Broadcom Symatec SA-S500 User manual

12/18/20
Broadcom, the pulse logo, Connecting everything, Avago Technologies, Avago, the A logo, Symantec, the Symantec logo, the Checkmark logo, Blue Coat, and the Blue Coat
logo are among the trademarks of Broadcom and/or its affiliates in the United States, certain other countries, and/or the EU. Copyright © 2020 Broadcom. All Rights Reserved.
The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. For more information, please visit www.broadcom.com.
1 — Unpack the Appliance
Unpack the shipping package for the appliance and verify it
includes the following contents:
SA-S500 appliance
(2) AC power cords
Null-modem serial cable
Grounding Hardware
Two/four-post slide-rail kit
Accessing Appliance Documentation
Software License Agreement
Hardware Warranty Information
2 — Connect Cables
It is recommended that you plug in cables, verify LEDs, and
configure and license the appliance before mounting it in a
rack. Make sure the appliance is on a flat, level surface
when performing the initial configuration. If you would rather
mount the appliance before performing configuration tasks,
skip to Section 6 — Mount the Appliance.
The following procedure describes a typical deployment for
a single SA-S500-10-CM appliance capturing from a single
SPAN/TAP switch (as shown in the above illustration). For
information on deployments with other SA-S500 appliances,
or configurations with multiple appliances or multiple SPAN/
TAP switches, see the Security Analytics documentation,
available at: techdocs.broadcom.com
NOTE: Network cables are not included with the appliance.
Make sure to use only straight-through Ethernet cables.
Category 5E cables or better are recommended for
1000Base-T operation. Category 6A cables are
recommended for 10GBase-T operation.
To deploy the appliance and connect cables:
1. Remove the End User License Agreement (EULA) sticker
from the anti-static bag included with the appliance. By
removing the sticker and installing the product, you are
agreeing to the terms and conditions of the EULA.
2. Connect an Ethernet cable to the appliance’s LAN 1:0
port and connect the other end to the SPAN or TAP
switch. The appliance auto-negotiates 100/1000/
10GBase-T speed and duplex settings.
3. Connect an Ethernet cable to the appliance’s MGMT 0:0
port and connect the other end of the cable to the
management network switch.
4. Connect the included null-modem cable to the appliance’s
DB9 serial port and connect the other end to a serial
terminal or workstation with terminal emulation software.
The serial connection is used to perform the appliance’s
initial configuration.
5. Attach the lug-equipped end of the included grounding
wire (10 AWG) to both grounding studs on the appliance,
securing it with the star washers and M5 nuts. Attach the
other end of the grounding wire to a proper earth-ground.
6. Connect the included AC power cords to the appliance’s
power inlets and connect the other ends of the power
cords to a 120V or 200V power source.
Security Analytics Deployment
PS 2
PS 1
IOIOI SYS MGMT 0:0
BMC MGMT
1: 2:
3:
4:
5:
6:
7:
Serial
Terminal Management
Workstation
MGMT
Switch
SPAN / Tap
INTERNETLAN
eth0
MGMT
(0:0)
Serial
Port
PSU1
PSU2
eth1
LAN
(1:0)
WAN
Router
LAN
Switch
SA-S500-10-CM
Deployment
Security Analytics Quick Start Guide
SA-S500 Appliance

SA-S500 Series
2
Security Analytics
Quick Start Guide
SA-S500 Appliance Configurations
The SA-S500 is available in the following appliance
configurations with the indicated port enumerations.
3 — Power On the Appliance and
Verify LEDs
To verify the appliance is operational:
1. Confirm the appliance’s power cords are securely
connected to a power source.
2. If the appliance does not automatically power on, press
the rear soft power switch.
NOTE: The state of the appliance’s soft power switch
(on or off) is retained when power is removed. This may
necessitate pressing the power switch when reapplying
power to the appliance.
3. As the appliance boots, verify the following:
The power LED turns amber.
Near the end of the boot cycle, the Power LED
alternates between amber and green, indicating an
unconfigured state.
After the boot cycle has completed, the LCD panel
displays information about the appliance, such as
model, serial number, and IP address, which can be
scrolled with the front-panel arrows.
Following the initial configuration and licensing, the
Power LED turns green.
During operation, the front-panel status LEDs indicate the
following states:
4 — Perform the Initial
Configuration
You must have the following network information to initialize
the appliance:
To perform the initial configuration for the appliance:
1. Confirm the appliance’s DB9 serial port is connected to
a serial terminal or workstation with terminal software.
2. Open a terminal emulation program, such as Microsoft
HyperTerminal®, PuTTY, Tera Term, or ProComm™,
and configure it to use the following settings:
LED Color Description
Power
Status
Off Powered off or no power present
Amber Booting
Amber/green
alternating
Not yet initialized
Green Powered on and configured
System
Status
Off Powered off or no power present
Green Normal
Amber System fault or not yet licensed
Amber blinking Critical fault
 Appliance IP address  Subnet mask
 Primary DNS server IP
address
 Link settings (speed and
duplex)
 Default Gateway IP address  Admin ID and password
Baud rate: 9600 bps Data bits: 8
Parity: none Stop bits: 1
Flow control: none

