In the previous section, you reviewed security and network design useful for your businesses. Finally, you will review important factors for managing Secure Audit Manager.
In Secure Audit Manager, job information is sent and received among components.
You should estimate the timing and amount of sending and receiving of the job information, and the load on the server, so that you can ensure correct sending and receiving of data.
■ Checklist for Safe Sending and Receiving of Data
An uninterruptible power supply (UPS) should be provided for the file server as well as other printers and multifunctional devices.
Consider the following issues for when sending job information to the server on a regular basis:
• Estimate the volume of printing by departments and users.
• Estimate the number of agents and hard disk capacity required, taking into account possible Service Provider failures causing delays in sending accumulated data.
• Use LAN analyzer software or other tools to check the number of computers, printers and multifunctional devices connected to the network and data on the connections.
• Change any network terminal lines that may cause packet collisions to 100Base-TX or higher, or use a switching hub as the target port.
• Estimate the load on a server machine if it has multiple functions such as Express Server.
• Consider adding more memory and a faster CPU to the server.
Consider encrypting hard disks on printers or multifunctional devices based on standard security protocols.
Adjust the resolution of a Web browser on each computer to that of Express Server. For details, see "System Requirements," on p. 1-11.
Adjust the time of each computer and printer within a Secure Audit Manager domain to that of an NTP server.
Check the server hard disk capacity on a regular basis and upgrade or increase it as necessary. You must back up the data on a regular basis. The schedule of sending and receiving job information must be adjusted for this check because it needs to be performed when the server is not used.
Secure Audit Manager manages job information on 24 hour a day basis. Periodically restart the system to ensure stable operation of job information collection. For details, contact your local authorized Canon dealer.
Consider actions to be taken if the server fails, and use this analysis to create a failure
Designing and Building Your System Environment
2
Keep the password confidential. You must set and maintain the password as follows:
• Change the default password. The new password must consist of random alphanumeric characters (a minimum of seven characters is recommended).
• Set an expiry date and change the password periodically (every 60 days is recommended).
• Do not keep the password in an easy to access location.
• Define different passwords for each administrator.
Restrict File Server users using user accounts and passwords.
Manage accounts with access to the server, shared printer configurations, and administrator privileges.
Do not install unnecessary applications into servers.
Create an audit plan to obtain a good audit result.
Consider conducting surprise audits in addition to the regularly scheduled audits.
■ Security Check for Operation
• Checking installation of antivirus software
The administrator checks that required security measures (including antivirus software) are applied to all nodes in Secure Audit Manager, in order to prevent information leakage, system failure, and system down due to a virus.
• Checking whether security patches are applied to the OS and Web server (IIS)
The administrator needs to understand the platform environment where Secure Audit Manager is running and check the latest security information from the OS vendor and Web server (IIS) vendor.
If any appropriate security patches are issued, they should be immediately applied to the system.
• Mutual Monitoring
The administrator and auditor should check each other's work to ensure that system management and job information audit are properly performed.
It is recommended that multiple administrators and auditors be registered with the system and check each other's work using the system log.
Designing and Building Your System Environment
2
■ Checking Job Information Transmission
Use the following flow to check the transmission of job information executed from a printer or iR device.
■ Scheduling Express Server Operation
Estimate a schedule for daily operation for Express Server. Take into account the network environment in which Express Server is deployed in order allocate sufficient time for operations.
Export Folder Service Provider iR Agent
1. Sending to Service Provider
1. Transmission 1. Job Storage
CHAPTER
3
Installing Express Server
This chapter describes how to install and uninstall Express Server, how to install the required applications and components, and how to configure the initial settings.
Installing Express Server . . . 3-2 Overview of Installing and Configuring Express Server . . . .3-2 Installing Internet Information Services (IIS) . . . .3-4 Installing Express Server . . . .3-11 License Authentication . . . .3-17 Notes on Reinstallation. . . .3-19 Configure DCOM Access Restrictions . . . .3-20 Configuring HTTP (HTTPS) Port . . . .3-26 Allowing ASP.NET in Internet Information Services (IIS) . . . .3-29 Configuring Service Provider . . . .3-31 Uninstalling Express Server . . . 3-32
Installing Express Server
3
Installing Express Server
The following steps describe how to install Express Server.
When you install Express Server, Windows services, Web services, and shared files are installed on the server.
In addition, IIS (Internet Information Services) and system registry configurations are added, and configuration files are updated based on the settings configured during the installation.