Page Comparison

Introduction

The following guides are just best practices and should help you with common tasks in a azeti SONARPLEX infrastructure. Please make small changes and monitor the performance of your device, adjust step by step. A lot of the success of optimizations depends on your configuration in detail. Make sure to test changes in a test environment first before deploying to your production system. You can use the free VAA (available on www.azeti.net) for testing.

Security Optimization

•  Agent Password: Use a strong azeti Agent Password, best is to use more than 16 letters, special chars and numbers (

  Insert excerpt
  _AdminWeb _AdminWeb nopanel true

   > Configuration > Network > Agent Configuration)
•  IP Forward: Disable "IP Forwarding" (forwarding of ip packets between the network interfaces)
•  SNMP Community: Change the default SNMP community strings, use strong strings instead of "public" (

  Insert excerpt
  _AdminWeb _AdminWeb nopanel true

   > Configuration > Network > SNMP Configuration and Configuration > System > Status Delivery Configuration for Distributed Monitoring)
•  HTTPS: Enable HTTPS instead of unencrypted HTTP (

  Insert excerpt
  _AdminWeb _AdminWeb nopanel true

   > Configuration > Network > HTTP Configuration), optionally change the HTTPS Port to something different than 443,444
•  SSL Certificate: Use properly (signed by a trusted CA) signed SSL certificates instead of the default self-signed azeti certificate
•  Passwords: Change the Administrator password and use a strong password (

  Insert excerpt
  _AdminWeb _AdminWeb nopanel true

   > Configuration > Accounts > Administrator (admin))
•  Accounts: Delete all unnecessary accounts or at least disable the web and admin GUI access for unprivileged users (

  Insert excerpt
  _AdminWeb _AdminWeb nopanel true

   > Configuration > Accounts)
•  Updates: Keep your SONARPLEX up to date, check portal.azeti.net regularly or enable Auto Updates if your SONARPLEX does have an internet connection