SA-S500 Series
3
Security Analytics
Quick Start Guide
3. Power on the appliance (if it is not already powered on)
and log in to the command-line interface (CLI) with
default credentials: admin | Solera
4. Configure the management IP address, netmask, and
gateway with the following CLI command, specifying the
netmask in dotted-decimal format (255.255.255.0):
sudo cfg _ bond _ interface.py -i eth0 -n
<IP>/<netmask> -g <gateway>
5. When prompted, enter the sudo password: Solera
6. Open a browser, navigate to the address just specified,
and log in with default credentials: admin | Solera
7. When prompted, accept the EULA.
8. On the Initial Configuration page, configure the following:
hostname; IP address, mask, and default gateway; up to
three DNS servers; date, time, and time zone; interface
language; and root and admin passwords.
NOTE: For more information, see the Initial Settings
topic in the Security Analytics documentation, available
at: techdocs.broadcom.com
9. Click Save. If there are no errors, you are prompted to
license the appliance.
5 — License the Appliance
To license the appliance:
1. After completing the initial configuration, you are
prompted with the License Details dialog.
NOTE: You can also update or change an existing
license. To do so, select Menu > Settings > About and
then click License Details.
2. Retrieve your license key from the Broadcom Support
Portal (support.broadcom.com/security), as instructed in
the eFulfillment message from Broadcom.
3. If your appliance has Internet access, do the following:
Under Retrieve License, enter the License Key and
click Send Request.
If applicable, select the license type.
The appliance sends the license key and license seed
file to the Symantec license server, which generates the
license file (license.tgz) and returns it to the appliance,
which automatically reboots.
4. If your appliance does not have Internet access, do the
following:
Click Download DS Seed to download the seed file
(dsseed.tgz) to your workstation.
On a workstation with Internet access, go to:
license.soleranetworks.com
Type the appliance’s license key, upload dsseed.tgz,
and click Submit.
If applicable, select the license type and click Submit.
Save the license file (license.tgz) to the workstation.
Return to the License Details dialog, click Browse, and
select license.tgz. The license is uploaded and the
appliance automatically reboots.
5. Once the appliance has rebooted, select About >
License Details to verify the license.
6. Click Download to save an archive copy of the license
file (license.tgz). Store this file in a secure location that
is not on the appliance.
6 — Mount the Appliance
The slide-rail kit included with the appliance allows it to be
mounted in a 2- or 4-post equipment rack. The slide-rail kit
includes the following parts:
NOTE: Installation of the slide rails requires an M4 nut driver
or adjustable wrench and a #2 Phillips head screwdriver. If
you are working alone, a mechanical lift is also required.
NOTE: The following procedure documents how to install the
appliance in a 4-post equipment rack. For comprehensive
information on rack-mounting the appliance, including other
configurations, see the S-Series WebGuide , available at
techdocs.broadcom.com .
Rack Warnings and Precautions
CAUTION! Before mounting the appliance:
Power off the appliance and disconnect all cables.
Verify that the weight of the system does not exceed the
rack’s fully populated weight limit. For more information,
refer to the manufacturer’s instructions included with
the rack.
For weight stability, load the rack from the bottom up.
Inner Chassis Rail (2)
Rail Bracket A (2)
Rail Bracket C (2)
Rail Bracket B (4) (used only for 2-post racks)
M4x4L screws (4)
M4x5L screws/washers (4)
M6 rack screws/washers (8)
M6 cage nuts (8)

