LiveWire on BDDS (LiveWire on DDI) - BlueCat Integrity - 26.1.0

Address Manager Administration Guide
ft:locale
en-US
Product name
BlueCat Integrity
Version
26.1.0

BlueCat DNS/DHCP Servers v26.1 are pre-installed with LiveWire v26.1.2, BlueCat's packet capture and network forensics solution. Configuration of LiveWire on BlueCat DNS/DHCP Servers grants users full DNS/DHCP packet capture with advanced filtering and analytics, for complete visibility into service issues. This topic describes how to configure LiveWire installation parameters and enable the LiveWire service on BlueCat DNS/DHCP Servers.

Note:

LiveWire on BDDS limitations:

  • The LiveWire on BDDS service cannot be enabled at the same time as the Gateway on BDDS service.
  • The LiveWire on BDDS service is not supported for DNS/DHCP Servers on ARM.
  • The LiveWire on BDDS service is not supported for DNS/DHCP Servers with VLAN tagged interfaces.
  • The LiveWire on BDDS service is not supported for DNS/DHCP Servers in Micetro-mode (Micetro DNS/DHCP Servers).
  • For the current implementation of LiveWire on BDDS, the DNS/DHCP Server (with LiveWire enabled) must be added as a remote capture engine to an existing LiveWire management instance. Accessing the LiveWire UI on DNS/DHCP Servers is not supported.
  • As Integrity v26.1 DNS/DHCP Servers are pre-installed with LiveWire v26.1.2, the LiveWire management instance must also be running version 26.1.2 or greater.

To add a BlueCat DNS/DHCP Server to a LiveWire instance:

  1. In the LiveWire UI, add an authentication group secret to the capture engine.

    1. Navigate to the capture engine Home page, then select Configure Engine.

    2. Under Security, enter an authentication group secret between 32 and 64 characters in length. You can also select Generate to generate a random 32 character authentication group secret.

  2. In the Address Manager UI, configure the LiveWire service parameters and enable the LiveWire service on the DNS/DHCP Server.

    1. Login to the Address Manager server managing the DNS/DHCP Server that you want to enable the LiveWire service on.

    2. Select the Servers tab in the sidebar, then select Servers.
    3. Select the name of the DNS/DHCP Server in the table.
    4. Select the Services tab.
    5. Navigate to the LiveWire service panel at the bottom of the page.
    6. Select Edit service.
    7. Enter the following values:
      • Enabled—select this checkbox to enable the LiveWire service.
      • Group engine host—enter the <hostname or IPv4/IPv6 address> of the LiveWire group engine host (capture engine).
      • Group secret—enter the <authentication group secret> for the LiveWire group.
      • Group engine name—enter a unique nickname for the DNS/DHCP Server capture engine.
      • Group engine group (Optional)—enter the name of an existing capture engine group folder to add the DNS/DHCP Server capture engine to the folder. If the name does not match an existing group folder, a new group folder will be created.
      • License server (Optional)—enter the <hostname or IPv4/IPv6 address> of the LiveWire license server.
    8. Select Save.

  3. After enabling the LiveWire service on the DNS/DHCP Server, the DNS/DHCP Server will automatically connect with the LiveWire UI instance. Return to the LiveWire UI, and wait for the DNS/DHCP Server to appear on the LiveWire Engines page.

  4. Once the DNS/DHCP Server capture engine is accessible, users can perform captures and packet analysis for the appliance through the LiveWire UI. LiveWire administration and utilization is outside the scope of the Address Manager Administration Guide. For information on using LiveWire to capture and analyze packet data, and all available features, refer to the LiveWire User Guide.