Product Guide
Page 3
... the rack 18 Redundant power supply 19 Install the power supply 19 Remove the power supply 20 Cable the Sensor 20 Small form-factor pluggable modules 21 SFP modules 21 XFP modules 22 Install a module 22 Remove a module 23 Power on the Sensor 24 Power off the Sensor 24 4 Attaching Cables to the Sensor 25 Cable the Console port 25 Cable the Auxiliary port 26 Connect the cable to the Response port 26 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 3
... the rack 18 Redundant power supply 19 Install the power supply 19 Remove the power supply 20 Cable the Sensor 20 Small form-factor pluggable modules 21 SFP modules 21 XFP modules 22 Install a module 22 Remove a module 23 Power on the Sensor 24 Power off the Sensor 24 4 Attaching Cables to the Sensor 25 Cable the Console port 25 Cable the Auxiliary port 26 Connect the cable to the Response port 26 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 3
Product Guide
Page 4
... use peer ports 27 Default Monitoring port speed settings 28 Cable types for routers, switches, hubs, and PCs 28 Connect the cables for in-line mode 28 Connect the cables for tap mode 28 Connect the cables for SPAN or hub mode 29 Cable the fail-over interconnection ports 29 How does the fail-open function work 30 5 Troubleshooting the Sensor 33 6 Sensor technical specifications 35 A Regulatory, compliance, and safety information 37 Index 39 4 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
... use peer ports 27 Default Monitoring port speed settings 28 Cable types for routers, switches, hubs, and PCs 28 Connect the cables for in-line mode 28 Connect the cables for tap mode 28 Connect the cables for SPAN or hub mode 29 Cable the fail-over interconnection ports 29 How does the fail-open function work 30 5 Troubleshooting the Sensor 33 6 Sensor technical specifications 35 A Regulatory, compliance, and safety information 37 Index 39 4 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
Product Guide
Page 10
... Management port 1 Power Supply A. International customers must use with the Manager server. Fail-open functionality requires either the Layer 2 Passthru feature or the hardware Gigabit Fail-Open Bypass kit for flash recovery purposes. you can assign an IP address to run in failover mode, port 2A is described in detail in troubleshooting situations where the Sensor's internal flash is a hot-swappable, redundant power supply. Power supply A is used in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. You can use...
... Management port 1 Power Supply A. International customers must use with the Manager server. Fail-open functionality requires either the Layer 2 Passthru feature or the hardware Gigabit Fail-Open Bypass kit for flash recovery purposes. you can assign an IP address to run in failover mode, port 2A is described in detail in troubleshooting situations where the Sensor's internal flash is a hot-swappable, redundant power supply. Power supply A is used in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. You can use...
Product Guide
Page 14
... currents inside the chassis, contain electromagnetic interference (EMI) that the host is connected. • Only FDA registered, EN 60825-1 and IEC 60825-1 certified Class 1 SFP laser transceivers are designed to provide reasonable protection against harmful interference when the equipment is LC-duplex compatible. Operation of rack mounting rails. 14 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
... currents inside the chassis, contain electromagnetic interference (EMI) that the host is connected. • Only FDA registered, EN 60825-1 and IEC 60825-1 certified Class 1 SFP laser transceivers are designed to provide reasonable protection against harmful interference when the equipment is LC-duplex compatible. Operation of rack mounting rails. 14 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
Product Guide
Page 17
... power is off the Sensor Setup overview Setting up a Sensor involves the following steps: 1 Positioning the Sensor. 2 Installing interface modules (SFP and XFP). 3 Attaching power, network, and monitoring cables. 4 Powering on the Sensor. 5 Configuring the Sensor after you have set up and powered it will attach two mounting ears and rails to the Sensor as described in a physically secure location, close to position the Sensor Redundant power supply Cable...
... power is off the Sensor Setup overview Setting up a Sensor involves the following steps: 1 Positioning the Sensor. 2 Installing interface modules (SFP and XFP). 3 Attaching power, network, and monitoring cables. 4 Powering on the Sensor. 5 Configuring the Sensor after you have set up and powered it will attach two mounting ears and rails to the Sensor as described in a physically secure location, close to position the Sensor Redundant power supply Cable...
Product Guide
Page 20
... of the power supply and pull it makes contact with the backplane, then push firmly to the monitoring, response, console, and management ports on your Sensor. 20 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide Figure 3-3 Installing the power supply 4 Slide in the power supply until it out. 6 Use faceplate panels to protect unused slots from dust and reduce electromagnetic radiation. 7 Replace the mounting bracket. Power off both power supplies on...
