Cisco AMP Threat Grid Appliance Setup and Configuration Guide
PLANNING
5
4.
Once you take the snapshot you can either download it yourself as .tar .gz, or you can press
Submit
,
which will automatically upload the snapshot to the Threat Grid snapshot server.
PLANNING
A Cisco AMP Threat Grid Appliance is a Linux server with Threat Grid software installed by Cisco
Manufacturing prior to shipping. Once a new appliance is received, it must be set up and configured for
your on-premises network environment. Before you begin, there are a number of issues to consider and
plan. Environmental requirements, hardware requirements, and network requirements are described below.
User Documentation and Online Help
Threat Grid Appliance -
Threat Grid Appliance user documentation, including this document, the
Threat
Grid Appliance Administrator’s Guide
, Release Notes, integration guides, and more, can be found on the
Install and Upgrade page
on Cisco.com.
Threat Grid Portal UI Online Help
- Threat Grid Portal user documentation, including Release Notes,
“Using Threat Grid” Online Help, API documentation, and other information is available from the
Help
menu
located in the navigation bar at the top of the user interface.
Environmental Requirements
The Threat Grid Appliance is deployed on a UCS C220-M3 or C220-M4 server. Before you set up and
configure your appliance, make sure the necessary environment requirements for power, rack space,
cooling, and other issues are met, according to the specification for your server.
Hardware Requirements
The form factor for the Admin interface is SFP+. If there are no SFP+ ports available on the switch, or SFP+
is not desirable, then a transceiver for 1000Base-T can be used (for example, Cisco Compatible Gigabit RJ
45 Copper SFP Transceiver Module Mini -GBIC - 10/100/1000 Base-T Copper SFP Module.
Figure 2 -
Cisco 1000BASE-T Copper SFP (GLC-T)
Monitor:
You can either attach a monitor to the server, or, if CIMC (Cisco Integrated Management
Controller) is configured, you can use a remote KVM.