00197214_IM_SupportMediaV1.14_EN.pdf - 第27页

Support M edia V1. 14 11/2012 Edit ion 27 • Problems with Internet Explorer security not allowing certain scrip ts . • Problems with pathnames of files from Prerequisites larger than 256 characters. It is strong l y reco…

Support Media V1.14 11/2012 Edition

3.5 Support for Firewall

The Sup50 Release Products will support the firewall configuration.

• The Products will create a set of Windows Firewall Rules for the supported Operating

systems so that the communication for the SIPLACE Product only will be enabled.

• The Support Media will disable the Windows Firewall for all SIPLACE Line software

versions before Release Sup 50.

• The Support Media will maintain in the prerequisites profile the information, if the SIPLACE

Line Product will support the configuration of the Windows Firewall

• The Support Media will not disable the Windows Firewall for all SIPLACE Line software

versions from Release Sup 50 and higher, when all products will support Windows

Firewall. When one SIPLACE Product will be installed, which does not support the

Windows Firewall it will be disabled.

• The Support Media will create Firewall Rules for the basic OS feature like SQL Server; Net

Bios name resolution, MSMQ and others. It is required to run the Support Media to create

a complete required set of firewall rules for a computer system. Only OS features will be

configured which are installed with the Support Media. When OS Features like IIS are been

installed manually the firewall rules will not be activated.

• The Support Media will create a required set of firewall rules for a preinstalled SQL Server

2008 R2 and higher to allow remote access.

• The Support Media will not actively activate the Firewall.

• The firewall rules will only configure the inbound network traffic.

• The firewall rules will be activated for all network location awareness profiles in Windows

Vista and above.

• Configuration is only supported for Windows Firewall. Other Firewalls have to be configured

manually.

• Please see the Appendix for the documentation of the firewall rules. All documented rules

are listing the ports for informational purpose. These are not part of the firewall rules which

will be created, except the rules which are marked with “Port” in the first column.

CAUTION

Firewall rules installed by SIPLACE can be overridden in customer domain

• The customer group policies in the Windows domain can influence the by

SIPLACE installed firewall rules.

3.6 Critical Usage Notes

CAUTION

Installing Support Media from a network drive/local folder

Do not use Support Media from a network drive/local folder, as this causes

following problems:

Support Media V1.14 11/2012 Edition

• Problems with Internet Explorer security not allowing certain scripts.

• Problems with pathnames of files from Prerequisites larger than 256

characters.

It is strongly recommended to use a DVD / mapped ISO file instead.

Support Media Redistributor will help you creating and sharing an ISO file for network distribution.

You may use the freeware tool MagicDisc to map an ISO file to a drive letter.

This Tool is available on this DVD or via download from the web:

http://www.magiciso.com/setup_magicdisc.exe.

If you seem to have general problems with .HTA files (e.g. security warnings or unknown file

extension), you may try to use the HTAFix registry file provided on DVD1.

3.7 Known Issues

Removed "outdated" Installation packages (since V1.11):

Some Installation packages (like SQL 2008 SP 1 Express - see above section "New DVD content")

have been removed from the DVDs to save space for easier distribution of Support Media.

Prerequisite Analyzer will detect, if required Prerequisites are missing on the DVD and show you

options how to retrieve the missing packages.

SQL Server/Express 64 Bit:

If you've installed a 32 Bit SQL Edition on your 64 Bit OS and want to use the 64 Bit Edition, you

have to uninstall the Edition before.

SQL Server:

If you plan to install SQL Server Edition, please see the Navigation Guide documents regarding

manual SQL installation to ensure you use the correct installation options.

Analyzer now also includes Profiles (in "SIPLACE Net") helping to prepare your computer for SQL

Server installations.

After installation, you may (re-)run Prerequisite Analyzer to apply possibly required updates and

install all other required Prerequisites. Additionally, Analyzer will warn you if it finds known

conflicting settings.

Support Media V1.14 11/2012 Edition

OS Setting - Language for Non-Unicode programs

This Support Media build *should* work independent of the setting "Language for Non-Unicode

programs" (this setting may cause problems on Chinese systems).

Now, all Script files (*.VBS;*.HTA;*.HTML;*.HTM;*.CSS) are converted to Unicode during Support

Media build (directories "Scripts" and "SIPLACE Net" on DVD1) and written log files use ANSI

characters.

However, there might be still cases, where problems occur - if you encounter problems please use

the language setting "English (United States)" for Non-Unicode programs.

Windows Server 2008 support

In some cases, it is required to reboot the computer before Windows Server 2008 - related

customizing scripts succeed. This is especially the case when .Net Framework has been installed.

Net Framework 3.5 SP 1 and Windows Installer 4.5 require a reboot on VistaSP1/W2008SP1

before proceeding

• New with Support Media V1.13: Analyzer will be restarted automatically after reboot and login

with same account.

• Newer Operating System versions don't require a reboot anymore (they already have a newer

Windows Installer version integrated).

Net Framework 4.0 may require a reboot before proceeding

• New with Support Media V1.13: Analyzer will be restarted automatically after reboot and login

with same account.

Choose Password policy

You have to select, if you want to apply previous (simple) passwords or more complex passwords

to created accounts to meet possible existing password policy restrictions.

New with Support Media V1.13

If SIPLACE Accounts with certain policy already exist, the appropriate option will be pre-selected

automatically. Additionally, policy selection page now allows taking over the setting from a remote

computer (which already has SIPLACE accounts). Important: Passwords of already existing

accounts won't be modified.

If Analyzer detects a conflict between the remote and the local computer it will warn you.

In specific configurations, Analyzer may detect Windows Firewall being active although it is

currently not

This may happen when Windows Firewall is configured by Group Policies to be disabled in some

situations instead of using the Control Panel settings.

Since Group Policies are most likely to be applied in Domain environments only and Prerequisite

Analyzer automatically deselects the "Windows Firewall Disable" Script in domain environments

and hints the user to check for proper configuration, this shouldn't be a problem.

Furthermore, if the user explicitly selects the "Windows Firewall Disable" Script to be executed, the

Firewall will be disabled for all conditions (=network locations) ensuring proper function of

SIPLACE Products (Although this is not recommended in domain environments for security

reasons).