Installing the Central Node and Sensor components on the server

Deployment of the Central Node and Sensor components on a single server includes the following steps:

1. Installing the Central Node and Sensor components

   To install the components on the physical server, you need to run a disk image with the Central Node and Sensor components.

   To install components on a virtual server, you need to connect the disk image with the Central Node and Sensor components to the selected virtual machine and run it. The installation starts immediately after the virtual machine is turned on. You can manage the installation process using the console of the virtual machine.

   When installing components on a virtual machine, you must select the BIOS boot mode for the virtual machine: Options → Boot Options → Firmware → BIOS.

2. Configuring the sizing settings of the program

   At the final stage of cluster deployment, you need to configure the scaling settings of the program: specify the planned volume of SPAN traffic, email traffic, the number of hosts with Kaspersky Endpoint Agent, as well as the size of the Storage and event database.

The Central Node component is always installed together with the Sensor component. If you need to use the Central Node component separately, turn off receipt of mirrored traffic from SPAN ports in step 10.

If an error occurred while performing the steps of the Setup Wizard, contact Technical Support.

Step 1. Selecting a server role

To select a server role:

1. Enter one of the following numbers:
   • 1 - storage server for deploying the Central Node component in the form of a cluster.
   • 2 - a processing server for deploying the Central Node component in the form of a cluster.

     The role also includes the installation and configuration of the Sensor component.

   • 3 - Central Node and Sensor components for installation on one server.
   • 4 - Sensor component for installation on a standalone server.
2. Press ENTER.

The Setup Wizard proceeds to the next step.

Step 2. Viewing the End User License Agreement and Privacy Policy

To continue installation, you need to read the End User License Agreement and Privacy Policy and accept their terms. Installation will not continue until you accept the terms of the End User License Agreement and Privacy Policy.

To accept the terms of the End User License Agreement and Privacy Policy:

1. Press ENTER.
2. Read the End User License Agreement and the Privacy Policy.

   To move up and down, you can use the keys: ↑ and ↓, PageUp and PageDown, or Enter.

3. If you accept the End User License Agreement and the Privacy Policy, select I accept and press Enter.

The Setup Wizard proceeds to the next step.

Step 3. Selecting a disk for installing the component

To select a disk for installing the component:

1. Enter the number of the relevant disk.
2. Press ENTER.
3. Do the following:
   • Enter y if you want to confirm the drive selection.
   • Enter n if you want to select a different drive.
4. If you selected n, repeat steps 1-2 of these instructions.

The Setup Wizard proceeds to the next step.

Step 4. Allocating the disk for the Targeted Attack Analyzer component's database

For optimal performance of the Targeted Attack Analyzer component, it is advised that you allocate on the server a physical disk of at least 1 TB for the component's database.

In this step, you can allocate a physical disk for the Targeted Attack Analyzer component's database or decline allocating a physical disk.

To allocate the disk for the Targeted Attack Analyzer component's database:

1. Enter y.
2. Press ENTER.
3. Enter the number of the relevant disk.
4. Press ENTER.
5. Do the following:
   • Enter y if you want to confirm the drive selection.
   • Enter n if you want to select a different drive.
6. If you selected n, repeat steps 4-5 of these instructions.

The Setup Wizard proceeds to the next step.

To decline allocating the disk for the Targeted Attack Analyzer component's database:

1. Enter n.
2. Press ENTER.

The Setup Wizard proceeds to the next step.

Step 5. Selecting a network mask for cluster server addressing

To specify the network mask for cluster server addressing:

• If you want to use the predefined value for the network mask, press Enter.

  Default value: 198.18.0.0/16.

• If you want to specify a different network mask, enter the value and press Enter.

  The mask must match the template: x.x.0.0/16.

The Setup Wizard proceeds to the next step.

Step 6. Selecting the external network interface

The external network interface is used for SSH access to the server, managing the web interface of Kaspersky Anti Targeted Attack Platform, and other external connections.

To select the external network interface:

1. Select the row containing the network interface that is used for the external network.

   To select a row, you can use the ↑, ↓, PageUp, and PageDown keys. The selected row is highlighted in red.

2. Press ENTER.

The Setup Wizard proceeds to the next step.

Step 7. Selecting the method of obtaining IP addresses for network interfaces

To select a method for obtaining an IP address for network interfaces:

1. Select the row containing the Configuration type: and press Enter.

   To select a row, you can use the ↑, ↓, PageUp, and PageDown keys. The selected row is highlighted in red.

2. In the opened window, select one of the following options:
   • dhcp.
   • static.
3. If you selected static:
   1. Select the row containing the parameter and press the Enter key.
   2. In the opened window, enter the required data and press Enter twice.

      You need to specify a value for each parameter.

4. Select the row containing Save.
5. Press ENTER.

The Setup Wizard proceeds to the next step.

Step 8. Creating the administrator account

The administrator account is used to work in the web interface for scaling management, the program administrator menu, and to work in Technical Support Mode.

By default, the user name of the administrator account is admin. You must enter a password for that user account.

To enter a password for the administrator user account:

1. In the password field, enter the password for the administrator account.

   To select a row, you can use the ↑, ↓, PageUp, and PageDown keys. The selected row is highlighted in red.

2. In the confirm field, enter the password again.
3. Select Ok and press Enter.

The Setup Wizard proceeds to the next step.

Step 9. Adding DNS server addresses

Configure the DNS settings for the operation of servers with program components.

To add DNS server addresses:

1. Enter the IP address of the primary DNS server in IPv4 format.

   You must enter at least one DNS server address.

2. If you want to add the IP address of an additional DNS server, press Enter and enter the address of the server.
3. Having added all DNS servers, press Enter twice.

The Setup Wizard proceeds to the next step.

Step 10. Configuring receipt of mirrored traffic from SPAN ports

In this step, you can configure receipt of mirrored traffic from SPAN ports.

To turn on receipt of mirrored traffic from SPAN ports:

1. Enter y.
2. Press ENTER.

The Setup Wizard proceeds to the next step.

To turn off receipt of mirrored traffic from SPAN ports:

1. Enter n.
2. Press ENTER.

The Setup Wizard proceeds to the next step.

Step 11. Configuring time synchronization with an NTP server

Configure synchronization of the server time with the NTP server.

To configure time synchronization with an NTP server:

1. Enter the IP address or name of the NTP server.
2. If you want to add an additional NTP server, press Enter and enter the IP address or name of the NTP server.
3. Having added all NTP servers, press Enter twice.

The configuration will take some time. Then the installation is complete. You can proceed to server configuration in the web interface for scaling management.