RSA NetWitness Endpoint Installation

Document created by Craig Hansen Employee on Mar 21, 2016Last modified by Elizabeth Maloney on May 1, 2017
Version 14Show Document
  • View in full screen mode

OnDemandLabDetails

Register

 

 

 

In order to register for a class, you need to first create an EMC account
If you need further assistance, contact us

 

 

Summary

This on-demand lab reviews and provides practice with the tasks associated with planning and executing an RSA NetWitness Endpoint installation.

 

Overview

This self-paced on-demand lab walks you through the prerequisites and tasks associated with planning and executing an RSA NetWitness Endpoint installation. Topics include deployment architecture options, best practices for avoiding common installation pitfalls, functional tests to ensure the installation was successful, and video demonstrations to reinforce the material.
Lab exercises provide students with the ability to practice what they have. To maximize the value of your learning experience, this course also includes access to RSA University’s virtual environment.

 

Audience

Anyone responsible for deploying RSA NetWitness Endpoint

 

Delivery Type
On-Demand Lab


Duration
1.5 hour course and 2.5 hour lab
Note: RSA University’s lab environment is provided for 10 hours of overall practice time over a 14-day period.


Accessing the Lab Environment
Lab exercises are performed in the RSA University virtual lab environment. The downloadable Lab Guide provides detailed instructions on access the environment. For more information please view the document Access RSA University Virtual Labs – available on the RSA University site: RSA University Content.


Prerequisite Knowledge/Skills
Students should be familiar with basic computer architecture, networking fundamentals and general information security concepts.

 

Learning Objectives

Upon completion of this course, participants should be able to:

  • Define an RSA NetWitness Endpoint architecture suitable for the client’s goals
  • Deploy SQL Server to support RSA NetWitness Endpoint
  • Obtain the Computer ID (CID) of an RSA NetWitness Endpoint server
  • Select an RSA NetWitness Endpoint deployment architecture suitable to the organization’s needs
  • Deploy RSA NetWitness Endpoint server and UI with the installation wizard
  • Install and configure optional modules such as hash databases and the Yara analytics engine
  • Create an agent installation file using RSA NetWitness Endpoint Packager
  • Deploy an RSA NetWitness Endpoint agent
  • Deploy SQL Server to support RSA NetWitness Endpoint
  • Deploy RSA NetWitness Endpoint server and UI with the installation wizard
  • Create an agent installation file using RSA NetWitness Endpoint Packager
  • Deploy an RSA NetWitness Endpoint agent
  • Confirm the functionality of your deploymentLearning Objectives

Course Outline
Module 1 - Introduction
 How RSA NetWitness Endpoint Works
 Endpoint Agents
 The RSA NetWitness Endpoint Database
 The RSA NetWitness Endpoint Server
 Typical Specification
 The User Interface
Module 2 - Pre-Deployment
 What The RSA NetWitness Endpoint Installation Process
 Pre-Deployment
 RSA NetWitness Endpoint License Components
 Pre-Deployment Architecture Discussion
 Deployment Goals
Module 3 - Architecture
 What is ConsoleServer?
 Simple and Complex Architectures
Module 4 - SQL Install
 SQL Installation
 SQL Configuration
Module 5 - ECAT Install Wizard
 The RSA NetWitness Endpoint Installer
 Commission Secondary Server in UI
 If Installation Fails
Module 6 - ECAT Options
 Yara installation
 Attachment of NSRL and similar Databases
Module 7 - Roaming Agent Relay
 RAR installation and configuration
 Configure ConsoleServer to use RAR
Module 8 - Agent Deployment
 Generate Agent Install File
 The Packager

 

Exercise 1: Install SQL Server
Exercise 2: Install ECAT Server and UI
Exercise 3: Install Options
Exercise 4: Install ECAT Agent
Exercise 5: Verify Functionality

 

 

 

OnDemandLabDetails

Register

 

 

 

In order to register for a class, you need to first create an EMC account
If you need further assistance, contact us

Attachments

    Outcomes