on-premise_installation_checklist
no way to compare when less than two revisions
Differences
This shows you the differences between two versions of the page.
Previous revisionNext revision | |||
— | on-premise_installation_checklist [2019/07/25 12:49] – external edit 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
+ | ===== Where to place LUCY in an on-premise installation? | ||
+ | |||
+ | You can place LUCY in the intranet or within a secured zone (DMZ). If you want to allow external users (e.g. mobile users with smartphones) to access LUCY's websites (attack simulations or e-learning), | ||
+ | |||
+ | |||
+ | ===== On premise installation technical checklist ===== | ||
+ | |||
+ | * **Mail integration**: | ||
+ | |||
+ | {{ setup_lan.png? | ||
+ | |||
+ | |||
+ | * **DNS integration**. You can quickly setup new domains in LUCY. Details are described [[domain_configuration|here]]. Those domains could be used for the landing pages (Phishing or E-learning) or the mail sender (awareness and attack simulation). The internal clients will need to resolve those domains. Therefore, you need to create the according DNS entries also on your internal DNS server and point the records to LUCY. If the landing pages need to be accessed from users in the internet directly (without VPN), you need to make sure that the DNS records are also created on an externally accessible DNS server. | ||
+ | |||
+ | * **Creating DNS records**. You will need two domain types in LUCY: Attack simulation domains and domains for your awareness training. The **attack simulation domain** could be used for your phishing website in your attack simulation. We recommend reserving first a generic domain like " | ||
+ | |||
+ | |||
+ | * **HTTP/ | ||
+ | |||
+ | * **HTTP/ | ||
+ | |||
+ | * **Security products and whitelisting**: | ||
+ | |||
+ | * **Securing the access**: Once you finished the setup, you might want to prevent users from accessing the web based administration. In [[security_considerations|this chapter]] we discuss a few tips on how to secure LUCY. | ||
+ | |||
+ | |||
+ | ===== On premise installation technical procedure ===== | ||
+ | |||
+ | **Hardware** | ||
+ | Please make sure you have the hardware ready with sufficient disk space (>200 GB) and memory (>4 GB). More details here: https:// | ||
+ | |||
+ | **Download** | ||
+ | If you have decided to do an on premise installation you will first need to download LUCY from our webpage. Please choose one of our installers or images: | ||
+ | |||
+ | * **Virtual Box**: http:// | ||
+ | * **Linux Installer**: | ||
+ | * **ESX/ | ||
+ | * **Vmware Image**: http:// | ||
+ | * **Amazon**: http:// | ||
+ | |||
+ | If you require a different format (e.g. ovf), search for the according converter (e.g. search for " | ||
+ | |||
+ | **Installation** | ||
+ | Once downloaded, please install LUCY according to the download type: | ||
+ | * [[Installing LUCY on LINUX]] | ||
+ | * [[Installing LUCY in Virtualbox]] | ||
+ | * [[Installing LUCY in Vmware]] | ||
+ | * [[Installing LUCY in Amazon]] | ||
+ | * [[installing_lucy_on_windows|Installing LUCY on Windows]] | ||
+ | * [[converting_vmware_to_hyperv|Converting LUCY from VMware ESX to Hyper-V]] | ||
+ | |||
+ | **Login** | ||
+ | [[lucy_weblogin|Login]] to LUCY with the Webbrowser using the IP address of your server. Continue the setup in the browser using the credentials provided in the setup script. If you want to use a domain for your administration UI, Connect to your LUCY instance with the root or phishing account. If you connect as root, please execute the command | ||
+ | |||
+ | **License: | ||
+ | Please send us the workstation ID (http:// | ||
+ | |||
+ | **Mail setup** | ||
+ | Define your **[[mail_delivery_methods_in_lucy|default mail delivery method]]** in LUCY. In case you use the build in mail server: set the [[set_hostname_for_smtp_communication|hostname]] for the mail server. | ||
+ | |||
+ | **Domain Setup** | ||
+ | Setup a [[domain_configuration|domain]] in LUCY. This domain can be used for phishing simulations (landing pages) or the elearning portal. | ||
+ | |||
+ | **SSL Setup** | ||
+ | Create a [[ssl_configuration|trusted certificate]] for the administration of LUCY. | ||
+ | |||
+ | **User management** | ||
+ | Create all the required administrators [[user_management|users]] in LUCY. | ||
+ | |||
+ | **Updating** | ||
+ | [[download_templates|Download]] all of the latest templates. [[update_lucy|Update]] LUCY to the latest version | ||
+ | |||
+ | **Hardening** | ||
+ | Consider implementing additional [[security_considerations|security layers]] | ||
+ | |||
+ | **White Label** | ||
+ | Give LUCY a [[white_label_lucy_-_custom_branding|custom branding]] | ||
+ | |||
+ | **Test campaign** | ||
+ | Once you are all set you can try to [[create_your_first_phishing_campaign|setup your first campaign]] | ||
on-premise_installation_checklist.txt · Last modified: 2022/10/14 08:17 by lucy