6.5. How to administer the GBox: setup or Administrators level

6.5.1. Accessing the GBox

To perform the following task

#

Carry out the following procedures in succession

Reserved for the group

First connection by a direct connection

1

Direct connection to the configuration menu with a keyboard and monitor

setup

Remote HTTP connection via iDRAC

1

HTTP access to the configuration menu via iDRAC (DELL server)

setup

Remote connection to the configuration menu using SSH via the iDRAC interface

1

SSH access to the configuration menu via the iDRAC interface in serial port redirection mode

setup

Direct connection to the configuration menu using SSH

1

SSH access to the configuration menu

setup

Connection to GBox via a web browser

1

Connection to the web interface via a browser

All accounts


6.5.2. Configuring the GBOX

To perform the following task

Carry out the following procedures in succession

Initial installation

1

Procedure in Configuring the GBox for the first connection

2

Procedure in Operating a GBox

Keyboard configuration

1

Use of the `Keymap` command

Changing the licence

1

Procedure in Modifying the licence

Putting a GBox into operation

1

Procedure in Operating a GBox

Changing the SSL certificate

1

Procedure in Installing an SSL certificate


6.5.3. Managing Web UI accounts

To perform the following task

Carry out the following procedures in succession

Creating a local user

1

Creating local users

Changing some of a local user's information

1

Changing some of a local user's information

Changing the current account password

1

Changing the current account password

Resetting a local user's password

1

Resetting a user's password

Deleting a local user

1

Deleting a user

Viewing the authentication history

1

Viewing the authentication history

Viewing the history of user creations or deletions

1

Viewing the history of user creations or deletions

Viewing the history function for all changes in user rights

1

Viewing the history function for all changes in user rights


6.5.4. Managing the account setup from the configuration menu

To perform the following task

Carry out the following procedures in succession

Changing the setup account password

1

SSH access to the configuration menu

2

Use the command `Password` command


6.5.5. Managing network

To perform the following task

Carry out the following procedures in succession

Viewing the current configuration of the GBox

1

Procedure to access the `Network Setup` submenu

2

Procedure for viewing the current configuration

Viewing the configuration of each network interface

1

Procedure to access the `Network Setup` submenu

2

Procedure for viewing the network interface status

Modifying the general parameters of the GBox

1

Procedure to access the `Network Setup` submenu

2

Procedure for changing the GBox's general parameters

Managing the interface parameters GBx0 management network

1

Procedure to access the `Network Setup` submenu

2

Apply the Procedure for modifying the network interface parameters for the GBx1 interface

3

Procedure for taking modifications into account

GBx1 network interface configuration of Gnest virtual machines to the Internet

1

Procedure for accessing the `Services` menu

2

Procedure for accessing the Sandbox services of the Gnest engine

3

Procedure for enabling the Internet connection

4

Procedure to access the `Network Setup` submenu

5

Apply the Procedure for modifying the network interface parameters for the GBx1 interface

6

Procedure for taking modifications into account

7

Enable the `Network` option in the Gnest settings in the Malware templates: to do this, refer to Procedure for changing the existing template


6.5.6. Managing the analysis engines

To perform the following task

Carry out the following procedures in succession

Configuring the Gnest engine (changing the number of virtual machines)

1

Procedure to configure the Gnest engine

2

Modification of existing templates to take account of this new configuration: Procedure to configure the Gnest engine

Configuring the Gmalcore engine

1

Procédure to configure the Gmalcore engine

2

Modification of existing templates to take account of this new configuration: Procédure to configure the Gmalcore engine

Monitoring of analysis engines

1

Procedure to analyse the engines monitoring


6.5.7. Managing the GBox server

To perform the following task

#

Carry out the following procedures in succession

Exit the current session or leave the SSH session

1

Use the `Exit` command

System: restart the GBox

1

Use the `Restart` command

System: shut down the GBox

1

Use the `Shutdown` command

Delete the data and return the GBox to its factory settings.

1

Use the `Reset` command

Malcore services: force restart or reinstallation

1

Use the `Services` command

Restart the applications

1

Use the `Gapps` command


6.5.8. Managing the analysis templates

To perform the following task

#

Carry out the following procedures in succession

Create new templates

1

Creating an analysis template

Managing templates

1

Managing the analysis templates


6.5.9. Monitoring the GBox

To perform the following task

#

Carry out the following procedures in succession

Monitoring: loading files for diagnosis

1

Generating and loading files for diagnosis


6.5.10. Using the API

To perform the following task

#

Carry out the following procedures in succession

Connection to the Wef interface via a browser

1

Connection to the web interface via a browser

Creation or deletion of an API access token

1

Creating or deleting an API access token

Use of an API endpoint

1

Using an API endpoint


6.5.11. Managing the software via GUM

To perform the following task

Carry out the following procedures in succession

Updating engines

1

If necessary, configure the proxy (local mode): see the procedure in Configuring a proxy

2

Depending on the method (local or online), apply the corresponding procedure Configuring automatic updates via GUM

3

Check that the update is working correctly with Manual installation of a signature update

Installing a patch (Hotfix)

1

Installing a hotfix patch

Installing an upgrade

1

Installing an upgrade