Product Guide
Page 8
... and packet logs, resetting TCP connections, "scrubbing" malicious packets, and even blocking attack packets entirely before they reach the intended target. In the illustration, McAfee® Network Security Platform (formerly McAfee® IntruShield®) provides IPS protection to help determine the level of configuration and the number of installed Sensors. Sensor can perform many types of...
... and packet logs, resetting TCP connections, "scrubbing" malicious packets, and even blocking attack packets entirely before they reach the intended target. In the illustration, McAfee® Network Security Platform (formerly McAfee® IntruShield®) provides IPS protection to help determine the level of configuration and the number of installed Sensors. Sensor can perform many types of...
Product Guide
Page 10
...-Open Bypass kit. The Layer 2 Passthru feature is corrupted and you can assign an IP address to interconnect with a standby Sensor. International customers must use McAfee-provided cable or acquire one full-duplex segment and two SPAN ports). You can use ...description Item Description 9 RJ-45 Response port 10 10/100/1000 Management port 1 Power Supply A. If you 're operating in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. Front panel LEDs The front panel LEDs provide status information for communication with each...
...-Open Bypass kit. The Layer 2 Passthru feature is corrupted and you can assign an IP address to interconnect with a standby Sensor. International customers must use McAfee-provided cable or acquire one full-duplex segment and two SPAN ports). You can use ...description Item Description 9 RJ-45 Response port 10 10/100/1000 Management port 1 Power Supply A. If you 're operating in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. Front panel LEDs The front panel LEDs provide status information for communication with each...
Quick Start Guide
Page 5
...to the Manager. For more information, see McAfee Network Security Platform Device Administration Guide. You do not require a license file for using the grant number and password. d To add a Sensor in McAfee Network Security Platform Installation Guide and the Network Security Platform Release Notes. a Log on M-series ... file to Device List | Add-On Licenses page. b Click Configure. c Go to McAfee Update Server and log on license, go to enable IPS on screen prompts. 5 Start the Manager Click Start | Programs | McAfee | Network Security Manager | Network Security Manager.
...to the Manager. For more information, see McAfee Network Security Platform Device Administration Guide. You do not require a license file for using the grant number and password. d To add a Sensor in McAfee Network Security Platform Installation Guide and the Network Security Platform Release Notes. a Log on M-series ... file to Device List | Add-On Licenses page. b Click Configure. c Go to McAfee Update Server and log on license, go to enable IPS on screen prompts. 5 Start the Manager Click Start | Programs | McAfee | Network Security Manager | Network Security Manager.
Quick Start Guide
Page 7
...subnet mask in the Manager interface. 7 At the prompt, type: set command, you can use the set manager ip . The Sensor can take up to verify your configuration settings to this will automatically prompt you to enter the shared... provide the necessary information or you must begin with the following steps. Example: set manager ip 192.168.2.8 g Set the IP address and subnet mask of the Sensor. At the prompt, type: ping . The string... have successfully established the Sensor on the same network as the Manager, set sensor gateway . The shared key value is not on the...
...subnet mask in the Manager interface. 7 At the prompt, type: set command, you can use the set manager ip . The Sensor can take up to verify your configuration settings to this will automatically prompt you to enter the shared... provide the necessary information or you must begin with the following steps. Example: set manager ip 192.168.2.8 g Set the IP address and subnet mask of the Sensor. At the prompt, type: ping . The string... have successfully established the Sensor on the same network as the Manager, set sensor gateway . The shared key value is not on the...
Quick Start Guide
Page 9
... blocks the attack. To view this or any attack in the McAfee Network Security Platform IPS Administration Guide. Now select Default Inline IPS from the list and click View / Edit . if any other McAfee-provided policies, you added. For more information on the Sensor that... upon Sensor addition. g Click the button representing the ports on port settings, see Configuration Sensor monitoring and response ports, McAfee Network Security Platform Device Administration Guide. f Click Device List | Device_Name | Port Settings. d Select your port settings match the cabling (for...
... blocks the attack. To view this or any attack in the McAfee Network Security Platform IPS Administration Guide. Now select Default Inline IPS from the list and click View / Edit . if any other McAfee-provided policies, you added. For more information on the Sensor that... upon Sensor addition. g Click the button representing the ports on port settings, see Configuration Sensor monitoring and response ports, McAfee Network Security Platform Device Administration Guide. f Click Device List | Device_Name | Port Settings. d Select your port settings match the cabling (for...
