PingIntelligence

Verify PingIntelligence Installation

Verify that all the components have installed and started successfully.

Verify ASE installation

Log in to the ASE host machine and navigate to <installation-path>/pingidentity/ase/bin directory and run the status command:

/home/pi-user/pingidentity/ase/bin/cli.sh status
Ping Identity Inc., API Security Enforcer
status              : started
mode                : inline
http/ws             : port 8090
https/wss           : port 8443
firewall            : enabled
abs                 : disabled, ssl: enabled
abs attack          : disabled
audit               : enabled
ase detected attack : disabled
attack list memory  : configured 128.00 MB, used 25.60 MB, free 102.40 MB

If the status command runs successfully, then ASE has been installed and started.

Verify ABS and MongoDB installation

Log in to the ABS EC2 instance and run the ABS Admin REST API using a REST API client like Postman. More information on installing and configuring Postman is available in the ABS Admin Guide.

The report can be accessed by calling the ABS system at the following URL:

https://<abs_ip>:<abs_port>/v5/abs/admin. Use the IP address from the hosts file.

If ABS and MongoDB has installed successfully, the Admin REST API output will display the MongoDB nodes. If the Admin API is not accessible, then ABS has not started. Following is a sample output of the Admin REST API:

{
    "company": "ping identity",
    "name": "api_admin",
    "description": "This report contains status information on all APIs, ABS clusters, and ASE logs",
    "license_info": {
        "tier": "Free",
        "expiry": "Sun Jan 10 00:00:00 UTC 2021",
        "max_transactions_per_month": 0,
        "current_month_transactions": 30,
        "max_transactions_exceeded": false,
        "expired": false
    },
    "across_api_prediction_mode": true,
    "poc": true,
    "api_discovery": {
        "subpath_length": "1",
        "status": true
    },
    "apis": [
        {
            "api_name": "atm_app_oauth",
            "host_name": "",
            "url": "/atm_app_oauth",
            "api_type": "regular",
            "creation_date": "Thu Mar 05 08:54:01 UTC 2020",
            "servers": 1,
            "protocol": "https",
            "cookie": "JSESSIONID",
            "token": false,
            "training_started_at": "Fri Feb 14 06:44:06 UTC 2020",
            "training_duration": "1 hour",
            "prediction_mode": true,
            "apikey_header": "X-API-KEY-2",
            "apikey_qs": "",
            "jwt": {
                "username": "",
                "clientid": "",
                "location": ""
            }
        },
        {
            "api_name": "root_api",
            "host_name": "",
            "url": "/",
            "api_type": "regular",
            "creation_date": "Thu Mar 05 08:54:01 UTC 2020",
            "servers": 1,
            "protocol": "https",
            "cookie": "JSESSIONID",
            "token": false,
            "training_started_at": "n/a",
            "training_duration": "n/a",
            "prediction_mode": false,
            "apikey_header": "X-API-KEY-1",
            "apikey_qs": "",
            "jwt": {
                "username": "",
                "clientid": "",
                "location": ""
            }
        }
    ],
    "abs_cluster": {
        "abs_nodes": [
            {
                "node_ip": "127.0.0.1",
                "os": "Red Hat Enterprise Linux Server - VMware, Inc.",
                "cpu": "16",
                "memory": "31G",
                "filesystem": "3%",
                "bootup_date": "Fri Feb 28 08:13:19 UTC 2020"
            },
            {
                "node_ip": "127.0.0.1",
                "os": "Red Hat Enterprise Linux Server - VMware, Inc.",
                "cpu": "16",
                "memory": "31G",
                "filesystem": "4%",
                "bootup_date": "Tue Mar 24 06:35:47 UTC 2020"
            }
        ],
        "mongodb_nodes": [
            {
                "node_ip": "127.0.0.1:27017",
                "status": "primary"
            }
        ]
    },
    "ase_logs": [
        {
            "ase_node": "88968c39-b4ea-4481-a0b4-d0d651468ab5",
            "last_connected": "Thu Mar 05 08:40:14 UTC 2020",
            "logs": {
                "start_time": "Thu Mar 05 08:40:14 UTC 2020",
                "end_time": "Thu Mar 05 08:40:14 UTC 2020",
                "gzip_size": "0.74KB"
            }
        },
        {
            "ase_node": "e6b82ce9-afb3-431a-8faa-66f7ce2148b9",
            "last_connected": "Thu Mar 05 08:54:06 UTC 2020",
            "logs": {
                "start_time": "Thu Mar 05 08:54:06 UTC 2020",
                "end_time": "Thu Mar 05 08:54:06 UTC 2020",
                "gzip_size": "2.82KB"
            }
        },
        {
            "ase_node": "4df50c47-407a-41f9-bda6-b72dc34dadad",
            "last_connected": "Fri Feb 28 07:20:03 UTC 2020",
            "logs": {
                "start_time": "Tue Feb 25 12:50:00 UTC 2020",
                "end_time": "Fri Feb 28 07:20:03 UTC 2020",
                "gzip_size": "76.01KB"
            }
        },
        {
            "ase_node": "1910051e-5bab-44e6-8816-5b5afffdd1cf",
            "last_connected": "Tue Feb 18 08:10:05 UTC 2020",
            "logs": {
                "start_time": "Fri Feb 14 06:42:38 UTC 2020",
                "end_time": "Tue Feb 18 08:10:05 UTC 2020",
                "gzip_size": "2.89MB"
            }
        }
    ],
    "percentage_diskusage_limit": "80%",
    "scale_config": {
        "scale_up": {
            "cpu_threshold": "70%",
            "cpu_monitor_interval": "30 minutes",
            "memory_threshold": "70%",
            "memory_monitor_interval": "30 minutes",
            "disk_threshold": "70%",
            "disk_monitor_interval": "30 minutes"
        },
        "scale_down": {
            "cpu_threshold": "10%",
            "cpu_monitor_interval": "300 minutes",
            "memory_threshold": "10%",
            "memory_monitor_interval": "300 minutes",
            "disk_threshold": "10%",
            "disk_monitor_interval": "300 minutes"
        }
    },
    "attack_ttl": {
        "ids": [
            {
                "id": "ip",
                "ttl": 120
            },
            {
                "id": "cookie",
                "ttl": 120
            },
            {
                "id": "access_token",
                "ttl": 120
            },
            {
                "id": "api_key",
                "ttl": 240
            },
            {
                "id": "username",
                "ttl": 360
            }
        ]
    }
}

Verify Dashboard Installation

To verify the Dashboard installation, enter the Dashboard IP address from the hosts file in your web browser. Log in using ping_user or admin username and the password configured in the dashboard-defaults.yml file. If the authentication mode is set to SSO, then log in using your SSO username and password.

See the ASE, ABS and Dashboard guides for configuration and administration of PingIntelligence products.