ExtraHop Trace Admin UI, Руководство пользователя

Страница: 11 / 58

ExtraHop 8.8 ExtraHop Trace Admin UI Guide 11
3. Click Terms and Conditions to read the content.
4. Read the terms and conditions, and then select the checkbox.
5. Click
Connect to ExtraHop Cloud Services .
After you are connected, the page updates to show status and connection information for each service.
6. (Optional) In the Machine Learning Service section, select the checkbox for Contribute to the Machine
Learning Service for collective threat analysis and then select one of the following options:
• External IP addresses
• External IP addresses, domains, and hostnames
If the connection fails, there might be an issue with your firewall rules.
Configure your firewall rules
If your ExtraHop system is deployed in an environment with a firewall, you must open access to ExtraHop
Cloud Services. For Reveal(x) 360 systems that are connected to self-managed sensors, you must also open
access to the ExtraHop Cloud Recordstore.
Open access to Cloud Services
For access to ExtraHop Cloud Services, your sensors must be able to resolve DNS queries for
*.extrahop.com and access TCP 443 (HTTPS) from the IP address that corresponds to your sensor license:
•
35.161.154.247 (Portland, U.S.A.)
• 54.66.242.25 (Sydney, Australia)
• 52.59.110.168 (Frankfurt, Germany)
Open access to Cloud Recordstore
For access to the ExtraHop Cloud Recordstore, your sensors must be able to access outbound TCP 443
(HTTPS) to these fully-qualified domain names:
•
bigquery.googleapis.com
•
oauth2.googleapis.com
•
www.googleapis.com
•
www.mtls.googleapis.com
•
iamcredentials.googleapis.com
You can also review the public guidance from Google about computing possible IP address ranges for
googleapis.com.
In addition to configuring access to these domains, you must also configure the
global proxy server settings .
Connect to ExtraHop Cloud Services through a proxy
If you do not have a direct internet connection, you can try connecting to ExtraHop Cloud Services through
an explicit proxy. If your proxy acts as a "man-in-the-middle", ensure that CONNECT requests are allowed
over port 22.
1. Log in to the Administration settings on the ExtraHop system through
https://<extrahop-
hostname-or-IP-address>/admin
.
2. In the Network Settings section, click Connectivity .
3. Click Enable ExtraHop Cloud Proxy .
4. Type the hostname for your proxy server, such as
proxyhost
.
5. Type the port for your proxy server, such as
8080
.
6. (Optional) If required, type a user name and password for your proxy server.
7. Click
Save .