finjan NG-8000 User manual

Software Release 9.0
NG-8000
NG-5000
NG-6000
Setup and
Conguration Guide

Setup and Configuration Guide
Vital Security™ Appliance Series NG-5000/NG-6000/NG-8000 Setup and Configuration Guide
© Copyright 1996 - 2008. Finjan Software Inc. and its affiliates and subsidiaries (“Finjan”). All rights
reserved.
All text and figures included in this publication are the exclusive property of Finjan and are for your
personal and non-commercial use. You may not modify, copy, distribute, transmit, display, perform,
reproduce, publish, license, create derivative works from, transfer, use or sell any part of its content
in any way without the express permission in writing from Finjan. Information in this document is
subject to change without notice and does not present a commitment or representation on the part
of Finjan.
The Finjan technology and/or products and/or software described and/or referenced to in this
material are protected by registered and/or pending patents including U.S. Patents No. 3952315,
6092194, 6154844, 6167520, 6480962, 6209103, 6298446, 6353892, 6804780, 6922693,
6944822, 6993662, 6965968, 7058822, 7076469, 7155743, 7155744 and may be protected by
other U.S. Patents, foreign patents, or pending applications.
Finjan, Finjan logo, Vital Security, Vulnerability Anti.dote and Window-of-Vulnerability are
trademarks or registered trademarks of Finjan. Sophos is a registered trademark of Sophos plc.
McAfee is a registered trademark of McAfee Inc. Kaspersky is a registered trademark of Kaspersky
Lab. Websense® is a registered trademark of Websense, Inc. IBM® Proventia® Web Filter is a
registered trademark of IBM Corporation. Microsoft and Microsoft Office are registered trademarks
of Microsoft Corporation. All other trademarks are the trademarks of their respective owners.
For additional information, please visit www.finjan.com or contact one of our regional offices:
Catalog number: SACG-9.0-01
Email:[email protected]m
Internet:www.finjan.com
USA: San Jose
2025 Gateway Place Suite 180 San Jose,
CA 95110, USA
Toll Free: 1 888 FINJAN 8
Tel: [phone] Fax: [phone]
[email protected]
Europe: UK
4th Floor, Westmead House,
Westmead,
Farnborough, GU14 7LP, UK
Tel: [phone]
Fax: [phone]
[email protected]
USA: New York
Chrysler Building
405 Lexington Avenue, 35th Floor
New York, NY 10174, USA
Tel: [phone] Fax: [phone]
[email protected]
Europe: Germany
Alte Landstrasse 27, 85521
Ottobrun, Germany
Tel: [phone]
Fax: [phone]
[e-mail]
Israel/Asia Pacific
Hamachshev St. 1,
New Industrial Area Netanya, Israel 42504
Tel: [phone]
Fax: [phone]
[email protected]
Europe: Netherlands
Printerweg 56
3821 AD° Amersfoort
Netherlands
Tel: [phone]
Fax: [phone]
[e-mail]

Contents i
CONTENTS
1. Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Finjan Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
About This Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
2. Finjan Appliances. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Vital Security Appliance Series NG-8000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
NG-8000 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
NG-8000 Rear Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
NG-8000 Hardware Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Vital Security Appliance Series NG-6000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
NG-6000 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
NG-6000 Rear Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
NG-6000 Hardware Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Vital Security Appliance Series NG-5000. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
NG-5000 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
NG-5000 Rear Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
NG-5000 Hardware Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
3. Configuring the Vital Security Appliance . . . . . . . . . . . . . . . . . . . . . 17
Management Console System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Operating Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Software Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Connecting your Vital Security Appliance (NG-5000/6000/8000). . . . . . . . . . . . . . . 18
Limited Shell Connection Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Using an Ethernet Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Using a Serial Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Initial Setup of your Vital Security Appliance using Limited Shell. . . . . . . . . . 20
Initial Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Running the Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Limited Shell commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Limited Shell Configuration Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
access_list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
change_password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Setup and Configuration Guide
Contentsii
config_network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
config_time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
config_psweb . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
disable_service_snmpd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
disable_service_ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
enable_service_snmpd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
enable_service_ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
ethconf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
flush_dnscache. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
reset_config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Limited Shell Monitoring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
df . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
ifconfig. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
ip2name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
iptraf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
last . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
name2ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
netstat. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
poweroff. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
reboot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
restart_role. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
save_support_logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
show. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
show_config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
show_network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
show_service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51
show_dbsize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
show_route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .52
show_time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
supersh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
tcpdump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
top . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
uptime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

