Proofpoint | ObserveIT On-Premises Insider Threat Management
Validating Custom Installation Readiness
After completing the prerequisites for a custom installation (see ObserveIT Agents Prerequisites), you'll need to validate basic readiness.
Complete the following:
Testing connectivity to SQL Server
Prerequisites:
-
Windows Server machine installed
-
Microsoft SQL Server Standard Edition 2019 installed
-
SQL Server is configured to accept network connections on port 1433
-
You have completed the Active Directory Prerequisites, Firewall System Prerequisites, and SQL Server Prerequisites.
On Windows Server machines that will host ObserveIT Application Server, ObserveIT Web Management Console, and ObserveIT Website Categorization module components, do the following:
-
Run PowerShell as Administrator.
-
Execute the command:
Test-NetConnection <# FQDN of the SQL Server #> -Port 1433Replace <
# FQDN of the SQL Server #> with the fully qualified domain name of your SQL Server. In most cases, your SQL Server will be configured to use port 1433. If the connection test fails, reach out to your database administrator to inquire about correct port for your SQL Server instance. -
Review the command output. If successful, TcpTestSucceeded is set to True.
Testing Connectivity to Screen Capture Data Store
Prerequisites:
-
Windows Server machine installed
-
Windows File Services feature installed
-
Firewalls are configured to pass traffic on port 445 between ObserveIT servers and the screen capture data store
-
Microsoft SQL Server Standard Edition 2019 installed
-
SQL Server is configured to accept network connections on port 1433
-
You have completed the Active Directory Prerequisites, Firewall System Prerequisites, and Screen Capture Prerequisites.
On Windows Server machines that will host ObserveIT Application Server, ObserveIT Web Management Console, and ObserveIT Website Categorization module components, do the following:
-
Run PowerShell as Administrator.
-
Execute the command:
Test-NetConnection <# FQDN of the screen capture data store #> -Port 445Replace <
# FQDN of the screen capture data store #> with the fully qualified domain name of your screen capture data store. In most cases, your screen capture data store will be configured to use port 445. If the connection test fails, reach out to your storage administrator or Wintel team to inquire about correct port for your screen capture data store. -
Review the output. If successful, TcpTestSucceeded field is set to True.
Add Active Directory Service Account to Local Administrators Security Group
Prerequisites:
-
Windows Server machine installed
-
You have completed the Active Directory Prerequisites and Back-end Components Prerequisites.
On Windows Server machines that will host ObserveIT Application Server, ObserveIT Web Management Console, and ObserveIT Website Categorization module components, do the following:
-
Run PowerShell as Administrator.
-
Execute the command:
Add-LocalGroupMember -Group Administrators -Member "<# DOMAIN\account #>"Replace <
# DOMAIN\account #> with the Active Directory Service Account name in the format:DOMAIN\account. -
Validate the account was successfully added by executing the command:
Get-LocalGroupMember -Group Administrators -
Look at the command output. If successful, the name of your Active Directory Service Account appears in the output.
Add Active Directory Service Account to local IIS_IUSRS Security Group
Prerequisites:
-
Windows Server machine installed
-
You have completed the Active Directory Prerequisites and Back-end Components Prerequisites.
On Windows Server machines that will host ObserveIT Application Server, ObserveIT Web Management Console, and ObserveIT Website Categorization module components, do the following:
Run PowerShell as Administrator.
-
Execute the command:
Add-LocalGroupMember -Group IIS_IUSRS -Member "<# DOMAIN\account #>"Replace <
# DOMAIN\account #> section with the Active Directory Service Account name in the format :DOMAIN\account. -
Validate the account was successfully added by executing the command:
Get-LocalGroupMember -Group IIS_IUSRS -
Look at the command output. If successful, the name of your Active Directory Service Account appears in the output.
Related Topic: