Astaro Astaro Security Gateway 525 User manual

Operating Instructions
Astaro Security Gateway 525

Astaro Security Gateway 525 Operating Instructions
1. Foreword
We are pleased to welcome you as a new customer of our Astaro Security
Gateway hardware appliances.
To install and configure the hardware appliance you can use the following
documents:
ÌHardware Quick Start Guide: Connection to the system peripherals in a few
steps
ÌOperating Instructions: Notes on the security and commissioning of the
hardware appliance
ÌAdministration Guide: Installing and configuring the software appliance
The Hardware Quick Start Guide and the Security Notes are also delivered
in printed form together with the hardware appliance. You should read the
instructions carefully before using the hardware and keep them in a safe
place.
You may download all user manuals and additional documentation from the
support webpage at: astaro.com/support
2. Security symbols
The following symbol and its meaning appears in the Hardware Quick Start
Guide, Security Notes and in these Operating Instructions. Caution and
important note: If these notes are not correctly observed:
ÌThis is dangerous to life and the environment
ÌThe appliance may become damaged
ÌThe functions of the appliance will be no longer guaranteed
ÌShall be liable for damages arising from a failure to comply with the
security notes
3. Designed use
The hardware appliances are developed for use in networks. The Astaro
Security Gateway 525 model may be operated as a standalone appliance.
The hardware appliance can be used in commercial, industrial and residential
environments. The Astaro Security Gateway 525 model belongs to the
appliance group A.
The hardware appliance must be installed according to the current
installation notes. Otherwise the failure-free and safe operation cannot be
guaranteed. The EU declaration of conformity is available at the following
address:
Astaro GmbH & Co. KG - a Sophos company
Amalienbadstr. 41/Bau 52
76227 Karlsruhe
Germany

Astaro Security Gateway 525 Operating Instructions
4. CE labeling, FCC and approvals
The Astaro Security Gateway 525 appliance complies with FCC Class A, CE,
C-Tick, VCCI and UL.
Important note: For computer systems to remain CE and FCC compliant,
only CE and FCC compliant parts may be used. Maintaining CE and FCC
compliance also requires proper cable and cabling techniques.
5. Operating elements and connections
Astaro Security Gateway 525 (rev.4)
LED: power
hard disk
power fail
COM 10 x 10/100/1000 Base-TX ports
buzzer reset button
(power supply)
RAID hard disk system,
hot-swappable
redundant
power supply,
hot-swappable
fans
power switch
VGA
LED: total system power
LED: power supply
2 x USB

Astaro Security Gateway 525 Operating Instructions
Status indicated by LEDs
Front side
Power Green
HDD (Hard disk access) Green
Power fail Red
Back side
Total
system
power
Green Total system power, LEDs of both
power supplies are green
Red Reduced system power,
one defect power supply unit (LED is off)
LEDs on each Ethernet connector
Link LED Green
Constantly
1. The Ethernet port is receiving power.
2. Good linkage between the
Ethernet port and hub.
Off
1. The adapter and switch are
not receiving power.
2. No connection between
both ends of network.
3. Network drivers have not been
loaded or do not function correctly.
Activity
LED Yellow
Flashing
The adapter is sending or
receiving network data. The
frequency of the flashes varies
with the amount of traffic.
Off No activity
LCD and control keys
The Astaro Security Gateway 525 has an LCD and an operating unit with four
membrane keys. In the LCD, 16 characters per line can be displayed. The
display contains information on the hardware and specific system states in
three cycling views.
Welcome view:
After the security appliance has booted this message is displayed.
View 1:
Astaro Security Gateway version
type and RAM size
View 2:
CPU load (bar)
OS load (bar)
View 3:
Uptime
Network load (bar)
*** Astaro ***
Security Gateway
ASG ver. 8.000
CPU i686 1001 MB
Busy 27.0%
Load 0.0
10 days 01:43:17
Load 0.0