Setup and Configuration Guide
iii
Contents
vmstat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
w . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
wget. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
First Login to the Management Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Update Mechanism. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Installing Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Configuring Next Proxy for Updates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Configuring the Firewall for Automatic Updates . . . . . . . . . . . . . . . . . . . 58
Offline Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Routing Traffic through the Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Configuring Workstations for Routing Traffic through the Appliance . . . . . . . 59
Transparent Proxy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Working with HTTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
HTTP Proxies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Working with Caching Proxies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Downstream . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Upstream . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
HTTP Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Working with ICAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Why work with ICAP? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Vital Security as an ICAP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
REQMOD – RESPMOD Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
ICAP Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
4 . Configuring ICAP Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Network Appliance NetCache Series (NetApp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Blue Coat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
A Installation Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Installing your Vital Security Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Remote Installation on NG-8000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Post-Installation Bonding Script on NG-8000 . . . . . . . . . . . . . . . . . . . . . . . . . . 87
B. Post-Installation System Hardening . . . . . . . . . . . . . . . . . . . . . . . . . . 89
System Hardening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Policy Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Setup and Configuration Guide
Contentsiv
Management Access List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89
Management Console Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90
Default SNMP v2 Community String . . . . . . . . . . . . . . . . . . . . . . . . . . . .90
User Access to the Scanning Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90
Scanning Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91
Proxy IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91
Management Access List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91
Nortel Switches (Applicable only to NG-8000 Series). . . . . . . . . . . . . . . . . . . .92
Defaults SNMP Community String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92
Telnet and HTTP Access to the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . .92
Default User and password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Chapter 1 - Introduction 1
CHAPTER
I NTRODUCTION
1 Finjan Overview
Cyber-threats are fast increasing and pose a serious and growing problem for corporate
networks, appearing in different forms and using a variety of tactics – viruses, worms,
Trojans, and more. New, ultra-fast viruses can infect your system within seconds, long
before traditional signature-based solutions can protect you. While waiting for anti-virus
companies to release a new virus signature, thousands of unprotected computers may
have already been infected, leaving no alternative other than to shut down the corporate
network.
Finjan’s real-time web security solutions provide zero-hour protection against known and
unknown web attacks without requiring immediate signature or patch updates. Powered by
our Vital Security™ Web Appliances and utilizing patented real-time content inspection
technologies, Finjan’s proven security solutions effectively combat a wide array of web
threats, including Spyware, Phishing, Trojans, obfuscated malicious code and other types
of malware.
Finjan’s unique and patented proactive behavior-inspection technology at the gateway
offers instant protection against new virus, worm and malicious mobile code outbreaks
without time-sensitive signature-file updates, thus closing the Window-of-Vulnerability™
and providing networks with true zero-day protection. By detecting and stopping all such
attacks before they enter the corporate network, our solutions help to ensure continuous
business operations and save the time and money associated with security incidents.
Vital Security - Finjan’s Integrated Security Platform - is a complete and integrated
Secure Content Management solution in which individual best-of-breed security
applications work together in concert to respond proactively to the changing security
threats of both today and tomorrow.
Finjan's integrated “all-in-one” security appliances provide proactive, layered protection
against complex threats and vulnerabilities. Centralized management and reporting
enables IT managers to set organization-wide security policies, safeguard confidential data
and generate detailed reports as required for regulatory compliance.

