دانلود کتاب Network and IT Guidance for the IT Professional Technical Bulletin

فهرست مطالب :

Network and IT Guidance for the IT Professional
Document Introduction
Summary of Changes
Related Documentation
Network and IT Considerations
Computer Hardware Configuration Requirements
Metasys Device IP Address Assignment (DHCP or Manual)
Metasys Device Hostname Resolution (DNS or Hosts File)
DNS Implementation Considerations
DHCP Implementation Considerations
Microsoft Active Directory® Service Overview
Support for Active Directory Service (Including Single Sign-On Capability)
Implementation Considerations
ADS/ADX/ODS/SCT Considerations
Child Device Considerations
Information Obtained from Active Directory Services
Service Account
Service Account Rules
Service Account Permissions
User Account Rules
RADIUS Overview
Situations When Metasys System Login Screen Appears for RADIUS Users
RADIUS Errors
Syslog Overview
Metasys System Use of Syslog Packet Format
RADIUS and Syslog Configurations
Web Site Caching
Microsoft Message Queuing (MSMQ) Technology
Introduction
Queue Troubleshooting
Metasys System and Virtual Environments
Monitoring and Managing (SNMP)
Time Management (Simple Network Time Protocol [SNTP])
Email (SMTP)
Encrypted Email
Communication to Pager, Email, Printer, SNMP, or Syslog Destination
Location of a Site Director in a Demilitarized Zone (DMZ) or on the Internet
Remote Access to the Metasys System Using a VPN
Metasys System Architecture
Protocols, Ports, and Connectivity for the Metasys System
Protocols and Ports Tables
Connectivity and Protocol Diagrams
ZigBee Channels
Spanning Trees
Field Bus Considerations
Pre-boot Execution Environment (PXE)
Network Reliability Requirement
Metasys System Security Considerations
Metasys Access Security
Department of Defense Banner
Users
Metasys System Local User Accounts and Passwords
Active Directory Service – User Accounts
Default Administrator Accounts
Password Complexity
Auditing
Last Login
Device
Secure Sockets Layer (SSL)/Transport Layer Security (TLS)
Implementing SSL Security for the Metasys Advanced Reporting System
Implementing SSL for Ready Access Portal UI
Metasys for Validated Environments (MVE)
Network Message Security
SQL Database Security
Security on Non-Server Based Engines
Security Updates Management
Software Time Bomb
Antivirus Software Considerations (ADS/ADX, NxE85, NIE89, and LCS85 Only)
ADS/ADX/ODS Considerations
ADX-Specific Features
ADX Split Configuration
ADS Network Diagram: Metasys Network with an ADX
ADSADX Log Folder
Web Browsers
Advanced Security Configuration
Anti-Spyware Considerations
Backup Considerations for the ADS/ADX/ODS
Supported Operating System and SQL Server Software Versions
Internet Information Server (IIS) Anonymous Access Considerations (ADS/ADX/ODS and SCT)
General Information
Enabling and Disabling Anonymous Access on the Default Web Site
Databases
Microsoft SQL Database Considerations
Database Management: Metasys Database Manager
Database Management: SQL Server Tools
Historical Data Storage
Data Backup/Restore
Site Management Portal UI
Metasys Advanced Reporting System UI
Java Software and Private JREs
Web Browser Recommendations
Launcher Download Options and Proxy Settings
Pop-up Ad Blockers
Sleep Power Option on Windows 8.1 and Windows 7 Computers
Disabling User Account Control
Metasys Dial-up Networking
Data Sharing with Published Web Services
Network Interface Cards (NICs)
Appendix: Microsoft® Windows® Operating System and SQL Server® Software License Requirements
Windows Operating System License Requirements
Operating System CALs
Purchasing and Designating CALs
Licensing Modes and CAL Examples
SQL Server 2014 and SQL Server 2012 Licensing Requirements
SQL Server 2008 R2 Licensing Requirements
ADS/ADS-Lite or Non-Server Based ODS Requirements
Appendix: SNMP Agent Protocol Implementation
Overview
Limitations
Metasys SNMP MIB Files
Enterprise ID Number
SNMP Traps
Trap Format
Configuring Trap Filtering
Agent Restart Trap
Alarm Raised Trap
Alarm Clear Trap
Alarm Synchronization
Trap Cases
Supervisory Device Offline/Online
Field Device Offline/Online
Field Device Disable/Enable
SNMP Get Requests
Get Request Definition
Get Request Base OID
Point Attribute Get Request
Base OID
Example #1
Example #2
Device Diagnostic Attributes
Base OID
Example
Translating Attribute Values
Example
Trap Examples
Binary Point Alarm
Binary Point Return to Normal
Analog Point High Warning
Analog Point High Alarm
Analog Point Low Warning
Analog Point Low Alarm
Analog Point Return to Normal
Supervisory Device Agent Restart (ColdStart)
Field Device Offline
Field Controller Online
Field Controller Disabled
Field Controller Enabled
Appendix: Active Directory Service
Overview
Infrastructure Questions
Primary Requirements
ADS/ADX/ODS Computer
SCT Computer
Client Computer
Additional Requirements
Appendix: Security Certificate Implementation
Prerequisites
Important Considerations
Detailed Procedures
Purchasing a Domain Name
Implementing Security Certificates for Metasys UI or Metasys UI Offline Software
Third-Party Security Certificates
Creating the Certificate Request
Purchasing the Security Certificate from a Public Certificate Authority
Installing the Security Certificate
Self-Signed SSL Certificates
Implementing A Self-Signed Certificate on Client Devices
Creating a Self-Signed Certificate
Exporting a Self-Signed Certificate for Client Devices
Importing a Self-Signed Certificate on an Android OS Device with Google® Chrome™
Importing a Self-Signed Certificate on an iOS® Device on Apple® Safari®
Trusted Sites
Adding the Metasys UI or Metasys UI Offline as a Trusted Site – Internet Explorer
Adding the Metasys UI or Metasys UI Offline as a Trusted Site – Google Chrome
Adding the Metasys UI or Metasys UI Offline Sites as a Top Site – Apple Safari
Appendix: Installing Antivirus Software
Installing and Configuring Symantec® Endpoint Protection Software
Installing and Configuring McAfee VirusScan Enterprise Software
Appendix: Configuring a VPN Tunnel with a NETGEAR® ProSAFE® 8-Port Gigabit VPN Firewall/Router
Preparation for Configuration of a VPN Tunnel
Discovering the Public IP Address
Discovering the WAN IP Address of the NETGEAR® ProSAFE® 8-Port Gigabit VPN Firewall Device
Login Credentials for the Broadband Router
Detailed Procedures
Configuring the NETGEAR® ProSAFE® 8-Port Gigabit VPN Firewall/Router (Gateway Side)
Configuring the NETGEAR® ProSAFE® 8-Port Gigabit VPN Firewall/Router (Client Side)
Configuring the Ikev1Gateway Authentication
Configuring the Ikev1Tunnel IPsec
Configuring the Modem/Router Upstream from the NETGEAR® ProSAFE® 8-Port Gigabit VPN Firewall/Router
Index