apsvision admin guide

APSolute Vision Administrator GuideSoftware Version 1.30

Document ID: RDWR-APSV-V0130_AG1205May, 2012

APSolute Vision Administrator Guide

2 Document ID: RDWR-APSV-V0130_AG1205


Document ID: RDWR-APSV-V0130_AG1205 3

Important NoticesThe following important notices are presented in English, French, and German.

Important NoticesThis guide is delivered subject to the following conditions and restrictions:

Copyright Radware Ltd. 20062012. All rights reserved.

The copyright and all other intellectual property rights and trade secrets included in this guide are owned by Radware Ltd.

The guide is provided to Radware customers for the sole purpose of obtaining information with respect to the installation and use of the Radware products described in this document, and may not be used for any other purpose.

The information contained in this guide is proprietary to Radware and must be kept in strict confidence.

It is strictly forbidden to copy, duplicate, reproduce or disclose this guide or any part thereof without the prior written consent of Radware.

Notice importanteCe guide est sujet aux conditions et restrictions suivantes:

Copyright Radware Ltd. 20062012. Tous droits rservs.

Le copyright ainsi que tout autre droit li la proprit intellectuelle et aux secrets industriels contenus dans ce guide sont la proprit de Radware Ltd.

Ce guide dinformations est fourni nos clients dans le cadre de linstallation et de lusage des produits de Radware dcrits dans ce document et ne pourra tre utilis dans un but autre que celui pour lequel il a t conu.

Les informations rpertories dans ce document restent la proprit de Radware et doivent tre conserves de manire confidentielle.

Il est strictement interdit de copier, reproduire ou divulguer des informations contenues dans ce manuel sans avoir obtenu le consentement pralable crit de Radware.

Wichtige AnmerkungDieses Handbuch wird vorbehaltlich folgender Bedingungen und Einschrnkungen ausgeliefert:

Copyright Radware Ltd. 20062012. Alle Rechte vorbehalten.

Das Urheberrecht und alle anderen in diesem Handbuch enthaltenen Eigentumsrechte und Geschftsgeheimnisse sind Eigentum von Radware Ltd.

Dieses Handbuch wird Kunden von Radware mit dem ausschlielichen Zweck ausgehndigt, Informationen zu Montage und Benutzung der in diesem Dokument beschriebene Produkte von Radware bereitzustellen. Es darf fr keinen anderen Zweck verwendet werden.

Die in diesem Handbuch enthaltenen Informationen sind Eigentum von Radware und mssen streng vertraulich behandelt werden.

Es ist streng verboten, dieses Handbuch oder Teile daraus ohne vorherige schriftliche Zustimmung von Radware zu kopieren, vervielfltigen, reproduzieren oder offen zu legen.



Copyright Notices The following copyright notices are presented in English, French, and German.

Copyright NoticesThis product contains code developed by the OpenSSL Project

This product includes software developed by the OpenSSL Project. For use in the OpenSSL Toolkit. (http://www.openssl.org/).

Copyright (c) 1998-2005 The OpenSSL Project. All rights reserved.

This product contains the Rijndael cipher

The Rijndael implementation by Vincent Rijmen, Antoon Bosselaers and Paulo Barreto is in the public domain and distributed with the following license:

@version 3.0 (December 2000)

Optimized ANSI C code for the Rijndael cipher (now AES)

@author Vincent Rijmen

@author Antoon Bosselaers

@author Paulo Barreto

The OnDemand Switch may use software components licensed under the GNU General Public License Agreement Version 2 (GPL v.2) including LinuxBios and Filo open source projects. The source code of the LinuxBios and Filo is available from Radware upon request. A copy of the license can be viewed at: http://www.gnu.org/licenses/old-licenses/gpl-2.0.html

This code is hereby placed in the public domain.

This product contains code developed by the OpenBSD Project

Copyright (c) 1983, 1990, 1992, 1993, 1995

The Regents of the University of California. All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

This product includes software developed by Markus Friedl

This product includes software developed by Theo de Raadt

This product includes software developed by Niels Provos

This product includes software developed by Dug Song

This product includes software developed by Aaron Campbell

This product includes software developed by Damien Miller

This product includes software developed by Kevin Steves

This product includes software developed by Daniel Kouril

This product includes software developed by Wesley Griffin

This product includes software developed by Per Allansson

This product includes software developed by Nils Nordman

This product includes software developed by Simon Wilkinson



Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

ALL THE SOFTWARE MENTIONED ABOVE IS PROVIDED BY THE AUTHOR AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.

IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

This product contains work derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm. RSA Data Security, Inc. makes no representations concerning either the merchantability of the MD5 Message - Digest Algorithm or the suitability of the MD5 Message - Digest Algorithm for any particular purpose. It is provided as is without express or implied warranty of any kind.

Notice traitant du copyrightCe produit renferme des codes dvelopps dans le cadre du projet OpenSSL.

Ce produit inclut un logiciel dvelopp dans le cadre du projet OpenSSL. Pour un usage dans la bote outils OpenSSL (http://www.openssl.org/).

Copyright (c) 1998-2005 Le projet OpenSSL. Tous droits rservs. Ce produit inclut la catgorie de chiffre Rijndael.

Limplmentation de Rijindael par Vincent Rijmen, Antoon Bosselaers et Paulo Barreto est du domaine public et distribue sous les termes de la licence suivante:

@version 3.0 (Dcembre 2000)

Code ANSI C code pour Rijndael (actuellement AES)



@author Paulo Barreto .

Le commutateur OnDemand peut utiliser les composants logiciels sous licence, en vertu des termes de la licence GNU General Public License Agreement Version 2 (GPL v.2), y compris les projets source ouverte LinuxBios et Filo. Le code source de LinuxBios et Filo est disponible sur demande auprs de Radware. Une copie de la licence est rpertorie sur:

http://www.gnu.org/licenses/old-licenses/gpl-2.0.html

Ce code est galement plac dans le domaine public.

Ce produit renferme des codes dvelopps dans le cadre du projet OpenSSL.

Copyright (c) 1983, 1990, 1992, 1993, 1995

Les membres du conseil de lUniversit de Californie. Tous droits rservs.

La distribution et lusage sous une forme source et binaire, avec ou sans modifications, est autorise pour autant que les conditions suivantes soient remplies:

1. La distribution dun code source doit inclure la notice de copyright mentionne ci-dessus, cette liste de conditions et lavis de non-responsabilit suivant.

2. La distribution, sous une forme binaire, doit reproduire dans la documentation et/ou dans tout autre matriel fourni la notice de copyright mentionne ci-dessus, cette liste de conditions et lavis de non-responsabilit suivant.



3. Le nom de luniversit, ainsi que le nom des contributeurs ne seront en aucun cas utiliss pour approuver ou promouvoir un produit driv de ce programme sans lobtention pralable dune autorisation crite.

Ce produit inclut un logiciel dvelopp par Markus Friedl

Ce produit inclut un logiciel dvelopp par Theo de Raadt Ce produit inclut un logiciel dvelopp par Niels Provos

Ce produit inclut un logiciel dvelopp par Dug Song

Ce produit inclut un logiciel dvelopp par Aaron Campbell Ce produit inclut un logiciel dvelopp par Damien Miller

Ce produit inclut un logiciel dvelopp par Kevin Steves

Ce produit inclut un logiciel dvelopp par Daniel Kouril

Ce produit inclut un logiciel dvelopp par Wesley Griffin

Ce produit inclut un logiciel dvelopp par Per Allansson

Ce produit inclut un logiciel dvelopp par Nils Nordman

Ce produit inclut un logiciel dvelopp par Simon Wilkinson.

La distribution et lusage sous une forme source et binaire, avec ou sans modifications, est autorise pour autant que les conditions suivantes soient remplies:

1. La distribution dun code source doit inclure la notice de copyright mentionne ci-dessus, cette liste de conditions et lavis de non-responsabilit suivant.

2. La distribution, sous une forme binaire, doit reproduire dans la documentation et/ou dans tout autre matriel fourni la notice de copyright mentionne ci-dessus, cette liste de conditions et lavis de non-responsabilit suivant.

LE LOGICIEL MENTIONN CI-DESSUS EST FOURNI TEL QUEL PAR LE DVELOPPEUR ET TOUTE GARANTIE, EXPLICITE OU IMPLICITE, Y COMPRIS, MAIS SANS SY LIMITER, TOUTE GARANTIE IMPLICITE DE QUALIT MARCHANDE ET DADQUATION UN USAGE PARTICULIER EST EXCLUE.

EN AUCUN CAS LAUTEUR NE POURRA TRE TENU RESPONSABLE DES DOMMAGES DIRECTS, INDIRECTS, ACCESSOIRES, SPCIAUX, EXEMPLAIRES OU CONSCUTIFS (Y COMPRIS, MAIS SANS SY LIMITER, LACQUISITION DE BIENS OU DE SERVICES DE REMPLACEMENT, LA PERTE DUSAGE, DE DONNES OU DE PROFITS OU LINTERRUPTION DES AFFAIRES), QUELLE QUEN SOIT LA CAUSE ET LA THORIE DE RESPONSABILIT, QUIL SAGISSE DUN CONTRAT, DE RESPONSABILIT STRICTE OU DUN ACTE DOMMAGEABLE (Y COMPRIS LA NGLIGENCE OU AUTRE), DCOULANT DE QUELLE QUE FAON QUE CE SOIT DE LUSAGE DE CE LOGICIEL, MME SIL A T AVERTI DE LA POSSIBILIT DUN TEL DOMMAGE.

CopyrightvermerkeDieses Produkt enthlt einen vom OpenSSL-Projekt entwickelten Code

Dieses Produkt enthlt vom OpenSSL-Projekt entwickelte Software. Zur Verwendung im OpenSSL Toolkit. (http://www.openssl.org/).

Copyright (c) 1998-2005 The OpenSSL Project. Alle Rechte vorbehalten. Dieses Produkt enthlt die Rijndael cipher

Die Rijndael-Implementierung von Vincent Rijndael, Anton Bosselaers und Paulo Barreto ist ffentlich zugnglich und wird unter folgender Lizenz vertrieben:

@version 3.0 (December 2000)

Optimierter ANSI C Code fr den Rijndael cipher (jetzt AES)



@author Paulo Barreto



Der OnDemand Switch verwendet mglicherweise Software, die im Rahmen der DNU Allgemeine ffentliche Lizenzvereinbarung Version 2 (GPL v.2) lizensiert sind, einschlielich LinuxBios und Filo Open Source-Projekte. Der Quellcode von LinuxBios und Filo ist bei Radware auf Anfrage erhltlich. Eine Kopie dieser Lizenz kann eingesehen werden unter:

http://www.gnu.org/licenses/old-licenses/gpl-2.0.html

Dieser Code wird hiermit allgemein zugnglich gemacht.

Dieses Produkt enthlt einen vom OpenBSD-Projekt entwickelten Code

Copyright (c) 1983, 1990, 1992, 1993, 1995

The Regents of the University of California. Alle Rechte vorbehalten.

Die Verbreitung und Verwendung in Quell- und binrem Format, mit oder ohne Vernderungen, sind unter folgenden Bedingungen erlaubt:

1. Die Verbreitung von Quellcodes muss den voranstehenden Copyrightvermerk, diese Liste von Bedingungen und den folgenden Haftungsausschluss beibehalten.

2. Die Verbreitung in binrem Format muss den voranstehenden Copyrightvermerk, diese Liste von Bedingungen und den folgenden Haftungsausschluss in der Dokumentation und/oder andere Materialien, die mit verteilt werden, reproduzieren.

3. Weder der Name der Universitt noch die Namen der Beitragenden drfen ohne ausdrckliche vorherige schriftliche Genehmigung verwendet werden, um von dieser Software abgeleitete Produkte zu empfehlen oder zu bewerben.

Dieses Produkt enthlt von Markus Friedl entwickelte Software Dieses Produkt enthlt von Theo de Raadt entwickelte Software Dieses Produkt enthlt von Niels Provos entwickelte Software Dieses Produkt enthlt von Dug Song entwickelte Software

Dieses Produkt enthlt von Aaron Campbell entwickelte Software Dieses Produkt enthlt von Damien Miller entwickelte Software Dieses Produkt enthlt von Kevin Steves entwickelte Software Dieses Produkt enthlt von Daniel Kouril entwickelte Software Dieses Produkt enthlt von Wesley Griffin entwickelte Software Dieses Produkt enthlt von Per Allansson entwickelte Software Dieses Produkt enthlt von Nils Nordman entwickelte Software

Dieses Produkt enthlt von Simon Wilkinson entwickelte Software

Die Verbreitung und Verwendung in Quell- und binrem Format, mit oder ohne Vernderungen, sind unter folgenden Bedingungen erlaubt:

1. Die Verbreitung von Quellcodes muss den voranstehenden Copyrightvermerk, diese Liste von Bedingungen und den folgenden Haftungsausschluss beibehalten.

2. Die Verbreitung in binrem Format muss den voranstehenden Copyrightvermerk, diese Liste von Bedingungen und den folgenden Haftungsausschluss in der Dokumentation und/oder andere Materialien, die mit verteilt werden, reproduzieren.

SMTLICHE VORGENANNTE SOFTWARE WIRD VOM AUTOR IM IST-ZUSTAND (AS IS) BEREITGESTELLT. JEGLICHE AUSDRCKLICHEN ODER IMPLIZITEN GARANTIEN, EINSCHLIESSLICH, DOCH NICHT BESCHRNKT AUF DIE IMPLIZIERTEN GARANTIEN DER MARKTGNGIGKEIT UND DER ANWENDBARKEIT FR EINEN BESTIMMTEN ZWECK, SIND AUSGESCHLOSSEN.

UNTER KEINEN UMSTNDEN HAFTET DER AUTOR FR DIREKTE ODER INDIREKTE SCHDEN, FR BEI VERTRAGSERFLLUNG ENTSTANDENE SCHDEN, FR BESONDERE SCHDEN, FR SCHADENSERSATZ MIT STRAFCHARAKTER, ODER FR FOLGESCHDEN EINSCHLIESSLICH, DOCH NICHT BESCHRNKT AUF, ERWERB VON ERSATZGTERN ODER ERSATZLEISTUNGEN; VERLUST AN NUTZUNG, DATEN ODER GEWINN; ODER GESCHFTSUNTERBRECHUNGEN) GLEICH, WIE SIE ENTSTANDEN SIND, UND FR JEGLICHE ART VON HAFTUNG, SEI ES VERTRGE, GEFHRDUNGSHAFTUNG, ODER DELIKTISCHE HAFTUNG (EINSCHLIESSLICH FAHRLSSIGKEIT ODER ANDERE), DIE IN JEGLICHER FORM FOLGE DER BENUTZUNG DIESER SOFTWARE IST, SELBST WENN AUF DIE MGLICHKEIT EINES SOLCHEN SCHADENS HINGEWIESEN WURDE.



Safety InstructionsThe following safety instructions are presented in English, French, and German.

Safety InstructionsCAUTION

A readily accessible disconnect device shall be incorporated in the building installation wiring.

Due to the risks of electrical shock, and energy, mechanical, and fire hazards, any procedures that involve opening panels or changing components must be performed by qualified service personnel only.

To reduce the risk of fire and electrical shock, disconnect the device from the power line before removing cover or panels.

The following figure shows the caution label that is attached to Radware platforms with dual power supplies.

Figure 1: Electrical Shock Hazard Label

DUAL-POWER-SUPPLY-SYSTEM SAFETY WARNING IN CHINESE

The following figure is the warning for Radware platforms with dual power supplies.

Figure 2: Dual-Power-Supply-System Safety Warning in Chinese

Translation of Dual-Power-Supply-System Safety Warning in Chinese:

This unit has more than one power supply. Disconnect all power supplies before maintenance to avoid electric shock.

SERVICING

Do not perform any servicing other than that contained in the operating instructions unless you are qualified to do so. There are no serviceable parts inside the unit.

HIGH VOLTAGE

Any adjustment, maintenance, and repair of the opened instrument under voltage must be avoided as much as possible and, when inevitable, must be carried out only by a skilled person who is aware of the hazard involved.Capacitors inside the instrument may still be charged even if the instrument has been disconnected from its source of supply.



GROUNDING

Before connecting this device to the power line, the protective earth terminal screws of this device must be connected to the protective earth in the building installation.

LASER

This equipment is a Class 1 Laser Product in accordance with IEC60825 - 1: 1993 + A1:1997 + A2:2001 Standard.

FUSES

Make sure that only fuses with the required rated current and of the specified type are used for replacement. The use of repaired fuses and the short-circuiting of fuse holders must be avoided. Whenever it is likely that the protection offered by fuses has been impaired, the instrument must be made inoperative and be secured against any unintended operation.

LINE VOLTAGE

Before connecting this instrument to the power line, make sure the voltage of the power source matches the requirements of the instrument. Refer to the Specifications for information about the correct power rating for the device.

48V DC-powered platforms have an input tolerance of 36-72V DC.

SPECIFICATION CHANGES

Specifications are subject to change without notice.

Note: This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15B of the FCC Rules and EN55022 Class A, EN 55024; EN 61000-3-2; EN 61000-3-3; IEC 61000 4-2 to 4-6, IEC 61000 4-8 and IEC 61000-4-11For CE MARK Compliance. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is required to correct the interference at his own expense.

VCCI ELECTROMAGNETIC-INTERFERENCE STATEMENTS

Figure 3: Statement for Class A VCCI-certified Equipment

Translation of Statement for Class A VCCI-certified Equipment:

This is a Class A product based on the standard of the Voluntary Control Council for Interference by Information Technology Equipment (VCCI). If this equipment is used in a domestic environment, radio disturbance may occur, in which case, the user may be required to take corrective action.



