Chat now with support

Live-Hilfe anfordern
Registrierung abschließen

Anmelden

Preisinformationen anfragen

Vertrieb kontaktieren

Change Auditor Threat Detection 7.5 - Deployment Guide

Inhaltsnavigation

Deploying Threat Detection

Introduction to Change Auditor Threat Detection

Who should have input on the deployment plan? Components and workflow

Requirements and prerequisites Events to configure Port Requirements Maintaining the Change Auditor database size Deploying a Threat Detection server on ESX Deploying a Threat Detection server on Hyper-V

Hyper-V resource control settings

Upgrading the Threat Detection server

Upgrade from Change Auditor version 7.0.2

Update-CAThreatDetectionServer

Upgrade from Change Auditor version 7.0 and 7.0.1

Upload the update package to the Threat Detection server Upgrade the Threat Detection server Join the Threat Detection server to the coordinator's domain Configure the service account

Creating a Threat Detection configuration Reviewing configuration status

Configured server deployment details

Removing a configuration Historical events and your baseline calculations

Threat Detection configuration commands

Adding the PowerShell module Viewing available commands and help Threat Detection sample scripts Connecting to Change Auditor

Connect-CAClient

Managing a Threat Detection configuration

New-CAThreatDetectionConfiguration Get-CAThreatDetectionConfiguration Set-CAThreatDetectionConfiguration Remove-CAThreatDetectionConfiguration

Appendix: System Architecture

Threat Detection system overview Our brand, our vision. Together. Contacting Quest Technical support resources

Upgrade from Change Auditor version 7.0.2

Upgrade from Change Auditor version 7.0.2

You can upgrade your existing Threat Detection server with the Update-CAThreatDetectionServer command.

To upgrade the Threat Detection server:

1

Download the update package (UpdateTDServer-7.0.3.11486.zip) from https://support.quest.com/change-auditor/7.0.3/download-new-releases.

2

Run the Update-CAThreatDetectionServer command.


	NOTE: To run the command, you must have the Change Auditor PowerShell module installed and imported. By default, it is installed with the Change Auditor client and coordinator. You must also be a member of the Change Auditor Administrator group.

This command performs a series of steps to complete the upgrade of the Threat Detection Server:

•

The update package is uploaded to to the coordinator that you connected to through the Connect- CAClient command. A message displays when the upload is complete.

•

The coordinator then uploads the update package to the Threat Detection server.

•

The upgrade process will then begin on the Threat Detection server. The upgrade will take about 15 minutes to complete.

3

You can monitor the upgrade progress through the Change Auditor client under Administration Tasks | Configuration | Threat Detection or by running the Get-CAThreatDetectionConfiguration command.

Once complete, the configuration state will be “Configured”, the upgrade status will be “Upgrade succeeded”, and the Threat Detection server version will be updated to the current version.


	NOTE: Change Auditor provides a sample script (UpdateThreatDetectionServer.ps1) that can be used to perform the upgrade. By default the script is located here: C:\Program Files\Quest\ChangeAuditor\Client\PowerShell Sample Scripts.

Update-CAThreatDetectionServer

Run this command to upgrade the Threat Detection sever.

Table 4. Available parameters


Parameter	Description
-Connection	A connection obtained by using the Connect-CAClient command.
-FullPackagePath	The path for the update package.

Example: Upgrade the Threat Detection server

Update-CAThreatDetectionServer -Connection $connection -FullPackagePath C:\Users\UserA\Downloads\UpdateTDServer-7.0.3.11486.zip.

Upgrade from Change Auditor version 7.0 and 7.0.1

You can upgrade your existing Threat Detection server by running an update script and a series of configuration commands on the Threat Detection server. This will ensure that your existing configuration and Threat Detection information is maintained.

To upgrade the Threat Detection server:

•

Download the update package (UpdateTDServer-7.0.3.11486.zip) from https://support.quest.com/change-auditor/7.0.3/download-new-releases.

•

Log on to the Threat Detection server and upload the update package to the server. For details see, Upload the update package to the Threat Detection server.

•

Upgrade the Threat Detection server by running the update script. For details see, Upgrade the Threat Detection server and Update-CAThreatDetectionServer.

•

Join the Threat Detection server to the coordinator’s domain to enable single sign-on capability to the Threat Detection dashboard. For details see, Join the Threat Detection server to the coordinator’s domain.

•

Configure a service account that is used by the Treat Detection server for communicating with Active Directory to verify single-sign on user access to the dashboard. For details see, Configure the service account.

Upload the update package to the Threat Detection server

To upload the update package to the Threat Detection server

1

Log on to the Threat Detection server through your preferred SFTP client with the username ‘presidio’ and the integration password specified during the Threat Detection server configuration.


	NOTE: Ensure your SFTP client transfer setting is set to Binary before uploading the zip package.

2

Upload the UpdateTDServer-7.0.3.11486.zip file to the ‘/home/presidio’ directory.

Verwandte Dokumente

Change Auditor Threat Detection - 7.5
Deployment Guide
User Guide

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen

© ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center