1. Add a NetApp 7-Mode Component
After you have installed the Solution and configured the Lepide service to run with administrative credentials, you can add a NetApp File Server for auditing.
From the Component Management window, under the Add Component section, click on the File Server icon to add this component to the solution.
The File Server Settings Console dialog box is displayed:
Here, you can click the Add File Server icon on the toolbar to add either of the following file servers:
Windows File Server
NetApp Filer
Click the Add File Server icon, select Single then select NetApp 7-Mode.
The Add File Server wizard starts:
Either enter the name or IP Address of NetApp Filer Name manually or click Add to select a NetApp Filer from the network.
Here, you can select a domain name and click Find to list the available Filers in it.
Select a NetApp Filer and click OK.
After the required NetApp Filer is selected, enter the login credentials of a NetApp Administrator to add it.
Click Next to go to the next step, to provide the details of SQL Server to create a database for storing auditing logs.
Click the Server Name dropdown to select the desired SQL Server.
There are two authentication options available:
Windows Authentication: This mode can be selected if SQL Server is installed on the same computer where the solution is installed.
SQL Server Authentication: Select this mode if SQL Server is installed on a remote or local computer. We recommend that this option is selected.
Provide the username and password of a SQL user, who has sufficient rights to create the database.
Enter a database name in the database name field to create a new database. You can also select an existing database created earlier by Lepide or another application.
Click Next
The NetApp Agent Information dialog box is displayed:
Enter the details of the system where you wish to install the agent to collect the changes from NetApp Filer.
NOTE: You can install the agent on another system apart from NetApp Filer. However, it is important to note that the agent can only be installed on any one client system or the domain controller. We recommend that you do not to install it on workgroup computers and the agent is installed only on the domain connected Windows Computer and not on NetApp Filer.
Enter the name or IP Address of the agent system.
Provide the Username and Password of an administrator of the agent system to allow access to the software to install the agent.
NOTE: The provided user should be a member of Administrators, Domain Admins, Group Policy Creator Owners, Enterprise Admins, and Schema Admins groups, at the agent system, to enable the auditing of NetApp Filer. If the above rights are not assigned to the user, then follow the steps below:
Go to Administrative Tools.
Open Active Directory Users and Computers.
Select User Properties.
Go to Member Of, Add Group.
Select any of the following groups as per the above requirements.
Administrators
Domain Admins
Group Policy Creator Owners
Enterprise Admins
Schema Admins
Click Apply and OK
Now you need to choose the Connection Type. Lepide provides the following two types of connections with the NetApp Filer from the agent:
Asynchronous: This option is quick, but it cannot capture security details. It captures the security events but does not show details.
Synchronous: This option captures security details, but the process slightly slows down the performance of the Filer.
NOTE: If you need the Permission Analysis of NetApp Filer, we recommend using synchronous mode to connect to NetApp Filer.
Certain changes are required in the Local Security Policies to allow the software to audit Filers. The software provides a checkbox to make such changes automatically from its end.
If you do not want to go for automatic changes or face an error in applying these changes automatically, then uncheck this option and make these manually.
Click the checkbox to make the changes automatically. The software displays the list of required changes in the next screen and reconfirms it.
Click Yes to make these changes and to install the agent.
If you click No, then the changes will not be made, but still, the agent will be installed. Because of no agent installation, the audit reports will not be generated in this case.
To generate the audit reports after clicking No, you must make these changes manually.
Click Finish to complete the process.
2. Add a Netapp Cluster Mode Component
Follow the steps below to add NetApp Cluster Mode for auditing.
Click the Add File Server button on the toolbar and click NetApp Filer.
You can also click the icon in the Right Panel, go to NetApp Filer sub-menu and click NetApp Cluster-Mode.
The Wizard to add NetApp Cluster Mode is displayed:
Add the following details:
Domain Name: Enter the name or IP Address of the domain, where the NetApp Cluster Mode is located, in the Domain text field.
User Name: Enter the name of a user, who is a member of Domain Admins group.
Password: Enter the password of the selected user.
Check the Box which says, I have Management Access.
Click Next
The Add File Server dialog box is displayed:
Add the following details:
User Name: Enter the name of a user, who has vsadmin role. You can use the default vsadmin user as well.
Password: Enter the password of the selected user.
Audit Configuration: Select Automatic Auditing. Select this option if you have not already configured auditing. You need to provide the following inputs:
Volume Name
Aggregate Name
Click Next to proceed. The Solution enables auditing with the following settings:
Log Volume Size :3 GB
Log format: XML
Log File Size: 1 MB
NOTE: The Lepide Data Security Platform needs at least 3 GB of free space at the selected aggregate to enable the auditing automatically.
NOTE: The following error message may appear when you try to apply the Automatic Auditing option.
To solve this issue, add the aggregate in the Vserver's list by the following command:
vserver modify -vserver <server_name> -aggr-list <aggregate_value>
To see whether the aggregate has been added to the list, use the following command:
vserver show -fields aggr-list
Click Next
The SQL Server Information dialog box is displayed. Here, you need to provide the details of SQL Server to create a database for storing auditing logs.
Click the Server Name dropdown to select the desired SQL Server.
There are two authentication options under itWindows Authentication: This mode can be selected if SQL Server is installed on the same computer where the solution is installed.
SQL Server Authentication: Select this mode if SQL Server is installed on a remote or local computer. We recommend that this option is selected.
Provide the username and password of a SQL user, who has sufficient rights to create the database.
Enter a database name in the database name field to create a new database. You can also select an existing database created earlier by Lepide or another application.
Click Next
The installation of the agent starts:
Click Finish to complete the process.
3. Steps after Adding a File Server Component
A dialog box is displayed asking whether you want to apply a rule to the newly added file server:
Click Yes and create a new rule from the next window.
NOTE: You need an Audit Rule to start monitoring of the newly added File Server. If you want to skip the step of creating a rule, then click No. However, the audit reports will not be generated until you create an Audit Rule and update the agent. It is necessary to Update Agent if you are creating or modifying an Audit Rule.
Enter a rule name and select the File Server for which you want to create the rule if it is not already selected in the File Servers drop-down menu.
Click Next. The audit policies dialog box is displayed:
NOTE: In this example, we are creating an audit rule with predefined policy. To create an auditing rule with a user- configured policy refer to the Advanced File Server Configuration Guide.
For this example, we will select the Audit All policy:
Click Next
Select All Users in the Audit User tab and click Next. The rule is applied to all users in this case.
Click Next
The Summary box is displayed:
Click Finish to complete the process. The newly added audit rule is displayed in the list.
Click Update Agent on all File Servers to apply new Settings notification and follow the on-screen instructions to update the agent.
NOTE: It is necessary to update the agent each time you change the applied Audit Rule. If this is not done, the auditing will not be updated, and the reports will not include the new modifications when generated.
After you have created the auditing rules, Restart the main console, and go to the Audit Reports tab in the main panel to view the reports.