Aventail Advanced Reporting Installation Instructions 1996-2006 Aventail Corporation. All rights reserved. Aventail, Aventail Cache Control, Aventail Connect, Aventail Connect Mobile, Aventail Connect Tunnel, Aventail End Point Control, Aventail Management Console, Aventail OnDemand, Aventail OnDemand Tunnel, Aventail Secure Desktop, Aventail Smart Access, Aventail Smart Policy, Aventail Smart SSL VPN, Aventail Smart Tunneling, Aventail ST, Aventail Unified Policy, Aventail WorkPlace, Aventail WorkPlace Mobile, Aventail EX- 750, Aventail EX-1500, Aventail EX-2500, Aventail Advanced Reporting, and their respective logos are trademarks, registered trademarks, or service marks of Aventail Corporation. Other product and company names mentioned are the trademarks of their respective owners. Last modified 11/17/2006 9:27 AM
2 Aventail Advanced Reporting System Requirements Thank you for using Aventail Advanced Reporting! This document describes the process of installing the Aventail Advanced Reporting as well document other important information. Aventail Advanced Reporting runs on Windows ME/NT/2000/XP/2003 and most versions of Linux. Aventail Advanced Reporting is based on Sawmill Professional. Flowerfire, the maker of Sawmill Professional does a very good job of detailing system requirements for the application in their FAQ. Basic system requirements are as follows: Memory: a minimum of 256 MB of RAM, with 1 GB recommended Disk: 500 MB of disk space Processor: 1.8 GHz Pentium 4 or equivalent Obtaining Installation Files and Installation Before installing Aventail Advanced Reporting, you must obtain the setup file and copy it to the file system of your local computer. The file is delivered as a gzipped tar archive for Linux and a setup executable program for Windows. Note If you are upgrading an existing Aventail Advanced Reporting installation, back up your existing LogAnalysisInfo folder, and after you install the new one, copy the following files from your old LogAnalysisInfo folder to the new: profiles to keep your profiles (but not default_profile.cfg). To install Aventail Advanced Reporting: 1. Log in to Aventail s support site at http://aventailassurance.aventail.com. 2. Click on Downloads and then choose Aventail Advanced Reporting, and download the aar7.2.8_x86_linux.tar.gz file for Linux, or aar7.2.8_x86_win32.exe to your local computer. 3. Install the Aventail Advanced Reporting executable files as follows: Linux On Linux, uncompress and untar it with the following command from the command line: gunzip -c aar7.2.8_x86_linux.tar.gz tar xf This will result in a directory called /aar containing the Aventail Advanced Reporting executable program called aar7.2.8 Windows For Windows installations, execute the file aar7.2.8_x86_win32.exe. This will result in (by default) a directory called C:\Program Files\Aventail Advanced Reporting 7\ containing the Aventail Advanced Reporting files. Aventail Advanced Reporting will be installed as a service that starts automatically.
3 Executing Aventail Advanced Reporting Linux On Linux, you can start using Aventail Advanced Reporting immediately by executing the file (type aar7.2.8 on the command line, then press return). Aventail Advanced Reporting will establish itself as a Web server on port 8987 (by default), and will print a message describing how to access it from your Web browser. To have Aventail Advanced Reporting startup automatically with the system and rusn as a daemon, you can add a system init script to automatically start Aventail Advanced Reporting at system startup. Please note that the startup script location will vary depending on the Linux distribution that you are using and that this information will need to be gathered from the Linux distribution documentation. Windows On Windows, Aventail Advanced Reporting is installed as a service and is started by default. Setting up Aventail Advanced Reporting Once Aventail Advanced Reporting is up and running, it is time to setup Aventail Advanced Reporting by going through the configuration steps. Enable SSH and install SCP In order to be able to get files to the computer hosting Aventail Advanced Reporting, you must enable SSH and install an SCP (Secure Copy Protocol) client To enable SSH access 1. Log in to AMC 2. From the main navigation menu, select Services 3. In the Network Services area click the Configure link for SSH. The Configure SSH menu appears. 4. Enable SSH by checking the Enable SSH check box. 5. To add a host from which you want to enable SSH access, select New, type the IP address and subnet mask for the Aventail Advanced Reporting host computer, and then click OK. 6. If you do not have an SCP client installed on your Aventail Advanced Reporting host, a popular client for Windows is available here: http://winscp.sourceforge.net/eng Linux: SCP is typically available on Linux boxes from the command line. As an example, run the following on the Linux-based Aventail Advanced Reporting host computer to copy files from your appliance to the Aventail Advanced Reporting host computer: scp root@aventailappliance:/var/log/aventail/extra*.log /logs Browse to Aventail Advanced Reporting
