AWS Deployment

This topic contains the rules and high-level tasks that you must follow to deploy NetWitness components in the AWS.

Rules

You must adhere to the following rules when deploying NetWitness in AWS.

  • If you reboot the Network Decoder instance, the tunnel is not retained. Create the tunnel on Network Decoder again and restart the Decoder service.
  • It is recommended to use private IP addresses when you provision AWS NetWitness instances.

Note: If you assign a public IP to the NW Server Host, update the /etc/nginx/conf.d/nginx.conf configuration file as follows:
location /nwrpmrepo
{
alias /var/lib/netwitness/common/repo;
index index.html index.htm;
allow <Subnet-Gateway>/Subnet mask ;
#example
# allow 10.0.0.1/25;
deny all;
autoindex on;
}

Checklist

Step

Description

Ö
1

Establish AWS Environment

 

2

Find NetWitness Platform AMIs

 

3

Launch an Instance and Configure a Host

 

4 Configure Hosts (Instances) in NetWitness Platform

 

5

Configure Packet Capture