topic Governance Engine in ExtremeCloud IQ- Site Engine Management Center

Governance Engine

Ronald_Dvorak — Fri, 28 Jul 2017 14:10:00 GMT

Hi,

are there more informations available.

I'd see the product in the price list and the webpage shows only the datasheet with some marketing yada yada.

Is that only a license for EMC or another VM server ... what do I need to test this and is it available now, is there a trial license.

Thx,
Ron

RE: Governance Engine

Bharathiraja__S — Fri, 28 Jul 2017 14:22:00 GMT

Hi Ronald,

could you more specfic about your question.

are you looking for EMC 8 trail license details ?

Thanks,
Suresh.B

RE: Governance Engine

Ronald_Dvorak — Fri, 28 Jul 2017 14:26:00 GMT

Hi Suresh,

I'm talking about the Information Governance Engine......
https://cloud.kapostcontent.net/pub/aabffb29-e3ae-4a86-8da7-914f66868612/information-governance-engi...

I'd like to test it in my lab but see no information how that system works = is it a part of EMC and I need only another license or is that a dedicated VM that tx information to EMC.

-Ron

RE: Governance Engine

Bharathiraja__S — Fri, 28 Jul 2017 14:26:00 GMT

i can see below details as well.

NOTE: Governance tab functionality requires you to acquire an additional license.

Thanks,
Suresh.B

RE: Governance Engine

Bharathiraja__S — Fri, 28 Jul 2017 14:30:00 GMT

Hi Ronald,

If i go into below option and click on help i could see few details as below.

Extreme Management Center > Extreme Management Center Tabs > Governance > Governance DashboardThe Governance > Dashboard tab provides an overview of your audit test results performed over time on the devices in your network.

Use the drop-down menus at the top of the tab to select the regime and the date and time of the governance audit to view the results in the tab.

Thanks,

Suresh.B

RE: Governance Engine

Bharathiraja__S — Fri, 28 Jul 2017 14:37:00 GMT

Hi Ronald,

Please find below details,

How to Obtain and Apply a Governance License in Management CenterTo use the Governance tab in Management Center, an additional license is required.

To obtain and apply the license in Management Center:

Contact your sales representative to purchase an IGE (Information Governance Engine) license. An email voucher is generated and sent to you with instructions.

RE: Governance Engine

Ronald_Dvorak — Fri, 28 Jul 2017 14:43:00 GMT

Thx, so I'd need a license to see the tab - makes sense.

I'm running EMC 8.0.2.42 with a NMS-ADV-U Cloud WLAN license and will try to load a trial license.
I'll keep you posted on the results.

Cheers,
Ron

RE: Governance Engine

Bharathiraja__S — Fri, 28 Jul 2017 14:46:00 GMT

Hi Ronald,

Sure , we will wait for your response,

Thanks,
Suresh.B

RE: Governance Engine

Zdeněk_Pala — Fri, 28 Jul 2017 16:13:00 GMT

Eval license does give you governance engine. You can apply eval license over the permanent license and all features will be unlocked = including IGE. Regards Z.

RE: Governance Engine

Zdeněk_Pala — Fri, 28 Jul 2017 16:13:00 GMT

The IGE is part of EMC installation = no special VM is needed.

RE: Governance Engine

Ronald_Dvorak — Fri, 28 Jul 2017 17:08:00 GMT

OK the eval license is installed on my lab system and I'd access the tab - more on my test results in the next topic.

AFAIK I'd only install one EMC eval license = I've installed a eval license last year on the customers EMC so he'd test NAC, right now the eval license is expired and the permanent license is active.

Q: Is it correct that I can't install another eval license in that case, if yes how could the customer test this new function or other new functions in the feature that require a separate license.

RE: Governance Engine

Zdeněk_Pala — Fri, 28 Jul 2017 17:08:00 GMT

You can delete the old eval license and place there new eval license.

The easiest way I use is to delete the file from the license directory (I hope I remember it well: /usr/local/Extreme Networks/Netsight/license/)

if there are more licenses there is license hierarchy = eval does have the highest precedense, the next is ADV the next is full the last is BASE.

RE: Governance Engine

Ronald_Dvorak — Fri, 28 Jul 2017 17:08:00 GMT

Thanks I'll give it a try.

RE: Governance Engine

Ronald_Dvorak — Fri, 28 Jul 2017 17:41:00 GMT

I've run the PCI test on all my devices but I'd like to concentrate on the wireless controller because I've a little bit experience on that one 🙂

My setup is a V2110 pair running 10.31.04 - all APs are on #1 and #2 is my standby.
As they run in an availability pair all settings should be equal.

The result of the PCI test is that #1 passed with 89% and #2 failed with 5%.
Also the number of test failed in the diagram doesn't reflect the number of failed test in the list of tests in both cases.

Here a screenshot of both results with a filter on failed tests....

Let's get into detail....

failed test#1&2 on both EWCs = secure connections (Disable weak ciphers for secure connections)
On both EWCs (in GUI > Controller > Network > Secure Connections > enable Weak Cipers) the checkmark isn't set = disabled

failed test#5 only on EWC#2 = Default AP modes - strong cluster-shared secret
On both EWCs (in GUI > AP > Global > Registration > Secure Cluster > Cluster Shared Secret) the same pw is set - I think it's the default - in my case MvrDqIeb

failed test#5-7 only on EWC#1 = Implement a strong password SNMP admin user
On both EWCs (in GUI > Controller> Network > SNMP > SNMPv3) the same user snmpuser with default pw is set

Summary: Even both controllers of the pair have the same settings I get different results on the individual test and one controller passes the overall score with 89% and the second fails the score with 5%.

-Ron

RE: Governance Engine

Ronald_Dvorak — Fri, 04 Aug 2017 19:44:00 GMT

Anyone from the EMC team that like to comment on the wrong information in the report ?

RE: Governance Engine

AntonS — Wed, 15 Nov 2017 20:29:00 GMT

very interesting
as our company needs to fulfill PCI-DSS standards I was intressted in this new feature.
but as it looks it is too early for that

i didn't knew a seperate license is needed!