scn-r200 - honeywell process€¦ · honeywell phd 1.3 honeywell server - station 2.8 honeywell vse...

SCN-R200Connected Cyber

Exported on 03/09/2020

Connected Cyber – SCN-R200

– 2

Table of Contents

1 Performance Analyzers......................................................................................... 51.1 R200 Release ............................................................................................................................... 51.1.1 Software Change Notice ............................................................................................................................................5

2 Notices and Trademarks....................................................................................... 6

3 Symbol Definitions................................................................................................ 7

4 Contents .............................................................................................................. 10

5 1 Introduction...................................................................................................... 115.1 1.1 About Performance Analyzers ............................................................................................ 11

5.2 1.2 About this Document .......................................................................................................... 11

5.3 1.3 Limitations........................................................................................................................... 11

6 2 Contents of Release.......................................................................................... 12

7 3 Release Overview ............................................................................................. 167.1 3.1 New Features....................................................................................................................... 16

7.2 3.2 Retired Features .................................................................................................................. 16

7.3 3.3 Modified Features................................................................................................................ 16

8 4 Software/Hardware/Firmware Compatibility................................................. 17

9 5 Documentation Updates/Additional Information.......................................... 18

10 6 Problems Resolved........................................................................................... 1910.1 6.1 Honeywell Windows Supplemental ................................................................................... 19

10.2 6.2 Honeywell Server-Station................................................................................................... 19

11 7 Known Issues.................................................................................................... 2011.1 7.1 Performance Analyzer: Honeywell Server / Station .......................................................... 20

11.2 7.2 Performance Analyzer: Honeywell Acronis backup and Restore...................................... 20

11.3 7.3 Performance Analyzer: Virtualization ................................................................................ 20

11.4 7.4 Performance Analyzer: Honeywell Windows Supplemental ............................................ 20

11.5 7.5 Performance Analyzer: Honeywell Safety Manager .......................................................... 21

11.6 7.6 Reports: Patch Analysis Report .......................................................................................... 21

11.7 7.7 Honeywell Cisco Network Devices ..................................................................................... 21


– 3

12 8 Special Considerations .................................................................................... 2212.1 8.1 Handling Deprecated Models/Versions.............................................................................. 22

12.2 8.2 Alerts for Deprecated Models/Versions.............................................................................. 22

12.3 8.3 Categories and Response Codes ........................................................................................ 22

12.4 8.4 Technical Outage ................................................................................................................ 24

12.5 8.5 Limitations........................................................................................................................... 24

12.6 8.6 Security/Data Collection account ...................................................................................... 24


– 4


Performance Analyzers – 5

1 Performance Analyzers

1.1 R200 Release

1.1.1 Software Change Notice

Revision Date: February 19, 2020


Notices and Trademarks – 6

1 http://www.honeywell.com/ps

2 Notices and Trademarks© Honeywell International Inc. 2011-2019. All Rights Reserved.

While this information is presented in good faith and believed to be accurate, Honeywell disclaims the implied warranties of merchantability and fitness for a particular purpose and makes no express warranties except as may be stated in its written agreement with and for its customer.

In no event is Honeywell liable to anyone for any indirect, special or consequential damages. The information and specifications in this document are subject to change without notice.

Other brand or product names are trademarks of their respective owners.

Honeywell International

Process Solutions

1860 West Rose Garden Lane

Phoenix, AZ, 85027, USA

+1 800-822-7673

www.honeywell.com/ps1

http://www.honeywell.com/ps

http://www.honeywell.com/ps


Symbol Definitions – 7

3 Symbol DefinitionsThe following table lists those symbols used in this document to denote certain conditions.

Symbol

Definition

ATTENTION: Identifies information that requires special consideration.

TIP: Identifies advice or hints for the user, often in terms of performing a task.

REFERENCE -EXTERNAL: Identifies an additional source of information outside of the bookset.

REFERENCE - INTERNAL: Identifies an additional source of information within the bookset.

CAUTION

Indicates a situation which, if not avoided, may result in equipment or work (data) on the system being damaged or lost, or may result in the inability to properly operate the process.

CAUTION: Indicates a potentially hazardous situation which, if not avoided, may result in minor or moderate injury. It may also be used to alert against unsafe practices.

CAUTION symbol on the equipment refers the user to the product manual for additional information. The symbol appears next to required information in the manual.



