724-746-5500 | blackbox.com
Page 11
Chapter 1: Setting Up the Veri-NAC Applicance
CAUTION: To be sure that Veri-NAC produces accurate results, you must be sure you have downloaded the latest Common
Vulnerabilities and Exposure (CVE) vulnerability signatures; later, when Veri-NAC updates itself regularly, it will down-
load new signatures daily, but if you do not add all known vulnerabilities when it starts, it will not realize that it
doesn’t have them. To be sure you have the latest CVEs initially, you must carry out the next step—Downloading CVE
Tests.
Step Six: Downloading CVE Tests (all models except LVN5200A)
If you have the LVN5250A/LVN5400A/LVN5600A/LVN5800A unit, you should be able to run the built-in Common Vulnerabilities
and Exposures (CVEs) auditing engine. Before you do anything else with the Veri-NAC, you must download the latest CVE Tests
into the Veri-NAC database:
CAUTION: If you skip this step, the Veri-NAC will not do its job effectively.
1. Go to the left frame menu bar and select Updates
g
Vulnerability Signatures.
2. Click the Update Now button.
3. As long as the appliance is on a network connected to the Internet, you just need to click Download Updates and, after they
download, click Install Now.
4. If your appliance is NOT on a network connected to the Internet, you must update from a machine that is. Go to that machine
and log in to the Veri-NAC, then click Download Updates. Then browse to the file using the Browse button and click Upload
Now to install the update on the Veri-NAC.
5. After you have updated the vulnerability signatures, you may now return to the Vulnerability Signature Updates page and select
Daily so that the updates automatically occur daily. Be sure to click Save to save the setting.
Step Seven: Discovering All Your Network Assets
Before you can turn on alerts and the blocking engine, create a list of all your trusted network assets. To do this:
1. Go to the left frame menu bar and select Network Access Control
g
Asset Discovery.
2. If you use NetBIOS on any of your equipment, click the Use NetBIOS Scans for host names.
3. Click the Refresh IPs button and wait approximately 5-15 minutes while the appliance discovers all the trusted network assets
on the current subnet.
Your Veri-NAC is now up and running. Start reading through the User Guide. In particular, learn about the Network Access
Control
g
Dynamic Detection System as well as the Inventory Alerts. Remember, one of the most powerful features of your Veri-
NAC appliance is your PeerBlock engine, so you’ll also need to look at the Manage IPs list to determine how to add and remove
assets to and from your trust list.