SA-S500 Series
4
Security Analytics
Quick Start Guide
Read the “Rack Mount Warnings” section of the Safety
and Compliance Guide.
Take adequate safety and grounding measures to avoid
creating an electrical shock hazard and to prevent
bodily injury.
The appliance is heavy. A two-person lift or mechanical
aid is recommended to lift the appliance from the carton
and install it in the rack.
Do not place objects on the appliance or use it as a
work surface. Its mounting hardware does not support
additional weight.
Attach the Chassis Rails to the Appliance
The slide-rail assemblies come pre-assembled with the
inner chassis rails inside the slide rails. The chassis rails
attach to the appliance chassis. The slide rails are installed
in the equipment rack.
To attach the chassis rails to the appliance:
1. Disassemble the two slide-rail assemblies:
Fully extend each slide rail by sliding out the chassis
rails until they reach the stop.
Press the release tab on the chassis rails and slide
them all the way out.
The chassis rails are symmetrical and can be attached
to either side of the chassis.
2. Attach the two chassis rails to the appliance:
Align each rail to the mounting posts on each side of the
chassis.
Slide the rail toward the rear of the chassis until the
mounting posts snap into place.
Secure each inner rail to the appliance with one M4x4L
screw.
3. Test the slide-rail release latches. They should move
smoothly in both directions with minimal effort.
4. Set the appliance aside in a safe location.
Install the Slide Rails in a 4-Post Rack
For installation in 4-post equipment racks, the slide rails use
the Bracket_A and Bracket_C assemblies.
To install the slide rails in a 4-post equipment rack:
1. Assemble the two slide rails:
Loosely attach Bracket_C to the Bracket_A assembly.
Secure the brackets with three M4x5L screws, inserted
through the slot in Bracket_C and screwed into three
holes in Bracket_A.
Make sure the screws are equidistant from each other
so the load will be evenly distributed on the rail. Do not
yet fully tighten the screws.
The precise attachment location of the side-mounting
screws will depend on how far Bracket_C will extend or
retract to fit the rack. It may be necessary to remove
Bracket_C from Bracket_A to determine the proper
installation length.
2. Install the assembled slide rails in the 4-post rack:
Secure Bracket_A to the outside front of the rack with
two M6 rack screws. Do not yet fully tighten the screws.
You will do so after the appliance is installed in the rack.
Extend or retract Bracket_C to align with the outside
rear of the rack. Secure the bracket with two M6 rack
screws. Do not yet fully tighten the screws. You will do
so after the appliance is installed in the rack.
Tighten the three side-mounting M4x5L screws,
securing Bracket_C to Bracket_A, for each slide rail.
Bracket_C
Bracket_A

SA-S500 Series
5
Security Analytics
Quick Start Guide
Broadcom reserves the right to make changes without further notice to any products or data herein to improve reliability, function, or design. Information furnished by Broadcom is believed to be accurate and reliable. However, Broadcom does not assume
any liability arising out of the application or use of this information, nor the application or use of any product or circuit described herein, neither does it convey any license under its patent rights nor the rights of others. (2020.12.18, 11:59:40)
3. Inspect the installed slide rails:
Verify the slide rails are even and installed at the same
level in the equipment rack.
Make sure the slide rails are free of defect and damage.
Make sure there is no debris in the slide rails.
Extend and retract the slide rails to verify smooth
operation and slide-stop operation.
Install the Appliance into the
Equipment Rack
To install the appliance in the equipment rack and verify
slide-rail operation:
1. Align the chassis rails attached to the appliance with the
slide rails in the rack and slide the appliance half-way
into the rack.
2. Press the release tabs on the chassis rails to slide the
appliance all the way into the rack.
3. Slide the appliance out of the rack, far enough to access
the rack screws. Fully tighten the M6 rack screws
securing the slide rails to the rack.
4. Verify the slide-rail operation:
Press the release tabs on the chassis rails to lock and
unlock the appliance in place.
Push and pull the appliance to verify smooth movement
across the entire slide range.
Carefully pull out the appliance all the way to verify the
slide-stop functionality.
5. Gently push the appliance all the way into the rack and
tighten the captive thumbscrews on the rack ears to
prevent the appliance from sliding out of the rack.
6. Verify the appliance is securely installed in the
equipment rack.
7. Reconnect the cables as documented in Section 2 —
Connect Cables and verify the appliance is functioning as
in Section 3 — Power On the Appliance and Verify LEDs.
7 — Next Steps
If your Security Analytics system includes external
storage, install the storage arrays per the instructions in
the SA-J5300 Quick Start Guide or SA-SM-48T Quick
Start Guide, available at: techdocs.broadcom.com
For additional configuration instructions for SA-S500
appliances—including cabling to storage arrays, and
RAID array settings for Capture and Indexing—see the
SA-S500 Configuration Guide, available at:
techdocs.broadcom.com
Locking tab
Symantec Technical Support
For Symantec technical support, case management,
licenses, and product downloads, go to
support.broadcom.com/security
Security Analytics Help and Documentation
For Security Analytics help, in the web UI select
Settings > Help > [language].
For Security Analytics software documentation, go to
techdocs.broadcom.com and type “Security” in the
search field, then click Security Analytics.
Appliance Documentation
For Symantec appliance documentation, go to
techdocs.broadcom.com and type “Appliances” in the
search field, then click Hardware Appliances.