Figure 4: Statement for Class B VCCI-certified Equipment

Translation of Statement for Class B VCCI-certified Equipment:

This is a Class B product based on the standard of the Voluntary Control Council for Interference by Information Technology Equipment (VCCI). If this is used near a radio or television receiver in a domestic environment, it may cause radio interference. Install and use the equipment according to the instruction manual.

KCC KOREA

Figure 5: KCCKorea Communications Commission Certificate of Broadcasting and Communication Equipment

Figure 6: Statement For Class A KCC-certified Equipment in Korean

Translation of Statement For Class A KCC-certified Equipment in Korean:

This equipment is Industrial (Class A) electromagnetic wave suitability equipment and seller or user should take notice of it, and this equipment is to be used in the places except for home.

SPECIAL NOTICE FOR NORTH AMERICAN USERS

For North American power connection, select a power supply cord that is UL Listed and CSA Certified 3 - conductor, [18 AWG], terminated in a molded on plug cap rated 125 V, [10 A], with a minimum length of 1.5m [six feet] but no longer than 4.5m...For European connection, select a power supply cord that is internationally harmonized and marked , 3 - conductor, 0,75 mm2 minimum mm2 wire, rated 300 V, with a PVC insulated jacket. The cord must have a molded on plug cap rated 250 V, 3 A.

RESTRICT AREA ACCESS

The DC powered equipment should only be installed in a Restricted Access Area.

INSTALLATION CODES

This device must be installed according to country national electrical codes. For North America, equipment must be installed in accordance with the US National Electrical Code, Articles 110 - 16, 110 -17, and 110 -18 and the Canadian Electrical Code, Section 12.



INTERCONNECTION OF UNITS

Cables for connecting to the unit RS232 and Ethernet Interfaces must be UL certified type DP-1 or DP-2. (Note- when residing in non LPS circuit)

OVERCURRENT PROTECTION

A readily accessible listed branch-circuit over current protective device rated 15 A must be incorporated in the building wiring for each power input.

REPLACEABLE BATTERIES

If equipment is provided with a replaceable battery, and is replaced by an incorrect battery type, then an explosion may occur. This is the case for some Lithium batteries and the following is applicable:

If the battery is placed in an Operator Access Area, there is a marking close to the battery or a statement in both the operating and service instructions.

If the battery is placed elsewhere in the equipment, there is a marking close to the battery or a statement in the service instructions.

This marking or statement includes the following text warning:

CAUTION

RISK OF EXPLOSION IF BATTERY IS REPLACED BY AN INCORRECT BATTERY TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE INSTRUCTIONS.

Caution To Reduce the Risk of Electrical Shock and Fire

1. This equipment is designed to permit connection between the earthed conductor of the DC supply circuit and the earthing conductor equipment. See Installation Instructions.

2. All servicing must be undertaken only by qualified service personnel. There are not user serviceable parts inside the unit.

3. DO NOT plug in, turn on or attempt to operate an obviously damaged unit.

4. Ensure that the chassis ventilation openings in the unit are NOT BLOCKED.

5. Replace a blown fuse ONLY with the same type and rating as is marked on the safety label adjacent to the power inlet, housing the fuse.

6. Do not operate the device in a location where the maximum ambient temperature exceeds 40C/104F.

7. Be sure to unplug the power supply cord from the wall socket BEFORE attempting to remove and/or check the main power fuse. CLASS 1 LASER PRODUCT AND REFERENCE TO THE MOST RECENT LASER STANDARDS IEC 60 825-1:1993 + A1:1997 + A2:2001 AND EN 60825-1:1994+A1:1996+ A2:2001

AC units for Denmark, Finland, Norway, Sweden (marked on product):

Denmark - Unit is class I - unit to be used with an AC cord set suitable with Denmark deviations. The cord includes an earthing conductor. The Unit is to be plugged into a wall socket outlet which is connected to a protective earth. Socket outlets which are not connected to earth are not to be used!

Finland - (Marking label and in manual) - Laite on liitettv suojamaadoituskoskettimilla varustettuun pistorasiaan

Norway (Marking label and in manual) - Apparatet m tilkoples jordet stikkontakt

Unit is intended for connection to IT power systems for Norway only.

Sweden (Marking label and in manual) - Apparaten skall anslutas till jordat uttag.

To connect the power connection:

1. Connect the power cable to the main socket, located on the rear panel of the device.

2. Connect the power cable to the grounded AC outlet.



CAUTION

Risk of electric shock and energy hazard. Disconnecting one power supply disconnects only one power supply module. To isolate the unit completely, disconnect all power supplies.

Instructions de scuritAVERTISSEMENT

Un dispositif de dconnexion facilement accessible sera incorpor au cblage du btiment.

En raison des risques de chocs lectriques et des dangers nergtiques, mcaniques et dincendie, chaque procdure impliquant louverture des panneaux ou le remplacement de composants sera excute par du personnel qualifi.

Pour rduire les risques dincendie et de chocs lectriques, dconnectez le dispositif du bloc dalimentation avant de retirer le couvercle ou les panneaux.

La figure suivante montre ltiquette davertissement appose sur les plateformes Radware dotes de plus dune source dalimentation lectrique.

Figure 7: tiquette davertissement de danger de chocs lectriques

AVERTISSEMENT DE SCURIT POUR LES SYSTMES DOTS DE DEUX SOURCES DALIMENTATION LECTRIQUE (EN CHINOIS)

La figure suivante reprsente ltiquette davertissement pour les plateformes Radware dotes de deux sources dalimentation lectrique.

Figure 8: Avertissement de scurit pour les systmes dotes de deux sources dalimentation lectrique (en chinois)

Traduction de la Avertissement de scurit pour les systmes dotes de deux sources dalimentation lectrique (en chinois):

Cette unit est dote de plus dune source dalimentation lectrique. Dconnectez toutes les sources dalimentation lectrique avant dentretenir lappareil ceci pour viter tout choc lectrique.

ENTRETIEN

Neffectuez aucun entretien autre que ceux rpertoris dans le manuel dinstructions, moins dtre qualifi en la matire. Aucune pice lintrieur de lunit ne peut tre remplace ou rpare.

HAUTE TENSION

Tout rglage, opration dentretien et rparation de linstrument ouvert sous tension doit tre vit. Si cela savre indispensable, confiez cette opration une personne qualifie et consciente des dangers impliqus.



Les condensateurs au sein de lunit risquent dtre chargs mme si lunit a t dconnecte de la source dalimentation lectrique.

MISE A LA TERRE

Avant de connecter ce dispositif la ligne lectrique, les vis de protection de la borne de terre de cette unit doivent tre relies au systme de mise la terre du btiment.

LASER

Cet quipement est un produit laser de classe 1, conforme la norme IEC60825 - 1: 1993 + A1: 1997 + A2: 2001.

FUSIBLES

Assurez-vous que, seuls les fusibles courant nominal requis et de type spcifi sont utiliss en remplacement. Lusage de fusibles rpars et le court-circuitage des porte-fusibles doivent tre vits. Lorsquil est pratiquement certain que la protection offerte par les fusibles a t dtriore, linstrument doit tre dsactiv et scuris contre toute opration involontaire.

TENSION DE LIGNE

Avant de connecter cet instrument la ligne lectrique, vrifiez que la tension de la source dalimentation correspond aux exigences de linstrument. Consultez les spcifications propres lalimentation nominale correcte du dispositif.

Les plateformes alimentes en 48 CC ont une tolrance dentre comprise entre 36 et 72 V CC. MODIFICATIONS DES SPCIFICATIONS

Les spcifications sont sujettes changement sans notice pralable.

Remarque: Cet quipement a t test et dclar conforme aux limites dfinies pour un appareil numrique de classe A, conformment au paragraphe 15B de la rglementation FCC et EN55022 Classe A, EN 55024, EN 61000-3-2; EN 61000-3-3; IEC 61000 4-2 to 4-6, IEC 61000 4-8, et IEC 61000-4-11, pour la marque de conformit de la CE. Ces limites sont fixes pour fournir une protection raisonnable contre les interfrences nuisibles, lorsque lquipement est utilis dans un environnement commercial. Cet quipement gnre, utilise et peut mettre des frquences radio et, sil nest pas install et utilis conformment au manuel dinstructions, peut entraner des interfrences nuisibles aux communications radio. Le fonctionnement de cet quipement dans une zone rsidentielle est susceptible de provoquer des interfrences nuisibles, auquel cas lutilisateur devra corriger le problme ses propres frais.

