Symantec™ Control Compliance Suite 11.0 Planning and Deployment Guide
| Article:DOC5587 | | | Created: 2012-05-08 | | | Updated: 2012-05-09 | | | Article URL http://www.symantec.com/docs/DOC5587 |
Description
Symantec™ Control Compliance Suite 11.0 Planning and Deployment Guide
Contents
The guide provides detailed information about planning and deploying the Control Compliance Suite.
1. Understanding Control Compliance Suite
About the Control Compliance Suite
How to achieve your business objective with CCS
CCS architecture
Components of CCS
CCS Application Server
CCS Manager
CCS Agent
Databases
CCS Console
CCS Web Console
2. Planning for Control Compliance Suite deployment
About the CCS deployment models
Deployment model based on the data collection solution
Deployment model based on the size
Deployment model based on the type of installation
Hardware and operating system requirements
Network ports
Supported target computers for agent-based data collection
Supported databases for agent-based data collection
Software requirements
User Privileges for deploying the CCS components
User privileges for SQL server and CCS databases
Configuring credentials for asset import and data collection
Performance and scalability
Deployment sizing
Recommendations for upgrading an RMS deployment to CCS 11.0
Recommendations for upgrading an ESM deployment to CCS 11.0
Database recommendations
Recommendations for data evaluation
Modifying the CCS Manager configuration settings for message based data collection
Modifying the CCS Manager page file size
Virtualization
About raw-data collection
About message based data collection
About collecting data from assets located on the cloud
CCS Upgrade Paths
About using sites
What sites can do for you
About planning sites
About upgrading to routing rules
About FIPS compliance
Prerequisites for FIPS compliance
About mandatory configuration for Federal Information Processing Standard compliance
About the modules that handle sensitive information and their Federal Information Processing Standard-compliance status
About external data integration
External data systems architecture
Preparing for external data integration
Planning for the Symantec CCS Vulnerability Manager integration
Planning for the Symantec Data Loss Prevention integration
Planning for the Symantec Response Assessment Module integration
About Altiris integration
About importing assets from Altiris
CCS Asset Export Task architecture
Prerequisites for installing the CCS Asset Export Task
CCS Asset Export Task recommendations
Planning the Asset Export Task deployment
Installing the Asset Export Task
Installing Asset Export Task on Altiris Notification Server
About the integration with Symantec Protection Center
Getting started with Protection Center integration
Installing the certificate to enable CCS integration with Protection Center
About installing the CCS PowerShell snap-ins
Prerequisites for installing CCS PowerShell snap-ins
Installing CCS PowerShell snap-ins
Adding CCS PowerShell snap-ins
About internationalization and localization in CCS 11.0
About installation and configuration in locale setups
Product documentation
3. Deploying Control Compliance Suite
CCS Suite deployment sequence
Collecting data from other platforms
Installing the CCS Suite
Product Improvement Program
Disabling the Product Improvement Program
About licensing of the product components
About the pass phrase
About using special characters in credentials
About Service Principal Names
Configuring Service Principal Names
About creating certificates
About certificate encryption
About the Certificate Management Console
Creating certificates for the CCS Suite components
Creating a certificate for installing a stand-alone CCS Manager
Installing a stand-alone CCS Manager for a scale out deployment of CCS
Registering the CCS Manager
Configuring basic CCS Manager settings
Configuring advanced CCS Manager settings
Assigning a role to a CCS Manager
Configuring CCS Manager data collectors
Installing the Oracle Instant Client for data collection on Oracle
Creating a lightweight package for remote installation of CCS Manager
Configuring IPv4 and IPV6 sockets for communication
Setting the IPV6_SERVER flag
Installing the CCS Agent on Windows
Registering the CCS Agent
Configuring LiveUpdate for a CCS Agent
Configuring the Integrated Command Engine for a CCS Agent
Changing a CCS Agent port
Installing the CCS Agent on UNIX
Installing the CCS Agent on UNIX by using the advanced installation option
Registering the CCS Agent on UNIX
Changing the LiveUpdate setting for an agent
