FS6200 Server System Implementation Guide - Public Support ...

Setting Up and Operating the JProcessor Specialty Engine
In addition to the audit settings, the audit security template—SCWAudit.inf—is included in
the Policy. This template helps detect tampering or attempted tampering of the operating
system. Write access by any user to any executable or configuration files in the directory
structure, and changes to the state or configuration of Windows services are recorded in
the security log.
Security Event Log size in the JProcessor environment is kept at the default size of 20MB.
You can modify the auditing policy and the event log size according to your corporate policy
and specific usage characteristics.
Changing IP Address Scope for JProcessor MCPConnect Firewall
Rules
There are four firewall rules created to open all TCP ports for the intra-platform
connections on JProcessor 1, JProcessor 2, JProcessor 3, and JProcessor 4. They are
named “JProcessor MCPConnect1 (TCP-In),” “JProcessor MCPConnect2 (TCP-In),”
“JProcessor MCPConnect3 (TCP-In),” and “JProcessor MCPConnect4 (TCP-In)”,
respectively. In the firewall rules, IP address scope is defined to use the preconfigured
values in Table 6–1, as follows:
• For JProcessor MCPConnect1 (TCP-In), 192.168.16.141 and 192.168.16.142
• For JProcessor MCPConnect2 (TCP-In), 192.168.16.145 and 192.168.16.146
• For JProcessor MCPConnect3 (TCP-In), 192.168.16.149 and 192.168.16.150
• For JProcessor MCPConnect4 (TCP-In), 192.168.16.153 and 192.168.16.154
If you changed the intra-platform IP addresses from these preconfigured values, perform
the following steps to adjust the IP address scope in these firewall rules. Otherwise,
connections between the MCP and your JProcessor through the intra-platform connection
will be blocked.
1. From the desktop of the JProcessor environment, start the Server Manager by clicking
the Server Manager icon on the taskbar. The Server Manager icon is the first icon to
the right of the Start button.
2. From the left pane of the Server Manager window, expand the Configuration node.
3. Expand the Windows Firewall with Advanced Security node under
Configuration and then select Inbound Rules.
4. In the pane under the heading Inbound Rules, JProcessor MCPConnect1 (TCP-In),
JProcessor MCPConnect2 (TCP-In), JProcessor MCPConnect3 (TCP-In),and
JProcessor MCPConnect4 (TCP-In) are displayed.
5. To change either rule, double-click on the rule name.
The Properties dialog box for that rule displays.
6. Select the Scope tab and then you can change the IP addresses as needed.
The Local IP address on the Scope page refers to the IP address of the JProcessor
environment and the Remote IP address refers to the MCP IP address.
7. When you are done, click OK.
6–6 8222 3694–000