Symbol

Definition

WARNING: Indicates a potentially hazardous situation, which, if not avoided, could result in serious injury or death.

WARNING symbol on the equipment refers the user to the product manual for additional information. The symbol appears next to required information in the manual.

WARNING, Risk of electrical shock: Potential shock hazard where HAZARDOUS LIVE voltages greater than 30 Vrms, 42.4 Vpeak, or 60 VDC may be accessible.

ESD HAZARD: Danger of an electro-static discharge to which equipment may be sensitive. Observe precautions for handling electrostatic sensitive devices.

Protective Earth (PE) terminal: Provided for connection of the protective earth (green or green/yellow) supply system conductor.

Functional earth terminal: Used for non-safety purpose such as noise immunity improvement. NOTE: This connection shall be bonded to Protective Earth at the source of supply in accordance with national local electrical code requirements.

Earth Ground: Functional earth connection: NOTE: This connection shall be bonded to Protective Earth at the source of supply in accordance with national and local electrical code requirements.



Symbol

Definition

Chassis Ground: Identifies a connection to the chassis or frame of the equipment shall be bonded to Protective Earth at the source of supply in accordance with national and local electrical code requirements.


Contents – 10

••

•••••

•••

••

•••

•••

••

••••••••

•••••••

4 ContentsPerformance Analyzers(see page 5)

R200 Release(see page 5)Software Change Notice(see page 5)

Notices and Trademarks(see page 6)Symbol Definitions(see page 7)Contents(see page 10)1 Introduction(see page 11)

1.1 About Performance Analyzers(see page 11)1.2 About this Document(see page 11)1.3 Limitations(see page 11)

2 Contents of Release(see page 12)3 Release Overview(see page 16)

3.1 New Features(see page 16)3.2 Retired Features(see page 16)3.3 Modified Features(see page 16)

4 Software/Hardware/Firmware Compatibility(see page 17)5 Documentation Updates/Additional Information(see page 18)6 Problems Resolved(see page 19)

6.1 Honeywell Windows Supplemental(see page 19)6.2 Honeywell Server-Station(see page 19)

7 Known Issues(see page 20)7.1 Performance Analyzer: Honeywell Server / Station(see page 20)7.2 Performance Analyzer: Honeywell Acronis backup and Restore(see page 20)7.3 Performance Analyzer: Virtualization(see page 20)7.4 Performance Analyzer: Honeywell Windows Supplemental(see page 20)7.5 Performance Analyzer: Honeywell Safety Manager(see page 21)7.6 Reports: Patch Analysis Report (see page 21)7.7 Honeywell Cisco Network Devices(see page 21)

8 Special Considerations(see page 22)8.1 Handling Deprecated Models/Versions(see page 22)8.2 Alerts for Deprecated Models/Versions(see page 22)8.3 Categories and Response Codes(see page 22)8.4 Technical Outage(see page 24)8.5 Limitations(see page 24)8.6 Security/Data Collection account(see page 24)


1 Introduction – 11

5 1 Introduction

5.1 1.1 About Performance AnalyzersPerformance Analyzers can have multiple objects with scripts that determines, how to capture data, what data to capture, how to analyze that data and what to do with the data and the results. Performance Analyzers usually represent a given product, such as an Experion Server, allowing for a consistent script for any given Experion Server. Performance Analyzers are installed in the Service Node (SN) (a.k.a. VSE).

5.2 1.2 About this DocumentThis Software Change Notice identifies any changes to the set of production Performance Analyzers for R200 Release.

This document is intended to cover the full set of Performance Analyzers which are in use at customer sites and in the production Remote Service Centers (RSC’s) worldwide. However, only those Performance Analyzers which have been modified or created for this release will be addressed within this document.

