Active Scan - ISA Innovation
Contents
1. Noo Yes S O Firewall restriction Yes NO Applying logon script into client machines in start up folder Using external devices like diskette and USB drive run the script to collect information from client machines Supported with additional configuration on clients SAMLite will collect information directly from registry Some information will not be collected Page 7 of 15 GJ SAMLite asset lifecycle management It is not compulsory but recommended You may still install SAMLite 5 into single Server We recommend this for the better performance You may install only few components instead of all The mandatory components are 1 SAMLite Web Dashboard 2 SAMLite Import Service If you do not wish to use Active Collection you may not need to install 1 SAMLite Active Probe 2 SAMLite Scheduler SAMLite collects data through active or passive collection After the data is collected all details will be stored in XML file which will be placed into SAMLite repository SAMShare folder By default the folder can be accessed via lt Hostname gt SAMShareS or configured path SAMLite is relying on Import Service to store data After XML files are sent to SAMShare Incoming folder if the Import Service is running SAMLite will process the files then will send the xml file to either archive or dead folder In case the xml files sent to dead folder contact ISA Technologies for the support Active Collection is relyin2. software inventory However it collects product Ids and will be displayed at Software and Machine details How many Custom fields can have for Software and Machine details SAMLite 5 is designed to have custom fields dynamically So you may have as many as you wish Cannot see the installed Software from list although am certain that the software is in that computer Software Inventory is relied on the details that stored in registry If the software is not present in the registry SAMLite will not able to capture the Software Can SAMLite support Unicode Characters like Chinese Yes SAMLite supports Unicode characters You need to set the regional and languages option under control panel Set the Language for non Unicode programs to the language that you want Regional and Language Options E ajx Regional Options Languages Advanced Language for non Unicode programs This system setting enables non Unicode programs to display menus and dialogs in their native language lt does not affect Unicode programs but it does apply to all users of this computer Select a language to match the language version of the non Unicode programs You wank to Hse Code page conversion tables 10000 MAC Roman 10001 MAC Japanese 10002 MAC Traditional Chinese Bigh 10003 MAC Korean CJ 10004 MAC Arabic CJ 10005 MAC Hebrew Default user account settings Apply all settings to the curre
3. are categories 12 Can see product keys Of Software esssssssesesrrrsssrrresrrersrrrresrreresrrresereresreresererssrrreserereserresene 13 How many Custom fields can have for Software and Machine details 13 Cannot see the installed Software from list although am certain that the software is in that COUTET a EEE E 13 Can SAMLite support Unicode Characters like Chinese ccc cceecccesecceseeeceeceeeuecseeueseneneseeenses 13 When I delete a machine will it also delete the software and hardware information for that PC Seis is Set daate beret eb tebe E E encase E E ese cca a ueleviieueinrec S 13 TCC MICA FA a E E E 14 Where can I get application log for SAMLite sseesseuseseesesrensesrrresrrressreresrrerssreressrerssrereserersseeee 14 Failed to load SAMLite Web Dashboard website ssssssssennssssssssreresssssssrreessssssssrereessssseeerees 14 Error page when accessing SAMLite Web Dashboard cccccccsseseceeececeneseeeeseeeeessseneceeeneeeeees 15 Failed to access active probe web service or Test Connection failed essssssserreeerrrerrresr 15 Where are the logs for SAMLite Scheduler Service cccccesccceseccceseceeeneceeeeseeeeeceeeueceeeueseeeeeees 15 Page 3 of 15 LJ SAMLite asset lifecycle management Where are the logs for SAMLite Active Probe ccccccssseccccesscceceesececeueceeeeeeceeseesecetsusecetsuneces 15 Mipan Service 16 TOU OI MNS renerrien epe s
4. cceessuaeseeecceeeessaagssess 7 Four components of SAMLite 5 must be installed in different servers ccccccceeescceeeseeeneeeeenees 8 Must install all 4 COMPONENES eirinen EAE 8 How does SAMLite Collect data ssssssscccccccssesssesecccceesseeesseeccceeessaeasseeeeeeseesaueuseeeeeeeesanaansess 8 How does SAMLite store data into database ccsscccccccccssssssseeecccceesaeeeseeecceeeesauaeseeeeceseesauagasess 8 How does Active Collection work ccsssssecccccccsseesssecccccessaeesseeeccceessauasseececeesessuaasseeeeeeeesauagasess 8 HOW does scheduled SCAM WOFK vcinvscesssscnreussnessavecannatnninersavedennnenedeesiivecauensuveaoteusbinnasavenaeuausnowonadvens 9 CONECO FAO aaraa rnc tenner Cte ne A T T ee er eee ee ere 10 Can collect inventory from Linux or UNIX based Systems ccccccesseccceseccceeeecceeeeeceseeeeceesenes 10 Why the logged on user is not running SAMLite Script ecccccesseccceesececceecceceeseceeeeecetseneces 10 The Script runs extremely slow Or hangs there cccccessccccesseccceesececeensececeeececeeneceeeeeseeeeseneess 10 Error when running TING SCPIOE seeriana E EE E 10 Machine Auto restart when closing the start up WINGOWS cscccccsssececeesececeeeceeseeeeeeteeeeeeeas 10 Pa Vf Ses 8c aM hae eID e E ee ee 10 Page 2 of 15 GJ SAMLite asset lifecycle management Hide all messages when running the script cceeccccsseccceesececceecceeeesecesseseceseusec