4 Aventail Advanced Reporting 1. Access the application by browsing to the host and port where Aventail Advanced Reporting has been installed. For example, browse http://my.hostname.com:8987/ Or http://127.0.0.1:8987/ 2. Follow the simple step by step setup procedure to complete your setup of Aventail Advanced Reporting. If you have a license key, cut and paste it into the licensing screen or select Trial to continue on with your 15 day evaluation. 3. When setup is complete, you may access Aventail Advanced Reporting at any time by browsing to http://my.hostname.com:8987/ Getting Log Files In order to generate reports, it will be necessary to get log files from your Aventail appliance and place them on the computer you are using to host Aventail Advanced Reporting. To get log files from your Aventail appliance, copy the files using SCP, to the computer hosting Aventail Advanced Reporting. Please refer to the SCP section of this document for information on using SCP to get the log files off the appliance. Files are stored in the following location on your Aventail appliance: /var/log/aventail The files you will need to copy to the computer running Aventail Advanced Reporting are: 1. extranet_access.log 2. extraweb_access.log Log rotation is enabled by default and there may be several logs named in the format: extranet_access.logn where n is a number indicating a file that has been rolled over. For a complete set of data, you will want to copy all of the files with the named extranet_access*.* and extraweb_access*.*. Copy the files to the location specified in the next set of steps below The log files are not unique and therefore when log files are being collected from multiple appliances, create subdirectories for each appliance. /logs / node1 / node2 / node3 Copying the log files in their own directories will ensure that none of the files are overwritten. Aventail Advanced Reporting automatically collates the log files from the various appliances thereby providing a single view. If you would like separate views of each appliance, then create a profile for each appliance and log file directory combination but you will be limited to a total of 5 log directory/appliance / log file format and reports (profiles). Specifying Log Files If necessary, you may customize the location of the log files that have been copied from your Aventail appliance.
5 The first time you browse to Aventail Advanced Reporting, log in using the Administrative User you created during setup. You will be taken to the profiles page where you will see a screen similar to the one below: To create a new profile, either click on the Start here or the Create New Profile options.
6 Aventail Advanced Reporting The next screen defines the definition of the location of the log files on the local disk of the Aventail Advanced Reporting server. In this example, the log files have been placed in /logs (Linux). However, Windows will require the drive letter as well. Therefore, the Pathname will look similar to c:\logs\extraweb_access*.*. If you have subdirectories below the log file directory, then please select the Process subdirectories checkbox. This is important if you have multiple appliances, such as an HA pair because the log files will have similar names and you do not want to overwrite them when they are copied over from the appliances. Click on the Show Matching Files button to see all of the log files that Aventail Advanced Reporting finds. If no files are shown at this point, the profile definition will fail later when it attempts to discover the files. Clicking on the Next button and Aventail Advanced Reporting will attempt to detect the report formats. For log formats that are similar, it is possible that there might be multiple options and in this case Aventail Advanced Reporting will prompt you to select the appropriate format. This selection screen will only be displayed if the system is not able to automatically determine the appropriate format automatically.
7 Reporting values are shown next please click on the Next button with all of the options selected.
8 Aventail Advanced Reporting Name the report that you would like to display. If you would like DNS names to be displayed instead of IP addresses, then please make sure that the Show reports upon finish checkbox is not selected. The following steps can be performed at a later stage as well. Now that you have defined a profile for the Web Reports, you still need to define a profile for the Tunnel connections. That is done in the same manner with the key differences being the log file names:
9 Successful profile definition will look like this:
10 Aventail Advanced Reporting Web Browser Support Aventail Advanced Reporting works with Safari, Mozilla, and Internet Explorer 5.5 or 6.0. Other browsers may not be supported. Versions of Internet Explorer before 5.5, in particular, are not supported. The ability for the browser to run JavaScript must be enabled. Technical Support If you have any problems, questions, or suggestions about Aventail Advanced Reporting, contact Aventail Support for assistance.