Configure the USM Appliance Enterprise Server and Enterprise Database

Applies to Product: USM Appliance™ AlienVault OSSIM®

The AlienVault USM Appliance Enterprise Server component is hardware only, and ships with two devices: an Enterprise Server and an Enterprise Database.

The Enterprise Server needs to know the IP address and password of the Enterprise Database. Likewise, the Enterprise Database needs to know the IP address of the Enterprise Server. This information ensures that the two devices can communicate with each other.

Both configurations occur using the AlienVault Setup menu.

Task 1: Start the USM Appliance Enterprise Server Configuration

You should have already assigned an IP address to the Enterprise Server by following the procedure Set Up the Management Interface.

To start the USM Appliance Enterprise Server configuration

  1. On the AlienVault Setup menu, use the Tab key to go to Configure Enterprise Server; press Enter (<OK>).
  2. When the AlienVault MySQL Setup menu appears, move it to the background temporarily while you proceed with configuring the USM Appliance Enterprise Database.

    You will return to this later.

Task 2: Start the USM Appliance Enterprise Database Configuration

You should have already assigned an IP address to the Enterprise Database by following the procedure .

To configure the USM Appliance Enterprise Database

1. On the AlienVault Setup menu, use the Tab key to go to Configure Database; press Enter (<OK>).

2. On the Configure Database menu, use the Tab key to select Configure AlienVault Server IP; press Enter (<OK>).

3. In the Enter Server IP Address field, enter the IP address of the USM Appliance Enterprise Server; press Enter (<OK>).

The Configure Database menu appears again.

4. Use the Tab key to select Configure AlienVault Framework IP; press Enter (<OK>).

5. In the Enter Framework IP Address field, type the same IP address you did for the server in step 3. ; press Enter (<OK>).

The application returns you to the Configure Database menu.

6. Select Back and press Enter until you progress back to the AlienVault Setup menu.

7. On the AlienVault Setup menu, use the Tab key to select Apply all Changes; select OK.

The application prompts you to confirm your choice.

8. Confirm by selecting Yes.

A progress screen appears showing you that the services are restarting and the percentage of job completion.

9. On the Apply all Changes screen, press Enter (<OK>).

10. On the AlienVault Setup menu, use the Tab key to select Jailbreak System; press Enter (<OK>).

The application prompts you to confirm your choice.

11. Enter the following command

grep ^pass /etc/ossim/ossim_setup.conf

12. Write down the password to be entered on the Enterprise Server.

13. Enter exit to return to the AlienVault Setup menu.

Task 3: Continue USM Appliance Enterpise Server Configuration

To continue the USM Appliance Enterprise Server configuration

  1. On the AlienVault MySQL Setup menu, in the Enter MySQL Server IP address field, type the IP address of the USM Appliance Enterprise Database; press Enter (<OK>).
  2. In the Enter MySQL Server password field, enter the password recorded from step Write down the password to be entered on the Enterprise Server. above.

    Note: The characters are invisible as you type the password.

  3. Press Enter (<OK>) to finish the configuration.
  4. On the AlienVault Setup menu, use the Tab key to select Jailbreak System; press Enter (<OK>).

    The application prompts you to confirm your choice.

  5. Type the following command

    alienvault-api add_system –-system-ip=<IP-of-Enterprise-Database>

    --password=<root-password-of-Enterprise-Database>

  6. Type exit to return to the AlienVault Setup menu.