RSA NetWitness Endpoint Installation

Document created by Connor Mccarthy Employee on Oct 24, 2017Last modified by Connor Mccarthy Employee on May 9, 2018
Version 7Show Document
  • View in full screen mode

OnDemandLabDetailsRegister

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

 

Summary

This on-demand lab reviews and provides practice with the tasks associated with planning and executing an RSA NetWitness Endpoint installation.

 

Overview

This self-paced on-demand lab walks you through the prerequisites and tasks associated with planning and executing an RSA NetWitness Endpoint installation. Topics include deployment architecture options, best practices for avoiding common installation pitfalls, functional tests to ensure the installation was successful, and video demonstrations to reinforce the material. 

 

Lab exercises provide students with the ability to practice what they have. To maximize the value of your learning experience, this course also includes access to RSA University’s virtual environment. 

 

Audience

Anyone responsible for deploying RSA NetWitness Endpoint

 

Duration

1.5 hour course and 2.5 hour lab

 

Note: RSA University’s lab environment is provided for 10 hours of overall practice time over a 14-day period

 

Accessing the Lab Environment

Lab exercises are performed in the RSA University virtual lab environment.  The downloadable Lab Guide provides detailed instructions on access the environment.

For more information please view the document Access RSA University Virtual Labs – available on the RSA University site: RSA University Content.

 

Prerequisite Knowledge/Skills

Students should be familiar with basic computer architecture, networking fundamentals and general information security concepts.

 

Course Objectives

Upon completion of this course, participants should be able to:

  • Define an RSA NetWitness Endpoint architecture suitable for the client’s goals
  • Deploy SQL Server to support RSA NetWitness Endpoint
  • Obtain the Computer ID (CID) of an RSA NetWitness Endpoint server
  • Select an RSA NetWitness Endpoint deployment architecture suitable to the organization’s needs
  • Deploy RSA NetWitness Endpoint server and UI with the installation wizard
  • Install and configure optional modules such as hash databases and the Yara analytics engine
  • Create an agent installation file using RSA NetWitness Endpoint Packager
  • Deploy an RSA NetWitness Endpoint agent
  • Deploy SQL Server to support RSA NetWitness Endpoint
  • Deploy RSA NetWitness Endpoint server and UI with the installation wizard
  • Create an agent installation file using RSA NetWitness Endpoint Packager
  • Deploy an RSA NetWitness Endpoint agent
  • Confirm the functionality of your deployment

 

Course Outline

 

  • Module 6 - ECAT Options
  •  Module 5 - ECAT Install Wizard
    • The RSA NetWitness Endpoint Installer
    • Commission Secondary Server in UI
    • If Installation Fails
  •  Module 4 - SQL Install
    • SQL Installation
    • SQL Configuration
  • Module 3 - Architecture
    • What is ConsoleServer?
    • Simple and Complex Architectures
  • Module 2 - Pre-Deployment
    • What The RSA NetWitness Endpoint Installation Process
    • Pre-Deployment
    • RSA NetWitness Endpoint License Components
    • Pre-Deployment Architecture Discussion
    • Deployment Goals
  • Module 1 - Introduction
    • How RSA NetWitness Endpoint Works
    • Endpoint Agents
    • The RSA NetWitness Endpoint Database
    • The RSA NetWitness Endpoint Server
    • Typical Specification
    • The User Interface
    • Yara installation
    • Attachment of NSRL and similar Databases
  •  Module 7 - Roaming Agent Relay
    • RAR installation and configuration
    • Configure ConsoleServer to use RAR
  •  Module 8 - Agent Deployment
    • Generate Agent Install File
    • The Packager
  • Module 9 - Complete & Verify
    • Install ECAT UI
    • Firewall Port Requirements
    • Running ConsoleServer
    • Verify End-to-End Functionality

 Exercise 1: Install SQL Server

 Exercise 2: Install ECAT Server and UI

 Exercise 3: Install Options

 Exercise 4: Install ECAT Agent

 E

xercise 5: Verify Functionality

 

 

 

OnDemandLabDetailsRegister

 

 

In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us

Attachments

    Outcomes