Requirements for machines and databases scanned

The physical machines, VMs, and databases that StratoProbe collects data from are referred to as target assets in StratoZone. This page describes the specific configurations that the target assets must have, depending on the asset type and the collection method.

Windows machines

You can scan your physical or virtual Windows machines with the OS scan method. Windows machines must meet the following requirements:

  • WMI (Windows Management Instrumentation) Service running
  • Windows Firewall disabled. Alternatively, a firewall exception to allow for Remote WMI
  • Open line of sight from StratoProbe to each asset
  • An account with administrator rights to the operating system

Linux machines

You can scan your physical or virtual Linux machines with the OS scan method. Linux machines must meet the following requirements:

  • SSH enabled with support for the following encryption algorithms:
    • RSA and DSA in PEM format
    • ECDSA 256/384/521, ED25519 in OpenSSL or PEM formats
  • Open line of sight from StratoProbe to each asset
  • An account with user-level access (no sudo or root privileges required)
  • OS language set to English

VMware machines

If you cannot run an OS scan using Windows or Linux credentials, you can use a vCenter scan with vCenter credentials.

In this case, the minimum requirements are the following:

  • vCenter 5.5 or higher
  • Open line of sight from StratoProbe to vCenter
  • Read level access to vCenter

Databases

To collect data from your databases, you must use level 1 as your security level for collection.

The following additional requirements need to be met:

  • StratoProbe requires an open line of sight to each database. Contact your database administrator to get the port numbers used by your databases. As a reference, the following are the default port numbers for the databases supported by StratoProbe:
    • MongoDB: 27017
    • MySQL: 3306
    • Oracle: 1521
    • PostgreSQL: 5432
    • SQL Server: 1433
  • For Oracle 12c and later, run the permission script before starting data collection.
  • For all non-Oracle databases, use an account with administrator rights to the database.

What's next