Discover and Command Post-deployment Checklist

After you deploy the ExtraHop Discover or Command appliance, log into the Admin UI and configure the following settings. Refer to the section of the ExtraHop Admin UI Guide specified in each action below, except where noted.

Password
Maintain system security after the evaluation period. Change the default password. For more information, see the Default User Accounts FAQ.
NTP
Time is critical in the ExtraHop appliance, particularly when doing event correlation with time-based metrics and logs. Verify that the NTP settings are correct for your infrastructure, test settings, and sync NTP. For more information, see Configure the system time.
Time Zone
The correct time zone is critical to run scheduled reports at the correct time. Ensure the ExtraHop appliance has the correct time zone. For more information, see Configure the system time.
Remote Authentication
Set up remote authentication. The ExtraHop appliance integrates with LDAP, RADIUS, and TACACS+ for remote integration.
Firmware Update
The ExtraHop appliance firmware is updated often with enhancements and resolved defects. Verify that you have the current firmware. For more information, see Upgrade the firmware on your ExtraHop appliance.
Audit Logging
The ExtraHop appliance can send events to a remote syslog collector. For more information, see the Send audit log data to a remote syslog server.
SMTP
The ExtraHop appliance can email alerts and system-health notifications. Set up and test notifications. For more information, see Configure email settings for notifications.
System Notifications
The ExtraHop appliance can send email when it detects problems. Create an email group to receive notifications. For more information, see Configure an email notification group on a Discover or Command appliance.
iDRAC
Each physical ExtraHop appliance has an iDRAC port, similar to iLO or KVM over Ethernet. Connect and configure the iDRAC port. For more information, see Configure the iDRAC Remote Access Console.
SSL Certificate
Each ExtraHop appliance ships with a self-signed certificate. If you have a PKI deployment, generate your own certificate and upload it to each ExtraHop appliance. For more information, see the SSL Certificate section in the Admin UI Guide.
DNS A Record
It is easier to access an ExtraHop appliance by hostname than by IP address. Create an A record in your DNS root ("exa.yourdomain.local") for each ExtraHop appliance in your deployment. Refer to your DNS administration manual.
Customizations and Datastore Backup
Create a system backup prior to upgrading firmware, or before making a major change in your environment. For more information, see Back up a Discover or Command appliance.
Connect
Connect Command and Discover appliances to all Explore and Trace appliances. For more information, see Connect the Discover and Command appliances to Explore appliances and Connect the Discover and Command appliances to the Trace appliance.
Published 2018-11-09 13:57