Configure the USM Appliance Enterprise Server and Enterprise Database

Applies to Product: USM Appliance™ LevelBlue OSSIM®

The LevelBlue USM Appliance Enterprise Server component is hardware only, and ships with two devices: an Enterprise Server and an Enterprise Database.

The Enterprise Server needs to know the IP address and password of the Enterprise Database. Likewise, the Enterprise Database needs to know the IP address of the Enterprise Server. This information ensures that the two devices can communicate with each other.

Both configurations occur using the LevelBlue Setup menu.

Task 1: Start the USM Appliance Enterprise Server Configuration

You should have already assigned an IP address to the Enterprise Server by following the procedure Set Up the Management Interface.

To start the USM Appliance Enterprise Server configuration

  1. On the LevelBlue Setup menu, use the Tab key to go to Configure Enterprise Server, and then press Enter (<OK>).

  2. When the LevelBlue MySQL Setup menu appears, move it to the background temporarily while you proceed with configuring the USM Appliance Enterprise Database.

    You will return to this later.

Task 2: Start the USM Appliance Enterprise Database Configuration

You should have already assigned an IP address to the Enterprise Database by following the procedure.

To configure the USM Appliance Enterprise Database

1. On the LevelBlue Setup menu, use the Tab key to go to Configure Database, and then press Enter (<OK>).

2. On the Configure Database menu, use the Tab key to select Configure AlienVault Server IP, and then press Enter (<OK>).

3. In the Enter Server IP Address field, enter the IP address of the USM Appliance Enterprise Server, and then press Enter (<OK>).

The Configure Database menu appears again.

4. Use the Tab key to select Configure AlienVault Framework IP, and then press Enter (<OK>).

5. In the Enter Framework IP Address field, type the same IP address you did for the server in step 3. , and then press Enter (<OK>).

The application returns you to the Configure Database menu.

6. Select Back and press Enter until you progress back to the AlienVault Setup menu.

7. On the AlienVault Setup menu, use the Tab key to select Apply All Changes, and then select OK.

The application prompts you to confirm your choice.

8. Confirm by selecting Yes.

A progress screen appears showing you that the services are restarting and the percentage of job completion.

9. On the Apply All Changes screen, press Enter (<OK>).

10. On the AlienVault Setup menu, use the Tab key to select Jailbreak System, and then press Enter (<OK>).

The application prompts you to confirm your choice.

11. Enter the following command:

grep ^pass /etc/ossim/ossim_setup.conf

12. Write down the password to be entered on the Enterprise Server.

13. Enter exit to return to the AlienVault Setup menu.

Task 3: Continue USM Appliance Enterprise Server Configuration

To continue the USM Appliance Enterprise Server configuration

  1. On the AlienVault MySQL Setup menu, in the Enter MySQL Server IP Address field, type the IP address of the USM Appliance Enterprise Database, and then press Enter (<OK>).

  2. In the Enter MySQL Server Password field, enter the password recorded from step Write down the password to be entered on the Enterprise Server. above.

    Note: The characters are invisible as you type the password.

  3. Press Enter (<OK>) to finish the configuration.

  4. On the AlienVault Setup menu, use the Tab key to select Jailbreak System, and then press Enter (<OK>).

    The application prompts you to confirm your choice.

  5. Enter the following command:

    alienvault-api add_system –-system-ip=<IP-of-Enterprise-Database>

    --password=<root-password-of-Enterprise-Database>

  6. Enter exit to return to the AlienVault Setup menu.