Product Guide
Page 5
Preface This guide provides the information you need to configure, use the computer where the software is intended primarily for the target audience. The information in the user interface including ... using a hardware product. the path of a folder or program. Warning: Critical advice to a website. Audience McAfee documentation is organized. Important/Caution: Valuable advice to protect your McAfee product. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 5 Code A code sample. Conventions This guide uses the following typographical conventions and ...
Preface This guide provides the information you need to configure, use the computer where the software is intended primarily for the target audience. The information in the user interface including ... using a hardware product. the path of a folder or program. Warning: Critical advice to a website. Audience McAfee documentation is organized. Important/Caution: Valuable advice to protect your McAfee product. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 5 Code A code sample. Conventions This guide uses the following typographical conventions and ...
Product Guide
Page 7
McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 7 When deployed at wire speed, efficiently inspect and detect intrusions with a high degree of accuracy, and flexible enough to adapt to respond with the Manager is described in particular. The process of configuring a Sensor and establishing communication with countermeasures if an attack is detected. For the...
McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 7 When deployed at wire speed, efficiently inspect and detect intrusions with a high degree of accuracy, and flexible enough to adapt to respond with the Manager is described in particular. The process of configuring a Sensor and establishing communication with countermeasures if an attack is detected. For the...
Product Guide
Page 8
... alerts and packet logs, resetting TCP connections, "scrubbing" malicious packets, and even blocking attack packets entirely before they reach the intended target. In the illustration, McAfee® Network Security Platform (formerly McAfee® IntruShield®) provides IPS protection to protect your network to its configured policy. Figure 1-1 A sample Network Security Platform deployment 8 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
... alerts and packet logs, resetting TCP connections, "scrubbing" malicious packets, and even blocking attack packets entirely before they reach the intended target. In the illustration, McAfee® Network Security Platform (formerly McAfee® IntruShield®) provides IPS protection to protect your network to its configured policy. Figure 1-1 A sample Network Security Platform deployment 8 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
Product Guide
Page 10
...the Sensor through a switch or router. 10 One RJ-45 10/100/1000 Management port, which may be used to dial in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. The supply uses a standard IEC port (IEC320-C13). This power supply also uses... enable you need to set up and configure the Sensor. 5 Six RJ-11 Fail-Open Control ports, designed for the health of the M-3050/M-4050 work in tap mode. The following table describes the M-3050/M-4050 front panel LEDs. 10 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
...the Sensor through a switch or router. 10 One RJ-45 10/100/1000 Management port, which may be used to dial in the McAfee Network Security Platform Device Administration Guide. 8 One External Compact Flash port. The supply uses a standard IEC port (IEC320-C13). This power supply also uses... enable you need to set up and configure the Sensor. 5 Six RJ-11 Fail-Open Control ports, designed for the health of the M-3050/M-4050 work in tap mode. The following table describes the M-3050/M-4050 front panel LEDs. 10 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide
Product Guide
Page 17
...attach two mounting ears and rails to the Sensor as described in a physically secure location, close to the switches or routers it will be located within a standard communications rack. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 17 Contents Setup overview How to position the... the following steps: 1 Positioning the Sensor. 2 Installing interface modules (SFP and XFP). 3 Attaching power, network, and monitoring cables. 4 Powering on the Sensor. 5 Configuring the Sensor after you have set up and powered it on the chassis, make sure that the power is off...
...attach two mounting ears and rails to the Sensor as described in a physically secure location, close to the switches or routers it will be located within a standard communications rack. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 17 Contents Setup overview How to position the... the following steps: 1 Positioning the Sensor. 2 Installing interface modules (SFP and XFP). 3 Attaching power, network, and monitoring cables. 4 Powering on the Sensor. 5 Configuring the Sensor after you have set up and powered it on the chassis, make sure that the power is off...
Product Guide
Page 19
... Do not operate the Sensor without the faceplate panel in place. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 19 Figure 3-1 Rail release latch Redundant power supply A basic configuration of the appliance, McAfee recommends that two people remove the chassis from the rack, pull ...will have one hot-swappable supply. Figure 3-2 Power supply units Install the power supply Task 1 Unpack the power supply from McAfee. On each side of these modules have to purchase this redundant power supply separately from its shipping carton. 2 Remove the ...
