Device Appliance Automatically

When Genian NAC Device is first registered, the administrator must change the appliance configuration for the device registered.

If you are in an environment where multiple network sensors are registered, you can specify the initial settings so that the preferences are automatically applied when registering new equipment.

  1. Go to System in top panel
  2. Go to System Defaults > Network Appliance in the left System Management panel

Note

The above settings are optional and will be the default settings for all additional policy servers.)

Configure Appliance Settings

  1. Go to System in top panel
  2. Find and click Policy Server IP in the main System window
  3. Find and click Appliance tab in the main System window

Allow Remote Access via SSH

  1. Find Security section and enter Approved SSH Source IP
  • Individual IP's may be allowed(e.g. 192.168.1.10).
  • Entire Subnets may also be allowed, regardless of individual IP. (e.g. 192.168.1.0/24).
  • Access from all sources may also be permitted (e.g. 0.0.0.0/0).

Note

Be mindful of NAT when accessing an appliance across network segments. The external NAT address must be allowed.

  1. Click Update

Proxy For Windows Updates

  1. Find Proxy for Windows Updates section and select On in drop-down
  2. Select Network Group for Proxy Service to use
  3. Click Update

Setup SNMP Agent

  1. Find SNMP Agent section and select On in drop-down
  2. Enter the following:
    • Username
    • Authentication Password (SHA, minimum length – 8 characters)
    • Privacy Password for data encryption (AES, minimum length – 8 characters)
  3. Click Update

Edit Asset Management Thresholds

  1. Find Asset Management section
  2. Enter the following:
    • Data Disk Threshold generates log if Data Disk is over this threshold (Default is 90)
    • Memory Threshold generates log if Memory is over this threshold (Default is 90)
    • CPU Threshold generates log if CPU is over this threshold (Default is 95)
  3. Click Update

Edit System Date And Time

  1. Find Date and Time section
  2. Select Country and closest City from drop-downs for System TimeZone
  3. Click Update

Change Character Set

  1. Find Miscellaneous section
  2. Select Character Set from drop-down
  3. Click Update

Configure Sensor Log Settings

  1. Go to System in the top panel
  2. Select Network Sensor IP in the view pane.
  3. Select the Appliance tab in the view pane.

Under: Miscellaneous Configure:

  • Default Character Set

  • Sensor Debug Logging

    • Log Location - (Local, Policy Server, Local & Policy Server)

Note

If logging is set to save to the Policy Server, individual log entries will be sent by Syslog over TLS using port 6514. If Syslog over TLS fails, standard syslog on port 514. For Cloud-Managed NAC, Unique Ports are used. You can check these port assignments under System > Service > Port