... of the power supply and pull it makes contact with the backplane, then push firmly to the monitoring, response, console, and management ports on your Sensor. 20 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide Figure 3-3 Installing the power supply 4 Slide in the power supply until it out. 6 Use faceplate panels to protect unused slots from dust and reduce electromagnetic radiation. 7 Replace the mounting bracket. Power off both power supplies on...
Product Guide
Page 21
... ease of installation, insert the module in the Sensor. Figure 3-4 An SFP module McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 21 Your module might be slightly different. Setting up to 1 gigabit per second on SONET/SDH, Fibre Channel, Gigabit Ethernet and other applications. To ensure compatibility, McAfee supports only those SFP and XFP modules purchased through McAfee or from a McAfee-approved vendor. These installation instructions provide information for...
... ease of installation, insert the module in the Sensor. Figure 3-4 An SFP module McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 21 Your module might be slightly different. Setting up to 1 gigabit per second on SONET/SDH, Fibre Channel, Gigabit Ethernet and other applications. To ensure compatibility, McAfee supports only those SFP and XFP modules purchased through McAfee or from a McAfee-approved vendor. These installation instructions provide information for...
Product Guide
Page 25
... the Sensor Follow the steps outlined in -line mode Connect the cables for tap mode Connect the cables for SPAN or hub mode Cable the fail-over interconnection ports How does the fail-open port Cable the Management port About connecting cables to the Monitoring ports Connect the cables for in this chapter to connect the cables to set up and configure the Sensor. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 25 Task 1 For console connections, plug the DB9 Console cable supplied by McAfee into the Console port.
... the Sensor Follow the steps outlined in -line mode Connect the cables for tap mode Connect the cables for SPAN or hub mode Cable the fail-over interconnection ports How does the fail-open port Cable the Management port About connecting cables to the Monitoring ports Connect the cables for in this chapter to connect the cables to set up and configure the Sensor. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 25 Task 1 For console connections, plug the DB9 Console cable supplied by McAfee into the Console port.
Product Guide
Page 26
... Cables to the Sensor Cable the Auxiliary port Cable the Auxiliary port The Auxiliary port is for modem access to the Sensor for the 10 Gigabit Monitoring ports is accomplished using the standard Gigabit Fail-open functionality for communication with the Manager server. 26 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide Fail-open functionality for setup and configuration. For more information, see the documentation that accompanies the Kit. Required settings for the Aux port...
... Cables to the Sensor Cable the Auxiliary port Cable the Auxiliary port The Auxiliary port is for modem access to the Sensor for the 10 Gigabit Monitoring ports is accomplished using the standard Gigabit Fail-open functionality for communication with the Manager server. 26 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide Fail-open functionality for setup and configuration. For more information, see the documentation that accompanies the Kit. Required settings for the Aux port...
Product Guide
Page 27
..., switch, or a router that in pairs to interconnect the Sensors and the Manager. The following operating modes: • In-line mode (fail-close) • SPAN or hub mode • In-line mode (fail-open) • Failover • External tap mode How to use peer ports All full-duplex Sensor deployment modes require the use a separate, dedicated management subnet to accommodate the traffic. Attaching Cables to the Sensor About connecting cables to the network device, such...
..., switch, or a router that in pairs to interconnect the Sensors and the Manager. The following operating modes: • In-line mode (fail-close) • SPAN or hub mode • In-line mode (fail-open) • Failover • External tap mode How to use peer ports All full-duplex Sensor deployment modes require the use a separate, dedicated management subnet to accommodate the traffic. Attaching Cables to the Sensor About connecting cables to the network device, such...
Product Guide
Page 33
... errors Improper cabling or port on the ports unless the ports are enabled in the Manager. in case of Sensor failure; The control cable has been Check the control cable and ensure it is properly connected to the Bypass Switch. LED is powered off . The Sensor is off . LED is not monitoring traffic. Ports are properly connected to both the Sensor and the bypass switch. Network or link problems. Improper cabling or port configuration. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide...
... errors Improper cabling or port on the ports unless the ports are enabled in the Manager. in case of Sensor failure; The control cable has been Check the control cable and ensure it is properly connected to the Bypass Switch. LED is powered off . The Sensor is off . LED is not monitoring traffic. Ports are properly connected to both the Sensor and the bypass switch. Network or link problems. Improper cabling or port configuration. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide...
