DX Infrastructure Management

<<TableOfContents>>

Overall Architecture Layout

The NetQoS product tie together in the architecture shown in the diagram below. <<<Internal image(?): arch.png>>>

Setting up NetQoS Software on Windows 2008

Note: Only Server 2008 R2 is supported.  However, the default build (and most organizations' corporate builds) don't include the necessary components for the NetQoS Software.  To get everything to install properly, follow these steps before running any NetQoS installer:
Configure Windows 2008 Web related Services:

1. In ‘Server Manager’ there should be no Roles currently configured.
2. Click on ‘Add Roles’ and check the ‘Skip this page by default’ and click ‘Next >’
3. Enable ‘Web Server (IIS) and click ‘Next >’
4. Click ‘Next >’ again
5. In the ‘Role Services’ Make sure the following are enabled:
   1. ‘ASP’ (A pop-up will appear – click on ‘Add Required Role Services’
   2. ‘IIS 6 Management Compatibility’ (The 4 options under it are selected automatically!)
6. Click ‘Next >’
7. A summary appears – click ‘Install’
8. The Installer starts installing…Once Completed: Click ‘Close’
9. Click on ‘Add Roles’ again. The ‘Select Server Roles’ dialog appears.
10. Enable ‘Application Server’:
11. Click on ‘Add Required Features’ when the pop-up appears!
12. Click ‘Next >’
13. Click ‘Next >’ again.
14. In the ‘Role Services’ section, enable ‘COM+ Network Access’ and click ‘Next >’
15. Click the ‘Install’ button to start the Install.
16. Once complete dot.Net 3.5.1 will be also installed: Click ‘Close’.
17. Run Windows Update to update dot.Net.
18. Configure Web Content Expiration:
    1. Under ‘Administration Tools’, open ‘Internet Information Services (IIS) Manager’
    2. Click on ‘<SERVER>’ on the left ‘Connections’ pane.
    3. Open ‘HTTP Response Headers in the middle window’:
    4. On the right ‘Actions’ pane, click on ‘Set Common Headers’ and the ‘Set Common HTTP Response Headers’ dialog box appears:
    5. Ensure ‘Expire Web Content’ is set to expire immediately.
    6. Click ‘OK’ and close the IIS Manager!

Data Execution Prevention

DEP - Data Execution Prevention must be set to 'Windows components only'.

Joining the Windows Appliances to a Domain

The Windows appliances can be joined to the domain if desired provided the following policies are not implemented by domain group policies:

• Expire passwords - passwords for local accounts must not expire
• Disable local accounts - the local accounts must not be disabled
• Change local accounts - the local accounts must not be changed
• Change IIS settings - IIS settings must not be changed
• Disabling script execution - ASP and Perl scripts must be allowed
• Changing file and directory permissions - permissions must not be changed
• Disabling file sharing - file sharing must not be disabled

Anti-Virus

• Anti-virus can be installed on the appliances, provided the D:\NetQoS folder (and sub-folders) is excluded from real time scanning.

Setup backup through DBTool.exe

It is recommended to backup the databases of the NetQoS products.  This can easily be done by using DBTool.exe.  If you are running 64-bit operating systems, you must also install the 64-bit MySQL ODBC Connector.  Nothing beyond the installation is required for the connector.  Once you've installed everything, call DBTool.exe for details on its usage. You can also use the method described on Stuart's Blog.