5. e TECHNOLOGIES FAQ User Manual 8 21 2008 This is a user manual to provide SAMLite 5 FAQ This manual includes the common questions problems and trouble shoots for SAMLite 5 GJ SAMLite asset lifecycle management Table of Contents SAMLite 5 Frequently Asked QUESTIONS cccccccssscccceeseccceeececeeesececseececeeseceeeeuecessuneceeseneceetensecesagnesss 5 SSO arate cates g vio uence ee vista at ec E eaten E AE E E E EE E E teu nereeny 5 Niet IS AMETE ereere A E EE veneoiesnonauiieodeondenendinesaedesiacwoneusestiones 5 WT AMILT S E E E E 5 What are the Components Of SAMLite 5 sesssssssesssseesesrrressrererrrresrrrresrrresereresreressrerssrereserereseerese 5 Hardware Requirements for SAMLIite Servers ccccccssseccccessccceeesececsesececeeeeceeeeeaecessugeceeseneeeeas 5 Software Requirements for SAMLite SErVers ccccceeseccccssccccesececceeceeeeescceseuececseneceeseueeessgneees 5 RUE FAO E E E E 6 SAMLite 5 on workstation instead of Servers ssssssesssssssssrreressssssrrrrersssssserreressssserrreessssserereee 6 SAMLite 5 using SQL Server 2000 or MSDE sssssoseussresssressressrererrresrersrrrssreesrersreresreesrersreresrees 6 SAMLite 5 using Microsoft Net Framework 1 0 1 1 eessssesssssrrrrrrrrrrrrereeeesssssrrrrrrrrrrrrrereeeseeseens 6 VS E rst cberec a tecture yacht ate aug A E E E N S 7 Different between Passive and Active Collection cccccccsssssssecccceccsaeeseeecc
6. e Probe installation folder SAMLite V5 ActiveProbe When testing connection change the port to the port of new website Please contact ISA Technologies for more details about this You need to enable the logs for this service 1 To enable it go to Start gt All Programs gt SAMLite gt Scheduled Scan gt Setup Configurator 2 Under Log Settings provide the log path eg C Program Files SAMLite V5 WebDash SAMScheduler 3 Check Enable Log 4 Click Apply to restart the Scheduler Service Click OK to close For the next event that uses scheduler service will be logged into the specific log path It is located at SAMLite Active Probe installation folder SAMLite V5 WebDash ActiveProbe It only logs if there is error during active collection To disable the logs open web config Locate configuration gt appsettings Search a key named EnableLog Change the value to False a Ensure the service is running or restart the service b Ensure you have already configured database configurator c Ensure the path for SAMShare is correct and its incoming folder is writable by users d If any files are sent to dead folder it means the Import Service is working properly Page 15 of 15
7. e Windows Network Neighbourhood as collection type To get all machines in your company click amp to remove all existing discovered machines and start searching machines that linked to Active Probe To begin network discovery select an active probe then click Scan Now Active Probe Web Server D gt This process might take a few seconds to few minutes depending of the size of your company Click to refresh the list Active Collection will not collect machines without credentials You must provide username and password in order to scan the machines The username and password cannot be empty These machines will be audited as long as the machines are connected to network This might a bit slower for Active Collection due to checking for credentials and responses On Active Probe Server follow these instructions 1 Start gt Run gt type Inetmgr to open IIS manager 2 Go to properties of SAMLiteActiveProbe directory By default it is located at Default Web Site folder 3 Go to Directory Security tab 4 Click Edit from the authentication and access control group 5 Check Enable anonymous access 6 Close the IIS manager 7 Go to Start gt Run Type iisreset Make sure no other web application is running Page 11 of 15 GJ SAMLIte asset lifecycle management Reporting FAQ No charts in overview page You need to install Adobe Flash Player 9 0 or later into your web browser want to see the date in 28 08 2008
8. eeeeneeeeteneeeeeas 10 NT CSS CEI PODE eon scat oaanacesosacucecasanucesnaniatocsnaascasescouneaes 10 Active Collection Taled TO SCAN repris eer EE EEE E E 10 How do I stop the initiated active scan sssssessseesesrerserreresrrrssrrrresererssreressrerssreresererssrereserereseeee 11 don t know the IP Addresses or hostnames How can I use Active Collection eesse 11 There are some machines without credentials Why Active Scan always failed on these machines and it stated Credential failure ou ccecccceeccceeececesececenecseeeeceeeeeeseueceseueseseuseeeeneeeeees 11 Collecting data via Dial up CONNECTION ccccccesscccesssececeesececceuscceseusececsuneceseegceessesecetsenecessenes 11 When test connection receive a dialog box that prompts for credentials What should do 11 Be Or CUS Ooi cass cessed E aioe tleed aatuicnes uoeadlena nested hace E A 12 No Charts in overview PARE cccccccsssecccessececceseccceeseceeeesecesseeceeeeeeceeseneeceseeeecessegecetseneceeseeeeeeeas 12 want to see the date in 28 08 2008 not 8 28 2008 cceeeccccsseccecesscceceesececeeseceeeeesceeneusesenas 12 Why there are many Similar Software NAMES ceeccccceseccccesscceceesececeuececsenecesseeseceseuecetsuneses 12 Does SAMLite identify the components of a software suite such as MS Word in the MS Office SUS rx E snare E A A E sears creado E AA 12 Is SAMLite capable of automatically adding Software views based on softw
