Deploying the processing server

To deploy a processing server, you need to run a disk image with the Central Node and Sensor components.

If an error occurred while performing the steps of the Setup Wizard, contact Technical Support.

Step 1. Viewing the End User License Agreement and Privacy Policy

To continue the installation, you must read the End User License Agreement and Privacy Policy and accept their terms and conditions. Installation will not continue until you accept the terms of the End User License Agreement and Privacy Policy.

To accept the terms and conditions of the End User License Agreement and the Privacy Policy when installing the components based on the Ubuntu operating system:

1. Select the language for viewing the AO Kaspersky Lab End User License Agreement and Privacy Policy in the list and press Enter.

   This opens a window with the text of the AO Kaspersky Lab End User License Agreement.

2. Read the AO Kaspersky Lab End User License Agreement.

   To move up and down, you can use the keys: ↑, ↓, PageUp, and PageDown.

3. If you accept the AO Kaspersky Lab End User License Agreement, select the I accept button and press Enter.

   This opens a window with the text of the AO Kaspersky Lab Privacy Policy.

4. Read the AO Kaspersky Lab Privacy Policy.
5. If you accept the terms and conditions of the AO Kaspersky Lab Privacy Policy, select the I accept button and press Enter.

The Setup Wizard proceeds to the next step.

To accept the terms and conditions of the End User License Agreement and the Privacy Policy when installing the components based on the Astra Linux operating system:

1. Select the language for viewing the End User License Agreement for Astra Linux operating systems from the list by pressing the F1 key and press Enter.

   This opens a window with the text of the Astra Linux End User License Agreement.

2. Read the End User License Agreement of the Astra Linux operating systems.

   To move up and down, you can use the keys: ↑, ↓, PageUp, and PageDown.

3. If you accept the terms and conditions of the End User License Agreement of Astra Linux operating systems, select Yes and press Enter.

   This opens a window in which you can select the language for viewing the AO Kaspersky Lab End User License Agreement and Privacy Policy.

4. Select the language for viewing the AO Kaspersky Lab End User License Agreement and Privacy Policy in the list and press Enter.

   This opens a window with the text of the AO Kaspersky Lab End User License Agreement.

5. Read the AO Kaspersky Lab End User License Agreement.

   To move up and down, you can use the keys: ↑, ↓, PageUp, and PageDown.

6. If you accept the terms and conditions of the AO Kaspersky Lab End User License Agreement, select the I accept button and press Enter.

   This opens a window with the text of the AO Kaspersky Lab Privacy Policy.

7. Read the AO Kaspersky Lab Privacy Policy.
8. If you accept the terms and conditions of the AO Kaspersky Lab Privacy Policy, select the I accept button and press Enter.

The Setup Wizard proceeds to the next step.

Step 2. Selecting a server role

To select a server role:

1. Select one of the following options:
   • storage.

     This role is for installing a storage server for deploying the Central Node component as a cluster.

   • processing.

     This role is for installing a processing server for deploying the Central Node component as a cluster.

     The role also includes the installation and configuration of the Sensor component.

   • single.

     This role is for installing the Central Node and Sensor components on the same server.

   • sensor.

     This role is for installing the Sensor component on a standalone server.

2. Press Enter.

The Setup Wizard proceeds to the next step.

Step 3. Selecting a disk for installing the component

You need at least 150 GB of disk space. If less than 150 GB of disk space is available, installation finishes with an error.

To select a disk for installing the component:

1. Select one of the suggested drives for installing the component and press Enter.

   The confirmation window is displayed.

2. Select Yes and press Enter.

The Setup Wizard proceeds to the next step.

Step 4. Selecting a network mask for cluster server addressing

We recommend using the default value.

The netmask may not match netmasks used in the organization's infrastructure.

To specify the network mask for cluster server addressing:

• If you want to use the predefined value for the network mask, select the Ok button and press Enter.

  Default value: 198.18.0.0/16.