DCLARATIONS SUR LES INTERFRENCES LECTROMAGNTIQUES VCCI

Figure 9: Dclaration pour lquipement de classe A certifi VCCI

Traduction de la Dclaration pour lquipement de classe A certifi VCCI:

Il sagit dun produit de classe A, bas sur la norme du Voluntary Control Council for Interference by Information Technology Equipment (VCCI). Si cet quipement est utilis dans un environnement domestique, des perturbations radiolectriques sont susceptibles dapparatre. Si tel est le cas, lutilisateur sera tenu de prendre des mesures correctives.



Figure 10: Dclaration pour lquipement de classe B certifi VCCI

Traduction de la Dclaration pour lquipement de classe B certifi VCCI:

Il sagit dun produit de classe B, bas sur la norme du Voluntary Control Council for Interference by Information Technology Equipment (VCCI). Sil est utilis proximit dun poste de radio ou dune tlvision dans un environnement domestique, il peut entraner des interfrences radio.

Installez et utilisez lquipement selon le manuel dinstructions.

KCC Core

Figure 11: KCCCertificat de la commission des communications de Core pour les equipements de radiodiffusion et communication.

Figure 12: Dclaration pour lquipement de classe A certifi KCC en langue corenne

Translation de la Dclaration pour lquipement de classe A certifi KCC en langue corenne:

Cet quipement est un matriel (classe A) en adquation aux ondes lectromagntiques et le vendeur ou lutilisateur doit prendre cela en compte. Ce matriel est donc fait pour tre utilis ailleurs qu la maison.

NOTICE SPCIALE POUR LES UTILISATEURS NORD-AMRICAINS

Pour un raccordement lectrique en Amrique du Nord, slectionnez un cordon dalimentation homologu UL et certifi CSA 3 - conducteur, [18 AWG], muni dune prise moule son extrmit, de 125 V, [10 A], dune longueur minimale de 1,5 m [six pieds] et maximale de 4,5m...Pour la connexion europenne, choisissez un cordon dalimentation mondialement homologu et marqu , 3 - conducteur, cble de 0,75 mm2 minimum, de 300 V, avec une gaine en PVC isole. La prise lextrmit du cordon, sera dote dun sceau moul indiquant: 250 V, 3 A.

ZONE A ACCS RESTREINT

Lquipement aliment en CC ne pourra tre install que dans une zone accs restreint. CODES DINSTALLATION

Ce dispositif doit tre install en conformit avec les codes lectriques nationaux. En Amrique du Nord, lquipement sera install en conformit avec le code lectrique national amricain, articles 110-16, 110 -17, et 110 -18 et le code lectrique canadien, Section 12. INTERCONNEXION DES UNTES.



Les cbles de connexion lunit RS232 et aux interfaces Ethernet seront certifis UL, type DP-1 ou DP-2. (Remarque- sils ne rsident pas dans un circuit LPS) PROTECTION CONTRE LES SURCHARGES.

Un circuit de drivation, facilement accessible, sur le dispositif de protection du courant de 15 A doit tre intgr au cblage du btiment pour chaque puissance consomme.

BATTERIES REMPLAABLES

Si lquipement est fourni avec une batterie, et quelle est remplace par un type de batterie incorrect, elle est susceptible dexploser. Cest le cas pour certaines batteries au lithium, les lments suivants sont donc applicables:

Si la batterie est place dans une zone daccs oprateur, une marque est indique sur la batterie ou une remarque est insre, aussi bien dans les instructions dexploitation que dentretien.

Si la batterie est place ailleurs dans lquipement, une marque est indique sur la batterie ou une remarque est insre dans les instructions dentretien.

Cette marque ou remarque inclut lavertissement textuel suivant:

AVERTISSEMENT

RISQUE DEXPLOSION SI LA BATTERIE EST REMPLACE PAR UN MODLE INCORRECT. METTRE AU REBUT LES BATTERIES CONFORMMENT AUX INSTRUCTIONS.

Attention - Pour rduire les risques de chocs lectriques et dincendie

1. Cet quipement est conu pour permettre la connexion entre le conducteur de mise la terre du circuit lectrique CC et lquipement de mise la terre. Voir les instructions dinstallation.

2. Tout entretien sera entrepris par du personnel qualifi. Aucune pice lintrieur de lunit ne peut tre remplace ou rpare.

3. NE branchez pas, nallumez pas ou nessayez pas dutiliser une unit manifestement endommage.

4. Vrifiez que lorifice de ventilation du chssis dans lunit nest PAS OBSTRUE.

5. Remplacez le fusible endommag par un modle similaire de mme puissance, tel quindiqu sur ltiquette de scurit adjacente larrive lectrique hbergeant le fusible.

6. Ne faites pas fonctionner lappareil dans un endroit, o la temprature ambiante dpasse la valeur maximale autorise. 40C/104F.

7. Dbranchez le cordon lectrique de la prise murale AVANT dessayer de retirer et/ou de vrifier le fusible dalimentation principal.

PRODUIT LASER DE CLASSE 1 ET RFRENCE AUX NORMES LASER LES PLUS RCENTES: IEC 60

825-1: 1993 + A1: 1997 + A2: 2001 ET EN 60825-1: 1994+A1: 1996+ A2: 2001

Units CA pour le Danemark, la Finlande, la Norvge, la Sude (indiqu sur le produit):

Danemark - Unit de classe 1 - qui doit tre utilise avec un cordon CA compatible avec les dviations du Danemark. Le cordon inclut un conducteur de mise la terre. Lunit sera branche une prise murale, mise la terre. Les prises non-mises la terre ne seront pas utilises!

Finlande (tiquette et inscription dans le manuel) - Laite on liitettv suojamaadoituskoskettimilla varustettuun pistorasiaan

Norvge (tiquette et inscription dans le manuel) - Apparatet m tilkoples jordet stikkontakt

Lunit peut tre connecte un systme lectrique IT (en Norvge uniquement).

Sude (tiquette et inscription dans le manuel) - Apparaten skall anslutas till jordat uttag.

Pour brancher lalimentation lectrique:

1. Branchez le cble dalimentation la prise principale, situe sur le panneau arrire de lunit.

2. Connectez le cble dalimentation la prise CA mise la terre.



AVERTISSEMENT

Risque de choc lectrique et danger nergtique. La dconnexion dune source dalimentation lectrique ne dbranche quun seul module lectrique. Pour isoler compltement lunit, dbranchez toutes les sources dalimentation lectrique.

ATTENTION

Risque de choc et de danger lectriques. Le dbranchement dune seule alimentation stabilise ne dbranche quun module Alimentation Stabilise. Pour Isoler compltement le module en cause, il faut dbrancher toutes les alimentations stabilises.

Attention: Pour Rduire Les Risques dlectrocution et dIncendie

1. Toutes les oprations dentretien seront effectues UNIQUEMENT par du personnel dentretien qualifi. Aucun composant ne peut tre entretenu ou remplace par lutilisateur.

2. NE PAS connecter, mettre sous tension ou essayer dutiliser une unit visiblement dfectueuse.

3. Assurez-vous que les ouvertures de ventilation du chssis NE SONT PAS OBSTRUES.

4. Remplacez un fusible qui a saut SEULEMENT par un fusible du mme type et de mme capacit, comme indiqu sur ltiquette de scurit proche de lentre de lalimentation qui contient le fusible.

5. NE PAS UTILISER lquipement dans des locaux dont la temprature maximale dpasse 40 degrs Centigrades.

6. Assurez vous que le cordon dalimentation a t dconnect AVANT dessayer de lenlever et/ou vrifier le fusible de lalimentation gnrale.

SicherheitsanweisungenVORSICHT

Die Elektroinstallation des Gebudes muss ein unverzglich zugngliches Stromunterbrechungsgert integrieren.

Aufgrund des Stromschlagrisikos und der Energie-, mechanische und Feuergefahr drfen Vorgnge, in deren Verlauf Abdeckungen entfernt oder Elemente ausgetauscht werden, ausschlielich von qualifiziertem Servicepersonal durchgefhrt werden.

Zur Reduzierung der Feuer- und Stromschlaggefahr muss das Gert vor der Entfernung der Abdeckung oder der Paneele von der Stromversorgung getrennt werden.

Folgende Abbildung zeigt das VORSICHT-Etikett, das auf die Radware-Plattformen mit Doppelspeisung angebracht ist.

Figure 13: Warnetikett Stromschlaggefahr



SICHERHEITSHINWEIS IN CHINESISCHER SPRACHE FR SYSTEME MIT DOPPELSPEISUNG

Die folgende Abbildung ist die Warnung fr Radware-Plattformen mit Doppelspeisung.

Figure 14: Sicherheitshinweis in chinesischer Sprache fr Systeme mit Doppelspeisung

bersetzung von Sicherheitshinweis in chinesischer Sprache fr Systeme mit Doppelspeisung:

Die Einheit verfgt ber mehr als eine Stromversorgungsquelle. Ziehen Sie zur Verhinderung von Stromschlag vor Wartungsarbeiten smtliche Stromversorgungsleitungen ab.