9. g on Active Probe which is a web service that collects data from client PC Before beginning the scan administrators have to provide credentials and target machines in Active Scan Configuration Then these details will be sent to Active Probe and the probe will begin the scan After the scan finished the probe will transmit data to SAMLite Server to generate XML file then send the file to SAMLite repository During transmission the data is encrypted and compressed for security purpose Page 8 of 15 _ of AALite SAMLite Scheduler Service is required to be installed in order this scan to work Scheduled Scan is using same method as Active Collection The different is the collection will run at scheduled time instead of triggered by administrators You can set the schedule by daily weekly monthly or in time intervals It is recommended to set the time when most of machines are logged on Be sure to configure database settings and select SAMLite database in scheduler setup before the scan Page 9 of 15 GJ SAMLite asset lifecycle management Collection FAQ No Currently SAMLite does not support these systems Make sure that the logged on user account is assigned to run the script Machines that not joined to the domain or not using domain users will not be able to run the script It depends on number of data stored on client PC The more data the more time to be captured Contact ISA Technologies for support if this ha
10. ng SQL Server 2000 or MSDE No SAMLite 5 does not support SQL Server 2000 or MSDE The requirement for database server is SQL Server 2005 or above SAMLite 5 using Microsoft Net Framework 1 0 1 1 No SAMLite 5 only supports Microsoft Net Framework 2 0 or above Page 6 of 15 GJ SAMLite asset lifecycle management Concept FAQ Active Collection is a scan method on demand Administrators are required to provide Active Probe Web Server credentials and target machines to begin the scan Besides that administrators also may schedule the scan on specific time like daily weekly or monthly Active Collection can be configured at Active Scan Overview Inventory Reports License Management Administration ActiveScan Configuration Figure 1 0 Active Scan configuration Passive Collection is depended on Active Directory which requires each domain user to logon into a windows domain It uses logon scripts provided by SAMLite and machines will run the script once users have logged on It can be configured at SAMLite Web dashboard under Configuration gt Configure Logon Script Make sure the path is writable by SAMLite Web dashboard Server Overview Inventory Reports License Management Administration ActiveScan Configuration Figure 1 1 Passive Scan configurations re Supported Network Environment Client PC in AD Client PC not in AD Machines not in network Client PC Configuration Windows 2000 or below 98 95 Y No WMI installed
11. not 8 28 2008 The date is according to the regional settings on the SAMLite Servers To ensure it displays correctly set SAMLite Web Dashboard Server and SAMLite Database Server with the same date format Customize Regional Options a x Numbers Currency Time Date Calendar When a two digit year is entered interpret it as a year between E and 2029 Short date Short date sample 2 28 2008 Short date format Mdu Date separator Long date Long date sample Thursday August 28 2008 Long date format ddda MMMM dd ayy coed n Why there are many similar Software names This is due to the different version and publisher for the same software Different in Version and Publisher of software will be clarified as different software Does SAMLite identify the components of a software suite such as MS Word in the MS Office Suite The Software is collected from the computers registry records Depending on how the software products register the names versions and publishers You may see either the individual software or the software suite name only Is SAMLite capable of automatically adding Software views based on software categories No SAMLite does not perform automatic tagging as this would depend on a software inventory which may not be accurate Page 12 of 15 _ L AALite Can I see product keys of Software No SAMLite will not collect any product keys from any
