5.13 Deploying Command Control

To deploy Command Control, you first download several modules to your local Package Manager, then install them:

5.13.1 Command Control Modules

The Command Control feature is made up of the following packages:

  • Command Control Manager: Holds the rule configuration and is responsible for validating user command requests.

  • Command Control Agents: Installed on machines where user commands are to be controlled or audited.

  • Command Control Console: Installed into the Framework Manager console. Required for configuring Command Control rules.

5.13.2 Auditing Modules

The auditing modules are made up of the following packages:

  • Audit Manager: Acts as the repository for auditing information collected by the Framework.

  • Reporting Console: Installed into the Framework Manager console. Required for viewing audit information.

  • Command Reporting Console: Installed into the main Reporting Console. Required for viewing Command Control audit information.

5.13.3 Compliance Auditor Modules

The Compliance Auditor modules are made up of the following packages:

  • Compliance Auditor: Holds the compliance auditor rules and audit information.

  • Compliance Auditor Console: Installed into the Framework Manager console. Required for configuring compliance auditor rules and for viewing audit information.

5.13.4 Installing Command Control

To deploy Command Control:

  1. Download the required packages to your local Package Manager. See Section 5.13, Deploying Command Control for details.

  2. Install the Command Control Manager package on the host you want to be the Command Control Manager. This can be on any operating system, including Windows.

    See Section 3.4.6, Installing Packages on a Host for details. Command Control Managers can be deployed to as many hosts as you need in order to build an environment with load balancing and failover.

  3. Install the Command Control Agent package on all UNIX hosts on which you want to implement Command Control.

  4. Install the Audit Manager package on the host you want to be the Audit Manager, then install the Compliance Auditor package on the same host.

    This can be on any operating system, including Windows, and can be a different host from your Command Control Manager. The auditing packages can be deployed to as many hosts as you need in order to build an environment with load balancing and failover.

  5. Install the following consoles:

    • Command Control Console

    • Reporting Console

    • Command Reporting Console

    • Compliance Auditor Console

    See Section 2.2.2, Adding a Console to the Framework Manager Console for details.

Command control is now deployed and ready to use.