Skip to main content

Overview

Every new installation consists at a minimum of one rWeb Management System (hardware or VM) controlling one or more RIOS filter devices (hardware or VM). This guide details how to perform initial installation for your devices.

As a general rule, rWeb can manage filter devices running any earlier version of RIOS. Each version of RIOS will list the expected minimum version of rWeb that should be running within its release notes.

Preparation​

Hardware Checks​

Inspect all products received to make sure that they are not damaged and that there are no missing parts. All devices use Ethernet for initial IP setup. A laptop will be needed to locally connect to the device to set the IP settings.

RS and RE devices can instead use a console connection to set the device IP address. The console port is a standard 9 pin D-sub RS232 connection at 9600 baud, 8 bit word, no parity and 1 stop bit (a cable is included with each new device).

VM Checks​

Currently KVM and VMWare Hypervisors are supported. Ensure your VM host has enough CPU, memory, and storage capacity for your intended devices (requirements vary, and are listed in their specific installation guides). VM RIOS filter devices additionally may need a dedicated hardware interface card if using PCI Passthrough.

Network Management​

If there are firewalls between the intended management IPs of rWeb and any RIOS filter devices, make sure that the necessary TCP and UDP ports are open. The required ports are listed in the detailed installation steps linked below and in this reference page.

Installation sequence​

1- Install rWeb​

  1. Always install rWeb first. The specific guides for each platform (hardware or VM by hypervisor) are below. If installing a VM, please review some of the performance considerations first:

  2. When completed, you should be able to login as the default admin user and see the rWeb Dashboard.

  3. Make sure rWeb has access to NTP time servers. NTP time is critical for rWeb and RIOS filter devices, and filter devices won't enter normal operating mode until they have synchronized time.

  4. Check your rWeb license. New hardware rWebs will ship with a temporary license, but if shipping delays are experienced it is possible it could be expired. New VM rWebs in 9.0 and later will start with a temporary one week license and autogenerate a unique serial number, so you will need to communicate that to RioRey to receive a formal license (this is detailed in the links above).

    Unlicensed rWebs will refuse to connect to RIOS filter devices and prevent you from seeing their Device Summary or otherwise configure them beyond adding them to rWeb. If trying to verify filter device serial numbers for licenses, you will either need to ensure the rWeb license is loaded first or verify serial numbers through other means (via console for RIOS VMs or by serial number labels on the rear of hardware RIOS devices).

    If installing both a VM rWeb and one or more VM RIOS devices, it's recommended to note all the serial numbers down during the installation process and request all of the licenses at once from RioRey.

  5. Download the latest AS/CC file from login.riorey.com and upload it to rWeb to get the most current AS and CC translation.

  6. Check if your rWeb is the latest software release, and upgrade if desired. rWeb should be running the minimum required version for the highest version of RIOS filter device you intend to manage.

2- Install RIOS Filter Device(s)​

  1. Devices running RIOS must have a management connection to an rWeb Server. Before installing your device, please make sure you have properly configured rWeb and have all of its relevant network information handy (IP address and net mask). In addition, you will need to make sure the following ports are unblocked, or the filter device will not start correctly:
    • UDP Destination Port 123 (NTP)- This is required for synching operations between the rWeb and filter device. By default, the filter device talks to two RioRey NTP Servers at 65.216.233.249 and 194.58.204.148 (this can be changed).
    • UDP Destination Port 61166 (Flow Sampling and Control)- This is how the rWeb and filter device monitor traffic and collect data.
    • UDP/TCP Destination Port 61167 (Filter List Data Exchange)- This is how rWeb and the filter device exchange information on IPs blocked by Clear Filter List (RIOS 5.6.0 or greater).
    • TCP Destination Port 8022 (Management Control)- This is how rWeb issues commands to the filter device.
  2. The following devices support installation of RIOS. Click the link for your desired filter device specific installation instructions:
  3. For each device being installed, the instructions above will end with the device being added to rWeb and listed in the Adminstration->Devices section in the top right of rWeb's GUI. Verify that you see an entry for each device that you installed.
  4. Ensure each device has a valid loaded license. New hardware filter devices will ship with a temporary license, but if shipping delays are experienced it is possible it could be expired. New VM RIOS devices will start unlicensed and autogenerate a unique serial number, so you will need to communicate that to RioRey to receive a license (this is detailed in the links above).
  5. Ensure each device has access to valid NTP servers (ideally the same one rWeb is using). NTP time is critical for rWeb and RIOS filter devices, and filter devices won't enter normal operating mode until they have synchronized time.
  6. Once every filter device is added to rWeb, licensed, and has synchronized time settings, it should show under Device Administration with a 'Connection Status' of Connected.

3- Configure and use rWeb to Manage Traffic​

  1. The core concepts of rWeb's management of filter devices are Groups and Zones. After initial installation, all filter devices will be using rWeb's “Default Zone” to decide how to mitigate traffic.
  2. Read the basic discussion of Group and Zone design. A basic initial recommendation is a minimum of three zones: Default Zone, Entire Network Zone, and at least one or more customized zones. More detailed techniques are outlined in the flat or hierarchical group documents.
  3. Once you've decided on your initial requirements for organization, add Groups and Zones in rWeb. When a zone is created, the new zone will inherit settings from “Default Zone”, which can be customized. The factory default setting for “Default Zone” is to automatically filter traffic with “Normal” levels of sensitivity. A full discussion of filter settings is available here.
  4. In general, while using rWeb any '?' will link you to the most relevant documentation here. If your rWeb does not have external internet access or you have further questions, please contact RioRey support.