Stonesoft stonegate 5.2, Руководство по установке

Страница: 48 / 109

48
Chapter 6 Saving the Initial Configuration
 To prepare for fully automatic configuration
1. ( Optional ) Enable SSH Daemon to allow remote access to the engine command line.
2. Select the Local Time Zone and Keyboard Layout for the engine.
3. (Sensors only) Click Select and select the appropriate policy if you already have a policy you
want to use. The selected policy is automatically installed after the Sensor has contacted
the Management Server. See Installing the Initial Policy (page 55) for descriptions of the
available pre-defined policies.
4. Click Save As and save the configuration on the root of a USB memory stick, so that the
engine can boot from it.
5. Click Close .
Once the sensor or analyzer is fully configured, the SSH daemon can be set on and off using the
Management Client. Enabling SSH in the initial configuration gives you remote command line
access in case the configuration is imported correctly, but the engine fails to establish contact
with the Management Server.
The time zone selection is used only for converting the UTC time that the engines use internally
for display on the command line. All internal operations use UTC time, which is synchronized
with the Management Server time once the engine is configured.
If you lose the one-time password or the saved configuration, you can repeat the procedure for
the sensor or analyzer engines.
Caution – Handle the configuration files securely. They include the one-time password that
allows establishing trust with your Management Server.
1
4
3