5.3 1.3 LimitationsN/A


2 Contents of Release – 12

6 2 Contents of ReleaseTable 1 – Existing Production Performance Analyzers Prior to this Release

Product Version Number

Honeywell Automated Data Export 2.0

Honeywell Availability Only 1.0

Honeywell Acronis Backup and Restore 1.3

Honeywell Cisco Network Devices 2.2

Honeywell Controllers 1.13

Honeywell Controllers - TDC 1.8

Honeywell Experion - TPS 1.6

Honeywell File Scout 1.0

Honeywell PHD 1.2

Honeywell Server - Station

2.8

Honeywell Windows Supplemental 2.17

Honeywell VSE Supplemental 1.5

Honeywell VSE Automated Data Export 1.1

NextNine LightNNPL None specified

Remote Services VSE Self-Monitoring 4.6.1

Honeywell Experion Server / Station 1.4 (DEPRECATED)



Honeywell Generic Windows 1.0 (DEPRECATED)

Honeywell Server / Station DEVELOPMENT 1.3 (DEPRECATED)

Honeywell Safety Manager 1.0

Honeywell Virtualization 1.3

Honeywell Control Firewall 1.1

Honeywell McAfee Move 1.3

Honeywell Splunk Reverse Tunnels 1.1

Table 2 – Performance Analyzers Added in this Release

Performance Analyzer Version Number


Table 3 – Performance Analyzers Modified in this Release

Performance Analyzer Old Version Number New Version Number

Honeywell Windows Supplemental 2.17 2.17.16

Honeywell Cisco Network devices 2.2 2.5.9

Honeywell Acronis Backup and Restore 1.3 1.5

Honeywell McAfee Move 1.3 1.9

Honeywell VSE Utilities 3.1 3.1.9

Honeywell Virtualization 1.2 1.3

Honeywell Server-Station 2.7 2.8

Table 4 – Performance Analyzers Deprecated in this Release

Performance Analyzer Version Number

N/A

Table 5 – Device Models Added in this Release



Performance Analyzer Model

N/A

Table 6 – Device Models Deprecated in this Release


N/A

Table 7 – Device Models Removed in this Release


N/A

Table 8 – Device Versions Added in this Release

Performance Analyzer Version

Table 9 – Device Versions Deprecated in this Release


N/A

Table 10 – Device Versions Removed in this Release


N/A

Table 11 – Current Performance Analyzer Versions as of this Release


Honeywell Automated Data Export 2.0

Honeywell Availability Only 1.0

Honeywell Cisco Network Devices 2.5.9

Honeywell Controllers 1.14



Honeywell Controllers – TDC 1.8

Honeywell Experion – TPS 1.6

Honeywell File Scout 1.0

Honeywell PHD 1.3

Honeywell Server - Station

2.8

Honeywell VSE Automated Data Export 1.1

Honeywell VSE Supplemental 1.5

Honeywell Windows Supplemental 2.17.16

Remote Services VSE Self-Monitoring 4.6.1

Honeywell Safety Manager 1.0

Honeywell Virtualization 1.3

Honeywell Control Firewall 1.1

Honeywell Domain Controller 1.1

Honeywell McAfee MOVE AV 1.9

Honeywell Acronis Backup and Restore 1.5

Honeywell VSE Utilities 3.1.9


Honeywell WSUS 3.5.10


3 Release Overview – 16

••••

•••

••

••

••

••

•

•

••

7 3 Release OverviewThis release describes updates for the R200 Release. This release contains updates to the Honeywell Windows Supplemental, Cisco network Devices, McAfee Move, VSE Utilities, Acronis Backup and Restore, Honeywell Virtualization.

7.1 3.1 New FeaturesThis release contains the following enhancements:

Updated Performance Analyzer: Honeywell – Windows SupplementalCollecting EBR R501.2(Acronis - 12.5.13400) Backup Plan status and Synchronization status.Collecting McAfee MOVE Anti-Virus status also for the devices in the PCN VSE's.Collecting Group Policy from remote machine using VSE web API.

Updated Performance Analyzer: Honeywell – Cisco Network DevicesCapturing Firewall rulesConfiguration data collection for compliance

Updated Performance Analyzer: Honeywell – Acronis Backup and RestoreSupport for the EBR R501.2(Acronis - 12.5.13400) Backup Plan and Synchronization status in the PCN VSE's.

Updated Performance Analyzer: Honeywell – McAfee MOVE AV Support for McAfee MOVE (ePO - 5.9.0 Build 732) Anti-Virus status in the PCN VSE's.

Performance Analyzer: Honeywell– VSE Utilities Split XML file for McAfee and vEBR

Updated Performance Analyzer: Honeywell – Virtualization Performance improvement existing profiles of Datastore, Esxi Alerts & build version, Hierarchy, performance of Esxi hosts, details of VMs' snapshot and vCenter Patch Qualification Details.Collection of details from vCenter's Guest machine, DRS mode, High Availability of clusters, Cluster CPU Usage, Cluster Memory usage, Host CPU Usage, Host Memory usage, Exsi and Guest VLAN DetailsAlert users on free physical memory percentage, cluster CPU Usage, cluster memory usage.

