McAfee M3050 Installation Guide - Page 21

Database requirements, Pre-installation recommendations, Planning for installation

Page 21 highlights

McAfee® Network Security Platform 6.0 Preparing for the Manager installation Database requirements The Manager requires communication with MySQL database for the archiving and retrieval of data. The Manager installation set includes a MySQL database for installation (that is, embedded on the target Manager server). You must use one of the supported OS listed under Server requirements (on page 10) and must use the Network Security Platformsupplied version of MySQL (currently 5.1.47). The MySQL database must be dedicated to the Manager. Note: If you have a MySQL database previously installed on the target server, uninstall the previous version and install the Network Security Platform version. Pre-installation recommendations These McAfee® Network Security Platform [formerly McAfee® IntruShield®] pre-installation recommendations are a compilation of the information gathered from individual interviews with some of the most seasoned McAfee Network Security Platform System Engineers at McAfee. Planning for installation Before installation, ensure that you complete the following tasks:  The server, on which McAfee® Network Security Manager software will be installed, should be configured and ready to be placed online.  You must have administrator privileges for McAfee Network Security Manager (Manager) server.  This server should be dedicated, hardened for security, and placed on its own subnet. This server should not be used for programs like instant messaging or other nonsecure Internet functions.  Make sure your hardware requirements meet the requirements. See Server requirements (on page 10).  Ensure the proper static IP address has been assigned to the Manager server. For the Manager server, McAfee strongly recommends assigning a static IP against using DHCP for IP assignment.  If applicable, configure name resolution for the Manager.  Ensure that all parties have agreed to the solution design, including the location and mode of all McAfee® Network Security Sensor, the use of sub-interfaces or interface groups, and if and how the Manager will be connected to the production network.  Get the required license file and grant number. Note that you do not require a license file for using Manager/Central Manager version 6.0.7.5 or above.  Accumulate the required number of wires and (supported) GBICs, SFPs, or XFPs. Ensure these are approved hardware from McAfee or a supported vendor. Ensure that the required number of Network Security Platform dongles, which ship with the McAfee Network Security Sensors (Sensors), are available.  Crossover cables will be required for 10/100 or 10/100/1000 monitoring ports if they are directly connected to a firewall, router, or end node. Otherwise, standard patch cables are required for the Fast Ethernet ports. 13

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76

McAfee® Network Security Platform 6.0
Preparing for the Manager installation
Database requirements
The Manager requires communication with MySQL database for the archiving and retrieval
of data.
The Manager installation set includes a MySQL database for installation (that is,
embedded on the target Manager server). You must use
one of the supported OS listed
under Server requirements (on page
10
) and must use the Network Security Platform-
supplied version of MySQL (currently 5.1.47). The MySQL database
must be dedicated
to the
Manager.
Note:
If you have a MySQL database previously installed on the target server,
uninstall the previous version and install the Network Security Platform version.
Pre-installation recommendations
These McAfee
®
Network Security Platform [formerly McAfee
®
IntruShield
®
] pre-installation
recommendations are a compilation of the information gathered from individual interviews
with some of the most seasoned McAfee Network Security Platform System Engineers at
McAfee.
Planning for installation
Before installation, ensure that you complete the following tasks:
The server, on which McAfee
®
Network Security Manager software will be installed,
should be configured and ready to be placed online.
You must have administrator privileges for McAfee Network Security Manager
(Manager) server.
This server should be dedicated, hardened for security, and placed on its own subnet.
This server should not be used for programs like instant messaging or other non-
secure Internet functions.
Make sure your hardware requirements meet the requirements. See Server
requirements (on page
10
).
Ensure the proper static IP address has been assigned to the Manager server. For the
Manager server, McAfee strongly recommends assigning a static IP against using
DHCP for IP assignment.
If applicable, configure name resolution for the Manager.
Ensure that all parties have agreed to the solution design, including the location and
mode of all McAfee
®
Network Security Sensor, the use of sub-interfaces or interface
groups, and if and how the Manager will be connected to the production network.
Get the required license file and grant number. Note that you do not require a license
file for using Manager/Central Manager version 6.0.7.5 or above.
Accumulate the required number of wires and (supported) GBICs, SFPs, or XFPs.
Ensure these are approved hardware from McAfee or a supported vendor. Ensure
that the required number of Network Security Platform dongles, which ship with the
McAfee Network Security Sensors (Sensors), are available.
Crossover cables will be required for 10/100 or 10/100/1000 monitoring ports if they
are directly connected to a firewall, router, or end node. Otherwise, standard patch
cables are required for the Fast Ethernet ports.
13