Installing Sentinel 6.1 SP2





















Section 3.1, “Installer Overview,” on page 27

Section 3.2, “Sentinel Configurations,” on page 28

Section 3.3, “Port Numbers Used for Sentinel 6.1,” on page 31

Section 3.4, “General Installation Prerequisites,” on page 31

Section 3.5, “Simple Installation,” on page 37

Section 3.6, “Custom Installation,” on page 39

Section 3.7, “Installing Sentinel as a Domain user,” on page 51

Section 3.8, “Post-Installation Configuration,” on page 51

Section 3.9, “LDAP Authentication,” on page 58

Section 3.10, “Updating the License Key,” on page 65

3.1 Installer Overview

This section helps you install the major components of the Sentinel system. The Sentinel installer offers the option of a Simple installation or Custom installation. The Simple installation installs all components on one machine and is intended for demonstration or training systems. This is not intended for production use as many minimal default settings are used for a Simple installation. The

Custom installation can be used to install one or more Sentinel components at a time and can be used for distributed production installations.

In addition to the Sentinel components, there are several other applications that can be part of the

Sentinel system:

 Database: The database stores the events, correlated events, and configuration information.

The database must be installed according to the best practices recommended by Oracle and

Microsoft for database installation, directory structure, and so on.

 Crystal Reports Server: Crystal (and its associated Web Server and database) is used to generate reports from the Novell report library or custom-designed reports, and has a separate installer for Crystal components. For more information about installing Crystal, see

Chapter 7,

“Crystal Reports for Windows,” on page 93 and

Chapter 8, “Crystal Reports for Linux,” on page 121 .

 Crystal Reports Developer: This application is used to create and modify reports.

 Advisor: Advisor provides real-time intelligence about attacks and vulnerabilities, including real-time exploit detection to determine which threats are taking place against vulnerable systems. For more information about Advisor, see “ Advisor Usage and Maintenance ” in the

Sentinel 6.1 User Guide .

 Sentinel Link Solution: Sentinel Link is a mechanism that provides the ability to hierarchically link multiple Sentinel systems, including Novell Sentinel Log Manager, Novell

Sentinel, and Novell Sentinel Rapid Deployment. You can hierarchically link two or more

Sentinel systems to forward filtered events from one Sentinel system to another for further evaluation. For more information on Sentinel Link Solution, see “ Sentinel Link Solution ” in the Sentinel 6.1 User Guide .

3

Installing Sentinel 6.1 SP2 27