Viavi Apex Enterprise G3-APEX-ENT-32T, User Manual

Page: 194 / 380

Hardening your GigaStor
194 GigaStor (23 Feb 2018) — Archive/Non-authoritative version
at the start of the conversation. If this combination is found, reports show this
conversation by protocol name (or custom name), IANA name, or port number
(based on statistics lists setting). Otherwise the conversation is not listed. If
you try to analyze data prior to the time that this option was enabled, you will
not see this data. Data must be collected with this option enabled for GigaStor
reports to present the data correctly using the Update Reports button. By
clearing this option, you ensure you get all protocol information regardless of
SYN-SYNACK-ACK packets.
Limit to ports defined in “Protocol Definitions” —limits the displayed data
to the ports specifically defined in the Options > Protocol Definitions dialog.
Again, this is written to the internal GigaStor index. This option only shows
custom protocols defined on new data collected after a protocol port has been
defined. You must also choose Apply Protocol to all Instances to ensure this
data is shown on all instances used for analysis. By clearing this setting, all ports
are used.
If you want to track statistical information for each port on your capture card,
then you should ensure Track statistics information per physical port option is
selected.
For even more information about what these settings affect, see
Differences
between statistics and packets (page 215) and Understanding GigaStor
indexing (page 216) .
Hardening your GigaStor
Based on your organization’s requirements, in addition to the default security
settings, you may need to change various options on the GigaStor, especially for
the operating system. This is sometimes called “hardening” the system.
We recommend that you stay current with the Windows Updates and patch your
system accordingly. Using common sense, as well as not disabling the default
Windows security options, should keep your GigaStor safe from most issues.
To successfully use your GigaStor in a production environment, we recommend
the following items. Any processes beyond these will be at your organization’s
discretion.
♦
Ports 25901, 443, and 80 must be open to allow Observer Platform
communication. See Ports used by Observer Platform v17 and later (page
211) .
♦
Areca Services (RAID controller). The RAID controller is responsible
for writing packet capture data to disk. See GS-2P40-576T
(page 253)GS-2P40-288T (page 253)GS-8P-576T (page
253)GS-8P-288T (page 253)GS-8P-192T (page 253)GS-8P-96T (page
253)GS-4P-32T (page 253)GS-4P-16T (page 253)GSP-8P-9T (page
253)GSP-8P-6TSSD (page 253) .
♦
Observer/Apache Web Services. The Apache Web Service is used to serve
reports for Observer Apex or Apex Lite.
♦
Lights out Management (LOM). This may be turned off, if desired. See
Configuring the Lights Out Management port (page 176) .
♦
Remote Desktop (RDP). This may be turned off, if desired.