HP TippingPoint

Security Management System (SMS) Recovery Guide

December 12, 2013 Rev 13.12.5

Copyright Statement

Copyright 2013 Hewlett-Packard Development Company, L.P. Hewlett-Packard Company makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. HewlettPackard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Hewlett-Packard. The information is provided as is without warranty of any kind and is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. TippingPoint the TippingPoint logo and Digital Vaccine are registered trademarks of HewlettPackard All other company and product names may be trademarks of their respective holders. All rights reserved. This document contains confidential information, trade secrets or both, which are the property of Hewlett-Packard No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from Hewlett-Packard or one of its subsidiaries.

SMS Recovery Guide

Page 2 of 11

Version 13.12.5

Table of Contents

TABLE OF CONTENTS
1. 2. 3. Overview .................................................................................................................................... 4 Recovery Considerations ............................................................................................................. 4 Recovery Process ........................................................................................................................ 5 3.1. 3.2. 3.3. 3.4. 3.5. 3.6. 4. Obtain the SMS Recovery Image from TAC.............................................................................................. 5 Burn the SMS ISO image to a USB flash drive ....................................................................................... 5 Factory install the SMS from the USB memory stick .............................................................................. 8 Configure the SMS device for your network ............................................................................................ 9 Restore the SMS database from a backup (if available) ....................................................................... 10 Unmanage and remanage all IPS devices (if required) ......................................................................... 10

HP TippingPoint Support............................................................................................................ 11

SMS Recovery Guide

Page 3 of 11

Version 13.12.5

Recovery Process

1.

Overview

The purpose of this guide is to provide guidance and how-to information for the recovery of a failed SMS device. The SMS recovery process erases all files on the SMS and performs a fresh installation, thus performing a factory reset on the device. It is highly recommended that you have an SMS backup on hand in order to fully restore your system. At the most basic level, the SMS recovery process consists of the following areas: 1. 2. 3. 4. 5. 6. Obtain the SMS Recovery Image from the Technical Assistance Center (TAC) Burn the SMS ISO image to a USB flash drive Factory install the SMS from the USB flash drive Configure the SMS device for your network Restore the SMS database from a backup (if available) Unmanage and remanage all IPS devices (if required)

Note: If you wish to restore a backup after the recovery process, the version of the backup must be the same or older than image used for the recovery process. As an example, if you backup a SMS 4.0, and then use this process to install SMS 3.6, you will NOT be able to restore the SMS 4.0 backup on your new SMS 3.6 system. However, you CAN restore older SMS backup on a newer version of the SMS. For instance, if you backup SMS 3.5, and then use this process to fresh install SMS 3.6; you WILL be able to restore the backup.

2.

Recovery Considerations

a. Requirements SMS recovery ISO image USB flash drive with at least 2GB of storage USB formatting utility to create a bootable USB drive (see below) b. This process is only intended for the following SMS devices SMS H1 (DL320 G6) 300GB drives SMS XL (Dl380 G7) SMS XL 2000 (Dl380 G8) c. Recovery images are available for the following versions of SMS SMS 3.6.0 SMS 4.0.0 d. Part of the recovery process requires that you create a bootable USB drive. For our purposes we recommend Open Source software called Rufus (Windows only) which can be found at the following URL: http://rufus.akeo.ie/

SMS Recovery Guide

Page 4 of 11

Version 13.12.5

Recovery Process

3.

Recovery Process 3.1. Obtain the SMS Recovery Image from TAC For contact information please see the HP TippingPoint Support section in this document. 3.2. Burn the SMS ISO image to a USB flash drive To create a bootable USB drive, you must use a USB formatting utility to copy the ISO image to a flash drive. We recommend the open source software Rufus, available at: http://rufus.akeo.ie/. The following steps use the Rufus utility as an example. a. Insert the USB flash drive on your computer b. Launch Rufus, and use the following configuration options: Device: Select the USB drive File System: Select FAT32 Volume Label: Must be SMS Cluster Size: Must be 16 kilobytes Bootable disk format: Select ISO Image c. Locate the downloaded SMS recovery image by selecting the DVD icon and browsing for the file.

SMS Recovery Guide

Page 5 of 11

Version 13.12.5

Recovery Process

d. Locate the downloaded SMS ISO recovery image by selecting the DVD icon and browsing for the file.