Installing the SQL Server T4 snap-in on CCS Agents for raw-data collection on SQL Server
Configuring CCS Agents for message based data collection
Enabling message based data collection
Installing the application modules on CCS Agent on Windows
Installing the application modules on CCS Agent on UNIX
Importing security content on CCS Manager using the importcontent utility
Examples of using the importcontent utility
Installing and launching the CCS Console
Launching the CCS Web Console
Installing the CCS Content
Installing the CCS components in silent mode
Installing the CCS Suite in silent mode
Installing a stand-alone CCS Application Server in silent mode
Installing a stand-alone CCS Manager for scale-out deployment in silent mode
Installing CCS content in silent mode
Installing and registering a CCS Agent on Windows in silent mode
Installing and registering a CCS Agent on UNIX in silent mode
Installing the application modules on CCS Agent on Windows in silent mode
Installing the application modules on CCS Agent on UNIX in silent mode
About silent installation return codes
Deploying external data systems
Integrating Symantec Data Loss Prevention with CCS
Integrating Symantec CCS Vulnerability Manager with CCS
Integrating Symantec Response Assessment Module with CCS
Maintaining and Updating CCS using LiveUpdate
4. Upgrading Control Compliance Suite
About upgrading the CCS - Reporting and Analytics components
About upgrading an RMS deployment
Upgrading an existing CCS and RMS deployment to CCS 11.0
Moving from an RMS-only deployment to CCS 11.0
About upgrading an ESM deployment
Upgrading an existing CCS and ESM deployment to CCS 11.0
Moving from an ESM-only deployment to CCS 11.0
About delegation in Control Compliance Suite
Configuring constrained delegation for CCS
Configuring unconstrained delegation for CCS
About the CCS Data Migration utility
Prerequisites for running the CCS Data Migration Utility
Running the CCS Data Migration utility
Skipping CCS Reports and Dashboards data migration
Upgrading the reporting and analytics components
Upgrading the components of a single setup mode of installation
Upgrading a stand-alone CCS Directory Server
Upgrading a stand-alone CCS Application Server
Upgrading the Data Processing Service to CCS Manager
Upgrading the ESM Manager to CCS Manager
Preserving the customized .m files
Upgrading the ESM Utilities
Upgrading the ESM Agent to CCS Agent on Windows
Upgrading the ESM Agent to CCS Agent on UNIX
Performing a remote upgrade of ESM agents
Upgrading the BV-Control for UNIX agent to CCS Agent
Performing a remote upgrade of BV-Control for UNIX agents
Upgrading the CCS Content
Upgrading the CCS components in the silent mode
Upgrading all CCS components in silent mode
Upgrading a stand-alone CCS Directory Server in silent mode
Upgrading a stand-alone CCS Application Server in silent mode
Upgrading the Data Processing Service to CCS Manager in silent mode
Upgrading the ESM Manager to CCS Manager in silent mode
Upgrading the ESM Agent to CCS Agent on Windows in silent mode
Upgrading the ESM Agent to CCS Agent on UNIX in silent mode
Upgrading the BV-Control for UNIX agent to CCS Agent in silent mode
Upgrading CCS content in silent mode
5. Modifying or repairing the installed Control Compliance Suite components
Adding or upgrading CCS components
Adding or upgrading CCS content in silent mode
Upgrading a stand-alone CCS Manager
Repairing or reinstalling the CCS Suite
Repairing or reinstalling a stand-alone CCS Manager
Repairing the CCS Agent
6. Uninstalling Control Compliance Suite components
Uninstalling the CCS Suite
Uninstalling a stand-alone CCS Manager
Uninstalling the CCS Agent on Windows
Uninstalling the CCS Agent on UNIX
7. Maintenance
Database maintenance
SQL script to alter index views
SQL script for archival of historical results data
SQL script for deletion of third party evidence data
Database maintenance for evidence data
Moving filegroups to different locations
Compressing the evidence storage filegroup for enterprise edition of SQL Server
Compressing the evidence storage filegroup for non-enterprise edition of SQL server
Backup and restore of evidence data
Purging of evidence data
Disaster recovery and migration
Supported operating systems and databases for migration
Disaster Recovery and Migration scenarios
Backing up and restoring CCS components
8. Troubleshooting
Deployment troubleshooting
Attachments
|
|
Legacy ID
v71354176_v74692934
Article URL http://www.symantec.com/docs/DOC5587
Terms of use for this information are found in Legal Notices
Thank you.