ASMS deployment checklist

Work with AlgoSec to understand our architecture recommendations for your needs.

Before starting, make sure you have the following programs available on your system:

• SSH Client

• Web Browser

• SFTP/SCP Client

Ensure that your hardware or virtual components meet our system requirements.

For details, see System requirements.

Based on your deployment type:

• Deploy your pre-installed, standalone VMware virtual appliance or AlgoSec hardware appliance. For details, see Deploy standalone appliances.

• Deploy ASMS on Amazon AWS or Microsoft Azure. See Deploy ASMS on the cloud.

Set up your environment, including high availability or disaster recovery clusters, as well as load or geographic distribution.

For details, see:

• Deploy clusters and distributed architectures
• Manage clusters
• Configure a distributed architecture

At this point, make sure you have:

• Configured Network, DNS, & NTP for each appliance

• Installed Web Server Certificates for CM or HA/DR. See KB articles

  • How to Install and Generate an SSL key and Certificate Signing Request (CSR)

  • Create a Self-Signed Certificate in AFA with Subject Alternative Name (SAN)

• Installed Software Version - Latest Hotfix for each appliance

Install your license.

For details, see:

• Obtain a license
• Install a license

Define how AFA handles user authentication and authorization.

For details, see Configure user authentication.

Define AFA users and their roles.

For details, see AFA users and roles.

Configure AFA to send email notifications.

For details, see Configure event-triggered notifications.

Configure AFA settings for data storage.

For details, see Storage.

Configure monitoring systems for each ASMS product.

For details, see:

• Sending outgoing syslog messages
• AFA Syslog messages
• FireFlow syslog messages
• AppViz Syslog messages

Populate AFA with your devices.

For details, see Manage devices and Configure an external Syslog server.

Configure AFA settings for scheduled analysis jobs.

For details, see Schedule analysis.

See:

• Managing Analyses

• Manage real-time monitoring

FireFlow templates and workflows are fully configurable.

We recommend using the default configuration to get started, and then customizing FireFlow as needed.

For details, see:

• Request templates and workflows
• Customize the FireFlow Home page
• Manage FireFlow users and roles
• Other workflow options
• Manage request templates
• Manage FireFlow emails and notifications

Create a sample change request and push it through the entire workflow to test each step in the process.

For details, see Request changes.

View your network map in AFA and confirm that it displays as expected.

For details, see AFA's graphic network map.

Sanity end-to-end traffic simulation

Run an end-to-end traffic simulation query to ensure that the data presents as expected.

For details, see Run traffic simulation queries.

After viewing default reports and query results, you may want to adjust the way AFA displays your data.

For details, see:

• Modify the graphic network map
• Customize risk detection

Set up AppViz to view your network details from a business perspective.

For details, see:

• Configure applications
• AppViz users, permissions, and roles
• Custom fields
• Security zones
• Critical processes
• Manage vulnerability assessment scanners
• Customize interactions with AFA and FireFlow

View data for your application from AppViz to test each feature.

For details, see Business applications.

Install and configure AutoDiscovery so that AppViz can automatically detect your flows and applications.

For details, see Deploy AutoDiscovery .