Up
Previous Next

Sheriff CSM™

Configure the Sheriff CSM Sensor (Deputy) after Deployment

You'll want to set up and configure the Sheriff CSM Server first. If you purchased Sheriff CSM Standard, Enterprise, or Remote Deputies, next you will want to configure the Sensor by providing the Sheriff CSM Server IP address and Framework IP address through the Sheriff Setup menu. Then, there are some final configuration steps on the web UI.

Prerequisites

• Sheriff CSM All-in-One — You must have already configured the Sheriff CSM All-in-One before you can complete the Sensor configuration.

• Sheriff CSM Standard or Enterprise — You must have already configured the Sheriff CSM Server and have its IP address available.

• If you intend to configure VPN in your Sheriff CSM deployment, you must set up a VPN tunnel for the client beforehand. This provides you with a VPN IP address that you use in this configuration task. For details, see VPN Configuration.

Configure the Sheriff CSM Sensor

To configure a Sensor on Sheriff CSM All-in-One or Sheriff CSM Server

1. Connect to the Sheriff Console through SSH and use your credentials to log in.

   The Sheriff Setup menu displays.

2. Select Configure Sensor.

3. Select Configure Sheriff Server IP.

4. Type the IP address of the Sheriff CSM Server the Sensor should contact and press Enter (<OK>).

   Important: If this Sheriff CSM deployment will use VPN, substitute the VPN IP for the physical IP address.

   The Configure Sensor menu appears again.

5. Select Configure Sheriff Framework IP.

6. Type the same IP address you did for the server and press Enter (<OK>).

   The application returns you to the Configure Sensor menu.

7. Press <Back> until you are on the Sheriff Setup menu again. Select Apply all Changes.

8. Press <Yes> to confirm.

   Sheriff CSM applies the changes and restarts all the services, which may take several minutes.

9. Launch the Sheriff CSM web UI and log in as administrator.

10. Go to Configuration > Deployment > Components > Deputies.

    A warning message appears, stating:

    The following Deputies are being reported as enabled by the server, but are not configured.

    The warning message contains the Sensor IP address and two links labeled Insert and Discard.

11. Click Insert.

    A new screen containing a form appears. To answer the monitor network question, see Correlation Contexts for assistance.

12. Fill out the form and click Save.

13. Repeat all of the foregoing procedures for every Sensor you plan to deploy in your network.