WARTUNG

Fhren Sie keinerlei Wartungsarbeiten aus, die nicht in der Betriebsanleitung angefhrt sind, es sei denn, Sie sind dafr qualifiziert. Es gibt innerhalb des Gertes keine wartungsfhigen Teile.

HOCHSPANNUNG

Jegliche Einstellungs-, Instandhaltungs- und Reparaturarbeiten am geffneten Gert unter Spannung mssen so weit wie mglich vermieden werden. Sind sie nicht vermeidbar, drfen sie ausschlielich von qualifizierten Personen ausgefhrt werden, die sich der Gefahr bewusst sind.

Innerhalb des Gertes befindliche Kondensatoren knnen auch dann noch Ladung enthalten, wenn das Gert von der Stromversorgung abgeschnitten wurde.

ERDUNG

Bevor das Gert an die Stromversorgung angeschlossen wird, mssen die Schrauben der Erdungsleitung des Gertes an die Erdung der Gebudeverkabelung angeschlossen werden.

LASER

Dieses Gert ist ein Laser-Produkt der Klasse 1 in bereinstimmung mit IEC60825 - 1: 1993 + A1:1997 + A2:2001 Standard.

SICHERUNGEN

Vergewissern Sie sich, dass nur Sicherungen mit der erforderlichen Stromstrke und der angefhrten Art verwendet werden. Die Verwendung reparierter Sicherungen sowie die Kurzschlieung von Sicherungsfassungen muss vermieden werden. In Fllen, in denen wahrscheinlich ist, dass der von den Sicherungen gebotene Schutz beeintrchtigt ist, muss das Gert abgeschaltet und gegen unbeabsichtigten Betrieb gesichert werden.

LEITUNGSSPANNUNG

Vor Anschluss dieses Gertes an die Stromversorgung ist zu gewhrleisten, dass die Spannung der Stromquelle den Anforderungen des Gertes entspricht. Beachten Sie die technischen Angaben bezglich der korrekten elektrischen Werte des Gertes.

Plattformen mit 48 V DC verfgen ber eine Eingangstoleranz von 36-72 V DC. NDERUNGEN DER TECHNISCHEN ANGABEN

nderungen der technischen Spezifikationen bleiben vorbehalten.

Hinweis: Dieses Gert wurde geprft und entspricht den Beschrnkungen von digitalen Gerten der Klasse 1 gem Teil 15B FCC-Vorschriften und EN55022 Klasse A, EN55024; EN 61000-3-2; EN; IEC 61000 4-2 to 4-6, IEC 61000 4-8 und IEC 61000-4- 11 fr Konformitt mit der CE-Bezeichnung. Diese Beschrnkungen dienen dem angemessenen Schutz vor schdlichen Interferenzen bei Betrieb des Gertes in kommerziellem Umfeld. Dieses Gert erzeugt, verwendet und strahlt elektromagnetische Hochfrequenzstrahlung aus. Wird es nicht entsprechend den Anweisungen im Handbuch montiert und benutzt, knnte es mit dem Funkverkehr interferieren und ihn beeintrchtigen. Der Betrieb dieses Gertes in Wohnbereichen wird hchstwahrscheinlich zu schdlichen Interferenzen fhren. In einem solchen Fall wre der Benutzer verpflichtet, diese Interferenzen auf eigene Kosten zu korrigieren.



ERKLRUNG DER VCCI ZU ELEKTROMAGNETISCHER INTERFERENZ

Figure 15: Erklrung zu VCCI-zertifizierten Gerten der Klasse A

bersetzung von Erklrung zu VCCI-zertifizierten Gerten der Klasse A:

Dies ist ein Produkt der Klasse A gem den Normen des Voluntary Control Council for Interference by Information Technology Equipment (VCCI). Wird dieses Gert in einem Wohnbereich benutzt, knnen elektromagnetische Strungen auftreten. In einem solchen Fall wre der Benutzer verpflichtet, korrigierend einzugreifen.

Figure 16: Erklrung zu VCCI-zertifizierten Gerten der Klasse B

bersetzung von Erklrung zu VCCI-zertifizierten Gerten der Klasse B:

Dies ist ein Produkt der Klasse B gem den Normen des Voluntary Control Council for Interference by Information Technology Equipment (VCCI). Wird dieses Gert in einem Wohnbereich benutzt, knnen elektromagnetische Strungen auftreten.

Montieren und benutzen Sie das Gert laut Anweisungen im Benutzerhandbuch.

KCC KOREA

Figure 17: KCCKorea Communications Commission Zertifikat fr Rundfunk-und Nachrichtentechnik

Figure 18: Erklrung zu KCC-zertifizierten Gerten der Klasse A



bersetzung von Erklrung zu KCC-zertifizierten Gerten der Klasse A:

Verkufer oder Nutzer sollten davon Kenntnis nehmen, da dieses Gert der Klasse A fr industriell elektromagnetische Wellen geeignete Gerten angehrt und dass diese Gerte nicht fr den heimischen Gebrauch bestimmt sind.

BESONDERER HINWEIS FR BENUTZER IN NORDAMERIKA

Whlen Sie fr den Netzstromanschluss in Nordamerika ein Stromkabel, das in der UL aufgefhrt und CSA-zertifiziert ist 3 Leiter, [18 AWG], endend in einem gegossenen Stecker, fr 125 V, [10 A], mit einer Mindestlnge von 1,5 m [sechs Fu], doch nicht lnger als 4,5 m. Fr europische Anschlsse verwenden Sie ein international harmonisiertes, mit markiertes Stromkabel, mit 3 Leitern von mindestens 0,75 mm2, fr 300 V, mit PVC-Umkleidung. Das Kabel muss in einem gegossenen Stecker fr 250 V, 3 A enden.

BEREICH MIT EINGESCHRNKTEM ZUGANG

Das mit Gleichstrom betriebene Gert darf nur in einem Bereich mit eingeschrnktem Zugang montiert werden.

INSTALLATIONSCODES

Dieses Gert muss gem der landesspezifischen elektrischen Codes montiert werden. In Nordamerika mssen Gerte entsprechend dem US National Electrical Code, Artikel 110 - 16, 110 - 17 und 110 - 18, sowie dem Canadian Electrical Code, Abschnitt 12, montiert werden. VERKOPPLUNG VON GERTEN Kabel fr die Verbindung des Gertes mit RS232- und Ethernet-mssen UL-zertifiziert und vom Typ DP-1 oder DP-2 sein. (Anmerkung: bei Aufenthalt in einem nicht-LPS-Stromkreis)

BERSTROMSCHUTZ

Ein gut zugnglicher aufgefhrter berstromschutz mit Abzweigstromkreis und 15 A Strke muss fr jede Stromeingabe in der Gebudeverkabelung integriert sein.

AUSTAUSCHBARE BATTERIEN

Wird ein Gert mit einer austauschbaren Batterie geliefert und fr diese Batterie durch einen falschen Batterietyp ersetzt, knnte dies zu einer Explosion fhren. Dies trifft zu fr manche Arten von Lithiumsbatterien zu, und das folgende gilt es zu beachten:

Wird die Batterie in einem Bereich fr Bediener eingesetzt, findet sich in der Nhe der Batterie eine Markierung oder Erklrung sowohl im Betriebshandbuch als auch in der Wartungsanleitung.

Ist die Batterie an einer anderen Stelle im Gert eingesetzt, findet sich in der Nhe der Batterie eine Markierung oder einer Erklrung in der Wartungsanleitung.

Diese Markierung oder Erklrung enthlt den folgenden Warntext: VORSICHT

EXPLOSIONSGEFAHR, FALLS BATTERIE DURCH EINEN FALSCHEN BATTERIETYP ERSETZT WIRD. GEBRAUCHTE BATTERIEN DEN ANWEISUNGEN ENTSPRECHEND ENTSORGEN.

Denmark - Unit is class I - mit Wechselstromkabel benutzen, dass fr die Abweichungen in Dnemark eingestellt ist. Das Kabel ist mit einem Erdungsdraht versehen. Das Kabel wird in eine geerdete Wandsteckdose angeschlossen. Keine Steckdosen ohne Erdungsleitung verwenden!

Finland - (Markierungsetikett und im Handbuch) - Laite on liitettv suojamaadoituskoskettimilla varustettuun pistorasiaan

Norway - (Markierungsetikett und im Handbuch) - Apparatet m tilkoples jordet stikkontakt Ausschlielich fr Anschluss an IT-Netzstromsysteme in Norwegen vorgesehen

Sweden - (Markierungsetikett und im Handbuch) - Apparaten skall anslutas till jordat uttag.

Anschluss des Stromkabels:

1. Schlieen Sie das Stromkabel an den Hauptanschluss auf der Rckseite des Gertes an.

2. Schlieen Sie das Stromkabel an den geerdeten Wechselstromanschluss an.

VORSICHT

Stromschlag- und Energiegefahr Die Trennung einer Stromquelle trennt nur ein Stromversorgungsmodul von der Stromversorgung. Um das Gert komplett zu isolieren, muss es von der gesamten Stromversorgung getrennt werden.