12. nt user account and to the default user profile coed as Configure this setting on SAMLite Server and the client PC in order to capture Unicode characters When I delete a machine will it also delete the software and hardware information for that PC It will delete all software and hardware information that belonged to affected PC However the Software Inventory will not be deleted Page 13 of 15 GJ SAMLite asset lifecycle management Technical FAQ The website for the logs is http localhost SAMLite5POC Public AppLogViewer aspx Alternatively you may get the logs from SAMLite installation folder Webdash Logs A Make sure you have met the specified requirements B You need to register ASP NET 2 0 to IIS a Goto Start gt Run Type CMD b Go to folder and follow the command e C VWWINDOWS system32tcemd_exe C WINDOWS Microsoft NET Framevork v2 6 5872 7 gt aspnet_regiis i c After you have registered the ASP NET 2 0 to IIS type the following command Make sure no other web application is running when restarting the IIS es C VWIHDOWStsystem32 cmd_exe C gt SWINDOWS Microsoft NET Frameworku 4 58727 gt i1isreset m C ASP NET 2 0 needs to be allowed in Web Service Extension IIS 6 0 or above only a Goto Start gt Run Type CMD b Type inetmgr Click OK c Goto Web Service Extension folder Locate ASP NET v2 0 50727 and change the status to Allowed g Internet Information Service
13. ppens often This is due to the modification of the script Another possibility is using older version of Kixtart SAMLite script requires Kixtart Version 4 or later to run the script properly The version can be checked at the properties of the file named KIX32 EXE It is not advised to close the start up windows during passive collection This is a mechanism from Windows There is nothing we can do about it There might be the problem of the WMI Service on client PC Restart WMI Service or restart the client machine From the script folder open sam kix by using notepad Find SENABLE_ ECHO change the value to False Active Probe is designed for environment that has multiple regions with tighter securities In that case you might need to install many active probes and every probe is connectable with all machines in that region In addition Active Probe is also served as Gateway of data collection For more information please refer to Installation and Deployment pdf under Architecture Please refer to Client Configurations for Active Scan pdf for detailed troubleshoots Page 10 of 15 LGJ SAMLite asset lifecycle management You can stop the active collection at SAMLite Web Dashboard gt Active Scan gt Event Log Click Dio stop all the active collection 24 events Type All Types y Status All Status Refreshrate Never B T Note This will stop all the active collections including scheduled scan You can us
14. s 115 Manager Mel Yy File Action View Window Help e menee an a Internet Information Services Fla 8 BOSSO1 local computer Fl Application Pools Fl Web Sites fl web Service Extensior za Web Service Extensions i Web Service Extension Status Sh All Unknown CGI Extensions Allowed Gh All Unknown ISAPI Extensions Allowed Allow Prohibit ag Active Server Pages Allowed deals SB ASP NET v1 1 4922 allowed Properties ASP NET 2 050727 Allowed E Internet Data Connector Allowed p Server Side Includes Allowed Tasks lad WebDAY allowed gt Add a new Web service extension Allow all web service extensions For a specific application Prohibit all Web service extensions a Open Help cD 4 gt Y Extended A Standard F Page 14 of 15 GJ SAMLite asset lifecycle management The system has encountered an error Please contact your system administrator or SAM Support for assistance See application log Click See application log to check for the problem Please refer to Webdash Error Message pdf for more details Make sure you have installed Active Probe and pointing to correct probe IP address The default probe address would be http localhost SAMLiteActiveProbe Activeprobe asmx Another cause is where the web application is not allowed in Default Web Site In that case create a new Website with virtual directory named SAMLiteActiveProbe Assign the path to SAMLite Activ
15. tan nreseteanantstuiseneascavoseauetem 15 Page 4of 15 GJ SAMLite asset lifecycle management SAMLite FAQ SAMLite is an asset lifecycle management that designed to collect record and report from computers It is used for Software Asset Management as well as hardware such as processors hard disks network devices and the like In addition it enables to keep track the software and hardware changes hard disk usage and reconciliations SAMLite 5 is light weight user friendly and easy to deploy by giving comprehensive software license management and hardware lifecycle management SAMLite 5 also agent less as it depended on Logon Scripts from AD There are 4 components SAMLite Web Dashboard SAMILite Import Service SAMLite Active Probe SAMLite Scheduler Service These components can be installed either in a server or different servers individually Pentium IV Processors or above 512 MB of RAM 200 MB Hard Disk Space Network Card Windows Server 2000 2003 2008 or Windows XP Vista Microsoft Internet Information Service IIS 5 0 or greater ASP NET Ajax Extension 1 0 Internet Explorer 6 0 or above Microsoft Net Framework 2 0 Microsoft SQL Server 2005 or above Page 5 of 15 GJ SAMLIte asset lifecycle management Compatibility FAQ SAMLite 5 on workstation instead of Servers Yes you may install SAMLite 5 into workstation as long as the machine meets the requirements SAMLite 5 usi
Download Pdf Manuals
Related Search