Installation Guide
Page 4
Unpacking the Sensor...41 Cable Specifications...41 Network Security Platform fail-closed dongle specification 42 Console port pin-outs ...42 Auxiliary port pin-outs...42 Response port pin-outs ...43 Monitoring port pin-outs ...Manager 46 Configuring the Sensor ...46 Adding a Sensor to the Manager 48 Verifying successful configuration 49 Changing Sensor values ...50 Adding a secondary Manager IP 51 Removing a secondary Manager IP 51 Device Licenses ...52 Importing a Device License 52 Manually assigning a device license 53 Chapter 7 Configuring the Update Server 55 Specifying the Update...
Unpacking the Sensor...41 Cable Specifications...41 Network Security Platform fail-closed dongle specification 42 Console port pin-outs ...42 Auxiliary port pin-outs...42 Response port pin-outs ...43 Monitoring port pin-outs ...Manager 46 Configuring the Sensor ...46 Adding a Sensor to the Manager 48 Verifying successful configuration 49 Changing Sensor values ...50 Adding a secondary Manager IP 51 Removing a secondary Manager IP 51 Device Licenses ...52 Importing a Device License 52 Manually assigning a device license 53 Chapter 7 Configuring the Update Server 55 Specifying the Update...
Installation Guide
Page 5
Introducing McAfee Network Security Platform McAfee® Network Security Platform [formerly McAfee® Intrushield®] delivers the most comprehensive, accurate, and scalable Network Access Control (NAC), network Intrusion Prevention System (IPS) and Network Threat Behavior Analysis (NTBA) for this guide and how to... installed and managed through a single Manager. Select My Company > Admin Domain > Summary. 1. are shown in which McAfee Network Security Sensor, NAC Sensor, and NTBA Appliance are denoted using Courier New font. The Service field on the User Interface ...
Introducing McAfee Network Security Platform McAfee® Network Security Platform [formerly McAfee® Intrushield®] delivers the most comprehensive, accurate, and scalable Network Access Control (NAC), network Intrusion Prevention System (IPS) and Network Threat Behavior Analysis (NTBA) for this guide and how to... installed and managed through a single Manager. Select My Company > Admin Domain > Summary. 1. are shown in which McAfee Network Security Sensor, NAC Sensor, and NTBA Appliance are denoted using Courier New font. The Service field on the User Interface ...
Installation Guide
Page 6
...-line help are shown enclosed in italics. McAfee® Network Security Platform 6.0 Preface Convention Example Variable information that you must supply are companions to this guide. Parameters that provide related, but non-critical, information are denoted using this notation. Warning: Notes that you must Type: Sensor-IP-address and then press type based on these...
...-line help are shown enclosed in italics. McAfee® Network Security Platform 6.0 Preface Convention Example Variable information that you must supply are companions to this guide. Parameters that provide related, but non-critical, information are denoted using this notation. Warning: Notes that you must Type: Sensor-IP-address and then press type based on these...
Installation Guide
Page 7
...available 7:00 A.M. to -date documentation, technical bulletins, and quick tips on McAfee's 24x7 comprehensive KnowledgeBase. In addition, customers can obtain up-to 5:00 P.M. McAfee® Network Security Platform 6.0 Preface M-8000 Sensor Product Guide M-8000 Quick Start... Administrative Domain Configuration Guide Manager Server Configuration Guide CLI Guide Device Configuration Guide IPS Configuration Guide NAC Configuration Guide Integration Guide System Status Monitoring Guide Reports Guide ...
...available 7:00 A.M. to -date documentation, technical bulletins, and quick tips on McAfee's 24x7 comprehensive KnowledgeBase. In addition, customers can obtain up-to 5:00 P.M. McAfee® Network Security Platform 6.0 Preface M-8000 Sensor Product Guide M-8000 Quick Start... Administrative Domain Configuration Guide Manager Server Configuration Guide CLI Guide Device Configuration Guide IPS Configuration Guide NAC Configuration Guide Integration Guide System Status Monitoring Guide Reports Guide ...
Installation Guide
Page 9
...denial of this guide. The Manager server is detected. 1 Network Security Platform components Network Security Platform consists of the following major components: McAfee® Network Security Sensor (Sensor) (on page 1) McAfee® Network Security Manager (Manager), with the Manager is a content-processing appliance...to adapt to the security needs of a device is to analyze traffic on page 6) About McAfee Network Security Sensor A McAfee® Network Security Sensor is described in real time, making it truly an intrusion prevention system (IPS). The process of ...
...denial of this guide. The Manager server is detected. 1 Network Security Platform components Network Security Platform consists of the following major components: McAfee® Network Security Sensor (Sensor) (on page 1) McAfee® Network Security Manager (Manager), with the Manager is a content-processing appliance...to adapt to the security needs of a device is to analyze traffic on page 6) About McAfee Network Security Sensor A McAfee® Network Security Sensor is described in real time, making it truly an intrusion prevention system (IPS). The process of ...
