Quick Start

McAfee Firewall Reporter

This Quick Start serves as a high-level road map for setting up McAfee Firewall Reporter (hereinafter Firewall Reporter). Refer to the McAfee Firewall Reporter Product Guide for detailed setup instructions.

Check system requirements

Make sure your system meets the minimum requirements. Firewall Reporter Processor Pentium 4, 3.2 GHz Disk space 250 GB RAM 2 GB Operating system Microsoft Windows NT, Windows Server 2000, Windows Server 2003, or Windows Server 2008 Java Java 2 Runtime Environment JRE 1.5.0_61.6.0_18 Browser Internet Explorer version 6.0 or later Data collector Processor Pentium 4 Disk space 100 MB RAM 512 MB Operating system Windows Server 2000, Windows Server 2003, or Windows Server 2008

Prepare installation responses

Determine your responses to the following installation prompts: a. Installation type Standalone (majority) or distributed b. Password Logon password c. Web site installation type Apache (recommended) or IIS

Download the software

Download the Firewall Reporter software and documentation.

Note: Before you begin, make sure you have the product serial number from the firewall appliance that included Firewall Reporter.

a. Open a web browser and go to mysupport.mcafee.com. b. From the Self Service menu, select Download Software Updates. c. Click Product Downloads. d. Click Business User Support Page. e. Type your Grant Number and click Submit. f. Scroll down to the Firewall Reporter section. g. Download the necessary software: Firewall Reporter Server Software (including data collector) If you are installing the Firewall Reporter server software and the syslog server on the same computer, select this platform. Firewall Reporter Data Collector Software If you are installing the data collector on a separate computer from the Firewall Reporter server software, select this platform. h. Download these documents: McAfee Firewall Reporter Release Notes McAfee Firewall Reporter Product Guide

Install the software

Install the Firewall Reporter software. a. Launch the downloaded Firewall Reporter file and follow the onscreen instructions. b. [Conditional] If you downloaded the data collector software to install the data collector on a separate computer from the Firewall Reporter application, double-click the downloaded McAfeeFirewallReporterDataCollector_v5.1.0.exe file and follow the instructions.

Configure the data collector

After installation, the Data Collector Configuration window appears. From the General tab, configure the following: Name/IP Specify the name or IP address of the computer containing the Firewall Reporter installation. Enable Native Log Make sure this option is selected. Delete log files older than Make sure this option is selected, and select a time frame. Compress log files bigger than Make sure this option is selected, and select a time frame.

Configure firewall appliances

Appliances

Follow the configuration instructions in the McAfee Firewall Reporter Product Guide. a. Configure the firewall appliances to send audit data. McAfee Firewall Enterprise See the Server Configuration chapter, Configuring McAfee Firewall Enterprise section. McAfee UTM Firewall See the Server Configuration chapter, Configuring McAfee UTM Firewall section.

Data Collector

b. [Conditional] If you use a web browser to access Firewall Reporter and a firewall appliance is situated between the browser and the Firewall Reporter server, see the Server Configuration chapter, Configuring for a Web browser section. c. [Conditional] If you installed Firewall Reporter on a Windows 2003 server, or you selected IIS for a website installation type, see the Configuration Settings chapter. d. Check your configuration.

Start Firewall Reporter

a. Start the application: Computer with the installation Double-click the Firewall Reporter icon on the desktop. Computer without the installation Type the installed website URL or IP address in the address bar of the browser window and specify the port (for example, http:// nnn.nnn.nnn.nnn:9216). b. Enter your user name and password. c. Click Login.
3

Activate the license

Activate the permanent license and add devices. a. From the License Manager, click Options | Export Identifier. b. Note the file location in the pop-up window, then copy the file to a location accessible to a web browser. c. Browse to go.mcafee.com/goto/srport/activate, enter your information, and click Submit. d. At the bottom of the page, select the license. e. Click Next, then click Save, and place the file in an accessible location. f. When you receive your license and signature keys: i. Go to the License Manager. ii. Click Licenses, then import the keys. g. Add devices from the License Manager: i. Click Licenses | Manage | Add Device. ii. Select the devices, then click Save. iii. Click Close.

For support information, visit mysupport.mcafee.com. Copyright 2010 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies. 4 700-2566A00