This
is the first and, in many cases, only step in deploying
NetResident. If you install NetResident on a computer that has
network visibility sufficient for your purposes, such as a gateway
computer through which LAN clients communicate with the Internet,
or a computer that has an Ethernet adapter connected to the mirror
port of a switch, or simply a standalone computer the
communications of which you want to monitor, installing the
NetResident service and console is sufficient. In this scenario,
you may not need to install NetResident agents. The image below
illustrates the setup screen on which you select only the service
and console components:
The
advantage of “agentless” data collection is simplicity: The
application is installed on a single machine and does not require
any additional steps. The drawbacks of this approach are as
follows:
·
|
It is often
impossible to have access to all LAN traffic from a single
observation point.
|
·
|
The only
way to intercept SSL-encrypted traffic, such as HTTPS, is to
install agents. That is because passive monitoring using the
NetResident service cannot decrypt encrypted data.
|
On the
next screen, you will be prompted to create a master password that
will be used by the NetResident service for authenticating all
system components. The master password must be created when you
install the NetResident service for the first time. You should
enter a long, hard-to-guess password and remember it, because it
will be required to by other system components. You can use
the Generate button to have the installer generate a random
20-character password for you.
|