Installation Guide
Page 13
...-time correlative analysis of IPS-event data relevancy. Other key features of Manager include: The Incident Generator: The Incident Generator enables creation of a network host. McAfee Host Intrusion Prevention: McAfee Host Intrusion Prevention (HIP... from the Threat Analyzer console. Network Security Platform integrates with McAfee Host Intrusion Prevention version 7.0. McAfee Network Access Control: Using Network Security Sensors, you can integrate Network Security Platform with other McAfee products: You can enforce network access control (NAC) based on...
...-time correlative analysis of IPS-event data relevancy. Other key features of Manager include: The Incident Generator: The Incident Generator enables creation of a network host. McAfee Host Intrusion Prevention: McAfee Host Intrusion Prevention (HIP... from the Threat Analyzer console. Network Security Platform integrates with McAfee Host Intrusion Prevention version 7.0. McAfee Network Access Control: Using Network Security Sensors, you can integrate Network Security Platform with other McAfee products: You can enforce network access control (NAC) based on...
Installation Guide
Page 14
... Thus, the Network Security Platform team constantly researches and develops performance-enhancing software and attack-detecting 6 This enables you can be sent to a third-party application. McAfee® Network Security Platform 6.0 About Network Security Platform McAfee Artemis: Network Security Platform integrates with McAfee Artemis technology, ...version 5.1.47). including reputation, volume, trends, email, web traffic and malware. SNMP Server (NMS): forward IPS alerts and system faults - For more information on -demand or by defragmenting split tables, re-sorting and ...
... Thus, the Network Security Platform team constantly researches and develops performance-enhancing software and attack-detecting 6 This enables you can be sent to a third-party application. McAfee® Network Security Platform 6.0 About Network Security Platform McAfee Artemis: Network Security Platform integrates with McAfee Artemis technology, ...version 5.1.47). including reputation, volume, trends, email, web traffic and malware. SNMP Server (NMS): forward IPS alerts and system faults - For more information on -demand or by defragmenting split tables, re-sorting and ...
Installation Guide
Page 17
... dedicated server, hardened for your Windows server to properly install the Manager software, as well as part of an upgrade to Network Security Platform 6.0 Upgrade Guide. Unless explicitly stated, the information in errors that the time difference between the two exceeds more information about ... time and installed the Manager, do not change the time on the Manager server with all McAfee® Network Security Sensors (Sensors) and the McAfee® Network Security Update Server [formerly IPS Update Server] because SSL is time sensitive. If Manager Disaster Recovery (MDR) is...
... dedicated server, hardened for your Windows server to properly install the Manager software, as well as part of an upgrade to Network Security Platform 6.0 Upgrade Guide. Unless explicitly stated, the information in errors that the time difference between the two exceeds more information about ... time and installed the Manager, do not change the time on the Manager server with all McAfee® Network Security Sensors (Sensors) and the McAfee® Network Security Update Server [formerly IPS Update Server] because SSL is time sensitive. If Manager Disaster Recovery (MDR) is...
Installation Guide
Page 21
...; Get the required license file and grant number. For the Manager server, McAfee strongly recommends assigning a static IP against using Manager/Central Manager version 6.0.7.5 or above. Accumulate the required number of Network Security Platform dongles, which McAfee® Network Security Manager software will be installed, should be configured and ready to be placed online. You must...
...; Get the required license file and grant number. For the Manager server, McAfee strongly recommends assigning a static IP against using Manager/Central Manager version 6.0.7.5 or above. Accumulate the required number of Network Security Platform dongles, which McAfee® Network Security Manager software will be installed, should be configured and ready to be placed online. You must...
Installation Guide
Page 22
... outbound connections over SMTP using DHCP. Identify hosts that might conflict with the Manager If you cannot assign IPs using a homemade mail client. 14 This helps reduce the risk of essential MySQL files. To keep time from drifting... notes or, if applicable, the Upgrade Guide. Otherwise, Network Security Platform packet captures may cause false positives, for example, HTTP cache servers, DNS servers, mail relays, SNMP managers, and vulnerability scanners. McAfee® Network Security Platform 6.0 Preparing for the Manager installation If applicable,...
... outbound connections over SMTP using DHCP. Identify hosts that might conflict with the Manager If you cannot assign IPs using a homemade mail client. 14 This helps reduce the risk of essential MySQL files. To keep time from drifting... notes or, if applicable, the Upgrade Guide. Otherwise, Network Security Platform packet captures may cause false positives, for example, HTTP cache servers, DNS servers, mail relays, SNMP managers, and vulnerability scanners. McAfee® Network Security Platform 6.0 Preparing for the Manager installation If applicable,...
