CentOS 6.X Setup Cyberoam iView on Linux
From Notes_Wiki
Home > Enterprise security devices or applications > Cyberoam firewall > CentOS 6.X Setup Cyberoam iView on Linux
To configure cyberoam iView on Linux use following steps:
- Create a VM with CentOS 6.X including PostgreSQL 8.X
- Download Appropriate Linux bin file from https://sourceforge.net/projects/cyberoam-iview/files/ Name of latest stable release is typically shown at the top.
- You can also download installation manuals from the Documents folder from the same link.
- Download java 1.5 rpm bin file for linux from http://www.oracle.com/technetwork/java/javasebusiness/downloads/java-archive-downloads-javase5-419410.html
- Copy the iView bin file and downloaded java to the VM
- Login as root user in the VM
- Install java1.5 using java rpm bin file. (chmod +x <filename>, ./<filenam> as root)
- chmod +x iView setup file
- Verify that postgresql database version is 8.4 (rpm -qa | grep postgre)
- service postgresql initdb
- Edit /var/lib/pgsql/data/pg_hba.conf and update all ident to trust. For example.
- local all all ident
-
- to
- local all all trust
-
- You would have to update this at three places local, 127.0.0.1, ::1
- to
- service postgresql restart
- Execute iView setup file in terminal (./<filename>)
- iView setup path can be /var/iview
- Archive path can be /var/iview/archived
- PostgreSQL data folder is at /var/lib/pgsql
- Java is perhaps at /usr/java/jdk1.5.0_22
- Choose appropriate iView admin password
- Give appropriate admin email ID
- cat /var/iview/installation.log and make sure everything went fine
- service iviewd status
- service iptables stop
- chkconfig iptables off
- chkconfig postgresql on
- Check iView dashboard at http://<machine-ip>:8000/
- Log into admin console on cyberoam
- Go to "Logs & Reports" -> Configuration
- Enter IP address of the iView server. Port number is 514. Select Facility Daemon and Severity Information. Format can be left as it is to CyberoamStandardFormat.
- Go to "Log settings" tab
- Select appropriate categories for which logs are desired for the newly added Log server
- Again log into iView dashboard
- Add the new device with appropriate name and type as 'cyberoam'
- You can additionally do "tcpdump -vn -i <interface-name> 'udp and port 514'" on Linux VM to verify that cyberoam is sending logs to the new iView server
- You can also go to iView Dashboard. System -> Archives -> Live Logs. Select the correct device and click Go. Also click 'Start update'.
- Wait 10 minutes. Then do 'service iviewd restart'. Then again login into dashboard to see various details.
Home > Enterprise security devices or applications > Cyberoam firewall > CentOS 6.X Setup Cyberoam iView on Linux