Product Guide
Page 4
... or hub mode 29 Cable the fail-over interconnection ports 29 How does the fail-open function work 30 5 Troubleshooting the Sensor 33 6 Sensor technical specifications 35 A Regulatory, compliance, and safety information 37 Index 39 4 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
... or hub mode 29 Cable the fail-over interconnection ports 29 How does the fail-open function work 30 5 Troubleshooting the Sensor 33 6 Sensor technical specifications 35 A Regulatory, compliance, and safety information 37 Index 39 4 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
Product Guide
Page 7
... and manage it using the McAfee® Network Security Manager (Manager). McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 7 The Sensor examines the header and data portion of every network packet, looking for patterns and behavior in the subsequent chapters of -Service (DDoS) attacks Sensors are specifically designed to handle traffic at key network access points, the Sensor...
... and manage it using the McAfee® Network Security Manager (Manager). McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 7 The Sensor examines the header and data portion of every network packet, looking for patterns and behavior in the subsequent chapters of -Service (DDoS) attacks Sensors are specifically designed to handle traffic at key network access points, the Sensor...
Product Guide
Page 10
... Supply B (optional, purchased separately). If you to monitor eight SPAN ports, four full-duplex tapped segments, four segments in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. For more information, see the on the monitored segment. you to run in...McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide This power supply also uses a standard IEC320-C13 port, and you need to this port during installation. The gigabit ports of the M-3050/M-4050 when deployed in in-line, fail-close, meaning that meets your specific...
... Supply B (optional, purchased separately). If you to monitor eight SPAN ports, four full-duplex tapped segments, four segments in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. For more information, see the on the monitored segment. you to run in...McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide This power supply also uses a standard IEC320-C13 port, and you need to this port during installation. The gigabit ports of the M-3050/M-4050 when deployed in in-line, fail-close, meaning that meets your specific...
Product Guide
Page 35
... Weight Voltage Range Frequency Vibration, operating Vibration, non-operating Power requirements Temperature Ambient Temperature Range (Non-condensing) Relative Humidity (Non-condensing) Sensor Specifics System Heat Dissipation Airflow Altitude Description Without mounting ears/rails/cable management: • width: 16.75 in. (41.91 cm) • height: 3.5 in. (8.89 cm) ... Non-operating 5% to 95% non-condensing AC (max): 535W, 1825 BTU/hr DC (max): To Be determined 200 lfm (1 m/s) Sealevel to 10,000 ft (3050m) McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 35
... Weight Voltage Range Frequency Vibration, operating Vibration, non-operating Power requirements Temperature Ambient Temperature Range (Non-condensing) Relative Humidity (Non-condensing) Sensor Specifics System Heat Dissipation Airflow Altitude Description Without mounting ears/rails/cable management: • width: 16.75 in. (41.91 cm) • height: 3.5 in. (8.89 cm) ... Non-operating 5% to 95% non-condensing AC (max): 535W, 1825 BTU/hr DC (max): To Be determined 200 lfm (1 m/s) Sealevel to 10,000 ft (3050m) McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 35
Product Guide
Page 36
6 Sensor technical specifications 36 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
6 Sensor technical specifications 36 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
Product Guide
Page 39
...icons used in this guide 5 D documentation audience for this guide 5 product-specific, finding 6 typographical conventions and icons 5 F front panel 10, 14, 15 H hot swappable power supply 20 M Management port 26 McAfee ServicePortal, accessing 6 module 22, 23 P peer 27, 29 Pluggable 21...sensor responsibilities 7 ServicePortal, finding product documentation 6 setting up 17, 25 SFP 21 SFP module 24 specifications 35 T Technical Support, finding product information 6 Troubleshooting 7, 8, 13, 17, 33 X XFP module 9, 22 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 39
...icons used in this guide 5 D documentation audience for this guide 5 product-specific, finding 6 typographical conventions and icons 5 F front panel 10, 14, 15 H hot swappable power supply 20 M Management port 26 McAfee ServicePortal, accessing 6 module 22, 23 P peer 27, 29 Pluggable 21...sensor responsibilities 7 ServicePortal, finding product documentation 6 setting up 17, 25 SFP 21 SFP module 24 specifications 35 T Technical Support, finding product information 6 Troubleshooting 7, 8, 13, 17, 33 X XFP module 9, 22 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 39
Installation Guide
Page 4
Unpacking the Sensor...41 Cable Specifications...41 Network Security Platform fail-closed dongle specification 42 Console port pin-outs ...42 Auxiliary port pin-outs...42 Response port pin-outs ...43 Monitoring port pin-outs ...44 Configuring a Sensor...45 Configuration ...