Vorsicht - Zur Reduzierung der Stromschlag- und Feuergefahr

1. Dieses Gert ist dazu ausgelegt, die Verbindung zwischen der geerdeten Leitung des Gleichstromkreises und dem Erdungsleiter des Gertes zu ermglichen. Siehe Montageanleitung.

2. Wartungsarbeiten jeglicher Art drfen nur von qualifiziertem Servicepersonal ausgefhrt werden. Es gibt innerhalb des Gertes keine vom Benutzer zu wartenden Teile.

3. Versuchen Sie nicht, ein offensichtlich beschdigtes Gert an den Stromkreis anzuschlieen, einzuschalten oder zu betreiben.

4. Vergewissern Sie sich, dass sie Lftungsffnungen im Gehuse des Gertes NICHT BLOCKIERT SIND.

5. Ersetzen Sie eine durchgebrannte Sicherung ausschlielich mit dem selben Typ und von der selben Strke, die auf dem Sicherheitsetikett angefhrt sind, das sich neben dem Stromkabelanschluss, am Sicherungsgehuse.

6. Betreiben Sie das Gert nicht an einem Standort, an dem die Hchsttemperatur der Umgebung 40C berschreitet.

7. Vergewissern Sie sich, das Stromkabel aus dem Wandstecker zu ziehen, BEVOR Sie die Hauptsicherung entfernen und/oder prfen.

Document ConventionsThe following describes the conventions and symbols that this guide uses:

Item Description Description (French) Beschreibung (German)

Example

An example scenario Un scnario dexemple Ein Beispielszenarium

Caution:

Possible damage to equipment, software, or data

Endommagement possible de lquipement, des donnes ou du logiciel

Mgliche Schden an Gert, Software oder Daten

Note:

Additional information Informations complmentaires

Zustzliche Informationen

To

A statement and instructions

Rfrences et instructions

Eine Erklrung und Anweisungen

Tip:

A suggestion or workaround

Une suggestion ou solution

Ein Vorschlag oder eine Umgehung

Warning:

Possible physical harm to the operator

Blessure possible de loprateur

Verletzungsgefahr des Bedieners


Table of ContentsImportant Notices .......................................................................................................... 3Copyright Notices .......................................................................................................... 4Safety Instructions ......................................................................................................... 8Document Conventions ............................................................................................... 20

Chapter 1 Introduction to APSolute Vision ....................................................... 25What is APSolute Vision? ............................................................................................ 25APSolute Vision Three-Tier Architecture ..................................................................... 27Overview of APSolute Vision Features ........................................................................ 27

Online Device Configuration ................................................................................................ 28Monitoring of Managed Devices and Services .................................................................... 28Operation Control and Maintenance .................................................................................... 28Device Drivers ..................................................................................................................... 28Scheduling ........................................................................................................................... 29Auditing and Alerts ............................................................................................................... 29User Management and Role-based Access Control (RBAC) .............................................. 30APSolute Vision Platform Security ....................................................................................... 30APSolute Vision Platform Management ............................................................................... 30Supported Alteon Environments .......................................................................................... 30DefensePro Security Groups ............................................................................................... 31Real-Time Security Reporting .............................................................................................. 31Historical Security ReportingAPSolute Vision Reporter .................................................. 31Online Help .......................................................................................................................... 31

APSolute Vision Interface Navigation .......................................................................... 31Configuration Perspective .................................................................................................... 32Monitoring Perspective ........................................................................................................ 36Security Monitoring Perspective .......................................................................................... 40Asset Management Perspective .......................................................................................... 41APSolute Vision Sites .......................................................................................................... 42

Chapter 2 Getting Started with APSolute Vision............................................... 43Initializing the APSolute Vision Server ........................................................................ 43Recommended Basic Security Procedures ................................................................. 45

Restricting Root Access ....................................................................................................... 45Restricting APSolute Vision CLI Access .............................................................................. 45Restricting Web Access to the APSolute Vision Server ...................................................... 45Restricting Web Access by Radware Technical Support ..................................................... 45

APSolute Vision Client Installation .............................................................................. 46APSolute Vision Client Requirements ................................................................................. 46APSolute Vision Reporter Requirements ............................................................................. 47Installing the APSolute Vision Client .................................................................................... 47

APSolute Vision Administrator Guide Table of Contents


Logging into APSolute Vision ..................................................................................... 48Changing Passwords for Local Users ........................................................................ 49Configuring the APSolute Vision Server ..................................................................... 49

Configuring Server Connections ......................................................................................... 49Configuring Settings for the Alerts Pane ............................................................................. 51Configuring Monitoring Settings .......................................................................................... 53Configuring APSolute Vision Server Alarm Thresholds ...................................................... 54Configuring RADIUS Server Connections ........................................................................... 55Configuring APSolute Vision Server Advanced Parameters ............................................... 58Configuring APSolute Vision Reporter Parameters ............................................................. 60

Configuring Client Preferences ................................................................................... 60Configuring the Default Perspective .................................................................................... 60Configuring Default Client Settings for the Alerts Pane ....................................................... 61Configuring Default Display Settings for Monitoring and Reports ....................................... 61

Filtering the Display of Tree Elements in the System Tabs ........................................ 62Updating the Attack Description File .......................................................................... 65After Initial Configuration of APSolute Vision ............................................................. 66

Chapter 3 Managing APSolute Vision Users..................................................... 67Logging In as the Default Administrator Userradware User ................................... 67Role-Based Access Control (RBAC) .......................................................................... 68Configuring Local Users ............................................................................................. 71

Adding and Editing Users .................................................................................................... 72Deleting Users ..................................................................................................................... 73Releasing User Lockout ...................................................................................................... 74Resetting User Passwords to the Default ............................................................................ 74Resetting the radware Administrator Password ................................................................ 74Revoking and Enabling Users ............................................................................................. 75Exporting User Information .................................................................................................. 75

Viewing Predefined Roles .......................................................................................... 76Viewing User Statistics ............................................................................................... 76Configuring User Management General Settings ....................................................... 77APSolute Vision Password Requirements .................................................................. 78

Chapter 4 Setting Up Your Network ................................................................... 79APSolute Vision Sites ................................................................................................. 79

Site Trees ............................................................................................................................ 79Default Site and Device Names .......................................................................................... 80

System PaneOrganization Tab and Physical Tab .................................................. 80Organization Tab ................................................................................................................. 80Physical Tab ........................................................................................................................ 81

Configuring Sites ........................................................................................................ 81

APSolute Vision Administrator GuideTable of Contents


Adding and Removing Devices ................................................................................... 82Configuring APSolute Vision to Manage Multiple Alteon vADCs ......................................... 92APSolute Vision Server Registered for Device EventsAlteon ......................................... 92APSolute Vision Server Registered for Device EventsDefensePro ................................. 92

Locking and Unlocking Devices ................................................................................... 93Alteon Device Configuration ManagementGlobal Commands ................................ 94Creating AppDirector Clusters for High Availability ..................................................... 95Creating DefensePro Clusters for High Availability ..................................................... 96Finding Site Nodes ...................................................................................................... 98Next Steps ................................................................................................................... 98

Chapter 5 APSolute Vision CLI Commands ...................................................... 99Command Syntax Conventions ................................................................................... 99Accessing APSolute Vision CLI ................................................................................ 100Main CLI Menu ......................................................................................................... 101General CLI Commands ........................................................................................... 101Network Configuration Commands ........................................................................... 103

DNS Commands ............................................................................................................... 103Network Interface Commands .......................................................................................... 105Physical Interface Commands .......................................................................................... 106Routing Commands .......................................................................................................... 107

System Commands .................................................................................................. 108Miscellaneous System Commands ................................................................................... 109System APSolute Vision Server Commands .................................................................... 110System Backup Commands ............................................................................................. 111System confBackup Commands ....................................................................................... 113System Database Commands .......................................................................................... 116System Date Commands .................................................................................................. 118System NTP Commands .................................................................................................. 119System SSL Commands ................................................................................................... 120System Storage Commands ............................................................................................. 123System reporterBackup Commands ................................................................................. 124System TCP Capture Commands .................................................................................... 127System techSupport Commands ...................................................................................... 129System Timezone Commands .......................................................................................... 131

Appendix A Managing the Online-Help Package on the Server .................... 133

Appendix B Technical-Support Packages....................................................... 137

APSolute Vision Administrator Guide Table of Contents


Appendix C APSolute Vision Specifications and Requirements .................. 139System Capacity ....................................................................................................... 139UDP/TCP Ports ........................................................................................................ 139APSolute Vision Client Requirements ...................................................................... 141

APSolute Vision Client Hardware Requirements .............................................................. 141APSolute Vision Client Supported Operating Systems ..................................................... 141APSolute Vision Client Software Requirements ................................................................ 141

APSolute Vision Reporter Requirements ................................................................. 142

Radware Ltd. End User License Agreement ...................................................... 143


Chapter 1 Introduction to APSolute VisionThis guide is intended for administrators of APSolute Vision. The guide describes the relevant aspects of APSolute Vision and how to use it.

