McAfee NS7200 Manual de usuario

This quick start guide explains how to quickly set up and activate your McAfee® Network Security Platform NS7100,

NS7200, and NS7300 Sensors in in-line mode. These models have a throughput of 1.5 Gbps, 3 Gpbs, and 5 Gbps

respectively.

All product documentation referenced in this quick start guide is found on the McAfee ServicePortal.

The NS7100/NS7200/NS7300 Sensor model

Figure 1 Sensor front panel

1Console port (1)

2RJ-11 port (1) for fail-open control of two built-in SFP+ ports in slot G0. The RJ-11 port supports 1 Gbps (SFP)

copper or ber and 10 Gbps (SFP+) (SR and LR).

3SFP+ 1/10 Gigabit Ethernet ports (2)

The RJ-11 port controls only the SFP+ 1/10 port pair in passive fail-open mode.

4Two slots for I/O modules (Any combination of the interface modules can be used.)

• SFP/SFP+ 1/10 GigE Monitoring ports (8)

• RJ-45 10/100/1000 Mbps with internal fail-open Ethernet Monitoring ports (6)

• 10/1 GigE SM 8.5 micron with internal fail-open Monitoring ports (4)

• 10/1 GigE MM 50 micron with internal fail-open Monitoring ports (4)

• 10/1 GigE MM 62.5 micron with internal fail-open Monitoring ports (4)

5RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (8)

NS7x00 Quick Start Guide

Revision D

McAfee Network Security Platform

The supported transceiver modules are SFP+ (M2M and SM), SFP Fiber (MM and SM) and SFP Copper.

Figure 2 Sensor rear panel

1Auxiliary port (1)

2USB ports (2)

3Power supply inlet (2)

The NS7x00 Sensors are shipped with one power supply unit. Second power supply (optional) is

supported to enable redundancy.

4RJ-45 10/100/1000 Response port (R1) (1)

5RJ-45 10/100/1000 Management port (Mgmt) (1)

1 Verify the contents in the box

The following accessories are shipped in the NS7x00 Sensor crate:

• Sensor

• Power cords (McAfee provides standard and international power cables.)

• Set of rack mounting rails

• Printed Quick Start Guide

2 Verify the hardware and software requirements

Make sure to meet the following hardware requirements. For more information, see the McAfee Network

Security Platform Installation Guide.

The following are the system requirements for a Manager server.

Minimum required Recommended

Operating

system

Any of the following Microsoft operating systems:

• Windows Server 2008 R2 Standard or Enterprise Edition, SP1

(Full Installation), English operating system

• Windows Server 2008 R2 Standard or Enterprise Edition, SP1

(Full Installation), Japanese operating system

• Windows Server 2012 Standard Edition (Server with a GUI)

English operating system

• Windows Server 2012 Standard Edition (Server with a GUI)

Japanese operating system

• Windows Server 2012 R2 Standard Edition (Server with a GUI)

English operating system

• Windows Server 2012 R2 Standard Edition (Server with a GUI)

Japanese operating system

• Windows Server 2012 R2 Datacenter Edition (Server with a

GUI) English operating system

• Windows Server 2012 R2 Datacenter Edition (Server with a

GUI) Japanese operating system

Only X64 architecture is supported.

Same as the minimum

required.

Memory 8 GB 8 GB or more

CPU Server model processor such as Intel Xeon Same

Disk space 100 GB 300 GB or more

Network 100 Mbps card 1000 Mbps card

Monitor 32-bit color, 1440 x 900 display setting 1440 x 900 (or higher)

The following are the system requirements for client systems connecting to the Manager application.

Minimum Recommended

Operating

system

• Windows 7 English or Japanese

• Windows 8 English or Japanese

• Windows 8.1 English or Japanese

The display language of the Manager client must be

same as that of the Manager server operating

system.

RAM 2 GB 4 GB

Minimum Recommended

CPU 1.5 GHz processor 1.5 GHz or faster

Browser • Microsoft Internet Explorer 9, 10, or 11

• Mozilla Firefox

• Google Chrome (App mode in Windows 8 is not

supported.)

If you are using Google Chrome, add the Manager

certicate to the trusted certicate list.

• Internet Explorer 11

• Mozilla Firefox 20.0 or

later

• Google Chrome 24.0 or

later

Install the following software:

• Sensor image

• Manager image

• Signature set

3 Install the slide rails and rack-mount the Sensor

McAfee recommends rack-mounting your Sensor. For maintenance purposes, you must have access to the

front and rear of the Sensor.

Before you mount the Sensor on the rack, make sure that the power is o. Remove the power cable

and all network interface cables from the Sensor.

Due to the weight of the appliance, McAfee recommends that two people place the chassis into the

rail cabinet.

aDisassemble the inner slide rail members from the cabinet sections.

aPull the inner member out until it comes to a lock position.

bDepress the QD latch to fully disconnect the inner members.

bMount the inner members to the chassis unit.

aPlace each inner member on both sides of the chassis unit. Position the bottom mounting holes of

the inner member with matching mounting holes on chassis unit.

bUse screws to secure inner members in place. Apply to both sides of chassis unit.

cMount the slide cabinet sections to the rack.

aInstall the front end of each slide cabinet section to the rack using the slide tool-less features. The

tool-less latch rotates when the bracket is pressed up against the rack rails.

bAlign, adjust, and attach the rear brackets to the rack rail.

dMount the chassis unit into the mounted cabinet sections.

aGuide the chassis unit into the pre-installed cabinet sections. Allow the pre-installed inner members

to slide into the outer members until they lock in place.

bDepress the QD latch on both sides and continue to push the chassis unit in until fully closed.

eSecure the chassis unit through the rack rails.

aWith the chassis unit in a fully closed position, secure using two truss head screws.

bDrive the screws through the inner member ange and through the rack rails. The screws thread

directly to the cabinet slide members. Tighten the screws.