Astaro Security Gateway 525 Operating Instructions
Three actions can be executed with the membrane keys
ÌFactory reset: All settings are reset to the factory settings. The factory
reset function sets all of the configuration settings and options to their
original state. All data entered after the initial installation will be deleted,
including the HTTP proxy cache, the entire email queue, accounting and
reporting data, passwords, and uninstalled Up2Date packages.
The version of the software will not change. That is, all firmware and
pattern updates that have been installed will be retained.
ÌReboot machine: The security appliance is rebooted. The reboot action will
shut down the system completely and reboot.
ÌShut down: The security appliance is shut down. The shut down action
allows you to turn off the system, and allows you to cleanly stop all
running services.
The keys have the following functions:
Exits the current menu. When you press the key a couple of times, the
modifications are discarded and the initial state will be displayed.
Use these keys to switch between the different menus and/or characters.
Pressing this key executes the configured action.
Starting factory reset
1. Press the Enter key.
2. Press the ▼ key.
The following message will be displayed: All data erased
3. Press the Enter key.
The following message will be displayed: Are you sure?
With the up/down keys you can select Yes (y) or No (n).
4. Press the Enter key to confirm your settings.
The factory reset action will now start.
Starting reboot machine
1. Press the Enter key.
2. Press twice on the ▼ key.
The following message will be displayed: Rebooting
3. Press the Enter key.
The following message will be displayed: Are you sure?
With the up/down keys you can select Yes (y) or No (n).
4. Press the Enter key to confirm your settings.
The reboot machine action will now start.

Astaro Security Gateway 525 Operating Instructions
Starting shut down
1. Press the Enter key.
2. Press on the ▼ key three times.
The following message will be displayed: Shutting down
3. Press the Enter key.
The following message will be displayed: Are you sure?
With the up/down keys you can select Yes (y) or No (n).
4. Press the Enter key to confirm your settings.
The shut down action will now start.
6. Putting into operation
Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose
of used batteries according to the instructions.
Scope of supply
The supplied parts are indicated in the Hardware Quick Start Guide.
Mounting instructions
The Astaro Security Gateway 525 appliance is designed for use in racks.
Please consider the following security hints:
Important note: The appliance is designed for use in rack systems. Functional
reliability outside of a rack cannot be guaranteed.
Warnings and precautions
The appliance can be operated safely if you observe the following notes and
the notes on the appliance itself.
Rack precautions
ÌMake sure that the leveling jacks on the bottom of the rack are fully
extended to the floor with the full weight of the rack resting on them.
ÌIn single rack installation, stabilizers should be attached to the rack.
ÌIn multiple rack installations, the racks should be coupled together.
ÌAlways make sure the rack is stable before extending a component from
the rack.
ÌYou should extend only one component at a time—extending two or more
simultaneously may cause the rack to become unstable.

Astaro Security Gateway 525 Operating Instructions
General server precautions
ÌReview the electrical and general safety precautions that came with the
components you are adding to your appliance.
ÌDetermine the placement of each component in the rack before you install
the rails.
ÌInstall the heaviest server components on the bottom of the rack first, and
then work up.
ÌAllow hot plug hard drives and power supply modules to cool before
touching them.
ÌAlways keep the rack‘s front door, all panels, and server components
closed when not servicing to maintain proper cooling.
Rack mounting considerations
ÌAmbient operating temperature: If installed in a closed or multi-unit rack
assembly, the ambient operating temperature of the rack environment
may be greater than the ambient temperature of the room. Therefore,
you should install the equipment in an environment compatible with the
manufacturer’s maximum rated ambient temperature.
ÌReduced airflow: Equipment should be mounted into a rack so that
airflow required for safe operation is not blocked.
ÌMechanical loading: Equipment should be mounted into a rack so that a
hazardous condition does not arise due to uneven mechanical loading.
ÌCircuit overloading: Follow the equipment nameplate ratings to avoid
possible circuit overload.
ÌReliable grounding: Reliable grounding must be maintained at all times.
To ensure this, the rack itself should be grounded. Particular attention
should be given to power supply connections other than the direct
connections to the branch circuit (i.e., the use of power strips, etc.).

