On-Premise Requirements

The following document specifies what are the system requirements for the server that Keepnet on-premise will be installed.

An Example Network Scheme

An Example Network Scheme

For the companies that have more than 2000 users, we strongly recommend you to set up a Load balancer to distribute load to each IIS application servers.

Load Balancer Support

Please ignore this step, if you have less than 2000 users.

Layer 7 Load balancer is required for URL / Path-based traffic routing

Protocol

URL Path

Load Balancing Algorithm

Nodes

*HTTP(s)

/API/OutlookAddin

/API/OutlookAddinv1

Least Connection

Sticky Connections Enabled (60 Seconds)

IIS Servers

* SSL Offloading is recommended on Load Balancer.

SSL Certificate

Wildcard SSL certificate has to include all hostnames used by Keepnet portal server.

Hardware Requirements

Keepnet needs some standart requirements:

If IIS Server and Database Server is to be installed on a different servers

The below is a standard hardware requirements for Keepnet Labs portal server.

  • 2 Cores, 8 Sockets CPU

  • 16 GB Memory

  • 150 GB Disk Space

The below is a standard hardware requirements for Keepnet Labs database server.

  • 2 Cores, 4 Sockets CPU

  • 8 GB Memory

  • 50 GB Disk Space For Database and Log Files*

  • DB Owner Roles and Permissions

If IIS Server and Database Server is to be installed on a the same server

The below is a standard hardware requirements for Keepnet Labs portal and database server when installed on the same server.

  • 4 Cores, 12 Sockets CPU

  • 24 GB Memory

  • 200 GB Disk Space

  • MSSQL Collation: turkish_ci_as

  • db_admin permission

*SSD Disks Recommended

Please Note: Keepnet Labs uses on-the-fly calculation technologies for API and Add-In connections. For Virtual Platforms, we highly recommend configuring VM ’s running with dedicated memory.

Software Requirements

Organisations have to follow the mandatory steps listed below:

Steps

Requirements

1

Windows Server 2016 R2 with Update x64 FULLY PATCHED INCLUDING ALL OPTIONAL WINDOWS PATCHES

2

Make sure English format is selected in Control Panel > Regional Settings > Formats tab.

3

Microsoft Office System Driver Data Connectivity Components, find here

4

SysInternals Active Directory Explorer, in order for testing Active Directory integration

5

Notepad++ (6.7.7), configurational changes.

6

7zip, Windows utility for manipulating archives files.

7

MS Office 2016 (Licensed)

  • This option should be enabled Trusted Center > Macro Settings and enable to "Trust access to the VBA project object model"

8

.Net 3.5 is necessary

9

Administrator rights for installation

10

Outlook Desktop 2010 or higher version (optional)

Authentication & Access Requirements

If you have more than one Keepnet servers (IIS and Database etc.), then each server should be communicating without any port restriction.

Also, organisations have to follow the mandatory steps listed below:

Steps

Requirements

1

An OS user with Administrator privilege (Administrators group)

2

For Internet access (Direct access or an internet proxy URL, username and password)

  • Outbound *.keepnetlabs.com for templates feeds and updates (TCP 80/443)

    Outbound *.keepnetlabs.com for company-specific data synchronization (TCP 80/443)

3

For Intranet access

  • Firewall exclusion list for phishing activity against possible intranet/client targets (TCP 80/443)

4

For Active Directory connection

  • The machine doesn’t have to be attached to a domain. A user for validating users and querying their properties

5

For SMTP Server

  • Relay option for Keepnet Labs’ IP Address or hostname

  • Whitelisting for Keepnet Labs’ IP Address or hostname

6

For Phishing Incident Response API

  • https://www.virustotal.com/vtapi/v2/file/report (http/https)

  • https://www.virustotal.com/vtapi/v2/url/scan

    (http/https)

  • https://www.virustotal.com/vtapi/v2/url/report

    (http/https)

  • api.cloudflare.com (http/https)

  • https://dashboard.keepnetlabs.com (http/https)

  • https://api.xforce.ibmcloud.com (http/https)

7

Whitelist the following file paths for antivirus software for servers and users:

  • C:\Users\Public\KeepnetLabs

  • C:\Program Files (x86)\Keepnet Labs

8

Define the following file path and process exception on the server:

  • C:\inetpub\wwwroot

  • Process:PhishingLabs.MailService.exe

9

Service Account for Proxy and Active Directory

Health Check and Monitoring

Resource Name

Trigger

Alert to

Disk Space

%80

Customer and Keepnet support team

CPU

%80

Customer and Keepnet support team

Memory

%70

Customer and Keepnet support team

Internet and Update Servers

dashboard.keepnetlabs.com

Customer and Keepnet support team

Keepnet Labs Windows Service

KeepnetLabs Scheduler

Customer and Keepnet support team

RabbitMQ service name and URL

Localhost:15672

Windows Service: RabbitMQ

Customer and Keepnet support team

Redis DB

localhost:6379

Customer and Keepnet support team

Database

MS SQL Server (KEEPNETLABS)

Customer and Keepnet support team

Backup and Recovery

*Please note: Snapshot Backups supported.

Name

Resource

Backup Period

IIS Servers

C:\inetpub\wwwroot

C:\Program Files (x86)\Keepnet Labs\Cron

C:\Users\Public\KeepnetLabs

Daily Full Backup

Database Servers

KEEPNETLABS MS SQL Instance

Daily Full Backup

Watch On-premise Requirement Checker Video Below