|
1 | 1 | ---
|
2 | 2 | title: Install OT network monitoring software - Microsoft Defender for IoT
|
3 | 3 | description: Learn how to install agentless monitoring software for an OT sensor and an on-premises management console for Microsoft Defender for IoT. Use this article if you're reinstalling software on a preconfigured appliance, or if you've chosen to install software on your own appliances.
|
4 |
| -ms.date: 07/13/2022 |
| 4 | +ms.date: 11/09/2022 |
5 | 5 | ms.topic: how-to
|
6 | 6 | ---
|
7 | 7 |
|
@@ -267,31 +267,83 @@ After installing OT monitoring software, make sure to run the following tests:
|
267 | 267 |
|
268 | 268 | - **ifconfig**: Verify that all the input interfaces configured during the installation process are running.
|
269 | 269 |
|
270 |
| -### Gateway Checks |
| 270 | +#### Gateway checks |
271 | 271 |
|
272 | 272 | Use the `route` command to show the IP address of the Gateway. For example:
|
273 | 273 |
|
274 |
| -:::image type="content" source="media/tutorial-install-components/route-n.png" alt-text="Screenshot that shows the result of running the command route." border="false"::: |
| 274 | +```cli |
| 275 | +
|
| 276 | +<root@xsense:/# route -n |
| 277 | +Kernel IP routing table |
| 278 | +Destination Gateway Genmask Flags Metric Ref Use Iface |
| 279 | +0.0.0.0 172.18.0.1 0.0.0.0 UG 0 0 0 eth0 |
| 280 | +172.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 |
| 281 | +> |
| 282 | +
|
| 283 | +``` |
275 | 284 |
|
276 | 285 | Use the `arp -a` command to verify that the MAC recognizes the IP if a ping command to the gateway IP trigger fails. For example:
|
277 | 286 |
|
278 |
| -:::image type="content" source="media/tutorial-install-components/arp-a.png" alt-text="Screenshot that shows the result of running the command arp -a." border="false"::: |
| 287 | +```cli |
279 | 288 |
|
280 |
| -### DNS Checks |
| 289 | +<root@xsense:/# arp -a |
| 290 | +cusalvtecca101-gi0-02-2851.network.microsoft.com (172.18.0.1) at 02:42:b0:3a:e8:b5 [ether] on eth0 |
| 291 | +mariadb_22.2.6.27-r-c64cbca.iot_network_22.2.6.27-r-c64cbca (172.18.0.5) at 02:42:ac:12:00:05 [ether] on eth0 |
| 292 | +redis_22.2.6.27-r-c64cbca.iot_network_22.2.6.27-r-c64cbca (172.18.0.3) at 02:42:ac:12:00:03 [ether] on eth0 |
| 293 | +> |
| 294 | +
|
| 295 | +``` |
| 296 | + |
| 297 | +#### DNS checks |
281 | 298 |
|
282 | 299 | Use the `cat /etc/resolv.conf` command to check the IP that is configured for DNS. For example:
|
283 | 300 |
|
284 |
| -:::image type="content" source="media/tutorial-install-components/cat-etc-resolv-conf.png" alt-text="Screenshot that shows the result of running the command to check DNS." border="false"::: |
| 301 | +```cli |
| 302 | +
|
| 303 | +<root@xsense:/# cat /etc/resolv.conf |
| 304 | +search reddog.microsoft.com |
| 305 | +nameserver 127.0.0.11 |
| 306 | +options ndots:0 |
| 307 | +> |
| 308 | +
|
| 309 | +``` |
285 | 310 |
|
286 | 311 | Use the `host` command to resolve an FQDN. For example:
|
287 | 312 |
|
288 |
| -:::image type="content" source="media/tutorial-install-components/host.png" alt-text="Screenshot that shows the result of running the command host." border="false"::: |
| 313 | +```cli |
289 | 314 |
|
290 |
| -### Firewall Checks |
| 315 | +<root@xsense:/# host www.apple.com |
| 316 | +www.apple.com is an alias for www.apple.com.edgekey.net. |
| 317 | +www.apple.com.edgekey.net is an alias for www.apple.com.edgekey.net.globalredir.akadns.net. |
| 318 | +www.apple.com.edgekey.net.globalredir.akadns.net is an alias for e6858.dscx.akamaiedge.net. |
| 319 | +e6858.dscx.akamaiedge.net has address 72.246.148.202 |
| 320 | +e6858.dscx.akamaiedge.net has IPv6 address 2a02:26f0:5700:1b4::1aca |
| 321 | +e6858.dscx.akamaiedge.net has IPv6 address 2a02:26f0:5700:182::1aca |
| 322 | +> |
| 323 | +
|
| 324 | +``` |
| 325 | + |
| 326 | +#### Firewall checks |
291 | 327 |
|
292 | 328 | Use the `wget` command to verify that port 443 is open for communication. For example:
|
293 | 329 |
|
294 |
| -:::image type="content" source="media/tutorial-install-components/wget.png" alt-text="Screenshot that shows the result of running the command wget." border="false"::: |
| 330 | +```cli |
| 331 | +
|
| 332 | +<root@xsense:/# wget https://www.apple.com |
| 333 | +--2022-11-09 11:21:15-- https://www.apple.com/ |
| 334 | +Resolving www.apple.com (www.apple.com)... 72.246.148.202, 2a02:26f0:5700:1b4::1aca, 2a02:26f0:5700:182::1aca |
| 335 | +Connecting to www.apple.com (www.apple.com)|72.246.148.202|:443... connected. |
| 336 | +HTTP request sent, awaiting response... 200 OK |
| 337 | +Length: 99966 (98K) [text/html] |
| 338 | +Saving to: 'index.html.1' |
| 339 | +
|
| 340 | +index.html.1 100%[===================>] 97.62K --.-KB/s in 0.02s |
| 341 | +
|
| 342 | +2022-11-09 11:21:15 (5.88 MB/s) - 'index.html.1' saved [99966/99966] |
| 343 | +
|
| 344 | +> |
| 345 | +
|
| 346 | +``` |
295 | 347 |
|
296 | 348 | For more information, see [Check system health](how-to-troubleshoot-the-sensor-and-on-premises-management-console.md#check-system-health) in our sensor and on-premises management console troubleshooting article.
|
297 | 349 |
|
|
0 commit comments