Install Security Server through Control Center
Security Server is a dedicated virtual machine that de-duplicates and centralizes most of the antimalware functionality of antimalware clients, acting as a scan server.
You must install Security Server on one or more hosts so as to accommodate the number of virtual machines to be protected.
You must consider the number of protected virtual machines, resources available for Security Server on hosts, as well as network connectivity between Security Server and protected virtual machines.
The security agent installed on virtual machines connects to Security Server over TCP/IP, using details configured at installation or via a policy.
Download Security Server installation packages
To download Security Server installation packages:
Go to the Network > Installation Packages page from the left side menu in GravityZone Control Center.
Select the Default Security Server Package.
Click the
Download button at the upper side of the table and choose the package type from the menu.Save the selected package to the desired location.
Deploy Security Server installation packages
Once you have the installation package, deploy it to the host using your preferred virtual machine deployment tool.
After deployment, set up the Security Server as follows:
Deploy the Security Server in vCenter.
Open the Security Server console. You will view the main screen of the Security Server.
Press F2 to open the configuration screen.
Enter your password. The default password is:
sve.
Change the password.
The default password does not meet the new security password requirements, so you have to change it. It must contain at least 8 characters, one digit, at least one upper case character, at least one lower case character, one special character and must be changed every 3 months.
Note
For more information about resetting the root password, refer to Reset root password for Security Server.
Select Configure Communication Server. By default, the address is the localhost.
You can select one of the following:
For
cloudgz.gravityzone.bitdefender.com: GZ Cloud Instance 1For
cloud.gravityzone.bitdefender.com: GZ Cloud Instance 2For
cloudap.gravityzone.bitdefender.com: GZ Cloud Instance 3
GZ Cloud Custom Address
If you select this option, press Tab to add the Address and Company hash manually.
Select Enter to start the configuration.
Check the main screen to view you Security Server information.
Access the appliance console from your virtualization management tool (for example, vSphere Client). Alternatively, you can connect to the appliance via SSH.
Log in using the default credentials.
User name:
rootPassword:
sve
Change the password.
The default password does not meet the new security password requirements, so you have to change it. It must contain at least 8 characters, one digit, at least one upper case character, at least one lower case character, one special character and must be changed every 3 months.
Note
For more information about resetting the root password, refer to Reset root password for Security Server.
Run the
sva-setupcommand. You will access the appliance configuration interface.To navigate through menus and options, use the
Taband arrow keys. To select a specific option, pressEnter.Configure the network settings.
The Security Server uses the TCP/IP protocol to communicate with the other GravityZone components. You can configure the appliance to automatically obtain network settings from the DHCP server or you can manually configure network settings, as described herein:
From the main menu, select Network configuration.
Select the network interface.
Select the IP configuration mode:
DHCP, if you want the Security Server to automatically obtain network settings from the DHCP server.
Static, if a DHCP server is absent or an IP reservation for the appliance has been made on the DHCP server. In this case, you must manually configure the network settings.
Enter the hostname, IP address, network mask, gateway and DNS servers in the corresponding fields.
Select OK to save the changes.
Note
If you are connected to the appliance via a SSH client, changing the network settings will immediately terminate your session.
Configure the proxy settings.
If a proxy server is used within the network, you must provide its details so that the Security Server can communicate with GravityZoneControl Center.
Note
Only proxies with basic authentication are supported.
From the main menu, select Internet proxy configuration.
Enter the hostname, username, password and the domain in the corresponding fields.
Select OK to save the changes.
Configure the Communication Server address.
From the main menu, select Communication server configuration.
Select one of the following options for the Communication Server, based on your browser's URL:
For
cloudgz.gravityzone.bitdefender.com: GZ Cloud Instance 1For
cloud.gravityzone.bitdefender.com: GZ Cloud Instance 2For
cloudap.gravityzone.bitdefender.com: GZ Cloud Instance 3
Important
This address must be the same as the one that appears in Control Center policy settings. To check the link, go to the Policies page from the left side menu, add or open a custom policy, navigate to the General > Communication > Endpoint Communication Assignment section and enter the Communication Server name in the column header field. The correct server is going to be displayed in the search results.
Select OK to save the changes.