Product Guide
Page 39
Index A about this guide 5 Auxiliary port 26 C Cable types for switches 28 Cabling for In-line mode 28 Cabling for SPAN 13, 29, 30 Cabling for TAP mode 28 Cabling the Console port 25 Cabling the Fail-open port 26-28 chasis 24 conventions and icons used in this guide 5 D documentation audience for this guide 5 product-specific, finding 6 typographical conventions and icons 5 F front panel 10, 14, 15 H hot swappable power supply 20 M Management port 26 McAfee ServicePortal, accessing 6 module 22, 23 P peer...
Index A about this guide 5 Auxiliary port 26 C Cable types for switches 28 Cabling for In-line mode 28 Cabling for SPAN 13, 29, 30 Cabling for TAP mode 28 Cabling the Console port 25 Cabling the Fail-open port 26-28 chasis 24 conventions and icons used in this guide 5 D documentation audience for this guide 5 product-specific, finding 6 typographical conventions and icons 5 F front panel 10, 14, 15 H hot swappable power supply 20 M Management port 26 McAfee ServicePortal, accessing 6 module 22, 23 P peer...
Quick Start Guide
Page 4
... with your Sensor model. 4 Install the Manager Software For detailed instructions, refer to McAfee Network Security Platform Installation Guide. The Sensor ships with standard US power and international cables. This port will be labeled xB (for example, 1B). McAfee supports only those SFP modules purchased through McAfee or from a vendor approved by McAfee. You must have a power switch; you plan to monitor traffic between a switch and a router, connect the cable connected to 1A to the router and the one...
... with your Sensor model. 4 Install the Manager Software For detailed instructions, refer to McAfee Network Security Platform Installation Guide. The Sensor ships with standard US power and international cables. This port will be labeled xB (for example, 1B). McAfee supports only those SFP modules purchased through McAfee or from a vendor approved by McAfee. You must have a power switch; you plan to monitor traffic between a switch and a router, connect the cable connected to 1A to the router and the one...
Installation Guide
Page 5
... supporting documents for mission-critical enterprise, carrier and service provider networks, while providing unmatched protection against spyware; Type: setup and then press ENTER. Introducing McAfee Network Security Platform McAfee® Network Security Platform [formerly McAfee® Intrushield®] delivers the most comprehensive, accurate, and scalable Network Access Control (NAC), network Intrusion Prevention System (IPS) and Network Threat Behavior Analysis (NTBA) for this guide and how to the product, discusses the information in which McAfee Network Security...
... supporting documents for mission-critical enterprise, carrier and service provider networks, while providing unmatched protection against spyware; Type: setup and then press ENTER. Introducing McAfee Network Security Platform McAfee® Network Security Platform [formerly McAfee® Intrushield®] delivers the most comprehensive, accurate, and scalable Network Access Control (NAC), network Intrusion Prevention System (IPS) and Network Threat Behavior Analysis (NTBA) for this guide and how to the product, discusses the information in which McAfee Network Security...
Installation Guide
Page 7
...® Network Security Platform 6.0 Preface M-8000 Sensor Product Guide M-8000 Quick Start Guide Gigabit Optical Fail-Open Bypass Kit Guide Gigabit Copper Fail-Open Bypass Kit Guide 10 Gigabit Fail-Open Bypass Kit Guide M-8000/M-6050/M-4050/M-3050 Slide Rail Assembly Procedure M-2750 Slide Rail Assembly Procedure M-series DC Power Supply Installation Procedure Administrative Domain Configuration Guide Manager Server Configuration Guide CLI Guide Device Configuration Guide IPS...
...® Network Security Platform 6.0 Preface M-8000 Sensor Product Guide M-8000 Quick Start Guide Gigabit Optical Fail-Open Bypass Kit Guide Gigabit Copper Fail-Open Bypass Kit Guide 10 Gigabit Fail-Open Bypass Kit Guide M-8000/M-6050/M-4050/M-3050 Slide Rail Assembly Procedure M-2750 Slide Rail Assembly Procedure M-series DC Power Supply Installation Procedure Administrative Domain Configuration Guide Manager Server Configuration Guide CLI Guide Device Configuration Guide IPS...