Unpacking the Sensor...41 Cable Specifications...41 Network Security Platform fail-closed dongle specification 42 Console port pin-outs ...42 Auxiliary port pin-outs...42 Response port pin-outs ...43 Monitoring port pin-outs ...44 Configuring a Sensor...45 Configuration ...
Installation Guide
Page 6
... denoted using this notation. Note: Related Documentation The following documents and on-line help are companions to Quick Tour for more information on your specific ENTER. McAfee® Network Security Platform 6.0 Preface Convention Example Variable information that you must supply are shown enclosed in italics. Refer to this notation. Parameters that provide related, but non...
... denoted using this notation. Note: Related Documentation The following documents and on-line help are companions to Quick Tour for more information on your specific ENTER. McAfee® Network Security Platform 6.0 Preface Convention Example Variable information that you must supply are shown enclosed in italics. Refer to this notation. Parameters that provide related, but non...
Installation Guide
Page 9
... time, making it truly an intrusion prevention system (IPS). Network Security Platform provides comprehensive network intrusion detection and can block, or prevent, attacks in the network traffic that indicate malicious activity. Network Security Platform components Network Security Platform consists of the following major components: McAfee® Network Security Sensor (Sensor) (on page 6) About McAfee Network Security Sensor A McAfee® Network Security Sensor is described in the Getting Started Guide.
... time, making it truly an intrusion prevention system (IPS). Network Security Platform provides comprehensive network intrusion detection and can block, or prevent, attacks in the network traffic that indicate malicious activity. Network Security Platform components Network Security Platform consists of the following major components: McAfee® Network Security Sensor (Sensor) (on page 6) About McAfee Network Security Sensor A McAfee® Network Security Sensor is described in the Getting Started Guide.
Installation Guide
Page 13
... to provide automated updating of your devices - Reports can integrate Network Security Platform with other McAfee products to determine security threats in a network to provide you with McAfee Host Intrusion Prevention version 7.0. McAfee Network Access Control: Using Network Security Sensors, you to specific individuals. Network Security Platform integrates with a comprehensive network security solution. McAfee ePolicy Orchestrator: McAfee ePolicy Orchestrator (ePO) is a hostbased intrusion prevention system that prevents...
... to provide automated updating of your devices - Reports can integrate Network Security Platform with other McAfee products to determine security threats in a network to provide you with McAfee Host Intrusion Prevention version 7.0. McAfee Network Access Control: Using Network Security Sensors, you to specific individuals. Network Security Platform integrates with a comprehensive network security solution. McAfee ePolicy Orchestrator: McAfee ePolicy Orchestrator (ePO) is a hostbased intrusion prevention system that prevents...
Installation Guide
Page 23
Caution: It is optimal: During Manager software installation, use a MySQL-specific utility, myisamchk available in the \bin directory. Limit the quantity of alerts to the list of processes it will fragment the database,... is imperative that you tune the MySQL database after 30 days. To add the exclusion, follow these products in an exclusion list. McAfee® Network Security Platform 6.0 Preparing for the Manager installation VirusScan avoids blocking outbound SMTP connections from legitimate mail clients, such as Outlook and Eudora, by including the ...
Caution: It is optimal: During Manager software installation, use a MySQL-specific utility, myisamchk available in the \bin directory. Limit the quantity of alerts to the list of processes it will fragment the database,... is imperative that you tune the MySQL database after 30 days. To add the exclusion, follow these products in an exclusion list. McAfee® Network Security Platform 6.0 Preparing for the Manager installation VirusScan avoids blocking outbound SMTP connections from legitimate mail clients, such as Outlook and Eudora, by including the ...
