DX Unified Infrastructure Management

  • 1.  IIS, Adobe and Flash version recommendations

    Posted Sep 05, 2012 07:43 AM
    The NFA 9.1 Installation documentation states thate IIS 6 is required, would there be any issues with the default Win2008 R2 IIS 7.5 version?
    Also are there any recoomendations on Adobe or Flash version?
    Thanks in Advance,
    Martin


  • 2.  RE: [CA Network Flow Analysis] IIS, Adobe and Flash version recommendations

    Posted Sep 05, 2012 10:12 AM
    Yes, you have to have the IIS 6 metabase compatibility pack. Plus since I can't ever find anything in the new IIS management console, I like to install the IIS 6 management console.



    Flash is needed only if you plan on doing any administration or using the web gui on the server itself (since most of the admin pages use flash instead of html5).


  • 3.  RE: IIS, Adobe and Flash version recommendations

    Posted Sep 06, 2012 12:07 PM
    Along with what Stuart mentioned, Flash works with the latest versions. I'm not sure up which CA will support but I would imagine any recent version should be fine.

    The documentation for the 9.1 Console setup has small errors. I found that I had to install it slightly differently than what the docs said:

    Here is my setup (I had screenshots but just pasted this from there! so hope it still helps:). This is from a fresh install so you might have some features already enabled.
    [color=#ff0000]If you spot any errors please let me know![color]

    Windows 2008 R2 Netflow Analyzer 9.1 Setup.

    Configure Windows 2008 Web related Services:

    1. In ‘Server Manager’ there should be no Roles currently configured.
    2. Click on ‘Add Roles’ and check the ‘Skip this page by default’ and click ‘Next >’
    3. Enable ‘Web Server (IIS) and click ‘Next >’


    4. Click ‘Next >’ again
    5. In the ‘Role Services’ Make sure the following are enabled:
    a. ‘ASP’ (A pop-up will appear – click on ‘Add Required Role Services’

    b. ‘IIS 6 Management Compatibility’ (The 4 options under it are selected automatically!)

    6. Click ‘Next >’
    7. A summary appears – click ‘Install’
    8. The Installer starts installing…

    Once Completed:

    Click ‘Close’
    9.
    Click on ‘Add Roles’ again. The ‘Select Server Roles’ dialog appears.
    10.
    Enable ‘Application Server’:

    Click on ‘Add Required Features’ when the pop-up appears!
    11. Click ‘Next >’
    12. Click ‘Next >’ again.
    13. In the ‘Role Services’ section, enable ‘COM+ Network Access’

    and click ‘Next >’
    14. Click the ‘Install’ button to start the Install.
    15. Once complete dot.Net 3.5.1 will be also installed:

    Click ‘Close’.
    16. Run Windows Update to update dot.Net.
    17. Configure Web Content Expiration:

    a. Under ‘Administration Tools’, open ‘Internet Information Services (IIS) Manager’

    b. Click on ‘<SERVER>’ on the left ‘Connections’ pane.

    c. Open ‘HTTP Response Headers in the middle window’:

    d. On the right ‘Actions’ pane, click on ‘Set Common Headers’ and the

    ‘Set Common HTTP Response Headers’ dialog box appears:

    e. Ensure ‘Expire Web Content’ is set to expire immediately.

    f. Click ‘OK’ and close the IIS Manager!


    Now we need to install the other components as mentioned in the Install Guide (from Page 14 of the ‘CA Netflow Analysis Installation Guide’ PDF doc:
    1. Install Adobe Flash (don’t really need on Server but installer complains about it. This is more for client and if you plan to use web ui on server.
    2. Install SNMP and configure SNMP Community string (RO String). We did NOT use ‘public’ as in the docs!
    3. Did NOT install SMTP!
    4. Disable IPv6
    5. Enable DEP for Essential Windows Services Only
    6. Set Recycle bin to delete permanently
    7. Prevent False Positives in DOS cmd line:
    reg add HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration
    8. Installed Java JRE
    9. Disable uneeded services

    This is what I done before launching the installer. We didn't install SMTP since we don't use SMTP yet.
    Also remember to set the Watchdog settings to the same SNMP string used in step 2 above (most recent nr 2!) after getting NFA up, or else the Status page will show Red! (Docs say use public but Auditors don't like public!!)

    Hope this helps.

    Regards,

    Frank


  • 4.  RE: IIS, Adobe and Flash version recommendations

    Posted Sep 06, 2012 01:05 PM
    Frank, would you mind posting this information into the Wiki? I can create a new page for you to put it into, but i'm neck deep in the polaris install wiki at the moment, so it will take time for me to put your content out there.


  • 5.  RE: IIS, Adobe and Flash version recommendations

    Posted Sep 07, 2012 12:14 PM
    Thanks for this Frank, very useful, and Stuart for the first post.