Installation Guide
Page 32
...Memory size. 12 Set the following (applicable only Network Security Manager): Number of Sensors: Select the numbers of simultaneous connections database connections allowed from the corresponding list. To specify an IP, select Use a Dedicated Interface? For Japanese, ... RAM Usage. for server processes required by Network Security Platform. McAfee® Network Security Platform 6.0 Installing the Manager/Central Manager 11 Enter a value to specify a dedicated interface is displayed only if the Manager has more than one IP. The recommended number indicated above ; Figure...
...Memory size. 12 Set the following (applicable only Network Security Manager): Number of Sensors: Select the numbers of simultaneous connections database connections allowed from the corresponding list. To specify an IP, select Use a Dedicated Interface? For Japanese, ... RAM Usage. for server processes required by Network Security Platform. McAfee® Network Security Platform 6.0 Installing the Manager/Central Manager 11 Enter a value to specify a dedicated interface is displayed only if the Manager has more than one IP. The recommended number indicated above ; Figure...
Installation Guide
Page 33
... are reachable to one Manager server. Assume that the Manager server has two IP addresses - McAfee® Network Security Platform 6.0 Installing the Manager/Central Manager Network Security Platform assumes that all the IP addresses are bound to manage both these networks with the Sensor in 172.16.10.x, which will use this case, it is recommended that you configure...
... are reachable to one Manager server. Assume that the Manager server has two IP addresses - McAfee® Network Security Platform 6.0 Installing the Manager/Central Manager Network Security Platform assumes that all the IP addresses are bound to manage both these networks with the Sensor in 172.16.10.x, which will use this case, it is recommended that you configure...
Installation Guide
Page 38
.... 3 To log onto the Manager, see Logging onto Network Security Manager (on the Central Manager server: McAfee Network Security Central Manager McAfee Network Security Central Manager Database McAfee Network Security Central Manager User Interface McAfee Network Security Central Manager Watchdog 2 Open the Manager using the shortcut icon that you have been assigned within Network Security Platform. Important: For testing purposes, you are running...
.... 3 To log onto the Manager, see Logging onto Network Security Manager (on the Central Manager server: McAfee Network Security Central Manager McAfee Network Security Central Manager Database McAfee Network Security Central Manager User Interface McAfee Network Security Central Manager Watchdog 2 Open the Manager using the shortcut icon that you have been assigned within Network Security Platform. Important: For testing purposes, you are running...
Installation Guide
Page 53
...Input Reserved for example, IP address and netmask, Sensor name, and so on). 6 Verify that the Sensor is on the network. (See Configuring the Sensor (on page 46)) 7 Verify connectivity between the Manager and the Sensor. (See Verifying successful configuration (on page 46)'s network information (for use in ... is described in detail in subsequent sections of configuring the Sensor involves the following steps. FO RxD+ TxD+ FC 5 TxD- McAfee® Network Security Platform 6.0 Adding a Sensor Pin # 1 2 3 4 Signal TxD+ FO TxD- McAfee recommends that you establish an easily 45
...Input Reserved for example, IP address and netmask, Sensor name, and so on). 6 Verify that the Sensor is on the network. (See Configuring the Sensor (on page 46)) 7 Verify connectivity between the Manager and the Sensor. (See Verifying successful configuration (on page 46)'s network information (for use in ... is described in detail in subsequent sections of configuring the Sensor involves the following steps. FO RxD+ TxD+ FC 5 TxD- McAfee® Network Security Platform 6.0 Adding a Sensor Pin # 1 2 3 4 Signal TxD+ FO TxD- McAfee recommends that you establish an easily 45
Installation Guide
Page 55
... a reboot is an eight-bit number between 0 and 128. Example: set manager ip 47 Example: set sensor ip Specify a 32-bit address written as four eight-bit numbers separated by colons. Each group (A,B,C,D etc) represents a group of the Manager server. McAfee® Network Security Platform 6.0 Adding a Sensor 3 Set the name of hexadecimal numbers between 0000-FFFF...
... a reboot is an eight-bit number between 0 and 128. Example: set manager ip 47 Example: set sensor ip Specify a 32-bit address written as four eight-bit numbers separated by colons. Each group (A,B,C,D etc) represents a group of the Manager server. McAfee® Network Security Platform 6.0 Adding a Sensor 3 Set the name of hexadecimal numbers between 0000-FFFF...