Installation Guide
Page 47
Before You Install Sensors This section describes best practices for deployment of McAfee® Network Security Sensors (Sensors) on McAfee Network Security Platform, see the CLI Guide and Device Configuration Guide. Network topology considerations Deployment of McAfee® Network Security Platform [formerly McAfee® IntruShield®] requires basic knowledge of your network to help determine the level of configuration and amount of traffic across one...
Before You Install Sensors This section describes best practices for deployment of McAfee® Network Security Sensors (Sensors) on McAfee Network Security Platform, see the CLI Guide and Device Configuration Guide. Network topology considerations Deployment of McAfee® Network Security Platform [formerly McAfee® IntruShield®] requires basic knowledge of your network to help determine the level of configuration and amount of traffic across one...
Installation Guide
Page 49
... must procure a country-appropriate power cable with McAfee® Network Security Sensors (Sensors). 41 McAfee provides a standard, 2m NEMA 5-15p (US) power cable (3 wire). Cable Specifications This section lists the specifications for later use in case you have received all...hardware or software in the Sensor appliance that is not part of the normal operation of the Network Security Platform. McAfee® Network Security Platform 6.0 Adding a Sensor McAfee prohibits the use with specific v/a ratings. One set of rack mounting ears. Fail-closed dongles (two...
... must procure a country-appropriate power cable with McAfee® Network Security Sensors (Sensors). 41 McAfee provides a standard, 2m NEMA 5-15p (US) power cable (3 wire). Cable Specifications This section lists the specifications for later use in case you have received all...hardware or software in the Sensor appliance that is not part of the normal operation of the Network Security Platform. McAfee® Network Security Platform 6.0 Adding a Sensor McAfee prohibits the use with specific v/a ratings. One set of rack mounting ears. Fail-closed dongles (two...
Installation Guide
Page 50
... this cable are described in the Sensor Product Guide chapter on Sensor 42 Figure 22: Fail-Closed Dongle Specification Console port pin-outs McAfee supplies a console cable. McAfee® Network Security Platform 6.0 Adding a Sensor Network Security Platform fail-closed connection. Pin # 1 2 3 4 5 6 7 8 9 Signal DCD RXD TXD DTR GND DSR RTS CTS No Connection Direction on Sensor Output Output Input Input...
... this cable are described in the Sensor Product Guide chapter on Sensor 42 Figure 22: Fail-Closed Dongle Specification Console port pin-outs McAfee supplies a console cable. McAfee® Network Security Platform 6.0 Adding a Sensor Network Security Platform fail-closed connection. Pin # 1 2 3 4 5 6 7 8 9 Signal DCD RXD TXD DTR GND DSR RTS CTS No Connection Direction on Sensor Output Output Input Input...
Installation Guide
Page 51
McAfee® Network Security Platform 6.0 Adding a Sensor Pin # 1 2 3 4 5 6 7 8 9 Signal DCD RXD TXD DTR GND DSR RTS CTS RI Direction on Sensor 1 TxD+ 2 TxD- 3 RxD+ Output Output Input 43 Note: Category 5 ... Management (Mgmt) port uses a Cat 5/Cat 5e cable. Input These pins are terminated to 1 Gigabit per second (Gigabit Ethernet). Throughout this guide, cabling specifications will be used. For Ethernet networks running at 10 or 100 Mbps, Category 5 (Cat 5) OR Cat 5e cable can be mentioned as Cat 5/Cat 5e. Pin # 1 2 3 4 5 6 7 8 Signal Direction...
McAfee® Network Security Platform 6.0 Adding a Sensor Pin # 1 2 3 4 5 6 7 8 9 Signal DCD RXD TXD DTR GND DSR RTS CTS RI Direction on Sensor 1 TxD+ 2 TxD- 3 RxD+ Output Output Input 43 Note: Category 5 ... Management (Mgmt) port uses a Cat 5/Cat 5e cable. Input These pins are terminated to 1 Gigabit per second (Gigabit Ethernet). Throughout this guide, cabling specifications will be used. For Ethernet networks running at 10 or 100 Mbps, Category 5 (Cat 5) OR Cat 5e cable can be mentioned as Cat 5/Cat 5e. Pin # 1 2 3 4 5 6 7 8 Signal Direction...