Astaro Security Gateway 525 Operating Instructions
Rack mounting instructions
To mount the appliance to the rack you need the delivered rack-mount
brackets and rails. There are a variety of rack units on the market, which may
mean the assembly procedure will differ slightly. You should also refer to the
installation instructions that came with the rack unit you are using.
Because of its dimension and weight the model Astaro Security Gateway
525 is delivered with a special rail kit. The chassis package includes two rail
kits. Each kit consists of two sections: a short inner rail and a long outer rail.
The inner rail has six round holes and two fastenings. The outer rail has long
ovals.
Important note: Make sure you use the screws supplied with the rack-mount
brackets. Using the wrong screws could damage the hardware appliance and
would invalidate your warranty.
1. Attach the rack-mount brackets to the appliance
1.1 Place the appliance on a hard flat surface with the front panel facing you.
1.2 Attach the rack-mount brackets to the left and right side of the appliance
with the supplied screws.
1.3 Make sure the brackets are properly attached to the appliance.
Important note: The rails for Astaro Security Gateway 525 will fit a rack of
600 mm/23.6” deep.
2. Choose the rack location:
Leave enough clearance in front of the rack so that you can open the front
door completely (~60 cm/25 inches).
Leave approximately 80 cm/30 inches of clearance in the back of the rack to
allow for sufficient airflow and ease in servicing.
This product is for installation only in a restricted access location (dedicated
equipment rooms, service closets and the like).
3. Install the rails to the rack
3.1 Telescope the inner and the outer rail.
3.2 Secure the inner rail at the back side of the rack with the fastenings.
3.3 Pull the outer rail from the inner rail.
3.4 Secure the front of the outer rail to the rack with the triplex perforated
washer and three M5 rack screws.
3.5 Secure the inner rail to the outer rail with M5 screws.
3.6 Secure the inner rail at the back of the rack with a M5 screw.
3.7 Repeat these steps for the other rail kit.
4. Slide the appliance into the rack.
5. Attach the brackets to the rack with the appropriate screws (not
included).

Astaro Security Gateway 525 Operating Instructions
Connection and configuration
How to connect the appliance is described in the Hardware Quick Start
Guide. For configuration you can follow the initial setup wizard described in
the WebAdmin Quick Start Guide or cancel it and perform a manual setup
(see the Astaro Security Gateway Administration Guide).
7. RAID hard disk system
The Astaro Security Gateway 525 is equipped with a RAID system with
two hard disks. A RAID system (redundant array of independent disks)
connects several physical hard disks to one particularly performing logical
drive. This type of hard disk system enhances the transfer rate and data
security. Additionally, a RAID system increases the availability of the security
appliance since a defective hard disk can easily and quickly be exchanged—it
is not necessary to shut down the system.
The RAID system can be monitored via the graphical user interface
WebAdmin. The current status of the RAID system is displayed on the
dashboard in the RAID status section. In addition to that, a corresponding
notification email is sent to the administrator in the event of a defect in a
hard disk.
Important note: If you need to change a hard disk because of a defect,
remember to remove the defective hard disk from the RAID system,
otherwise the complete security appliance will fail. Please note that the safe
operation of the hardware appliance is only ensured in the long term if both
hard drives are working. Immediately exchange damaged hard drives. Only
use hard disks which you purchased directly from Sophos or from a Sophos
distribution partner. Please remember that any warranty claims are voided
for the appliance if a defect has been caused by the use of hard disks which
are not suited for the system.
Exchanging the hard disk
1. Identify the defective hard disk.
In the event of a hardware defect, the dashboard of the WebAdmin user
interface will display the defective hard disk: e.g., HDD1 (right hard disk).
2. Use the included key to open the hard disk latch.
3. Unlock the hard disk by pushing the latch to the left and pulling the
lever in your direction.
4. Remove the hard disk from the chassis.
5. Now, insert the new hard disk into the chassis.
6. Lock the hard disk by pushing the lever in the direction of the
chassis. Lock the latch at the hard disk.

Astaro Security Gateway 525 Operating Instructions
Important note: Except for short periods of time (e.g., swapping hard disks),
do not operate the server with an empty hard disk drive.
As soon as the security appliance detects the new hard disk, the existing
hard disk is mirrored to the new hard disk. This process may take 30
minutes or more. The current status of the RAID system is displayed on
the dashboard in the RAID status section. Prior to and after termination of
the saving process, a corresponding notification email will be sent to the
administrator.
8. Redundant power supply
The Astaro Security Gateway 525 is equipped with a redundant power
supply. The power supply system consists of two separate power supply
units. This power supply system increases the availability of the security
appliance, since a defective power supply unit can be exchanged easily and
quickly during operation.
When the system is running error-free, the power fail LED on the front
doesn't light and the LED on the back of the appliance shows green. In the
event of a hardware defect in one of the power supply units these LEDs will
turn red and you will hear a continuous beeping sound. The warning sound
can be reset by pressing the red buzzer reset switch on the system chassis.
This buzzer reset switch is on the back of the appliance right beside the
power supply system.
Important note: If you need to change a power unit because of a defect,
remember to remove the defective power unit from the power supply
system, otherwise the whole security appliance will fail.
Protect yourself from potential burns by wearing protective gloves when
exchanging a power supply unit.
Only use power units which you purchased directly from Sophos or from a
Sophos distribution partner. Please remember that any warranty claims are
voided for the security appliance if a defect has been caused by the use of
power units which are not suited for the system.

