McAfee M3050 Installation Guide - Page 17

Preparing for the Manager installation, Pre-requisites, General settings

Page 17 highlights

CHAPTER 3 Preparing for the Manager installation This section describes the McAfee® Network Security Manager (Manager) hardware and software requirements and pre-installation tasks you should perform prior to installing the software. Unless explicitly stated, the information in this chapter applies to both the McAfee® Network Security Central Manager and Manager though the sections refer to Manager. Pre-requisites The following sections list the Manager installation and functionality requirements for your operating system, database, and browser. Caution: We strongly recommend that you also check the corresponding Release Notes. If you are installing the Manager as part of an upgrade to the latest version of Network Security Platform, refer to Network Security Platform 6.0 Upgrade Guide. General settings  McAfee recommends you use a dedicated server, hardened for security, and placed on its own subnet. This server should not be used for programs like instant messaging or other non-secure Internet functions.  You must have Administrator/root privileges on your Windows server to properly install the Manager software, as well as the installation of an embedded MySQL database for Windows Managers during Manager installation.  It is essential that you synchronize the time on the Manager server with the current time. To keep time from drifting, use a timeserver. If the time is changed on the Manager server, the Manager will lose connectivity with all McAfee® Network Security Sensors (Sensors) and the McAfee® Network Security Update Server [formerly IPS Update Server] because SSL is time sensitive.  If Manager Disaster Recovery (MDR) is configured, ensure that the time difference between the Primary and Secondary Managers is less than 60 seconds. (If the spread between the two exceeds more than two minutes, communication with the Sensors will be lost. Tip: For more information about setting up a time server on Windows Server 2003 SP2, see the following Microsoft KnowledgeBase article: http://support.microsoft.com/kb/816042 http://support.microsoft.com/kb/816042//. Note: Once you have set your server time and installed the Manager, do not change the time on the Manager server for any reason. Changing the time may result in errors that could lead to loss of data. 9

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76

9
C
HAPTER
3
Preparing for the Manager installation
This section describes the McAfee
®
Network Security Manager (Manager) hardware and
software requirements and pre-installation tasks you should perform prior to installing the
software.
Unless explicitly stated, the information in this chapter applies to both the McAfee
®
Network Security Central Manager and Manager though the sections refer to Manager.
Pre-requisites
The following sections list the Manager installation and functionality requirements for your
operating system, database, and browser.
Caution:
We strongly recommend that you also check the corresponding Release
Notes. If you are installing the Manager as part of an upgrade to the latest version of
Network Security Platform, refer to
Network Security Platform
6.0 Upgrade Guide
.
General settings
McAfee recommends you use a dedicated server, hardened for security, and placed
on its own subnet. This server should not be used for programs like instant messaging
or other non-secure Internet functions.
You must have
Administrator
/
root
privileges on your Windows server to properly install
the Manager software, as well as the installation of an embedded MySQL database
for Windows Managers during Manager installation.
It is essential that you synchronize the time on the Manager server with the current
time. To keep time from drifting, use a timeserver. If the time is changed on the
Manager server, the Manager will lose connectivity with all McAfee
®
Network Security
Sensors (Sensors) and the McAfee
®
Network Security Update Server [formerly IPS
Update Server] because SSL is time sensitive.
If Manager Disaster Recovery (MDR) is configured, ensure that the time difference
between the Primary and Secondary Managers is less than 60 seconds. (If the spread
between the two exceeds more than two minutes, communication with the Sensors
will be lost.
Tip:
For more information about setting up a time server on Windows Server 2003
SP2, see the following Microsoft KnowledgeBase article:
Note:
Once you have set your server time and installed the Manager, do not change
the time on the Manager server for any reason. Changing the time may result in
errors that could lead to loss of data.