Proofpoint | ObserveIT On-Premises Insider Threat Management

Back-end Components Prerequisites

Complete these prerequisites to set up the back-end components.

ObserveIT Web Console and ObserveIT Application Server

Separate SSD-based Hot Storage volume is attached.
Hot Storage formatted with NTFS 8 KB blocks. If not available, format with 4 KB blocks.
TLS certificate provisioned to the server.
- TLS certificate has server FQDN as Common Name and DNS name as a Subject Alternative Name.
- TLS certificate has server hostname as DNS name as a Subject Alternative Name. o The certificate conforms to the TLS certificate requirements.
Net Framework 4.7.2 or higher is installed.
ObserveIT Service Account is a member of the following local Security Groups:
- Administrators
- IIS_IUSRS
ObserveIT Service Account has the following rights assigned to it:
- Logon as a service
- Run as a batch job
- Interactive logon (for the duration of the installation or upgrade)
Operating System prerequisites are installed. Run PowerShell as Administrator and copy/paste the following command:

Install-WindowsFeature Web-Server, Web-WebServer, Web-Common-Http, Web-Default-Doc, Web-Dir-Browsing, Web-Http-Errors, Web-Static-Content, Web-Stat-Compression, Web-Security, Web-Filtering, Web-App-Dev, Web-Net-Ext45, Web-Asp, Web-Asp-Net45, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Mgmt-Tools, Web-Mgmt-Console, NET-WCF-Services45, NET-WCF-HTTP-Activation45 -IncludeManagementTools
Use FIPS compliant algorithms for encryption, hashing, and signing Group Policy setting is disabled.

Net Framework 4.7.2 or high is installed.
ObserveIT Service Account is a member of the following local Security Groups:
- Administrators
- IIS_IUSRS
ObserveIT Service Account has the following rights assigned to it:
- Logon as a service
- Run as a batch job
- Interactive logon (for the duration of the installation or upgrade)
Use FIPS compliant algorithms for encryption, hashing, and signing Group Policy setting is disabled.

Related Topic: