information get model  Displays the Sensor Model ȱset Commands Command Description set erase  Sets the erase character to ^H set interface  Sets Network Interface speed and mode set ip config  Runs through the current VLAN and IP config wizard set server discovery  Sets the Server discovery information set vlan config  Sets multiple VLAN monitoring to ‘ON’ or ‘OFF’ set mode  Sets the mode to Sensor, Sensor/ Network Detector Combo, Network Detector, or Sentry ȱ
ConfigȱShellȱCommandsȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ96ȱOther Commands Command Description exit Exists the Sensor config Shell session help Displays help for all commands help set  Displays help for ‘set’ commands help get  Displays help for ‘get’ commands help other  Displays help for ‘other’ commands passwd Changes the config Shell password pingPings a host. Usage: ping <IP_address/host_name> e.g. ping 192.168.1.246 reboot  Reboots the Sensor restart  Restarts the Sensor application reset factory  Resets the Sensor to ‘out of the box’ status upgrade Upgrades the Sensor manually from a given IP address ȱȱ
TroubleshootingȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ97Chapterȱ9 Troubleshootingȱ9.1 ServerȱTroubleshootingȱȱProblem  Solution After changing the IP address of the Server, the computer used to configure the Server gets disconnected. The subnet mask of the computer used to configure the Server may not be the same as that of the Server. Change the subnet mask of the computer so that it is in the same subnet as the Server. On typing ‘https:// wifi-security-server’ in the IE 5.5 browser, the ‘Login’ screen does not appear even after adding a DNS entry ‘wifi-security-server’ for the Server. The Default gateway and Preferred DNS Server settings of the computer used to access the Server Console may be incorrect. Ensure that the Default gateway and Preferred DNS Server settings of the computer used to access the Server Console match the Server settings. On rebooting the Server, the get network command does not show an IP address. The IP address that you have assigned to the Server conflicts with some other IP address on the network. Change the IP address of the Server using the set network command. No Sensors connect to the Server after setting the Server ID. The Server ID used by the Server may be used by another Server on the network. Verify that no other Server with the Server ID set for the Server is running on the network. Change the Server ID using the set serverid command. No connection to the ServerCheck if the Server is powered on. If the Server is not powered on, switch it on. Else, check the IP Address or the DNS Name on the Server Config Shell. Important: Please ensure that you have used the correct IP Address or the DNS name to connect to the Server. If the IP Address or the DNS name is correct, try pinging other computers on the network from the Server Config Shell interface. If the problem still exits, reset the Server and attempt to reconnect to the Server. The Console reports “Java Runtime Environment Detection” not installed message. Follow the instructions provided on the Console to install the Java Runtime Environment. Unable to log into the Console.If you are logging in for the first time, refer to the Initializing section for the default Login Name and Password. Try recovering the password using the Recover option in the Forgot Password? section of the Login Screen. The Console has frozen (Clicks do not work). Close the browser and try connecting to the Server in another window. If you cannot connect to the Server, follow the steps listed in Problem 1 of this table.
TroubleshootingȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ98ȱNo events are being reported or the device status is stale (not updated).Check the status of the Server on the Administration screen. If the Current Status field shows   or  , click the Start Server button in the Server Status section. No Sensor is connected to the Server. Check the status of the Server on the Administration screen. If the Current Status field shows   or  , click the Start Sever button in the Server Status section. If the Current Status field shows  , refer to the Sensors Troubleshooting section for the solution. Server response time is high. Restart the Console. If the problem persists, run the db clean command from the Server Config Shell. ȱ
TroubleshootingȱSpectraGuard®ȱEnterpriseȱInstallationȱGuideȱ99ȱ9.2 SensorȱTroubleshootingȱȱȱSymptoms  Diagnosis  Solution LED1: Solid OrangeLED2: Fast Blink The Sensor did not receive a valid IP address via the DHCP. The DHCP Server is unreachable. Restore the connectivity to the DHCP Server or set a static IP address via the HTTP interface or the Config Shell CLI.LED1: Solid OrangeLED2: Slow Blink Unable to connect to the Server. Ensure that the Server is running and is reachable from the network to which the Sensor is attached. If there is a firewall or a router with ACLs enabled between the Sensor and the Server, ensure that the traffic is allowed on UDP port 3851. If utilizing the Server ID based discovery, ensure that multicast is enabled on the network. Alternatively, if utilizing the Server IP based discovery, ensure that the DNS name ‘wifi-security-server’ has been correctly entered on the DNS Server. Also ensure that the DNS Server IP addresses are either correctly configured on the Sensor, or are provided by the DHCP Server. LED1: Solid OrangeLED2: Solid GreenThe Ethernet cable is loose. It is probably disconnected from the network. Ensure that the Ethernet cable is connected. LED1: Solid OrangeLED3: Solid GreenAn error on the 802.11 interface has occurred. Contact support@airtightnetworks.com for more details. LED1: Solid OrangeLED4: Solid GreenA fatal Software error has occurred. Contact support@airtightnetworks.com for more details.

Navigation menu