Single Server Installation
Hardware Requirements
- OS: Windows Server 2012 R2 / 2016
- Memory: 16 GB
- Processor: 4 or more CPUs of 3 GHz (64-bit processor) or faster
- Storage: 70 GB on dedicated data disk
Ports
Source, Destinations | Port | Protocol | Direction | Description | Optional Ports |
|---|---|---|---|---|---|
Database Server | 1433 | TCP | IN | MS-SQL Database Connection (Default port). The port might be changed for security reason. | |
Elasticsearch Server | 9200 | TCP | IN/OUT | Elasticsearch Restful API service | |
9100 | TCP | IN/OUT | Elasticsearch Head Web Front End | Optional. Ports for Elasticsearch Head Web Front End | |
Web/App Server | 443 | TCP | IN/OUT | Connect web api (rest service) located in other tier. Https access to dashboard and admin websites in Web server | |
1433 | TCP | OUT | MS-SQL Database Connection (Default port number) | ||
25 | SMTP | OUT | SMTP Server Connection |
Prerequisites Installation/Setup
Database Server
SQL Server
Required components installed:
Database Engine Services
Client Tools SDK
Management Tools - Complete
Creating new database with name "snare" or a name that complies with the company naming standard.
Application Server and Web Server
Enable Features
Open "control panel"
Click "Turn Windows features on or off"
Enable features "Internet Information Services", ".NET Extensibility 3.5", ".NET Extensibility 4.5", "ASP .NET 3.5", "ASP .NET 4.7" and "Microsoft Message Queue(MSMQ) Servier"
Enable feature "Static Content"
- Click "OK" to install
- After installation, start "ASP.NET State Service" and change the startup type to "Automatic"
Create Service Account
Open Computer Management > System Tools > Local Users and Groups > Users
Right Click > New User…
Username: emitesvc
Full Name: emitesvc
Description: Emite Service Account
Tick Password Never Expires
- Add this user in Administrator group
Open Local Security Policy
Go to Local Policies > User Rights Assignment > Log on as a service
Right Click > Properties
Add the Snare Service Account user
Click OK
- Open the "Microsoft SQL Server Management Studio"
- Give this user the login permission
- Give this user the permission to access emite database
- Give this user the db_owner permission
Setup HTTPS on IIS
For this step, you will need the .pfx file containing the HTTPS signed certificate and key for your domain / subdomain
Copy this pfx file on the server
Open Internet Information Services (IIS) Manager
Go to IIS > Server Certificates
Right Click > Import
Certificate File (.pfx): Select the .pfx file you copied to the server earlier
Password: Enter the pfx keystore password
Select Certificate Store: Web Hosting
Tick the option: Allow this certificate to be exported
Click OK
The certificate should now be on the list:
Go to IIS > Sites > Default Web Sites
Under Actions in the right-hand menu, click Bindings…
Click Add…
Type: https
IP Address: All Unassigned
Port: 443
SSL Certificate: Select the imported certificate from the list
Click OK
Close the IIS Manager
Go to Windows Services, Restart the World Wide Web Publishing Service