Add a Symantec Blue Coat

Relevant for: AFA Administrators

This procedure describes how to add a Symantec Blue Coat device to AFA.

Do the following:

  1. Access the Devices Setup page. For details, see Access the DEVICES SETUP page.
  2. In the vendor and device selection page, select Symantec > Blue Coat.

  3. Enter the following fields as needed:

    Supported Capabilities

    Displays a list of supported device capabilities.

    This field is read-only.

    Host

    Enter the host name or IP address of the device.

    User Name

    Enter the user name to use for SSH access to the device.

    Password

    Enter the password to use for SSH access to the device.

    Retrieve credentials from CyberArk vault

    Select this check box to authenticate the device with a CyberArk Vault instead of saving the device credentials on the AlgoSec server.

    If selected, also enter the following details:

    • Platform (Policy ID): The platform to use when authenticating via CyberArk.
    • Safe: The safe to use when authenticating via CyberArk.
    • Folder: The folder to use when authenticating via CyberArk.
    • Object: The device's CyberArk Object.

    Note: These options only appear when CyberArk is configured in AFA. For more details, see Integrate AFA and CyberArk.

    Select the remote agent that should perform data collection for the device.

    To specify that the device is managed locally, select Central Manager.

    This field is relevant when a Geographic Distribution architecture is configured. For more details, see Configure a distributed architecture.

    To enable generation of Baseline Compliance Reports for this device, select the baseline compliance profile to use.

    The drop-down list includes all baseline compliance profiles in the system. For more details, see Customize baseline configuration profiles.

    To disable Baseline Compliance Report generation for this device, select None.

    SNMP version

    Select the SNMP version in the drop-down menu.

    SNMP community

    the SNMP community string.

    This field is only relevant for SNMP v2c.

    Security Name (username)

    Enter the security name.

    This field is only relevant for SNMP v3.

    Authentication Protocol

    Select an authentication protocol as needed.

    This field is only relevant for SNMP v3.

    Authentication Password

    If you selected an authentication protocol, enter the password.

    This field is only relevant for SNMP v3.

    Privacy Protocol

    Select a privacy protocol as needed.

    This field is only relevant for SNMP v3.

    Privacy Password

    If you selected a privacy protocol, enter the password.

    This field is only relevant for SNMP v3.

    Enter an enable password to use when switching to enabled mode.

    Specify how AFA should acquire the device's routing information:

    • Automatic. AFA will automatically generate the device's routing information upon analysis or monitoring.
    • Static Routing Table (URT). AFA will take the device's routing information from a static file you provide. For details, see Specify routing data manually.

    Select one of the following methods to collect data:

    • SSH (recommended)
    • Telnet

    Then, enter the following as needed:

    Custom Port

    To specify a custom port, select this option and type the port.

    This option is only relevant when SSH is selected.

    Number of allowed encryption keys

    Enter the permitted number of different RSA keys received from this device's IP address.

    Different RSA keys may be sent from the same IP address in cases of cluster fail-over, device operating system upgrades, and so on.

    For example, if a cluster fail-over occurs, the secondary node will send a new RSA key from the same IP address to AFA. If this number is set to 1, the connection to the node will fail, resulting in a failed analysis.

    Select one of the following policy configuration methods:

    Visual Policy Manager – VPM

    The device policy is configured via the Visual Policy Manager (VPM) only.
    Content Policy Language – CPL (Command-Line) The device policy is configured via both the command line (CPL) and the Visual Policy Manager (VPM).

    In this field...

    Do this...

    Real-time change monitoring

    Select this option to enable real-time alerting upon configuration changes.

    For details, see Configure real-time monitoring.

    Set user permissions

    Select this option to set user permissions for this device.
  4. Click Finish. The new device is added to the device tree.

  5. If you selected Set user permissions, the Edit users dialog box appears.

    In the list of users displayed, select one or more users to provide access to reports for this account.

    To select multiple users, press the CTRL button while selecting.

    Click OK to close the dialog.

Back to top