Notes:>> For information about installing the APSolute Vision server and client, initial settings on

the APSolute Vision platform, and connecting the client to the server, see the Radware Installation and Maintenance Guide.

>> For information about general-user operations, see the APSolute Vision User Guide.

>> For information about the required workflows for configuring application delivery with Alteon, see the Alteon Application Switch Operating System Application Guide.

>> For information about the required workflows for configuring application delivery with AppDirector, see the AppDirector User Guide.

>> For information about the required workflows for configuring network security with DefensePro, see the DefensePro User Guide.

>> For information about APSolute Vision Reporter and how to use it, see its online help and the APSolute Vision Reporter User Guide.

The following topics introduce APSolute Vision:

What is APSolute Vision?, page 25

APSolute Vision Three-Tier Architecture, page 27

Overview of APSolute Vision Features, page 27

APSolute Vision Interface Navigation, page 31

What is APSolute Vision?APSolute Vision is Radwares next-generation management system. APSolute Vision simplifies and standardizes the management of Radware application delivery control (ADC) and security solutions. Use APSolute Vision to manage and track Radware hardware devices, virtual devices, and software components in IP-based enterprise networks.

APSolute Vision provides:

Online configuration per device, including support for templates as well as AppShape, which automates/streamlines ADC configuration for common applications, such as SAP Portal and Microsoft SharePoint Server.

Monitoring and control of multiple devices, including enabling and disabling entities within a device. APSolute Vision can monitor multiple devices in a single view.

DefensePro Security Groups, which enable DefensePro devices to share threat information and block malicious sources as a group.

Reporting and statistics at the device level, and on logical entities within a device. For real-time and historical security reporting, APSolute Vision can also provide site and network-level reports for immediate problem isolation, convenient attack and status visibility and information drill-down.

A highly customized Role-Based Access Control system that allows granular control and monitoring of various security aspects for different users.

APSolute Vision Administrator Guide Introduction to APSolute Vision


Management capabilities, including:

Scheduling device control and maintenance tasks, such as, backup and restore, and so on.

Auditing

Viewing alerts and Alteon configuration messages (Alerts pane)

Device software management

APSolute Vision includes a database for administrative, operational, and security events to facilitate the creation of long and short-term reports.

APSolute Vision provides stability, capacity, and usability, due to its:

Scalable, three-tier architecture

Optimized device access

Reduced client-to-server traffic

Operational use cases focus

Figure 19: APSolute Vision Solution Model

DefensePro devices

APSolute Vision clients

Alteon devices

North

bound

APSolute Vision Server(physical appliance or virtual appliance)

LAN/WANSSL

Customer Management Network

SNMP V1/V2c/V3IRP real-time statistics

HTTP(S)/TFTP

Firewall

AppDirector devices

Email/Syslog/SQL client

APSolute Vision Administrator GuideIntroduction to APSolute Vision


APSolute Vision Three-Tier ArchitectureAPSolute Vision is a three-tier management system with client, server and device tiers. APSolute Vision server can run as a standalone physical appliance or as a virtual appliance (VA). The client tier does not connect to devices directly.

The client tier does the following:

Runs as a Windows application on a PC and provides a Windows-based graphical user interface with separate perspectives for configuration, monitoring and control, and reports.

Transmits user requests to the server tier and displays the results in the APSolute Vision interface in an intuitive and easy-to-read format.

The server tier does the following:

Runs on the APSolute Vision platform

Processes user commands

Transmits and stores data from other tiers

Makes logical decisions and performs calculations

Performs user authentication and authorization

Collects statistics and generates reports

Collects alerts from the devices

Communicates with the managed devices

The network physical device tier enables management of the collection of network elements connected to APSolute Vision. This includes devices that provide server load-balancing, security, intrusion prevention and denial-of-service (DoS) protection.

Overview of APSolute Vision FeaturesThis section provides an overview of APSolute Visions main features:

Online Device Configuration, page 28

Monitoring of Managed Devices and Services, page 28

Operation Control and Maintenance, page 28

Device Drivers, page 28

Scheduling, page 29

Auditing and Alerts, page 29

User Management and Role-based Access Control (RBAC), page 30

APSolute Vision Platform Security, page 30

APSolute Vision Platform Management, page 30

Supported Alteon Environments, page 30

DefensePro Security Groups, page 31

Real-Time Security Reporting, page 31

Historical Security ReportingAPSolute Vision Reporter, page 31

Online Help, page 31



Online Device ConfigurationOnline device configuration supports the following:

Easy access for all device configuration topics

Hierarchical logical element grouping

Graphical change notation

Drill-down configuration topics

Inline filtering

Online configuration per device, including support for templates as well as AppShape, which automates/streamlines ADC configuration for common applications, such as SAP Portal and Microsoft SharePoint Server.

Configuration and propagation of templates for specific configuration elements in supported AppDirector and DefensePro device versions

Monitoring of Managed Devices and ServicesMonitoring of managed devices and services in APSolute Vision supports the following:

Easy access for device monitoring topics

Logical-element grouping

Hierarchical browsing

Propertiesstatus, management IP address, software version, device-driver version, hardware platform, license information, and the time of the last configuration change

Routing table

IP Statisticsreceived and discarded

Information on ports, VLANs, and trunks, such as:

General status

Statistics

Presents device statistics tables for device level and logical level

Operation Control and MaintenanceControl and maintenance operations include:

Enabling and disabling all relevant entities on a device

Managing configuration templates for AppDirector and DefensePro devices. These configuration templates

Managing DefensePro Security Groups, which enable DefensePro devices to share threat information and block malicious sources as a group. Managing DefensePro Security Groups is done in the Asset Management perspective.

Managing pairs of devices for high availability (HA)

Performing file transfers

Managing configuration backups

Rebooting devices

Device DriversAPSolute Vision device drivers enable you to install or upgrade Radware devices without the need to upgrade your APSolute Vision server.



A device driver in APSolute Vision defines the graphical user interface and configuration for the software version of a managed device. The software version of a managed device defines the baseline driver version. You can install a newer version of the device driver, and you can revert to the baseline version.

You can have only one device-driver version in use on any single APSolute Vision server (but, there may be multiple device-driver versions released for a single software version of a device). Typically, subsequent versions of device drivers for a particular software version of a managed device only includes very minor changes and/or bug fixes.

Notes:>> When you upgrade device software, you need to reboot the device. However, when you

install a new version of a device driver or revert to the baseline version, you do not need to reboot the device.

>> Device drivers do not include the online help. If the APSolute Vision server is configure so that the clients get help from the server (the default option), the APSolute Vision administrator should make sure that the APSolute Vision server has the latest version of the online-help package.

>> The Properties pane that is displayed for a device of includes the name of the device driver.

SchedulingScheduling in APSolute Vision supports various operations for the APSolute Vision server and managed devices, which enable you to automate the tasks and to run repeated tasks.

Scheduled tasks run according to the time as configured on the APSolute Vision client.

Auditing and AlertsAuditing and alerts in APSolute Vision logs all alerts and actions for APSolute Vision and, optionally, for the managed devices. You can view auditing information and other alerts in the APSolute Vision Alerts pane.

Alerts are created with the time at which the APSolute Vision server processed them, but the time displayed in the Alerts pane is the time of the APSolute Vision client with the proper time offset.

APSolute Vision provides the audit trail for system messages and modifications to the configuration of managed devices.

APSolute Vision can forward alarms and notifications. System Alarms can be forwarded via APSolute Vision. Security service alarms can be forwarded via APSolute Vision Reporter. E-mail notifications can be sent via SMTP. Notifications can be sent to a syslog server.

The Alerts tab in the Alerts pane provides fault management by supporting the following system and audit alarms:

APSolute Vision server alarms

General device alarms (fan, CPU, and so on)

Audit trail messages



User Management and Role-based Access Control (RBAC)The APSolute Vision server supports multi-user access and role-based access control (RBAC).

RBAC provides the following:

Predefined basic roles and permissions

Customized permissions per role and device

Access-control configuration and management in a local user table or using an external RADIUS server (using RADIUS vendor attributes)

APSolute Vision Platform SecurityAPSolute Vision supports user security with user-account options for the following parameters:

Password expirationspecified in days

Inactivity timeoutauto logout

Forbidding use of old passwords

Password challenge configuration

Password constraints

Administrative actions to create users, reset user passwords, and locking out users

Tracking user statistics for successful logins, failed logins, account locks, and so on

APSolute Vision Platform ManagementThe APSolute Vision Server supports the following management interfaces:

CLI shell commandsFor installation, first-time configuration, and special maintenance activities

APSolute Vision clientFor APSolute Vision server options, such as, timeouts, connectivity, event forwarding, and so on, and for server monitoring

Supported Alteon EnvironmentsAPSolute Vision supports the following Alteon environments (or modes):

StandaloneThe traditional Alteon hardware Application Delivery Controller (ADC).

Alteon VAA software-based ADC supporting AlteonOS functionality and running on the VMware virtual infrastructure.

ADC-VXA specialized ADC hypervisor that runs multiple virtual ADC instances on dedicated ADC hardware, Radwares OnDemand Switch platforms.

vADCA virtualized instance of the Alteon operating system (AlteonOS).

Notes:>> For more information, see the Alteon Application Switch Operating System Application

Guide.

>> The Messages tab in the Alerts pane displays Alteon configuration messages. A message is displayed in the Messages tab after each Alteon configuration-management action (Apply, Save, Diff, Diff Flash, Revert, Revert Apply, and Dump). If the Alerts pane is collapsed, it automatically expands immediately after the configuration-management action. When you double-click a message, APSolute Vision opens an autonomous window. The window contains the full message text, which you can copy to the clipboard.



DefensePro Security Groups APSolute Vision enables DefensePro devices to share and act upon detected security threats.

Real-Time Security ReportingAPSolute Vision provides real-time attack views and security service alarms for managed devices.

Historical Security ReportingAPSolute Vision ReporterAPSolute Vision Reporter is a historical security reporting engine, which provides the following:

Customizable dashboards, reports, and notifications

Advanced incident handling for security operating centers (SOCs) and network operating centers (NOCs)

Standard security reports

In-depth forensics capabilities

Ticket workflow management

Note: For information on the products and versions that APSolute Vision Reporter supports, see the APSolute Vision Release Notes.

Online HelpBy default, APSolute Vision clients get online help from the APSolute Vision server. Installation of the APSolute Vision server includes online-help files.

Depending on the APSolute Vision server configuration, the clients get online help from one of the following locations:

An internal, hard-coded, location on the serverInstallation of the APSolute Vision server includes online-help files, but if managed devices are somehow upgraded later (with a new device, new device version, or new device driver), the online-help files on the server should be updated. It is the responsibility of the APSolute Vision administrator to make sure that the help files on the server are updated as necessary. For more information, see Appendix A - Managing the Online-Help Package on the Server, page 133.

radware.comThe online-help files at radware.com are always the most up-to-date, but clients may encounter latency or connectivity problems.

APSolute Vision Interface NavigationThe APSolute Vision interface follows a consistent hierarchical structure, organized functionally to enable easy access to options. You start at a high functional level and drill down to a specific module, function, or object.

Each high-level function, such as device configuration, monitoring, or viewing real-time reports, is accessible from a separate perspective.



APSolute Vision supports the following perspectives:

Configuration Perspective, page 32

Monitoring Perspective, page 36

Security Monitoring Perspective, page 40

Asset Management Perspective, page 41

Note: You can configure which perspective is displayed by default when you start an APSolute Vision client session.

Configuration PerspectiveUse the Configuration perspective to configure Radware devices. Typically, you choose the device to configure in the Configuration perspective system pane Organization tab. You can view and modify device settings in the content pane tabs, which have their own navigation panes for easier navigation through configuration tasks.

You can filter the sites and devices that APSolute Vision displays. The filter does not change the contents of the tree, only how APSolute Vision displays the tree to you.

The Configuration perspective also includes the Properties pane, which displays information about the currently selected device.

When APSolute Vision manages Alteon, you choose the standalone, vADC or VA device to configure in the Configuration perspective system pane Organization tab. You manage ADC-VXs and the hosted vADCs in the Configuration perspective system pane Physical tab.



Figure 20: Configuration PerspectiveAlteon

Configuration buttonOpens the Configuration perspective

Content areaNavigation area for the tab

Properties pane

Alerts paneDisplays the Alerts tab and the Messages tab. The Alerts tab displays APSolute Vision and device alerts. The Messages tab displays Alteon configuration messages.

System pane Organization tabDisplays, according to your filter, the configured sites and Alteon standalone, vADC, and VA devices

Alteon configuration-management buttons

System pane Physical tabDisplays, according to your filter, configured sites and Alteon ADC-VXs with the hosted vADCs

AppShape tab



Figure 21: Configuration PerspectiveAppDirector


Content areaNavigation are for the tab

Properties pane

System pane Organization tabDisplays, according to your filter, the site tree, configured sites, and configured devices

Button that opens the APSolute Vision Reporter

Alerts paneDisplays the Alerts tab and the Messages tab. The Alerts tab displays APSolute Vision and device alerts. The Messages tab is not relevant for AppDirector.



Figure 22: Configuration PerspectiveDefensePro


Content area

Navigation area for the tab

Properties pane

System pane Organization tabDisplays, according to your filter, the site tree, configured sites, and configured devices

Button that opens the APSolute Vision Reporter

Alerts paneDisplays the Alerts tab and the Messages tab. The Alerts tab displays APSolute Vision and device alerts. The Messages tab is not relevant for DefensePro.



The following points apply to all configuration tasks in the Configuration perspective:

To configure a device, you must lock it. For more information, see Locking and Unlocking Devices, page 93.

When you change a field value, the field label is displayed in italics.

Mandatory fields are displayed in red. You must enter data, or select an option in these fields. After setting a mandatory field, the field label changes to black.

By default, tables display up to 20 rows per table page. You can change the number of rows per table up to a maximum of 100 rows.

You can perform one or more of the following operations on table entries:

Add a new entry to the table, and define its parameters.

Edit one or more parameters of an existing table entry.

Delete a table entry.

Device configuration information is saved only on the managed device, not in the APSolute Vision database. To commit information to the device, you must do the following:

Click OK when you modify settings in a configuration dialog box.

Click (Submit) when you modify settings in a configuration page.

Some configuration changes require an immediate device reboot. When you submit the configuration change the device will reboot immediately.

Some configuration changes require a device reboot to take effect, but you can save the change without an immediate reboot. When you submit a change without a reboot, the Properties pane displays a Reboot Required notification until you reboot the device.

For AppDirector and DefensePro, click Update Policies to implement policy-configuration changes if necessary. Policy-configuration changes for a device are saved on the managed device, but the device does not apply the changes until you perform a device configuration update.

For Alteon, APSolute Vision supports the configuration-management options: Apply, Save, Diff, Diff Flash, Revert, Revert Apply, and Dump.

Example Device selection in the Configuration perspectiveThe following example shows the selections you would make to view or change configuration parameters for a Radware device:

1. Open the Configuration perspective by clicking at the top of the window.

2. Select the required device in the system pane by drilling down through the sites and subsites.

3. Right-click the device name, and select Lock Device.

4. Select the required configuration tab in the content pane. Each tab displays a tab navigation pane and configuration options.

5. Select an option in the navigation pane.

6. You can now view and change configuration parameters.

Monitoring PerspectiveIn the Monitoring perspective, you can monitor physical devices and interfaces, and logical objects, such as farms and servers. The Monitoring perspective navigation pane contains two navigation tabs. The System tab contains the physical devices and interfaces. The Application Delivery tab contains the logical entities for AppDirector. The Properties pane displays information about the currently selected device. The content pane for each type of entity contains tabs in which you can view different types of information. Some tabs contain a navigation pane.




Figure 23: Monitoring PerspectiveAlteon

Properties pane

Monitoring buttonOpens the Monitoring perspective

Alerts paneDisplays the Alerts tab and the Messages tab. The Alerts tab displays APSolute Vision and device alerts. The Messages tab displays Alteon configuration messages.

System paneIncludes the Organization, Application Delivery, and Physical tabs

Content areaNavigation area for tab



Figure 24: Monitoring PerspectiveAppDirector Monitoring buttonOpens the Monitoring perspective

Content areaNavigation area for tab

System paneIncludes the Organization, Application Delivery, and Physical tabs. The Organization and Application Delivery tabs are relevant for AppDirector.

Alerts paneDisplays the Alerts tab and the Messages tab. The Alerts tab displays APSolute Vision and device alerts. The Messages tab is not relevant for AppDirector.



Figure 25: Monitoring PerspectiveDefensePro Monitoring buttonopens Monitoring perspective

Content area

Navigation area for tab

Properties pane

Alerts paneDisplays the Alerts tab and the Messages tab. The Alerts tab displays APSolute Vision and device alerts. The Messages tab is not relevant for DefensePro.

System paneIncludes the Organization, Application Delivery, and Physical tabs. The Organization tabs is relevant for DefensePro.



Security Monitoring PerspectiveThe Security Monitoring perspective is displayed only for devices that support the relevant Security module.


In the Security Monitoring perspective, you can access a collection of real-time security-monitoring tools that provide visibility regarding current attacks that the managed d

apsvision admin guide

Documents

copyright radware

radware bereitzustellen

radware customers

radware products

radware zu kopieren

radware et doivent tre

important noticesthis

following copyright