Astaro Security Gateway 525 Operating Instructions
Exchanging the hard disk
1. Identify the defective hard disk.
In the event of a hardware defect, the dashboard of the WebAdmin user
interface will display the defective hard disk: e.g., HDD1 (right hard disk).
2. Use the included key to open the hard disk latch.
3. Unlock the hard disk by pushing the latch to the left and pulling the
lever in your direction.
4. Remove the hard disk from the chassis.
5. Now, insert the new hard disk into the chassis.
6. Lock the hard disk by pushing the lever in the direction of the
chassis. Lock the latch at the hard disk.
9. SFP GBIC port
The Astaro Security Gateway 525 is equipped with SFP GBIC ports. The
abbreviation SFP GBIC stands for small form-factore plugable GigaBit
interface converter, a flexible interface which changes electronic signals into
optical signals. The converters used with the appliance are often also called
Mini-GBIC or New GBIC.
To use SFP GBIC ports, you will need the appropriate SFP GBIC modules.
These modules are not delivered with the appliance. There are different
module types. The required type is determined by the existing network. The
following SFP GBIC module types may be used:
Ì1000 Base-T
IEEE 802.3 - 1 Gbit/s via Ethernet cable. An Ethernet cable category 5
covers a maximum distance about 100 meters.
Ì1000 Base-SX
IEEE 802.3 - 1 Gbit/s via fiberglass. Multi-mode fiberglass cables (MMF)
cover a distance of 200 m to 550 m.
Ì1000 Base-LX
IEEE 802.3 - 1 Gbit/s via fiberglass. Here, exclusively singlemode-fiber
glass is used. This transmission option covers approximately 10 km.
Caution: The SFP GBIC ports use lasers to transmit signals over fiber optic
cable. The lasers are compliant with the requirements of a Class 1 Laser
equipment and are inherently eye-safe in normal operation. However, you
should never look directly at a transmit port when it is powered on.

Astaro Security Gateway 525 Operating Instructions
United Kingdom Sales:
Tel: [phone]
Email: [email protected]
North American Sales:
Toll Free: 1-866-866-2802
Email: [email protected]
Australia & New Zealand Sales
Tel: [phone]
Email: [email protected]
Boston, USA | Oxford, UK
© Copyright 2012. Sophos Ltd. All rights reserved.
All trademarks are the property of their respective owners.
Sophos Operating Instructions 02.12v1.dNA
Installing a SFP GBIC module
Please read the operation manual to the SFP GBIC module. Carefully insert
the SFP GBIC module into the port until it engages.
The interface is immediately ready for use.
Removing a SFP GBIC module
1. Remove the fiberglass cable from the module you wish to remove.
2. Remove the module carefully from the port.
Depending on when you purchased your SFP GBIC module, it may have
any of three different release mechanisms: a plastic tab on the bottom of
the mini-GBIC, a wire bail, or a plastic collar around the mini-GBIC.
Please read the operation manual to the SFP GBIC module.
10. Serial console
You can connect a serial console to the COM port of the Astaro Security
Gateway hardware appliances. You can use, for instance, the Hyperterminal
terminal program included with most versions of Microsoft Windows to log
on to the appliance console. Use the provided RJ45 to DB9 adapter cable to
connect the console to your hardware appliance.
The required connection settings are:
Bits per second: 38,400, Data bits: 8, Parity: N (none), Stop bits: 1. Access
via the serial console is activated by default on ttyS1. The connections of
the appliances and the respective functionality are listed in the chapter
"Operating Elements and Connections."