Xena Networks SafireManager, User Manual

Page 1: ...GBY DENMARK WWW XENANETWORKS COM SafireManager User Manual This is the User Manual for SafireManager SafireManager is the web based user interface to manage and configure Safire tester Xena s enterpri...

Page 2: ...Testbed 14 Review and Save Test Case 15 New Firewall Under Test 16 Select Firewall Model 17 Select Firewall Firmware Version 18 Select Enabled Firewall Features 19 Select Firewall Access Method 20 Sav...

Page 3: ...Test 37 Performance Test 37 Analysis 38 Download Reports 39 Open Reports in Browser 41 Test Result Analysis 42 Chassis Settings 47 Change Management IP Address 48 Change Management SSL Certificate 49...

Page 4: ...USER MANUAL 4 XENA NETWORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM SafireCompact Chassis...

Page 5: ...bnet and gateway Make sure your PC port is configured statically to an IP address in the 192 168 1 XXX range Insert the required transceivers into their test port cages Remember to always use the smal...

Page 6: ...lease perform the recovery actions outlined below If this does not work please contact support xenanetworks com for assistance Go to Settings System Management Interface Properties and enter the new I...

Page 7: ...255 255 255 0 Gateway none You must configure your PC port statically to an IP address in the 172 16 255 XXX range and then you will be able to ping the chassis again Now open https 172 16 255 210 in...

Page 8: ...ire lets you create multiple admin account on the chassis Each admin account has the same authorization level Thus you can always create a backup admin account if you forget the login password of the...

Page 9: ...your firewall and use cables to connect them to Safire s test ports For convenience let s call the firewall port that is connected to the blue test port the blue port and the other the gray port Opti...

Page 10: ...sting shows the number of test cases you have on the chassis In Analysis you can download report and analyze test results for various use cases The number in Analysis shows the number of test reports...

Page 11: ...Test Case In this example you will learn how to use Safire to create a test case for test the performance of your firewall Go to Dashboard and click Testing Test Cases then click CREATE NEW You will b...

Page 12: ...logy On the New Test Case page select the network topology that best matches the network your firewall is deployed There are four options Enterprise Internal Segmentation Enterprise Security Perimeter...

Page 13: ...wall Under Test From the drop down list select a firewall under test for this test case If you cannot find it in the list click the button to create a firewall under test To learn how to create a new...

Page 14: ...1 8 and 11 0 0 1 8 The interface on the left connects to Safire s client port and the other to Safire s serve port If the interfaces are VLAN enabled enter the VLAN ID accordingly Choose a port speed...

Page 15: ...Test Case Use the preview panel on the right to keep track on your configuration When everything is set correctly click CREATE button and enter a test case name and description optional in the pop up...

Page 16: ...l Under Test In this example you will learn how to use Safire to create a firewall under test object Go to Dashboard and open Testing Firewalls Under Test then click CREATE NEW You will be directed to...

Page 17: ...6 2800 LYNGBY DENMARK WWW XENANETWORKS COM Select Firewall Model Select a firewall model that matches your device under test from the drop down list You can also search using the built in search bar N...

Page 18: ...Select Firewall Firmware Version Select a firmware version that matches your device under test from the drop down list You can also enter optional information about the firewall The information will b...

Page 19: ...OTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Select Enabled Firewall Features Select the security features that match your firewall s configuration from list New Firewall Under Test Select...

Page 20: ...ll management port and the login credentials of SSH The Test Connection button lets you test the access method settings before Safire securely saving it in the on chassis database If you choose REST A...

Page 21: ...WWW XENANETWORKS COM Save Firewall Under Test When everything is set correctly click CREATE button and enter a name for the firewall under test in the pop up dialog window Click SAVE to save the fire...

Page 22: ...TWORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Traffic Profile To access traffic profiles go to Dashboard and open Testing Traffic Profiles Click Testing Test Cases to start creating...

Page 23: ...percentage of this application in the traffic profile is automatically calculated and present Enter the bandwidth server to client direction Mbps for the application Enter the bandwidth client to serv...

Page 24: ...u want to keep adding log files either drag and drop more into the gray area or click ADD FILE Click UPLOAD to upload the log files to Safire Wait for the Safire to parse them Applications present in...

Page 25: ...eta information such as URL SNI and SSL domain are set to default values You can change the meta information of an application and click ACCEPT You can deselect select an application to exclude includ...

Page 26: ...ver to client direction Use the Total Bandwidth Client to Server to adjust the bandwidth allocation for the client to server direction Use Scale Factor for Number of Users to increase or decrease the...

Page 27: ...able the applications you want to include exclude into the traffic profile Modify the number of users for the application Modify the bandwidth server to client direction Mbps and bandwidth client to s...

Page 28: ...MANUAL 28 XENA NETWORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Export Traffic Profiles Select the traffic profiles you want to export and click Export Selected Export traffic profi...