... Do not operate the Sensor without the faceplate panel in place. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 19 Figure 3-1 Rail release latch Redundant power supply A basic configuration of the appliance, McAfee recommends that two people remove the chassis from the rack, pull ...will have one hot-swappable supply. Figure 3-2 Power supply units Install the power supply Task 1 Unpack the power supply from McAfee. On each side of these modules have to purchase this redundant power supply separately from its shipping carton. 2 Remove the ...
Product Guide
Page 25
...8 None 1 None 3 Power on the Sensor. This port is used to the console for initial configuration. Required settings for example, a PC running the correctly configured Windows HyperTerminal software. Contents Cable the Console port Cable the Auxiliary port Connect the cable to the Response...the Monitoring ports Connect the cables for in this chapter to connect the cables to configure the Sensor, for HyperTerminal are: Name Baud rate Number of your Sensor. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 25 Task 1 For console connections, plug the DB9...
...8 None 1 None 3 Power on the Sensor. This port is used to the console for initial configuration. Required settings for example, a PC running the correctly configured Windows HyperTerminal software. Contents Cable the Console port Cable the Auxiliary port Connect the cable to the Response...the Monitoring ports Connect the cables for in this chapter to connect the cables to configure the Sensor, for HyperTerminal are: Name Baud rate Number of your Sensor. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 25 Task 1 For console connections, plug the DB9...
Product Guide
Page 26
... the standard 10 Gigabit (Optical) Fail-open Bypass Kit, which you configure a Sensor. Task 1 For modem connections, plug a straight-through which is sold separately. Cable the Management port The Management (Mgmt) port is for communication with the Manager server. 26 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 4 Attaching Cables to the Sensor...
... the standard 10 Gigabit (Optical) Fail-open Bypass Kit, which you configure a Sensor. Task 1 For modem connections, plug a straight-through which is sold separately. Cable the Management port The Management (Mgmt) port is for communication with the Manager server. 26 McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 4 Attaching Cables to the Sensor...
Product Guide
Page 27
... 4A and 4B (SFP) 5A and 5B (SFP) 6A and 6B (SFP) You cannot configure, for example, IA and 2A to work together as a hub, switch, or a router that in pairs to the network device, such as a pair. About connecting cables to the Monitoring ports Connect to the...ports and SFP Gigabit Ethernet ports are wired in turn connects to monitor through the Sensor monitoring ports. Figure 4-1 Using peer ports McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 27 Attaching Cables to the Sensor About connecting cables to interconnect the Sensors and the Manager. The ...
... 4A and 4B (SFP) 5A and 5B (SFP) 6A and 6B (SFP) You cannot configure, for example, IA and 2A to work together as a hub, switch, or a router that in pairs to the network device, such as a pair. About connecting cables to the Monitoring ports Connect to the...ports and SFP Gigabit Ethernet ports are wired in turn connects to monitor through the Sensor monitoring ports. Figure 4-1 Using peer ports McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 27 Attaching Cables to the Sensor About connecting cables to interconnect the Sensors and the Manager. The ...
Product Guide
Page 33
.... The Sensor ports have been disconnected. The system fault The control cable has been "Switch absent" appears disconnected. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 33 LED is disconnected. Sensor is operational but is off . Runts or giants errors...the Bypass Switch. Check the control cable and make sure they are properly connected to both the network devices and the bypass switch. configuration. Network device cables have not been enabled in the Manager. Sensor is operational but is powered off ....
.... The Sensor ports have been disconnected. The system fault The control cable has been "Switch absent" appears disconnected. McAfee® Network Security Platform M-3050/M-4050 Sensor Product Guide 33 LED is disconnected. Sensor is operational but is off . Runts or giants errors...the Bypass Switch. Check the control cable and make sure they are properly connected to both the network devices and the bypass switch. configuration. Network device cables have not been enabled in the Manager. Sensor is operational but is powered off ....
Quick Start Guide
Page 1
...up and activate your McAfee® Network Security Platform [formerly McAfee® IntruShield®] M-3050/M-4050 Sensor in in this Quick Start Guide is found on the McAfee Service Portal. sold ...configure the Sensor to drop attacks before they reach their target. The Sensor front panel 1 Power supply A (included) 6 SFP Gigabit Ethernet Monitoring ports (8) 2 Power supply B (optional; Sensor setup overview This section explains how to position and cable the various ports of your Sensor. M-3050/M-4050 Sensor Quick Start Guide Revision A McAfee® Network Security Platform...