• If you want to specify a different network mask, in the Subnet field, enter your value, select the Ok button, and press Enter.

  The mask must match the template: x.x.0.0/16.

The Setup Wizard proceeds to the next step.

Step 5. Selecting a network mask for addressing of application components

We recommend using the default value.

The network for application component addressing must not overlap with the network for cluster server addressing.

To specify the network mask for addressing the main components of the application:

• If you want to use the predefined value for the network mask, select the Ok button and press Enter.

  Default value: 198.19.0.0/16.

• If you want to specify a different network mask, in the Bridge/overlay subnets field, enter your value, select the Ok button, and press Enter.

  The mask must match the template: x.x.0.0/16.

The Setup Wizard proceeds to the next step.

Step 6. Selecting the cluster network interface

The cluster network interface is used for communication between cluster servers.

To select the cluster network interface:

1. Select the row containing the network interface that is used for the internal network.

   To select a row, you can use the ↑, ↓, PageUp, and PageDown keys. The selected row is highlighted in red.

2. Press Enter.

The Setup Wizard proceeds to the next step.

Step 7. Selecting the external network interface

The external network interface is used for SSH access to the server, managing the web interface of Kaspersky Anti Targeted Attack Platform, and other external connections.

To select the external network interface:

1. Select the row containing the network interface that is used for the external network.

   To select a row, you can use the ↑, ↓, PageUp, and PageDown keys. The selected row is highlighted in red.

2. Press Enter.

The Setup Wizard proceeds to the next step.

Step 8. Selecting the method of obtaining IP addresses for network interfaces

To select a method for obtaining an IP address for network interfaces:

1. Select the row containing the Configuration type: and press Enter.

   To select a row, you can use the ↑, ↓, PageUp, and PageDown keys. The selected row is highlighted in red.

2. In the opened window, select one of the following options:
   • dhcp.
   • static.
3. If you selected static:
   1. Select the row containing the parameter and press the Enter key.
   2. In the opened window, enter the required data and press Enter twice.

      You need to specify a value for each parameter.

4. Select the row containing Save.
5. Press Enter.

The Setup Wizard proceeds to the next step.

Step 9. Authenticating the server in the cluster

To authenticate a server in the cluster, you need to enter the admin account password that was set when the first server in the cluster was deployed.

To authenticate a server in the cluster:

1. In the password field, enter the password for the administrator account.
2. Select Ok and press Enter.

   To select a button, you can use the ↑, ↓, PageUp, and PageDown keys.

The server in the cluster will be authenticated. The Setup Wizard proceeds to the next step.

Step 10. Selecting the localization language for the NDR functionality and configuring the receipt of mirrored traffic from SPAN ports

If you are deploying the first worker server of the cluster, at this step, you must complete the steps of the Setup Wizard in the following order:

1. Select the localization language for the NDR functionality.
2. Configure the receipt of mirrored traffic from SPAN ports.

If you are deploying an additional worker server, the NDR localization selection step is omitted. After authenticating the server in the cluster, the Setup Wizard proceeds to the step at which you configure the receipt of mirrored traffic from SPAN ports.

Selecting the localization language for the NDR functionality

The selected language is used to display the parts of the application that have to do with the NDR functionality.

To select the localization language for the NDR functionality:

Select it in the list and press Enter.

The localization language of the NDR functionality is selected. The Setup Wizard proceeds to the step at which you configure the receipt of mirrored traffic from SPAN ports.

Configuring receipt of mirrored traffic from SPAN ports

To turn on receipt of mirrored traffic from SPAN ports:

1. This opens a window, in that window, select Yes and press Enter.
2. In the displayed list, select the network interfaces from which you want to capture network traffic.
3. Select the line containing Apply and finish and press Enter.

The configuration may take some time. Then the installation is complete. For the application to work correctly, you must configure the server.

To turn off the receipt of mirrored traffic from SPAN ports:

In the opened window, select No and press Enter.

The configuration may take some time. Then the installation is complete. For the application to work correctly, you must configure the server.