Page 29: ...K WWW XENANETWORKS COM Import Traffic Profiles Click Import and select a traffic profile export zip to import to your database Note the traffic profile zip file you want to import must come from a Saf...

Page 30: ...ownload Traffic Profile TLS Certificates and Keys Go to Traffic Profiles click TLS button next to a traffic profile or select it and click DOWNLOAD TLS CERTIFICATES to download the TLS certificates an...

Page 31: ...case Safire will first verify that the test ports are connected by checking whether the ports are able to detect sync signals If the ports are not connected to the firewall or themselves back to back...

Page 32: ...Y DENMARK WWW XENANETWORKS COM Select Traffic Profile Choose a traffic profile from the drop down list You can read more information about the traffic profile by hovering your mouse over the question...

Page 33: ...ions are TLS encrypted by SSL certificates and keys To test firewall s SSL inbound decryption feature you need to import applications SSL certificates and keys to the firewall Click DOWNLOAD SSL CERTI...

Page 34: ...to gradually increase the traffic load in terms of number of client IPs number of sessions and allocated bandwidth by 10 from one iteration to another To build your own test iterations click ITERATIO...

Page 35: ...customize the sustain phase duration of test iterations The ramp up and ramp down durations are automatically adjusted based on the number of sessions of the test iteration The default and the minimu...

Page 36: ...ion Select Firewall Access Method Safire will wait the configured time before continuing to the next test iteration The default waiting time is 15 seconds Change the waiting time using the increase de...

Page 37: ...run the test again Safire will skip the connectivity test But if you disconnect the ports or exit the test case the Run Test button will resume back to original state Performance Test By default Safi...

Page 38: ...R MANUAL 38 XENA NETWORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Analysis In Analysis you can download reports and analyze reports In Analysis you can download and analyze test repo...

Page 39: ...WORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Download Reports Go to Dashboard and click Analysis Test Reports You will be directed to Reports page Click Analysis Test Reports to sta...

Page 40: ...e the test result is saved and can be downloaded as a single test report Under a test case you will have the test reports to download The number of test reports is shown on the left side of the test c...

Page 41: ...USER MANUAL 41 XENA NETWORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Open Reports in Browser Click on a report under a test case and click OPEN REPORT Open report in browser...

Page 42: ...EJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Test Result Analysis Go to Dashboard and click Analysis Test Result Analysis You will be directed to Test Result Analysis page Click Analysis Test Result...

Page 43: ...t firmware versions Configuration Change This scenario compares the performances of the same firewall with different enabled features Traffic Profile Change This scenario compares the performances of...

Page 44: ...ll test results depend on the scenario you have selected and the first firewall test result For example if you choose Firewall Migration scenario which compares the performances of different firewalls...

Page 45: ...sult for comparison Choose an additional firewall from the drop down list and then choose a performance test result that is associated to the firewall Then click ADD To see the comparison chart on the...

Page 46: ...USER MANUAL 46 XENA NETWORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Click VIEW COMPARISON CHARTS button...

Page 47: ...gs In this example you will learn how to manage your Safire chassis including chassis IP address management software update identity and access management support archive generation and color theme Cl...

Page 48: ...RKS COM Change Management IP Address Use Settings System Management Interface to change the chassis IP address by entering IPv4 address IPv4 subnet mask and IPv4 gateway and then click APPLY CHANGES S...

Page 49: ...RKS COM Change Management SSL Certificate Go to Settings System SSL Certificates and click ADD SSL CERTIFICATE to add your SSL certificate to the management plane and then click APPLY CHANGES Safire w...

Page 50: ...users with admin role have access to chassis management Go to Settings Software Drag and drop the ximg file into the box or you can click the button Add ximg and select the image file Uploading starts...

Page 51: ...fferent authorization levels as illustrated by the table below Click CREATE NEW USER to create a new Safire user Table Safire user role authorization levels admin user restricted Create delete test ca...

Page 52: ...o update and view your licenses Click LAUNCH LICENSE PORTAL to go to Xena License Portal to manage your device licenses Click MANUAL UPDATE to upload your license file to the chassis Click AUTO UPDATE...

Page 53: ...KS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Generate Support Archive Go to Settings Support add your comment and click DOWNLOAD SUPPORT ARCHIVE Write description and comments and clic...

Page 54: ...Restore and click DOWNLOAD BACKUP The backup file contains test case configurations test results and traffic profile configurations You can restore your test cases test results and traffic profiles b...

Page 55: ...ORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Chassis Power Off and Reboot Click the power off button to shut down the chassis Click the reboot button to restart the chassis Chassis P...

Page 56: ...USER MANUAL 56 XENA NETWORKS LOTTENBORGVEJ 26 2800 LYNGBY DENMARK WWW XENANETWORKS COM Log Off Click the user icon and click the log off icon to log off the current user User log off...