Skip to main content
Migration Notice
We're migrating documentation from the old portal into this one. Some things may look a little different or out of place in the meantime — we know, and we're working to get it right. If something's unclear or doesn't look right, let us know.
Version: 2.15.0

Dell APEX Metering Integration for AirGap for Dell

Introduction​

This guide covers integrating Dell APEX metering software into a Cyber Vault protected by Enterprise AirGap. This integration securely transports metering data from inside the vault to a location outside the vault, where it can be collected and sent to Dell for billing purposes — without requiring a data diode or other out-of-band management path.

Requirements​

Configuration​

Eyeglass Enterprise AirGap​

  1. Deploy and configure Eyeglass, the ECA, and the Vault Agent for AirGap, including the Enterprise AirGap license. See Installation for the full deployment procedure.

  2. Configure the AirGap job to be managed by the Vault Agent.

  3. Modify the directory permission on the Vault Agent for the path /opt/superna/var/logs/vaultagent so the ecaadmin user has write permission:

    1. SSH to the Vault Agent as ecaadmin (default password: 3y3gl4ss).

    2. Run:

      chmod 777 /opt/superna/var/logs/vaultagent

  4. To verify, upload a test file to the Vault Agent using SFTP with the ecaadmin user to the path /opt/superna/var/logs/vaultagent.

UCC Edge VM Deployment​

Deploy the UCC Edge VM from the downloaded ucc-edge_2.1.0.ova file in the vSphere environment inside the vault network.

info

Dell UCC Edge deployment and configuration documentation is maintained by Dell, not Superna. Refer to Dell's UCC Edge 2.1.0 "Overview and Requirements" and "Getting Started" guides at dell.com/support for VM deployment, sizing, and general UCC Edge configuration.

Register the Vault PowerScale to Assets​

  1. In UCC Edge, click Assets, then +Register. You can use single registration or bulk load.
  2. Register a new asset and set the asset type to PowerScale/Isilon.
  3. Enter the asset parameters, then click Click to verify. A Verified_Success status confirms the connection.
  4. Click Register to add the vault PowerScale to the assets list.

Add the Vault PowerScale to a Group​

  1. In UCC Edge, click Groups, then +Create to create a new group.
  2. Specify the group name and asset type, and select the vault PowerScale asset to add to the group.

Configure Schedule​

  1. In UCC Edge, click Schedules, then + Schedule to create a collection schedule for the vault PowerScale cluster (for example, once per day).

Configure SFTP for Uploads​

  1. In UCC Edge, click Uploads, then +ADD in the SFTP Servers section.
  2. Add the Eyeglass Vault Agent as the SFTP server, using:
    • IP Address: Eyeglass Vault Agent IP address
    • Port: 22 (default)
    • Authentication type: Username/Password
    • Username: ecaadmin
    • Password: password for ecaadmin
    • Remote Path: /opt/superna/var/logs/vaultagent
    • Schedule: for example, once per day
  3. Click TEST to confirm the connection to the Eyeglass Vault Agent SFTP server.
  4. Verify the uploaded test file is received on the Eyeglass Vault Agent under /opt/superna/var/logs/vaultagent.

Upload from UCC Edge to the Eyeglass Vault Agent​

Based on the configured upload schedule, UCC Edge uploads the generated collection data to the Vault Agent over SFTP. You can verify the upload job status in UCC Edge, and confirm receipt on the Vault Agent:

ecaadmin@dgva78:~> ls -l /opt/superna/var/logs/vaultagent
-rw-r--r-- 1 ecaadmin ecaadmin 47284 Oct 28 01:15 ISILON_0050569f872446854763b722490abf129535_UE-dg-ucce89_2022-10-28_05-00-05_10001.gpg

Receiving the Log File on the Eyeglass Appliance​

Requirements:

  • A Windows host to schedule billing-data collection from Eyeglass.
  • The UCC Local Agent tool, with the Superna collection feature.
  • Firewall access from the Windows host to Eyeglass on TCP port 22.

Push billing collection data to Eyeglass:

Wait for the next scheduled Vault Agent log-push job to upload the latest log to the Eyeglass appliance, under /opt/superna/sca/logs/airgap. Alternatively, run the push job manually:

  1. SSH to the Vault Agent as ecaadmin.

  2. Run:

    ecactl airgap pushvaultagentlogs

  3. Monitor the job:

    ecactl jobs view --follow --id <job-id>

  4. Once complete, use SFTP as the admin user to Eyeglass to confirm the latest log file under /opt/superna/sca/logs/airgap.

Configuring the UCC Local Agent tool to transfer billing data to Dell from a Windows machine:

  1. Download the UCC Local Agent application to a Windows machine and unzip it (for example, to c:\ucc).

  2. From a command prompt in that folder, configure the connection to Dell's SFTP billing collection server:

    ucc-local-agent.exe --config

  3. Configure the connection to Eyeglass:

    ucc-local-agent.exe --config-superna

    Follow the prompts, substituting the correct IP address for your environment, then press C to confirm.

  4. To test data collection to the local Windows machine, run:

    ucc-local-agent.exe --fetch-superna

See Also​

  • Installation – Deploy Eyeglass, the ECA, and the Vault Agent before configuring this integration.
  • Integration Guide – Other AirGap integration points with Ransomware Defender, Golden Copy, and Easy Auditor.