Installation Guide
Page 53
...based on ). 6 Verify that the Sensor is generic to ground through a 75 ohm resistor & capacitor. Detailed instructions follow in a specific lab environment. McAfee® Network Security Platform 6.0 Adding a Sensor Pin # 1 2 3 4 Signal TxD+ FO TxD- Input These pins are working in the fail-closed dongle... key value. 5 Configuring the Sensor (on page 46)'s network information (for use in a live network, please ensure that you understand the potential impact of any command before using the McAfee® Network Security Manager (Manager) Configuration page. 4 Configuring the Sensor (on...
...based on ). 6 Verify that the Sensor is generic to ground through a 75 ohm resistor & capacitor. Detailed instructions follow in a specific lab environment. McAfee® Network Security Platform 6.0 Adding a Sensor Pin # 1 2 3 4 Signal TxD+ FO TxD- Input These pins are working in the fail-closed dongle... key value. 5 Configuring the Sensor (on page 46)'s network information (for use in a live network, please ensure that you understand the potential impact of any command before using the McAfee® Network Security Manager (Manager) Configuration page. 4 Configuring the Sensor (on...
Installation Guide
Page 54
...not use both Sensor1 and Sensor1. for specific details on the usage of factorydefaults command. 1 Open a hyperterminal session to configure the Sensor. (For instructions on the Sensor CLI commands. The Manager does not poll the network to get help on connecting to the ...typing factorydefaults from the CLI. Configuring the Sensor At any time during configuration, you must have physical access to the Sensor. McAfee® Network Security Platform 6.0 Adding a Sensor recognizable naming scheme prior to deployment that you might need to work with identical names. Sensors are described...
...not use both Sensor1 and Sensor1. for specific details on the usage of factorydefaults command. 1 Open a hyperterminal session to configure the Sensor. (For instructions on the Sensor CLI commands. The Manager does not poll the network to get help on connecting to the ...typing factorydefaults from the CLI. Configuring the Sensor At any time during configuration, you must have physical access to the Sensor. McAfee® Network Security Platform 6.0 Adding a Sensor recognizable naming scheme prior to deployment that you might need to work with identical names. Sensors are described...
Installation Guide
Page 58
... Type the shared secret key value at the prompt. The shared secret key value is case-sensitive. McAfee® Network Security Platform 6.0 Adding a Sensor Note: If you to verify the value. Essentially, the Manager knows the Sensor by a specific set sensor sharedsecretkey The Sensor then prompts you want to change , and then re-establish the...
... Type the shared secret key value at the prompt. The shared secret key value is case-sensitive. McAfee® Network Security Platform 6.0 Adding a Sensor Note: If you to verify the value. Essentially, the Manager knows the Sensor by a specific set sensor sharedsecretkey The Sensor then prompts you want to change , and then re-establish the...
Installation Guide
Page 66
...Note: See your TFTP server documentation for more information, see Updating the software on a Sensor, Device Configuration Guide. for specific instructions on how to download the image to your TFTP server, upload the image from the "Software Available for Sensor: ...5 Once the image is compressed in the "Software Available for more information, see the Upgrade Guide. Update a single Sensor; McAfee® Network Security Platform 6.0 Configuring the Update Server Software on the Manager: the software versions that have been downloaded to update the Sensors through...
...Note: See your TFTP server documentation for more information, see Updating the software on a Sensor, Device Configuration Guide. for specific instructions on how to download the image to your TFTP server, upload the image from the "Software Available for Sensor: ...5 Once the image is compressed in the "Software Available for more information, see the Upgrade Guide. Update a single Sensor; McAfee® Network Security Platform 6.0 Configuring the Update Server Software on the Manager: the software versions that have been downloaded to update the Sensors through...
Installation Guide
Page 72
To turn off the Deploy at Scheduled Interval at any time after it , return to desired interval specifications. McAfee® Network Security Platform 6.0 1 Select Manager > Update Server > Automation. No is the default. No is the default. To turn off the Deploy in Real-time at any time after ...
To turn off the Deploy at Scheduled Interval at any time after it , return to desired interval specifications. McAfee® Network Security Platform 6.0 1 Select Manager > Update Server > Automation. No is the default. No is the default. To turn off the Deploy in Real-time at any time after ...