CommandCenter Secure Gateway Release Virtual CC

Transcription

1 CmmandCenter Secure Gateway Release Virtual CC Nvember 15, 2010 Versin prvides the initial release f the CC-SG virtual appliance (Virtual CC). Virtual CC is supprted t run n VMware. Versin cannt be installed n a CC-SG hardware appliance. Cntents Intrductin... 2 Applicability... 2 Obtaining Release New Features and Updates in This Release... 2 Virtual CC Overview... 3 Security and Cmpliance Infrmatin... 4 Updated Prduct Dcumentatin... 4 General Ntes... 4 Limitatins and Restrictins... 5 (Nte numbers in parentheses thrughut this dcument are reference numbers internal t Raritan.) CC-SG Release Ntes Dc. # Page 1 f 6

2 Intrductin These Release Ntes cntain imprtant infrmatin regarding the release f this prduct. Please read the entire dcument and the related dcumentatin available fr this release. Release intrduces the CC-SG virtual appliance (Virtual CC). Virtual CC cntains the same features as the CC-SG hardware appliance, with ne exceptin. Autmatic failver is implemented differently. Instead f installing tw instances f CC-SG in a clustered cnfiguratin, Virtual CC custmers will use VMware s High Availability functin t implement autmatic failver t anther virtual machine. Release dcumentatin is available at Applicability CC-SG is applicable t the CmmandCenter Secure Gateway virtual appliance. Obtaining Release Virtual CC sftware and its dcumentatin are prvided n a DVD when rdering part number CCSG128-VA. When rdering, it s imprtant t prvide the address f the persn that will be installing the sftware and license. When the rder is entered int Raritan s system, an message cntaining a link t the licensing prtal and instructins fr dwnlading yur license file will be sent t the address n file. Once yu have access t the licensing prtal, yu can dwnlad Virtual CC frm Part number CCSG128-VA includes sftware, dcumentatin and the first year f sftware maintenance. New Features and Updates in This Release The purpse f is t intrduce the virtual appliance. As a result, there are n new cre CC-SG functins r features. Cmpatibility with ther Raritan prducts, alng with 3 rd party applicatins such as brwsers and JRE, remain the same as CC-SG Release Ntes Dc. # Page 2 f 6

3 The CC-SG evaluatin sftware has als been updated. The new Virtual CC eval allws access t 16 ndes and includes the 5.0.x features. The new part number is CCSG16-VA, which can be rdered at n charge n a DVD r dwnladed frm The Virtual CC evaluatin sftware is supprted fr use with VMware Player 3.1. CCSG16-VA includes a Quick Setup Guide with specific installatin instructins fr this evaluatin versin. Nte that it includes a built-in license and des nt require access t the licensing prtal befre deplyment. Virtual CC Overview Virtual CC includes all f the features and functins f the hardware slutin, but is prvided slely as a sftware prduct that runs n VMware as a virtual appliance. It is supprted fr use in a VMware vsphere 4.0 envirnment. See the Virtual Appliance Quick Setup Guide fr a list f system requirements. Virtual CC leverages vsphere s High Availability feature fr autmatic failver. As a result, nly ne CC-SG license is needed. A secnd license fr the purpse f running tw instances f CC-SG simultaneusly fr redundancy is nt needed. A 128 nde license is included with the base sftware. The part number is CCSG128-VA. As with the hardware appliance, nde licenses can be added as needed. Fr example, CCL-512 can be added t CCSG128-VA t create a virtual appliance that is enabled t access 640 ndes. When CCSG128-VA is rdered, a Virtual CC DVD is mailed t the custmer and an is sent t the designated administratr. The sftware may als be dwnladed frm The prvides instructins fr accessing the Raritan licensing prtal. It s imprtant that an accurate address is prvided with the rder. A 2nd prvides instructins n generating the license(s). One Virtual CC base sftware license can run n ne virtual machine at a time. Virtual CC leverages the Flexera FlexNet Publisher License Server Manager fr easy license deplyment & management. The license manager wrks in cnjunctin with a Raritan vendr daemn t facilitate cmmunicatins. In 5.0.5, the daemn is supprted n Windws and Linux 32-bit perating systems. The license manager sftware and vendr daemn are prvided in a zipped file and psted n the CC-SG supprt page. Please refer t the new Quick Setup Guide and Administratin Guide fr details. CC-SG Release Ntes Dc. # Page 3 f 6

