Black Box ET1000A manuály

BL A C K B OX

1

4 EncrypTight User Guide

3

EncrypTight User Guide 5

4

6 EncrypTight User Guide

5

EncrypTight User Guide 7

6

Part IV: Troubleshooting

7

Part V: Reference

8

10 EncrypTight User Guide

9

Table of Contents

10

EncrypTight User Guide 11

10

12 EncrypTight User Guide

11

About This Document

12

Phone 724-746-5500

13

Fax 724-746-0746

13

Web site www.blackbox.com

13

Maintenance

14

16 EncrypTight User Guide

15

1 EncrypTight Overview

16

EncrypTight Overview

17

18 EncrypTight User Guide

17

EncrypTight Elements

18

Policy Manager

19

Key Management System

19

Policy Enforcement Point

20

22 EncrypTight User Guide

21

Security within EncrypTight

22

24 EncrypTight User Guide

23

EncrypTight User Guide 25

24

ETPM to ETKMS Connections

25

EncrypTight User Guide 27

26

28 EncrypTight User Guide

27

Connections for Backup ETKMSs

28

30 EncrypTight User Guide

29

ETKMS to PEP Connections

30

32 EncrypTight User Guide

31

IPv6 Address Support

32

Certificate Support

33

EncrypTight User Guide 35

34

36 EncrypTight User Guide

35

Before You Start

36

Hardware Requirements

37

Software Requirements

37

Firewall Ports

38

Starting EncrypTight

39

Exiting EncrypTight

40

42 EncrypTight User Guide

41

Installing ETKMSs

42

Configuring ETKMSs

42

About Local ETKMSs

43

Adding a Local ETKMS

43

EncrypTight User Guide 45

44

Configuring External ETKMSs

45

Logging Into the ETKMS

46

Changing the Admin Password

46

Changing the Root Password

47

EncrypTight User Guide 49

48

/opt/etkms/bin/etkmsParams.sh

49

/etc/sysconfig/network

49

ETKMS1backup.mycompany.com

49

EncrypTight User Guide 51

50

52 EncrypTight User Guide

51

EncrypTight User Guide 53

52

54 EncrypTight User Guide

53

EncrypTight User Guide 55

54

Managing Licenses

55

Installing Licenses

56

Next Steps

57

EncrypTight User Guide 59

58

60 EncrypTight User Guide

59

4 Managing EncrypTight Users

60

Managing EncrypTight Users

61

62 EncrypTight User Guide

61

EncrypTight User Guide 63

62

64 EncrypTight User Guide

63

Managing EncrypTight Accounts

64

66 EncrypTight User Guide

65

EncrypTight User Guide 67

66

68 EncrypTight User Guide

67

5 Maintenance Tasks

68

Maintenance Tasks

69

70 EncrypTight User Guide

69

Loading an Existing Workspace

70

Deleting a Workspace

71

Installing Software Updates

72

EncrypTight.exe

73

Step 5: Upgrade PEP Software

74

76 EncrypTight User Guide

75

EncrypTight User Guide 77

76

Upgrading External ETKMSs

77

EncrypTight User Guide 79

78

80 EncrypTight User Guide

79

82 EncrypTight User Guide

81

6 Getting Started with ETEMS

82

Getting Started with ETEMS

83

84 EncrypTight User Guide

83

Comparing Configurations

84

86 EncrypTight User Guide

85

EncrypTight User Guide 87

86

88 EncrypTight User Guide

87

Toolbars

88

Understanding Roles

90

Function Administrator Ops

91

ETEMS access Yes No

91

EncrypTight User Guide 93

92

94 EncrypTight User Guide

93

7 Provisioning Appliances

94

Adding a New Appliance

95

EncrypTight User Guide 97

96

Viewing Appliance Status

97

EncrypTight User Guide 99

98

Provisioning Basics

100

EncrypTight User Guide 101

100

Appliance User Management

101

EncrypTight User Guide 103

102

User Name Conventions

103

EncrypTight User Guide 105

104

Managing Appliance Users

105

EncrypTight User Guide 107

106

Deleting ETEP Users

107

Viewing ETEP Users

108

Provisioning Appliances

109

110 EncrypTight User Guide

109

EncrypTight User Guide 111

110

112 EncrypTight User Guide

111

EncrypTight User Guide 113

112

114 EncrypTight User Guide

113

EncrypTight User Guide 115

114

Shutting Down Appliances

115

8 Managing Appliances

116

Managing Appliances

117

118 EncrypTight User Guide

117

Changing the Address in ETEMS

118

Changing the Date and Time

119

Editing Configurations

120

EncrypTight User Guide 121

120

Deleting Appliances

121

Upgrading Appliance Software

122

124 EncrypTight User Guide

123

EncrypTight User Guide 125

124

126 EncrypTight User Guide

125

Canceling an Upgrade

126

Checking Upgrade Status

126

128 EncrypTight User Guide

127

Key Policies

128

130 EncrypTight User Guide

129

9 Getting Started with ETPM

130

Getting Started with ETPM

131

132 EncrypTight User Guide

131

EncrypTight Components View

132

Editors

133

Policy View

134

ETPM Status Indicators

134

136 EncrypTight User Guide

135

ETPM Toolbar

136

ETPM Status Refresh Interval

136

About ETPM Policies

137

EncrypTight User Guide 139

138

140 EncrypTight User Guide

139

EncrypTight User Guide 141

140

142 EncrypTight User Guide

141

EncrypTight User Guide 143

142

144 EncrypTight User Guide

143

EncrypTight User Guide 145

144

146 EncrypTight User Guide

145

Provisioning PEPs

146

Adding a New PEP in ETEMS

147

EncrypTight User Guide 149

148

Adding Large Numbers of PEPs

149

Editing PEPs

150

Editing Multiple PEPs

151

Editing PEPs From ETPM

151

Deleting PEPs

152

To delete PEPs:

153

3Click OK

153

4 From ETPM, click Deploy

153

EncrypTight User Guide 155

154

Adding ETKMSs

155

Editing ETKMSs

156

Deleting ETKMSs

156

158 EncrypTight User Guide

157

12 Managing IP Networks

158

Managing IP Networks

159

160 EncrypTight User Guide

159

EncrypTight User Guide 161

160

162 EncrypTight User Guide

161

EncrypTight User Guide 163

162

Editing Networks

163

Deleting Networks

163

To delete a network:

164

166 EncrypTight User Guide

165

13 Managing Network Sets

166

Types of Network Sets

167

EncrypTight User Guide 169

168

Adding a Network Set

169

EncrypTight User Guide 171

170

172 EncrypTight User Guide

171

Managing Network Sets

171

EncrypTight User Guide 173

172

Editing a Network Set

173

Deleting a Network Set

173

EncrypTight User Guide 175

174

176 EncrypTight User Guide

175

Networks

176

178 EncrypTight User Guide

177

Editing a VLAN ID Range

178

Deleting a VLAN ID Range

178

Policy Concepts

180

Policy Priority

181

Lifetime

181

Encapsulation

182

AriaSupport=true

183

Key Generation and ETKMSs

184

Addressing Mode

184

1 Mesh 100 Encrypt All

185

2 Mesh 200 Drop 55

185

3 Mesh 300 Pass in Clear 17

185

Minimizing Policy Size

186

188 EncrypTight User Guide

187

4Click Save when complete

188

If no range is

188

190 EncrypTight User Guide

189

Adding Layer 3 IP Policies

190

192 EncrypTight User Guide

191

EncrypTight User Guide 193

192

194 EncrypTight User Guide

193

Adding a Mesh Policy

194

196 EncrypTight User Guide

195

PEPs associated

196

Figure 75 Mesh policy editor

197

Adding a Multicast Policy

198

200 EncrypTight User Guide

199

EncrypTight User Guide 201

200

202 EncrypTight User Guide

201

EncrypTight User Guide 203

202

EncrypTight User Guide 205

204

Adding Layer 4 Policies

205

Policy Deployment

206

Deploying Policies

207

Editing a Policy

208

Deleting Policies

208

210 EncrypTight User Guide

209

16 Policy Design Examples

210

Policy Design Examples

211

212 EncrypTight User Guide

211

EncrypTight User Guide 213

212

214 EncrypTight User Guide

213

EncrypTight User Guide 215

214

216 EncrypTight User Guide

215

EncrypTight User Guide 217

216

Passing Routing Protocols

217

EncrypTight User Guide 219

218

220 EncrypTight User Guide

219

Part IV Troubleshooting

220

222 EncrypTight User Guide

221

17 ETEMS Troubleshooting

222

Appliance Unreachable

223

Appliance Configuration

224

Pushing Configurations

225

Status Indicators

225

Pinging the Management Port

226

ETEMS Troubleshooting

227

228 EncrypTight User Guide

227

EncrypTight User Guide 229

228

Viewing Diagnostic Data

229

EncrypTight User Guide 231

230

Exporting SAD and SPD Files

231

CLI Diagnostic Commands

232

234 EncrypTight User Guide

233

Exporting the Application Log

234

Setting Log Filters

234

Other Application Log Actions

235

Learning About Problems

236

Symptoms and Solutions

237

Policy Errors

238

Status Errors

239

Renew Key Errors

239

Viewing Log Files

240

ETKMS Troubleshooting Tools

241

PEP Troubleshooting Tools

242

Statistics

243

Troubleshooting Policies

244

Solving Policy Problems

245

Expired Policies

246

. If the status shown in

247

Cannot Communicate with PEP

248

ETKMS Boot Error

249

Invalid Certificate Error

249

EncrypTight User Guide 251

250

252 EncrypTight User Guide

251

Part V Reference

252

254 EncrypTight User Guide

253

EncrypTight User Guide 255

254

Logging Setup

255

EncrypTight User Guide 257

256

Policy Refresh Timing

257

PEP Communications Timing

257

FinalPEPRetryWaitTime

258

260 EncrypTight User Guide