4 Install the interface modules

You can purchase the following interface modules and insert them into the relevant slots on your NS7x00

Sensor.

• 8-port SFP/SFP+ 1/10 Gigabit interface module

• 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module

• 4-port 10/1 GigE SM 8.5 micron with internal fail-open interface module

• 4-port 10/1 GigE MM 50 micron with internal fail-open interface module

• 4-port 10/1 GigE MM 62.5 micron with internal fail-open interface module

aRemove the module from its protective packaging.

bHold the module using your thumb and forenger and insert it into the modular bay.

cDrive in the screws xed on the sides of the module to attach it to the Sensor.

5 Connect the Management and Console ports

aOn the rear panel of the NS7x00 Sensors, plug a Category 5e Ethernet cable in the Management port

(labeled Mgmt).

bPlug the other end of the cable into the network device connected to your Manager server.

cOn the front panel of the NS7x00 Sensors, plug the DB9 Console cables into the Console port (labeled

Console).

dConnect the other end of the Console port cable directly to a COM port of the PC or terminal server you

are using to congure the Sensor (for example, a PC running correctly congured Windows

Hyperterminal software). You must directly connect to the console for initial conguration, you cannot

congure the Sensor remotely.

Terminal servers are provided for console access.

The required settings for Hyperterminal are:

• Baud rate: 115200 • Stop Bits: 1

• Number of Bits: 8 • Control Flow: None

• Parity: None

ePlug one end of the power cable into the power inlet and plug the other end into a power source. The

Sensor ships with standard US power and international cables.

The NS-series Sensor does not have a power switch. You can directly plug the power cable into

a power source.

6 Connect the monitoring ports

This procedure describes how to connect cables to a Sensor that runs in in-line mode.

aPlug the cable appropriate for use with your transceiver module into one of the monitoring ports labeled

x (for example, 1).

bPlug the cable appropriate for use with your transceiver module into one of the monitoring ports labeled

y (for example, 2).

cConnect the other end of each cable to the network devices that you want to monitor. For example, if you

plan to monitor trac between a switch and a router, connect the cable connected to 1 to the router and

the one connected to 2 to the switch.

7 Install the Manager software

For detailed instructions, see the McAfee Network Security Platform Installation Guide.

You must have administrator rights on the target Windows Server to install the Manager software.

A MySQL database is included with the Manager and is installed (embedded) automatically on your

target Windows Server during this process.

The following steps briey explain the Manager installation:

aPrepare the system according to the requirements outlined in McAfee Network Security Platform Installation

Guide and the McAfee Network Security Platform Release Notes.

bClose all open applications.

cGo to the McAfee Update Server (https://menshen1.intruvert.com/) and log on, using the grant number

and password.

dGo to the Manager Software Updates folder and select the latest Manager software version available.

eDownload the .zip le to the target Windows Server and extract the setup le.

fDouble-click Manager _<version>_setup.exe and follow the on-screen prompts.

8 Start the Manager

Click Start | Programs | McAfee | Network Security Manager | Network Security Manager.

9 Add the Sensor to the Manager

The Manager displays the Logon page.

aLog on to the Manager using the default user name (admin) and password (admin123).

bClick Devices.

cTo add a Sensor in the Manager, click Global | Add and Remove Devices, then click New.

You do not require a license le to enable IPS on NS-series Sensors.

The Add New Device page is displayed. We recommend using the Add Device wizard to add a device.

dEnter the following mandatory information in the appropriate elds.

1) Device Name — The Sensor name must begin with a letter. The maximum length of the name is 25

characters.

2) Device Type — Species the type of device to be added. Select IPS Sensor.

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Cortafuegos de McAfee

McAfee

McAfee IIP-M65K-ISAA - Network Security Platform... Manual de usuario

McAfee

McAfee SG720 Manual de usuario

McAfee

McAfee IIP-M80K-ISAA - Network Security Platform... Manual de usuario

McAfee

McAfee NS9100 Manual de usuario

McAfee

McAfee Manager Appliance Manual de usuario

McAfee

McAfee NS3500 Manual de usuario

McAfee

McAfee M-1250 - Network Security Platform Manual de usuario

McAfee

McAfee 1650 Instrucciones de instalación

McAfee

McAfee M-1250 - Network Security Platform Guía de referencia rápida

McAfee

McAfee MAP-3300-SWG - Web Security Appliance 3300 Manual de usuario

McAfee

McAfee Data Loss Prevention Prevent Manual de usuario

McAfee

McAfee SG310 Manual de instrucciones

McAfee

McAfee INTRUSHIELD 1400 Manual de usuario

McAfee

McAfee NS5100 Manual de usuario

McAfee

McAfee MFO-3400-SWGA - Web Security Appliance 3400... Manual de usuario

McAfee

McAfee M-1250 - Network Security Platform Manual de instalación y operación

McAfee

McAfee M4050 - Network Security Platform Manual de usuario

McAfee

McAfee ATD-3000 Instrucciones de instalación

McAfee

McAfee M-3050 Manual de usuario

McAfee

McAfee M-1250 - Network Security Platform Manual de usuario

McAfee

McAfee M-1250 - Network Security Platform Manual de usuario

McAfee

McAfee NS Series Manual de usuario

McAfee

McAfee MSA-3400-SWGI - Web Security Appliance 3400 Manual de usuario

McAfee

McAfee M-3050 Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Cisco

Cisco S190 Manual de usuario

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Cisco

Cisco 3110 Manual

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario