In this lecture I will explain how to stall the security union tools using the set up lizard.
But before doing that I will go and enable the skilled mood view for the better view here and then I
will launch the set up with our and I have to enter my password.
We see that we are being asked if we want to continue or not.
And I would click on yes to new.
Then it asks us about if we want to configure the network interfaces in order for optimizing or installing
these tools to work correctly.
So I will click yes configure in it the network interfaces.
Now it is asking us about if we want to configuring a management interface and which interface should
we we use.
And I will select it on a zero and then okay.
And it asks us now what way we want to configure the other thing.
The idea that thing for the interface if it should be static or the HCV and I will select the DHB option
just for make things easier.
Okay now it is asking about configuring the monitoring or sniffing interface and I will click on yes
because this is the most important thing for the security union is to sniff traffic or capture packets.
So I would click on yes and the interface that is Lyft for this rule is the right one.
So OK now it asks us about to confirm these and make changes.
So yes.
So now we need to reboot the system in order for this to take effect.
So I will click on yes it would.
So now we see that the security union VM is restarting and after the restart the window for logging
should appear.
And after we log in into the system we will continue our sit up process by installing the tools after
the configuration that is done for the network interfaces.
So now we see that the M or the secret union is starting so now I will type my name and password.
So now we have logged into skilled union and now I will run the set up again and enter my password.
So continue.
Now it it is saying that network interfaces are have been set up already so I will click on yes network
configuration.
Now we have two types of setup these tables stop on the experimental setup so this will stop.
We run the current stable version of the set up and it will configure Elsa for the look management and
the experimental set up.
It will install or configure the elastic stack which combines elastic search log stash and Cabana and
as you know that I have downloaded and installed the security union virgin that is that supported Elsa
but not the new things which are the elastic stack because this virgin now that we are seeing is using
the elastic stuck as experimental but in the new version
became stable so the elastic stack will be the default thing so I will select a stable set up since
we want to use Elsa.
So like I will click on.
Okay now we have two moods devaluation mood and the production mood and the evolution mood is recommended
for the first time users or standalone VMs.
While the production with is recommended for production deployment deployments.
And because we are running just laps I will install the evaluation mode and in this mode stand alone
BMC means that we will run the server and the client on the same machine.
So the server that have the management software such as Elsa integral will be run on this energy machine
and also the client tools such such as these sensors like the pro snorts or ricotta will also run on
this machine while in the production would you.
You will run the server on a separate machine then the client.
So now I will take okay for the EVP evaluation mode and it asks us about what interface to be monitored
which should be Ethernet one and then we have to configure user name for signal and password
and then we have to confirm your password.
Now it asks us if we want to confirm and proceed with the chase.
So I will click on yes
and we see now that the union set up is running and it is now uh stopping the NSM services and then
ism is your acronym for network security management.
So now we see that the security union setup is now complete so I have to click on.
Okay.
And we see here the comments that can we use to check the status of the running services like so do
you start to do so start quick and to do so start redacted.
So I will get here.
Okay.
And also tells us that we can download rules at or the that the rules downloaded are in this path.
Now we see that the tools have been installed like Ilsa signal and squirt.
So that means that we have run these up with art and installed the required tools for security unions
successfully and in the next lecture I will explain more things about security union like getting the
software and installing the gas emissions and taking a snapshot of the system.