259

EncrypTight User Guide 261

260

About Strict Authentication

261

Prerequisites

262

Order of Operations

262

Certificate Information

263

EncrypTight User Guide 265

264

266 EncrypTight User Guide

265

EncrypTight User Guide 267

266

/HSMPwdChg.sh

267

./HSMPwdChg.sh

268

270 EncrypTight User Guide

269

EncrypTight User Guide 271

270

Generating a Key Pair

271

Requesting a Certificate

272

Importing a CA Certificate

273

Exporting a Certificate

274

276 EncrypTight User Guide

275

276

278 EncrypTight User Guide

277

Certificate Manager Workflow

278

280 EncrypTight User Guide

279

282 EncrypTight User Guide

281

EncrypTight User Guide 283

282

284 EncrypTight User Guide

283

EncrypTight User Guide 285

284

Viewing a Certificate

285

Validating Certificates

286

288 EncrypTight User Guide

287

EncrypTight User Guide 289

288

290 EncrypTight User Guide

289

EncrypTight User Guide 291

290

292 EncrypTight User Guide

291

Removing Certificates

292

Using a Common Access Card

293

Access Cards

294

296 EncrypTight User Guide

295

EncrypTight User Guide 297

296

298 EncrypTight User Guide

297

21 ETEP Configuration

298

Identifying an Appliance

299

Interface Configuration

300

Management Port Addressing

301

IPv4 Addressing

302

IPv6 Addressing

303

Auto-negotiation - All Ports

304

ETEP Configuration

305

306 EncrypTight User Guide

305

EncrypTight User Guide 307

306

Transmitter Enable

307

DHCP Relay IP Address

308

Ignore DF Bit

309

Reassembly Mode

309

Trusted Hosts

310

312 EncrypTight User Guide

311

SNMP Configuration

312

Community Strings

313

Fans are operating normally

314

SNMPv2 Trap Hosts

315

EncrypTight User Guide 317

316

Generating the Engine ID

317

EncrypTight User Guide 319

318

320 EncrypTight User Guide

319

Logging Configuration

320

Log Event Settings

321

Defining Syslog Servers

322

Log File Management

323

Advanced Configuration

324

326 EncrypTight User Guide

325

Non IP Traffic Handling

326

CLI Inactivity Timer

326

Password Strength Policy

326

328 EncrypTight User Guide

327

SSH Access to the ETEP

328

SNTP Client Settings

328

IKE VLAN Tags

328

Features Configuration

329

FIPS Mode

330

Disabling FIPS

331

EncrypTight Settings

332

Working with Policies

333

EncrypTight User Guide 335

334

336 EncrypTight User Guide

335

Selecting a Role

336

Using Group IDs

336

338 EncrypTight User Guide

337

Factory Defaults

338

Advanced

340

Features

341

Hard-coded Settings

341

Numerics

342

344 EncrypTight User Guide

343

EncrypTight User Guide 345

344

346 EncrypTight User Guide

345

EncrypTight User Guide 347

346

348 EncrypTight User Guide

347

EncrypTight User Guide 349

348

350 EncrypTight User Guide

349

EncrypTight User Guide 351

350

352 EncrypTight User Guide

351

BLACK BOX

352

Modely	Typ Dokumentu
iCOMPEL OPS Series	Specifikace Black Box iCOMPEL OPS Series Specifications, 161 stránky
ACS120	Uživatelská příručka Black Box ACS120 User guide [en] , 450 stránky

Black Box ET1000A manuály

Black box ET1000A Uživatelský manuál (352 strany)

Tabulka s obsahem

Další produkty a příručky pro Software Black Box

Black Box zařízení