Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Create New Environment

  1. Select Administration > Environment Management and click New.
  2. Enter a Name.
  3. (Optional) Enter a Description.
  4. Select the environment Type.
    The options are Cloud, On-Premise Gateway Server, and

    On-Premise Connector.

  5. If you selected On-premise Gateway Server or On-premise Connector, enter one or more valid IPv4 addresses for the connection.
    If you enter multiple IP addresses, separate each address with a comma.

    When a node connects to the Node Manager, the Node Manager validates the node's IP address against what is configured in the environment. If an on-premise node connects, the Node Manager will see the node's public IP address, not the private IP address. As a result, the IP address for the node needs to be public.

    To determine the public IP address for the connector machine, run this command:

    curl https://ifconfig.me/
  6. Click Next.
  7. In the Connector Settings page, select the TLS settings and services for the environment.

  8. For TLS Settings, check the protocols and cipher cites to apply to this environment.
  9. For services, click the toggles to enable the services to apply to this environment.
    • ZTNA - Enabled when you click the toggle.
    • Log Agent - Select the log agent from the prompt. This list includes the log agents you created previously.

    • SIEM Agent - Select a SIEM agent from the prompt. This list includes the SIEM agents you created previously.

      To enable an upstream proxy for the SIEM agent, select a proxy from the prompt. This list includes the upstream proxies you created previously. If you do not need to use an upstream proxy, accept the default value of None.

      To use an upstream proxy for this environment, enable only the SIEM service for it. Do not enable the other services. Upstream proxy is supported only for SIEM services.

    • EDLP Agent - Select an EDLP agent from the prompt. This list includes the EDLP agents you created previously.

  10. Click Next.

  11. (Optional) To update the default log configuration settings, click the Override Log Configuration toggle.
    The default settings are displayed. If you do not want to update these settings now, click Save. You can update them at any time after you create the environment.

    Enter or select the log settings as follows:

    • Log Level -- Warn, Info (default), Debug, or Trace.
    • Number of Log Files -- Enter the maximum number of log files to include for debugging.
    • Log File Max Size -- Enter the maximum size (in MB) for each log file.
  12. Click Save to save the environment.
    You can now assign nodes to it.