...up and activate your McAfee® Network Security Platform [formerly McAfee® IntruShield®] M-3050/M-4050 Sensor in in this Quick Start Guide is found on the McAfee Service Portal. sold ...configure the Sensor to drop attacks before they reach their target. The Sensor front panel 1 Power supply A (included) 6 SFP Gigabit Ethernet Monitoring ports (8) 2 Power supply B (optional; Sensor setup overview This section explains how to position and cable the various ports of your Sensor. M-3050/M-4050 Sensor Quick Start Guide Revision A McAfee® Network Security Platform...
Quick Start Guide
Page 3
...terminal server you cannot configure the Sensor remotely. 3 you will be using to a COM port of the cable into the Console port (labeled Console on the Sensor front panel). c Plug the DB9 Console cable supplied in the Sensor box into the network device connected to the... console for example, a PC running correctly configured Windows HyperTerminal software). a Plug a Category 5e Ethernet cable in the Sensor's Monitoring ports. 2 Cabling the Management...
...terminal server you cannot configure the Sensor remotely. 3 you will be using to a COM port of the cable into the Console port (labeled Console on the Sensor front panel). c Plug the DB9 Console cable supplied in the Sensor box into the network device connected to the... console for example, a PC running correctly configured Windows HyperTerminal software). a Plug a Category 5e Ethernet cable in the Sensor's Monitoring ports. 2 Cabling the Management...
Quick Start Guide
Page 5
...not require a license file to Device List | Add-On Licenses page. b Click Configure. d To add a Sensor in McAfee Network Security Platform Installation Guide and the Network Security Platform Release Notes. c Go to McAfee Update Server and log on to the Manager The Manager displays the Login ID page.... Manager version 5.1.17.2 or above, and 6.0.7.x or above. 6 Adding the Sensor to the Manager. For more information, see McAfee Network Security Platform Device Administration Guide. d Go to the target Windows server and extract the setup file. You do not require a license file ...
...not require a license file to Device List | Add-On Licenses page. b Click Configure. d To add a Sensor in McAfee Network Security Platform Installation Guide and the Network Security Platform Release Notes. c Go to McAfee Update Server and log on to the Manager The Manager displays the Login ID page.... Manager version 5.1.17.2 or above, and 6.0.7.x or above. 6 Adding the Sensor to the Manager. For more information, see McAfee Network Security Platform Device Administration Guide. d Go to the target Windows server and extract the setup file. You do not require a license file ...
Quick Start Guide
Page 6
... Sensor. Use the same name and key values set earlier. This value is displayed. The first time you configure the Sensor, you must contain between 8 and 25 characters, is case-sensitive, and can type a question mark... Sensor prompts you to establish secure communication with the Manager. For a list of any time during configuration, you for the old password. e Enter information in Add New Device page, see McAfee Network Security Platform Device Administration Guide. 7 Configuring Sensor information Configuring the Sensor involves specifying network information, a name, and the...
... Sensor. Use the same name and key values set earlier. This value is displayed. The first time you configure the Sensor, you must contain between 8 and 25 characters, is case-sensitive, and can type a question mark... Sensor prompts you to establish secure communication with the Manager. For a list of any time during configuration, you for the old password. e Enter information in Add New Device page, see McAfee Network Security Platform Device Administration Guide. 7 Configuring Sensor information Configuring the Sensor involves specifying network information, a name, and the...
Quick Start Guide
Page 7
...include hyphens, underscores, and periods, and must manually enter the complete command syntax. Type: reboot. If not, type show to verify your configuration settings to this will automatically prompt you to establish a trust relationship between 8 and 25 characters of any ASCII text. This value is a...an IP address using four octets separated by periods: X.X.X.X, where X is not on the network. At the prompt, type: ping . The secret key value can take up to determine if your configuration settings and check that the information is case-sensitive. The shared key value is correct....
...include hyphens, underscores, and periods, and must manually enter the complete command syntax. Type: reboot. If not, type show to verify your configuration settings to this will automatically prompt you to establish a trust relationship between 8 and 25 characters of any ASCII text. This value is a...an IP address using four octets separated by periods: X.X.X.X, where X is not on the network. At the prompt, type: ping . The secret key value can take up to determine if your configuration settings and check that the information is case-sensitive. The shared key value is correct....
