STRM Series II Hardware Installation Guide
4
P
REPARING
YOUR
S
YSTEM
FOR
STRM S
OFTWARE
I
NSTALATION
This chapter explains how to prepare your system and network before you install the
STRM software. It contains the following sections:
•
STRM Components
•
Browser Support
•
Preparing Your Network Hierarchy
•
Identifying Network Settings
•
Identifying Security Monitoring Devices and Flow Data Sources
•
Identifying Network Assets
STRM deployment may consist of STRM installed on one or multiple systems. You
can install any or all components on a single server for small enterprises or
distributed across multiple servers for maximum performance and scalability in
large enterprise environments.
To ensure a successful STRM deployment, adhere to the recommendations in this
document.
STRM Components
STRM components that may exist in your deployment include:
•
Flow Processor -
The Flow Processor creates superflows (aggregate flows)
before the flows reach the Classification Engine.
•
Classification Engine -
Analyzes flows to classify and identify all traffic in the
enterprise network into multiple objects.
•
Console -
Provides the interface for STRM. The Console provides real time
views, reports, alerts, and in-depth flow views of network traffic and security
threats. This Console is also used to manage distributed STRM deployments.
The Console is accessed from a standard Web browser. When you access the
system, it prompts you to enter the user name and password, which must be
configured during the installation process.
•
Update Daemon
- Stores the database and TopN data. Typically, the Update
Daemon is installed on the Console.
•
Flow Writer
- Stores the flow and asset profile data.
•
Event Collector -
Gathers events from local and remote device sources. The
Event Collector normalizes events and sends the information to the Event