4 Security and Cmpliance Infrmatin Refer t the CC-SG Administratrs Guide Appendix B: CC-SG and Netwrk Cnfiguratin fr specific settings. Updated Prduct Dcumentatin Updated dcuments available with this release include: CC-SG Upgrade Readme File Cmpatibility Matrix Administratrs Guide Quick Setup Guide General Ntes 1. If using Windws XP r Vista, CC-SG supprts the 64 bit OS. Hwever, if using a Java plug-in, nly the 32 bit plug-in is supprted. See ml fr Java supprt infrmatin. (17855) 2. Fr ptimal peratins, disable the pp-up blcker in yur brwser. 3. Virtualizatin: During the first cnnectin t a virtual machine, yu may be asked t dwnlad an add-n frm VMware. Once the add-n is installed, please restart yur brwser. 4. If yu are using Firefx n Windws, yu must add the IP address f the CC-SG t the Allwed Sites fr Add-ns list and the Allwed Sites fr Pp-ups list in the brwser befre cnnecting t a VMW Viewer interface. 5. During the CC-SG bt-up sequenceyu can safely ignre the fllwing message(seen n the lcal KVM cnsle prt nly): Memry fr crash kernel (0x0 t 0x0) nt within permissible range 6. During bt-up, a nrmal delay f up t tw minutes may ccur after seeing the fllwing message (lcal KVM cnsle prt nly): Red Hat nash versin starting 7. If the netwrk cnnectin t the License Server is lst, a restart f the license server manager (lmgrd) is recmmended. (32031) 8. It is assumed that the virtual machine datastre will be prtected and/r maintained cnsistent with backup/restral best practices and that shared CC-SG Release Ntes Dc. # Page 4 f 6

5 strage meets the requirements specified by VMWare. (31108) Limitatins and Restrictins 1. Supprted JRE versins fr this release include 1.6.0_10 thru 1.6.0_ The Bkmark Nde feature is nt supprted when using Internet Explrer versin 8 (IE8). (20053, 20237) 3. The "Exit" ptin in the MPC client s "Cnnectin" menu des nt functin when running n Linux. Use the X in the crner f the windw as an alternative. This issue has been seen when using the fllwing: Fedra Cre 6: JRE 1.6.0_13; Firefx Fedra Cre 7: Firefx , JRE 1.5.0_13 and JRE 1.6.0_13 Red Hat Enterprise - Release 5.2: Firefx , JRE 1.6.0_07 and JRE 1.6.0_13 (19999) 4. CC-SG is nt supprted fr use with Firefx Versins , , 3.5.x and 3.6.x are supprted. FF 3.5.x and 3.6.x are recmmended. 5. RSA Remte Cnsle cannt be launched frm CC-SG when using JRE 1.6.0_10 and higher. Dwngrade t 1.6.0_07. This is a SUN issue, and when fixed will n lnger be a restrictin in CC-SG. (19651) 6. IE6 des nt supprt AES-256 encryptin and XP with IE6/IE7 des nt supprt AES-256 encryptin. 7. If enabling AES 256, ensure that the jurisdictin files are installed n the client. Otherwise, yu will be lcked ut f the CmmandCenter. 8. When using a Linux client, the Virtualizatin tplgy view cannt be printed. 9. WMware Viewer and Firefx versin 3.6.x are nt cmpatible. 10. CC-SG cannt manage r access ESXi virtual ndes that use a free-trial license. (31078) 11. Firefx users f the Access Client are prmpted t dwnlad a file named 140.JNLP each time a prt cnnectin is made. Select the "D this autmatically fr files like this frm nw n" checkbx, s that Firefx can autmatically dwnlad the file fr future cnnectins. (31893) 12. The cnfiguratin database in a hardware appliance cannt be cpied int the virtual appliance. Until 5.1 is released, custmers that wish t cnvert t the virtual appliance will need t use the exprt functin and imprt the.csv file int the virtual appliance. Nte that nt CC-SG Release Ntes Dc. # Page 5 f 6

6 all data is captured in the exprt and sme data entry will be required. Raritan recmmends that hardware custmers that wish t cnvert t the virtual appliance wait until the 5.1 release. 13. When chsing a server n which t run the Flexera License Server and Raritan vendr daemn, please nte the fllwing: Raritan s testing has shwn the fllwing prcessr/os cmbinatins t be favrable: Intel Pentium 4 with Windws XP Intel Pentium D with Windws Vista Intel Celern with Windws 2003 Server AMD Optern with Windws 2003 Server AMD Optern with Windws 2003 Server AMD Optern with Windws 7 AMD Optern with Windws 2008 Server AMD Athln 64 with Windws Vista Raritan s testing has shwn the fllwing prcessr/os cmbinatins t be unfavrable: (32514) Intel Xen with Windws 2003 Server Intel Xen with Windws 2003 Server Intel Pentium 3 with Windws 2003 Server CC-SG Release Ntes Dc. # Page 6 f 6