Quick Start Guide
Page 8
...be active. Perform the following steps to the Manager. a In the Sensor CLI, type: status. c From the Manager Home page, click Configure to establish communication. l To exit the session, type exit. 8 Verify successful installation A handshake process begins between the Sensor and the Manager. ...k To verify the configuration information, type show. In the Manager Home page, view the Manager status in the System Health section. Check that all information is ...
...be active. Perform the following steps to the Manager. a In the Sensor CLI, type: status. c From the Manager Home page, click Configure to establish communication. l To exit the session, type exit. 8 Verify successful installation A handshake process begins between the Sensor and the Manager. ...k To verify the configuration information, type show. In the Manager Home page, view the Manager status in the System Health section. Check that all information is ...
Quick Start Guide
Page 9
... policies, you added. f Click Device List | Device_Name | Port Settings. g Click the button representing the ports on port settings, see Configuration Sensor monitoring and response ports, McAfee Network Security Platform Device Administration Guide. "Device_Name" indicates the name of the Sensor you can clone the policy and then customize it as described in the policy is ...
... policies, you added. f Click Device List | Device_Name | Port Settings. g Click the button representing the ports on port settings, see Configuration Sensor monitoring and response ports, McAfee Network Security Platform Device Administration Guide. "Device_Name" indicates the name of the Sensor you can clone the policy and then customize it as described in the policy is ...
Quick Start Guide
Page 10
...configuration mismatches between the Sensor and the network devices to ensure they are detected. c Having problems? Check your duplex and auto-negotiation settings on both devices to which it is actively monitoring connected segments and communicating with the Manager for administration and management operations. a Read McAfee Network Security Platform... Getting Started Guide for troubleshooting information. For detailed usage instructions, see McAfee Network Security Platform Device Administration Guide, or click ...
...configuration mismatches between the Sensor and the network devices to ensure they are detected. c Having problems? Check your duplex and auto-negotiation settings on both devices to which it is actively monitoring connected segments and communicating with the Manager for administration and management operations. a Read McAfee Network Security Platform... Getting Started Guide for troubleshooting information. For detailed usage instructions, see McAfee Network Security Platform Device Administration Guide, or click ...
Installation Guide
Page 4
...Network Security Platform fail-closed dongle specification 42 Console port pin-outs ...42 Auxiliary port pin-outs...42 Response port pin-outs ...43 Monitoring port pin-outs ...44 Configuring a Sensor...45 Configuration overview...45 Establish a Sensor naming scheme 45 Communication between the Sensor and the Manager 46 Configuring...Manager IP 51 Device Licenses ...52 Importing a Device License 52 Manually assigning a device license 53 Chapter 7 Configuring the Update Server 55 Specifying the Update Server authentication 55 Specifying a proxy server for Internet connectivity 56 Manually ...
...Network Security Platform fail-closed dongle specification 42 Console port pin-outs ...42 Auxiliary port pin-outs...42 Response port pin-outs ...43 Monitoring port pin-outs ...44 Configuring a Sensor...45 Configuration overview...45 Establish a Sensor naming scheme 45 Communication between the Sensor and the Manager 46 Configuring...Manager IP 51 Device Licenses ...52 Importing a Device License 52 Manually assigning a device license 53 Chapter 7 Configuring the Update Server 55 Specifying the Update Server authentication 55 Specifying a proxy server for Internet connectivity 56 Manually ...
Installation Guide
Page 5
... provides a brief introduction to contact McAfee Technical Support. Introducing McAfee Network Security Platform McAfee® Network Security Platform [formerly McAfee® Intrushield®] delivers the most comprehensive, accurate, and scalable Network Access Control (NAC), network Intrusion Prevention System (IPS) and Network Threat Behavior Analysis (NTBA) for... conventions: Convention Example Terms that you must type exactly are indicated using UPPER CASE. On the Configuration tab, click Backup. Type: setup and then press ENTER. It also provides information such as,...
... provides a brief introduction to contact McAfee Technical Support. Introducing McAfee Network Security Platform McAfee® Network Security Platform [formerly McAfee® Intrushield®] delivers the most comprehensive, accurate, and scalable Network Access Control (NAC), network Intrusion Prevention System (IPS) and Network Threat Behavior Analysis (NTBA) for... conventions: Convention Example Terms that you must type exactly are indicated using UPPER CASE. On the Configuration tab, click Backup. Type: setup and then press ENTER. It also provides information such as,...