SMS Recovery Guide

Page 6 of 11

Version 13.12.5

Recovery Process

Note: Notice the indication at the bottom of the Rufus application that indicates the ISO file name being used.

e. Click Start The following warning is displayed

Note: On average the ISO to USB process should take 5 minutes

SMS Recovery Guide Page 7 of 11 Version 13.12.5

Recovery Process

3.3. Factory install the SMS from the USB memory stick a. Insert the formatted USB flash drive in the SMS and reboot the system. Note: You might have to change the boot order of the SMS via the CMOS by pressing F9 (Setup) or F11 (Boot order) the boot up process. b. Once the boot process has initiated via the SMS USB flash drive, you will be presented with the following warning;

c. Type install and press Enter to continue.

WARNING: Removing the USB drive from the SMS or rebooting the SMS during the recovery process will cause the system to fail and force an RMA.

SMS Recovery Guide

Page 8 of 11

Version 13.12.5

Recovery Process

d. When the installation is complete, the system displays the following message

e. Remove the USB flash drive from the SMS f. Press Enter to reboot the SMS 3.4. Configure the SMS device for your network After the SMS has completed its reboot process, you must complete the Out-Of-Box Experience (OBE). a. b. c. d. e. f. Log on to the SMS Server as SuperUser (no password). Read and accept the end-user license agreement to continue. If desired, select a language for a different keyboard layout. Specify a security level (0-2), and create a new SuperUser account and password. Specify SMS management IP address, network mask, and optional default gateway. Specify the host name. If desired, enter the optional host location and system contact information. g. Modify the timekeeping option to enable NTP Client for your time zone. h. Modify server options for SSH, HTTPS, HTTP, and SNMP as needed. i. As an optional step, you can configure a Network Management System to monitor and receive SNMP traps. j. Configure email contact information.

SMS Recovery Guide

Page 9 of 11

Version 13.12.5

Recovery Process

3.5. Restore the SMS database from a backup (if available) a. Log on to the SMS Server via the SMS client. Note: If you have upgraded the SMS to a higher version, you will have to re-install the SMS client. b. Restore the SMS from a previous backup Note: If you wish to restore a backup after the recovery process, the version of the backup must be the same or older than image used for the recovery process. As an example, if you backup a SMS 4.0, and then use this process to install SMS 3.6, you will NOT be able to restore the SMS 4.0 backup on your new SMS 3.6 system. However, you CAN restore older SMS backup on a newer version of the SMS. For instance, if you backup SMS 3.5, and then use this process to fresh install SMS 3.6; you WILL be able to restore the backup. Note: When restoring an SMS Server database, SMS validates the integrity of the file from which backed up data is being restored. If the file is invalid, the SMS console displays an error message. To ensure database integrity, the system automatically reboots after the restore operation. 3.6. Unmanage and remanage all IPS devices (if required) a. If the IP address you gave the SMS server is different than the old SMS, then you must delete all the IPS devices and re-manage them. If the IP address is the same as the old server then the communication to the IPS devices should be ok.

IMPORTANT: Please ensure that you know the administrative credentials for managing the IPS devices.

SMS Recovery Guide

Page 10 of 11

Version 13.12.5

Recovery Process

4.

HP TippingPoint Support Hewlett-Packards TippingPoint Technical Assistance Center (TAC) team is committed to providing the highest standard of technical support by providing an excellent customer experience. Our goal is to isolate, document and resolve every technical issue in the most expeditious and professional manner possible. You can contact us by phone, email or by our support website. E-Mail Contact the Technical Assistance Center (TAC) support group by sending an e-mail to tippingPoint.support@hp.com and describing your issue. Please ensure that you include the device CERT number. One of our customer support representatives will contact you. Once the email arrives in the support mailbox (tippingpoint.support@hp.com), one of our support engineers will review the information, create a case, assign a severity number, and contact you with a request for additional information (if required) or a solution to your case. Telephone Contact the Technical Assistance Center (TAC) support group by calling our 24x7 Technical Assistance Center (TAC) at (866) 681-8324 (North America) or (512) 681-8324 (International). Please ensure that you have your device CERT number. Once on the call, one of our support engineers will review the information with you, create a case, assign a severity number, and work to resolve the issue. Online In order to create online support request, you will need access to the HP TippingPoint Self-Service Portal (SSP). The SSP can be accessed from the following locations; 1. Threat management Center (TMC) website https://tmc.tippingpoint.com/ . Once you are at the website navigate to Support->Self-Service Portal. 2. The SSP can also be accessed from the following URL: https://na4.salesforce.com/sserv/login.jsp?orgId=00D3000000002Hh If you do not yet have an account, or need any assistance regarding your account information, please contact TAC via email or phone as mentioned above.

SMS Recovery Guide

Page 11 of 11

Version 13.12.5