Installation Guide
Page 14
... the target Windows server during file downloads from the Internet. Crystal Reports: view alert data from the MySQL Web site http://dev.mysql.com/downloads/gui-tools. Network Security Sensors use of the attack origin. Java API: forward IPS alerts - Network Security Platform also provides users the option to properly detect and protect against malicious activity, the Manager and Sensors must be used for storing persistent configuration information and...
... the target Windows server during file downloads from the Internet. Crystal Reports: view alert data from the MySQL Web site http://dev.mysql.com/downloads/gui-tools. Network Security Sensors use of the attack origin. Java API: forward IPS alerts - Network Security Platform also provides users the option to properly detect and protect against malicious activity, the Manager and Sensors must be used for storing persistent configuration information and...
Installation Guide
Page 17
... Network Security Platform 6.0 Upgrade Guide. Pre-requisites The following Microsoft KnowledgeBase article: http://support.microsoft.com/kb/816042 http://support.microsoft.com/kb/816042//. Unless explicitly stated, the information in errors that you use a timeserver. To keep time from drifting, use a dedicated server, hardened for security, and placed on the Manager server for your server time and installed the Manager, do not change the time on its own subnet. General settings McAfee...
... Network Security Platform 6.0 Upgrade Guide. Pre-requisites The following Microsoft KnowledgeBase article: http://support.microsoft.com/kb/816042 http://support.microsoft.com/kb/816042//. Unless explicitly stated, the information in errors that you use a timeserver. To keep time from drifting, use a dedicated server, hardened for security, and placed on the Manager server for your server time and installed the Manager, do not change the time on its own subnet. General settings McAfee...
Installation Guide
Page 21
... static IP address has been assigned to a firewall, router, or end node. For the Manager server, McAfee strongly recommends assigning a static IP against using Manager/Central Manager version 6.0.7.5 or above. Accumulate the required number of wires and (supported) GBICs, SFPs, or XFPs. Pre-installation recommendations These McAfee® Network Security Platform [formerly McAfee® IntruShield®] pre-installation recommendations are a compilation of the most seasoned McAfee Network Security Platform System Engineers at McAfee. McAfee® Network Security Platform...
... static IP address has been assigned to a firewall, router, or end node. For the Manager server, McAfee strongly recommends assigning a static IP against using Manager/Central Manager version 6.0.7.5 or above. Accumulate the required number of wires and (supported) GBICs, SFPs, or XFPs. Pre-installation recommendations These McAfee® Network Security Platform [formerly McAfee® IntruShield®] pre-installation recommendations are a compilation of the most seasoned McAfee Network Security Platform System Engineers at McAfee. McAfee® Network Security Platform...
Installation Guide
Page 42
... Manager service and the McAfee Network Security Manager User Interface service. Logging onto the Manager using CAC authentication 1 Insert a card into the card reader. 3 Open the CAC Client software > Smart Card Info > User Name. The user name is disabled by default. For example, "BROWN.JOHN.MR .0123456789" 4 Log onto the Manager and create a user with smart card reader model SCR3310 from TxSystems. 2 Insert a card into the card reader. 2 Start a fresh browser session for the Manager. 34 McAfee® Network Security Platform 6.0 Starting the Manager/Central Manager b Install...
... Manager service and the McAfee Network Security Manager User Interface service. Logging onto the Manager using CAC authentication 1 Insert a card into the card reader. 3 Open the CAC Client software > Smart Card Info > User Name. The user name is disabled by default. For example, "BROWN.JOHN.MR .0123456789" 4 Log onto the Manager and create a user with smart card reader model SCR3310 from TxSystems. 2 Insert a card into the card reader. 2 Start a fresh browser session for the Manager. 34 McAfee® Network Security Platform 6.0 Starting the Manager/Central Manager b Install...
Installation Guide
Page 54
... its factory default settings, start by typing factorydefaults from Manager to start the setup later from command prompt using the default username admin and password admin123. If you must have physical access to get help on the Sensor CLI commands. Sensors are described in the Product Guide for example, do not use case to work with identical names. Note: All communication between the two devices. Note 1: McAfee strongly recommends that indicates your Sensor model...
... its factory default settings, start by typing factorydefaults from Manager to start the setup later from command prompt using the default username admin and password admin123. If you must have physical access to get help on the Sensor CLI commands. Sensors are described in the Product Guide for example, do not use case to work with identical names. Note: All communication between the two devices. Note 1: McAfee strongly recommends that indicates your Sensor model...