7.2 3.2 Retired FeaturesAlarm Management portalRemote Alarms and Events

7.3 3.3 Modified FeaturesN/A


4 Software/Hardware/Firmware Compatibility – 17

2 http://confighelper.pl

8 4 Software/Hardware/Firmware CompatibilityThese Performance Analyzers were explicitly tested with versions 4.9.45 and 4.9.32 version of the VSE. Although not explicitly tested, they are expected to be compatible with earlier 4.X versions of VSE as well.

These Performance Analyzers also require the Network API command line wrapper (NAPICMD.EXE) which is already in use by existing Performance Analyzers.

The configuration helper script (confighelper.pl2) requires version 5.10 of Perl or later to function correctly. The script will not run with earlier versions.

Features like Network Devices Backup and restore, Windows Event logs, VSE utilities and USB control service monitoring will only work with 4.9.45 version of VSE.

http://confighelper.pl

http://confighelper.pl


5 Documentation Updates/Additional Information – 18

9 5 Documentation Updates/Additional InformationN/A


6 Problems Resolved – 19

10 6 Problems ResolvedThis section provides an overview of the problems resolved in this release.

The ID section is provided to trace the progress of a given issue. If the ID is a PAR number, it is tracked in the Quality section of Siebel. If the ID is a PL request number, it is tracked in the Product Line Management team room. Note that not all locations may be externally accessible.

10.1 6.1 Honeywell Windows SupplementalDescription of Problem ID(s)

1 Group Policy File is not created when the name of the device contains special characters

CYBERICSS-6159

10.2 6.2 Honeywell Server-StationDescription of Problem ID(s)

1 Eliminating Process Alerts from Collect Hourly Alarms and Events Profile CYBERICSS-6581


7 Known Issues – 20

11 7 Known IssuesThis section provides an overview of known issues in this release.

11.1 7.1 Performance Analyzer: Honeywell Server / StationDescription of Problem ID(s)

1 nifd.exe related logs in Experion Server A when running as backup

PAR 1-T8P2TI

2 Security logs collection is not working for Experion nodes which are in workgroup

CYBERICSS-2743

3 The script terminated on timeout (1) error occurs for R400 Experion nodes for Collect Daily Profile

CYBERICSS-2744

11.2 7.2 Performance Analyzer: Honeywell Acronis backup and Restore

Description of Problem ID(s)

1 When running backup and immediately Failing it, Collect Hourly profile not collecting activities and alert for Back up failed

CYBERICSS-2656

2 Data is not collected for the offline devices CYBERICSS-3647

11.3 7.3 Performance Analyzer: VirtualizationDescription of Problem ID(s)

1 Automatic installation of .Net 3.5, powershell2.0, Power CLi through Diagnostic routines failing with BigDipper version of VSE

RPA-503

11.4 7.4 Performance Analyzer: Honeywell Windows SupplementalDescription of Problem ID(s)

1 Some of the parameters not displaying the decimal values PAR 1-10CG1XO


7 Known Issues – 21

11.5 7.5 Performance Analyzer: Honeywell Safety ManagerDescription of Problem ID(s)

1 Current data not read on some parameters (ref to detailed notes) PAR 1-100X2P7

11.6 7.6 Reports: Patch Analysis Report Description of Problem ID(s)

1 Reporting logic does not display ACE node patch details PAR 1-43N01D7

11.7 7.7 Honeywell Cisco Network DevicesDescription of Problem ID(s)

1 Firewall rules collection not supporting telnet CYBERICSS-3811


8 Special Considerations – 22

1.2.

3.

4.

5.

12 8 Special ConsiderationsThis section describes special notes, warnings and known issues for this release. Known problems include symptoms and work-around solution.

