LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 12-12-2014, 11:12 AM   #1
kaplan71
Member
 
Registered: Nov 2003
Posts: 809

Rep: Reputation: 39
Questions about OSSEC deployment


Hello --

I am planning on deploying OSSEC in our environment. Due to the limited availability of hardware, my plan is to deploy the software on the system that is to be monitored rather than having a separate system for the server, and installing the agent on the target system. I had several questions concerning this:

1. Can this type of deployment be implemented?
2. If the server software is already present on the target system, does the agent also need to be installed?

Thanks.
 
Old 12-14-2014, 02:10 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by kaplan71 View Post
Can this type of deployment be implemented?
Yes. However you should note that there are valid reasons for keeping agents separate from the central management server. It is the place where integrity databases and audit trails reside. They are stored, collected and processed there so having the machine perform any unrelated functions means opening potentially it up for unauthorized access, potentially affecting integrity and potentially adding performance drains. Or in short, think: eggs, basket.


Quote:
Originally Posted by kaplan71 View Post
If the server software is already present on the target system, does the agent also need to be installed?
I assert you haven't read the OSSEC documentation completely. Please do so.
 
Old 12-15-2014, 11:28 AM   #3
sudowtf
Member
 
Registered: Nov 2013
Posts: 206

Rep: Reputation: 46
Quote:
Originally Posted by kaplan71 View Post
[...]Due to the limited availability of hardware[...]
Sounds like a good opportunity to play with Virtual Machines.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Ossec error glennbtn Linux - Server 1 07-15-2012 07:07 AM
Regding OSSEC vamsi_k Linux - Software 0 05-04-2012 04:38 AM
[SOLVED] redhat deployment with Altiris HP Rapid Deployment Tool lievendp Linux - Server 2 08-03-2011 03:11 AM
ossec Issue glennbtn Linux - Software 2 07-29-2010 09:06 AM
OSSEC report - is this OKAy? Old_Fogie Linux - Security 7 10-23-2006 06:03 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 01:51 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration