Stonesoft stonegate 5.2, Руководство по установке

Страница: 69 / 109

69
Configuring the Engine
Filling in the Management Server Information
In the second part of the configuration, you define the information needed for establishing a
trust relationship between the engine and the Management Server.
If you do not have a one-time password for this engine, see the
Saving the Initial Configuration
(page 45).
 To fill in the Management Server information
1. Select Contact or Contact at Reboot and press the spacebar.
2. Enter the Management Server IP address and the one-time password.
3. ( Optional ) Fill in the Key fingerprint (also shown when you saved the initial configuration).
This increases the security of the communications.
Selecting the Engine Type
In the third part of the configuration, you select whether you want this engine to work as a
Sensor, an Analyzer, or a combined Sensor-Analyzer. The selection you make must correspond to
the element you created for this engine in the Management Client.
 To select the engine type
1. Select the type of engine using the arrow keys and the spacebar.
2. Highlight Finish and press E
NTER
.
The engine now tries to make initial Management Server contact.
• If you see a “connection refused” error message, ensure that the one-time password is
correct and the Management Server IP address is reachable from the node. Save a new initial
configuration if you are unsure about the password.
• If there is a firewall between the engine and the Management Server or Log Server, make
sure that the firewall’s policy allows the initial contact and the subsequent communications.
See Default Communication Ports (page 95) for a list of the ports and protocols used.
If the initial management contact fails for some reason, the configuration can be started again
with the
sg-reconfigure
command.
Note – The one-time password is engine-specific and can be used only for one initial
connection to the Management Server. Once initial contact has been made, the engine
receives a certificate from the Management Server for identification. If the certificate is
deleted or expires, you must repeat the initial contact using a new one-time password.
1