Sophos iView Quick Start Guide

Sophos iView Setup
Quick Start Guide
Product version: 1.000
Document date: Thursday, October 16, 2014
The specifications and information in this document are subject to change without notice. Companies,
names, and data used in examples herein are fictitious unless otherwise noted. This document may not
be copied or distributed by any means, in whole or in part, for any reason, without the express written
permission of Sophos Limited. Translations of this original manual must be marked as follows: "Translation of the original manual".
В© 2014 Sophos Limited. All rights reserved.
http://www.sophos.com
Sophos UTM, Sophos UTM Manager, Astaro Security Gateway, Astaro Command Center, Sophos
Gateway Manager, Sophos iView Setup and WebAdmin are trademarks of Sophos Limited. Cisco is a
registered trademark of Cisco Systems Inc. iOS is a trademark of Apple Inc. Linux is a trademark of
Linus Torvalds. All further trademarks are the property of their respective owners.
Limited Warranty
No guarantee is given for the correctness of the information contained in this document. Please send
any comments or corrections to nsg-docu@sophos.com.
Contents
1 Introduction
1.1 System Requirements
1.1.1 Minimum Hardware Requirements
1.1.2 Supported Platforms
5
5
5
5
2 How to get iView
6
3 Configure iView
7
4 Connecting UTMs to iView
8
1 Introduction
1 Introduction
Sophos iView is the logging and reporting tool for UTM. With iView you can access loggings of
your UTMs, see reports for example of WAFВ and Web usage, Firewall rule based usage and
many other features. You can also see trend and compliance reports.
Sophos iView provides a several Dashboard which display customizable reports and graphs.
iView is a separate application for managing iView.
1.1 System Requirements
Before you install Sophos iView you should check the system requirements.
1.1.1 Minimum Hardware Requirements
The minimum hardware requirements for iView are:
l
CPU:В Intel compatible CPUВ with minimum 1.5 Ghz processor
l
RAM:В 1 GB
l
Hard disk: 20 GB
l
2 PCIВ Ethernet Network Cards
1.1.2 Supported Platforms
Supported platforms are:
l
Hyper V
l
VMWare Workstation/ESX
l
VirtualBox
l
KVM
l
Citrix XEN
Note – Sophos iView ISO file is supported in 64 bit/32 bit kernel.
iView 1 Quick Start Guide
5
2 How to get iView
2 How to get iView
For getting iView, proceed as follows:
1. Navigate to the Sophos downloads area.
2. Click on UTM Downloads.
A new page opens.
3. In the Sophos iView Setup area click on Download ISO.
4. Mount the ISO-file on an virtual drive and install it.
Note – iView installation is going to delete all existing data in hard disk. Parallel operating system or software is not supported.
During installation you will be asked to choose keyboard type, time zone, date &В time settings and management network interface IP configuration to access iView.
When the installation is done, reboot the machine.
5. After reboot open iView in your web browser by entering the IP address
(e.g.В 'https://10.1.2.33:4444').
6. Make the basic system setup by following the displayed steps.
7. Log on to iView with username 'admin' and the password you defined during the system
setup.
You can now configure iView and connect to your UTMs.
With the MyUTM account you are able to extend your license. Information about license installation you will find in the manual ofВ Sophos iView Setup in the menu Installation >В Basic Configuration.
6
iView 1 Quick Start Guide
3 Configure iView
3 Configure iView
iView is divided into the iView application and iView. With the iView you are able to configure and
manage iView. To do so, proceed as follows:
1. Log on to your iView (for example with 'https://10.1.2.33:4444').
2. Navigate to Management >В iView Settings.
3. In the General tab make general iView settings like language changing and access configuration.
4. In the HTTPS Certificates tab you can re-generate your certificate and choose the
requested iView certificate.
5. In the Advanced tab set the timeout for closing the iView session and set the iView TCP
port.
6. Navigate to Management >В iView Logging &В Reporting.
7. In the General tab make general iView settings like port changing, configuring Remote
Syslog Server and password changing.
iView on default is reachable via Port 8000 (for example 'https://10.1.2.33:8000').
8. In the Open iView tab you can open iView directly.
Please find additional information about configuring Sophos iView Setup in the iView help and
additional information about iView in the iView help.
iView 1 Quick Start Guide
7
4 Connecting UTMs to iView
4 Connecting UTMs to iView
One of the first steps with iView will be to set up the connection between iView and your UTMs.
Therefore it is necessary to configure iView as the Remote syslog server in UTM. Proceed as follows:
1. Log on to the UTMВ you want to connect to iView (for example with
'https://10.1.2.31:4444').
2. Navigate to Logging &В Reporting >В Log Settings >В Remote Syslog Server.
3. Click the toggle switch to activate the settings area.
4. In the Remote syslog settings area add your iView installation as syslog server.
5. Click Apply to activate iView as the syslog server for this UTM.
6. Repeat these steps for all UTMs you want to connect to iView.
iView will automatically add the UTM(s) and prompt the Super Admin with 'New device found'
on successful iView login.
8
iView 1 Quick Start Guide