12.1 8.1 Handling Deprecated Models/VersionsSeveral old models and versions from previous releases have been deprecated in this release. Please consult section 2 - Contents of Release for the full list of deprecated models and versions. Although existing configurations will continue to work with this release, they should be updated to use the new models and versions as soon as is reasonable, as the deprecated objects will be removed in a future release. Several important notes:

A device configured using deprecated models or versions are considered a “legacy configuration”.Legacy configurations will continue to work with this release, so configurations do not need to be updated before installing the new release.Legacy configurations should be updated as soon as is reasonable. Some of the new parameters added in this release will only be collected on the new models/versions.Deprecated models and versions WILL be removed in a future release. If legacy configurations are not updated before that release, monitoring for those devices will fail when that release is installed.When updating a device configuration, the model, version, and custom parameters must ALL be updated before hitting apply. If one of these properties is updated without updating the others, it WILL cause monitoring to fail for that device. As long as all properties are updated together, monitoring will continue uninterrupted.

12.2 8.2 Alerts for Deprecated Models/VersionsModels and versions that have been deprecated for at least one release will also generate alerts if any device is configured with a deprecated model or version. These alerts will only be generated once a week, to keep from overloading the RSC alarm displays, but must addressed as soon as possible. These models and versions may be removed in the next update to the product line. If this occurs without updating the legacy configurations, a disruption in monitoring the affected device will occur.

12.3 8.3 Categories and Response CodesAlarm analysis rule descriptions contain unique category and response codes for quick filtering of alarms

Category code indicates type of failure and Response code indicates response time for an action to be taken on failure.

Below tables list Category codes with descriptions

Category Code Description

HWF Hardware failure

DVA Device availability

SWA Software availability (subsystem/service availability)



SEC Security

CONF Configuration change (OS or other version changed)

MIS Misconfiguration

PERF Performance

NET Network

OS Operating system patches

EXP Experion patches

A/V Anti-virus

BAK Backup (EBR, etc.)

REP Reports Related

EC Experion Controllers

RED Redundancy

AE Remote A&E client

VIR Virtualization

Below tables list Response codes with descriptions

Response Code Description

IAR Immediate Action required

24H Action required in 24 hours

1W Action required in 1 Week

NAR No Action Required



••••••••

••••

••

•

1.2.3.4.5.6.7.8.9.

10.

12.4 8.4 Technical OutageThe availability report will display a blank space in the event of technical issues

12.5 8.5 LimitationsGroup Policies PL doesn’t support Windows XP and Windows Server 2003 OS.Advanced Audit Group Policies are not supported in the History Of Changes To Group Polices.FTE NIC Link speed configuration to be 100Mbps will not be monitored for disabled NIC.SQL Temp DB Size monitoring supports above Experion R400 onwards.Only EBR R501.2 (Acronis - 12.5.13400) is supportedOnly ePO 5.9.0 (Build 732) is supportedOnly Acronis EBR Services are getting monitored using Configuration XML file.Inventory Scan:

Device Discovery:Discovery works only for Single domain- Parent\Child deployments.Only Switches configured as part of CANE model will be discovered.Cisco Switches only will be discovered

SN configuration:Honeywell PHD, Safety Manager, Virtualization PLs are not added to VSE automatically.

Honeywell Virtualization is qualified for 6.0 and 6.5 version of vCenter.

12.6 8.6 Security/Data Collection accountFor security purpose, it is recommended to use Non-Administrator account for data collection from individual machines (account configured under WMI settings for each device in VSE).

But few features that are not available without Administrator privileges are

Windows Services statusEBR Services and Backup failures.Windows Update Checker (patch data collection)Group PoliciesAudit log monitoringInvalid LogonRemote A&E ClientPHD ServicesExperion ServicesService Node Configuration Tool

Please note for reading performance data from remote nodes, Non-administrator WMI user to be part of ‘Performance Monitors’ group and for reading security and system event logs (like Audit log monitoring and invalid logons and dellopenmnage events) the Non-administrator WMI user to be part of ‘Event Log Readers’ group.

Please note that you must provide Remote Enable privileges to basic WMI namespaces to the account in all Non-Experion windows machines, without which no data will be collected from them.



Next Nine service should be running with an account that is part of local administrators group in Service Node.

NET-SNMP 5.6.1 package that we are deploying as part of PA for detecting default community strings of Network Devices is vulnerable. So it’s recommended to use latest version of NET-SNMP 5.7.3.

Uninstall old version of NET-SNMP at sites and upgrade to 5.7.3.

VMWare PowerCLI component required for Virtualization PL.

But these components will not be distributed by Honeywell as per licensing terms. So Customers need to download these components using their license and need to be installed on Servicenode.

scn-r200 - honeywell process€¦ · honeywell phd 1.3 honeywell server - station 2.8 honeywell vse...

Documents