Cisco M5 Manual

Cisco Threat Grid M5 Hardware Installation Guide
First Published: 2019-12-20
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
©2019 Cisco Systems, Inc. All rights reserved.

CONTENTS
Overview 1
CHAPTER 1
Features 1
Package Contents 3
Serial Number Location 4
Front Panel 5
Front Panel LEDs 6
Rear Panel 8
Rear Panel LEDs 9
Power Supply 10
Hardware Specifications 11
Product ID Numbers 11
Power Cord Specifications 12
Installation Preparation 21
CHAPTER 2
Installation Warnings 21
Safety Recommendations 23
Maintain Safety with Electricity 23
Prevent ESD Damage 24
Site Environment 24
Power Supply Considerations 25
Rack Configuration Considerations 25
Rack-Mount the Chassis 27
CHAPTER 3
Unpack and Inspect the Chassis 27
Rack-Mount the Chassis 28
Connect Cables, Turn on Power, and Verify Connectivity 30
Cisco Threat Grid M5 Hardware Installation Guide
iii

Maintenance and Upgrades 33
CHAPTER 4
Power Button Shut Down 33
Remove and Replace a Drive 34
Remove and Replace a Power Supply 36
Cisco Threat Grid M5 Hardware Installation Guide
iv
Contents

CHAPTER 1
Overview
•Features, on page 1
•Package Contents, on page 3
•Serial Number Location, on page 4
•Front Panel, on page 5
•Front Panel LEDs , on page 6
•Rear Panel, on page 8
•Rear Panel LEDs, on page 9
•Power Supply, on page 10
•Hardware Specifications, on page 11
•Product ID Numbers, on page 11
•Power Cord Specifications, on page 12
Features
A Cisco Threat Grid appliance provides safe and highly secure on-premises advanced malware analysis, with
deep threat analytics and content. Threat Grid Appliances provide the complete Threat Grid malware analysis
platform, installed on a single UCS server.
Many organizations that handle sensitive data, such as banks, health services, etc., must follow various
regulatory rules and guidelines that will not allow certain types of files, such as malware artifacts, to be sent
outside of the network for malware analysis. By maintaining a Cisco Threat Grid Appliance on-premises,
organizations are able to send suspicious documents and files to it to be analyzed without leaving the network.
The Cisco Threat Grid M5 appliance supports Threat Grid Version 3.5.27 and later, and appliance version
2.7.2 and later.
See Product ID Numbers, on page 11 for a list of the field-replaceable product IDs (PIDs) associated with
the Threat Grid M5 appliance. You can remove and replace drives and power supplies. For all other internal
component failures, you must send your chassis for return material authorization (RMA).
The following table lists the features of the Threat Grid M5.
Table 1: Threat Grid M5 Features
DescriptionFeature
1 RUForm factor
Cisco Threat Grid M5 Hardware Installation Guide
1

DescriptionFeature
Standard 19-in. (48.3 cm) 4-post EIA rackRack mount
Front to rear
Cold aisle to hot aisle
Airflow
Displays the serial numberPullout asset card
Two threaded holes for dual-hole grounding lug
Use is optional; the supported AC power supplies have internal grounding, so
no additional chassis grounding is required.
Grounding hole
YesUnit identification button
On front panelPower button
32-GB RAM
Internal component only; not field-replaceable
Memory
Two 16-GB DDR4-2400-MHz RDIMMs
Internal component only; not field-replaceable
RDIMMs
1 Gb Built-inManagement ports
2 1-Gb 1000Base-T, 2 10-Gb SFP+Network ports
Two
Version 3.0 Type A
USB ports
One 3-row 15-pin DB-15 connector
Enabled by default.
VGA port
Four fixed SFP+ ports
The two left SFP+ ports are not supported.
SFP ports
SFP-10G-LR (10 Gb)
SFP-10G-SR (10 Gb)
Only these two SFPs have been qualified for use on the Threat Grid
M5. Although other SFPs may work, we only support these two on
the Threat Grid M5.
Note
Supported SFP+
RJ45 serial port running RS-232 (RS-232D TIA-561)Serial console port
Two 770-W AC power supplies
Hot-swappable and redundant as 1+1
System power
2626 BTU/hrPower consumption
Cisco Threat Grid M5 Hardware Installation Guide
2
Overview
Features

DescriptionFeature
Six fans for front-to-rear cooling
Internal component only; not field-replaceable
Fans
Two 240-GB SATA SSDs in slots 1 and 2
Six 2.4-TB SAS HDDs in slots 3 though 8
RAID 1, hot-swappable
Storage
Package Contents
The following figure shows the package contents for the Threat Grid M5. Note that the contents are subject
to change and your exact contents might contain additional or fewer items.
Figure 1: Threat Grid M5 Package Contents
RJ-45 to DP9-RS232 console cable (Cisco part
number 72-3383-XX)
2Chassis1
USB dongle cable (Cisco part number
37-1016-xx)
4Cisco 1-RU rail kit (Cisco part number
800-43376-02)
3
Useful Links Cisco Threat Grid M5
The steps in the Useful Links document send you
to the documentation you need to install, set up,
and configure your Threat Grid M5.
6RJ-45 to RJ-45 Cat 5 Ethernet cable, yellow six
feet long (Cisco part number 72-1482-XX)
5
Cisco Threat Grid M5 Hardware Installation Guide
3
Overview
Package Contents

Two 10-Gb transceivers with cables7
Serial Number Location
The serial number (SN) for the Threat Grid M5 is printed on the pullout asset card located on the front panel
as shown in the following figure.
Figure 2: Serial Number on Pullout Asset Card
The serial number is also on the label on the cover of the chassis as shown in the following figure.
The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts
in the Threat Grid M5.
Caution
Cisco Threat Grid M5 Hardware Installation Guide
4
Overview
Serial Number Location

Figure 3: Serial Number Location on Cover
Cover latch
Not supported
2Serial number label1
Front Panel
The following figure shows the front panel features and disk-drive configuration for the Threat Grid M5. See
Front Panel LEDs , on page 6 for a description of the LEDs.
Figure 4: Threat Grid M5 Front Panel
Cisco Threat Grid M5 Hardware Installation Guide
5
Overview
Front Panel

Power button/power status LED2Drive bays
Supports two SATA SSDs in slots 1 and 2
Supports six SAS HDDs in slots 3 through 8
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
Keyboard, video, and mouse (KVM) port10Pullout asset card9
Front Panel LEDs
The following figure shows the front panel LEDs and describes their states.
Figure 5: Front Panel LEDs and Their States
Drive activity LED:
• Off—There is no drive in the
drive tray (no access, no fault).
• Green—The drive is ready.
• Green, flashing—The drive is
reading or writing data.
2Drive fault LED:
• Off—The drive is operating properly.
• Amber—Drive fault detected.
• Amber, flashing—The drive is rebuilding.
•Amber, flashing with 1-second interval—Drive locate
function activated in the software.
1
Cisco Threat Grid M5 Hardware Installation Guide
6
Overview
Front Panel LEDs