Setup and Configuration Guide
Chapter 1 - Introduction2
2About This Manual
Chapter Description
Chapter 1 Finjan Overview - An introduction to Finjan's Vital
Security.
Chapter 2 Finjan Appliances - An introduction to Finjan's Vital
Security Appliances, including a brief description of the
Vital Security Appliances NG-8000/NG-6000/NG-5000.
Chapter 3 Getting Started – This chapter details everything you
need to know about getting started and lists the
necessary steps to be taken when installing and
working with your appliance.
This includes:
System requirements (hardware and software)
Information on supported protocols (HTTP and ICAP)
Configuration of end-user machines
Transparent proxy configuration
Connecting – describing the steps to be taken prior to
accessing the web-based Management Console. This
includes the Limited Shell.
Chapter 4 Configuring the ICAP Clients – This chapter discusses
configuration of Network Appliance (NetApp) and Blue
Coat
Appendix A Installation Details - using USB Disk-On-Key
Appendix B System Hardening (Post Installation)

Chapter 2 - Finjan Appliances 3
CHAPTER
F INJAN A PPLIANCES
This manual deals with the following Vital Security appliances:
NG-8000
NG-6000
NG-5000
Each Vital Security appliance is supplied with a default IP address, and can be remotely
accessed for initial setup by any PC in the same subnet. Vital Security uses a secure ssh
connection to a command-line interface for first time setup, as well as for https connection
for ongoing management.
1Vital Security Appliance Series NG-8000
This appliance is a specially configured chassis containing multiple hot swappable blades,
with redundant power supplies, disks, blowers and switches, etc. The Vital Security
Operating System (VSOS) is preinstalled and preconfigured.
The Vital Security Appliance NG-8000 is supplied as one or more separate blades. You
can assign system roles according to your requirements using each blade as a separate
server, or activate more than one service on a single blade.
NOTE: Pictures of appliances displayed in this chapter are for general reference
only and may differ from the specific appliances you receive.

Setup and Configuration Guide
Chapter 2 - Finjan Appliances4
Figure 2-1: NG-8000 Superformance Appliance
1.1 NG-8000 Front Panel
Figure 2-2: NG-8000 Front Panel
4
3
2
1
5678

Setup and Configuration Guide
5
Chapter 2 - Finjan Appliances
The following table describes the NG-8000 Front Panel:
No Description
1Information - When this amber LED is lit, a non-
critical event has occured that requires attention, such
as the wrong I/O module inserted in a bay or power
demands that exceed the capacity of power modules
currently installed.
2Over-temperature LED - When lit, has exceeded
the temperature limits, or a blade server reports an
over-temperature condition. The NG-8000 might
already have taken corrective action such as
increasing the blower speed. This LED turns off
automatically when there is no longer an over-
temperature condition.
3Location LED - When this blue LED is lit or flashing,
it has been turned on by the system administrator to
aid in visually locating the NG-8000 unit. If a blade
server requires attention, the location LED on the
blade server will usually also be lit. After the NG-8000
has been located, you can turn off the location LED.
4Power on LED - When this green LED is lit, the NG-
8000 is powered on. When the LED is off, the power
subsystem, the ac power, or the LED has failed, else
the management module is not present or not
functioning.
5System Error - When this amber LED is lit it
indicates that a system error has occured such as a
failed module or a system error in the blade server. An
LED on one of the components or on a blade server is
also lit to further isolate the problem.
6USB Connector
7DVD Drive
8Floppy Disk Drive

Setup and Configuration Guide
Chapter 2 - Finjan Appliances6
1.2 NG-8000 Rear Panel
Figure 2-3: NG-8000 Rear Panel
The following table describes the NG-8000 Rear Panel:
1234 56
7
8
9
10
11
12
13
14
15
No Description
Blower Module
1/15 Blower Error LED - This amber LED is lit and stays
lit when an error has been detected in the blower. The
system error LED on the NG-8000 system LED is also
lit.
Power Module
2Power Connector
3DC Power LED - When this LED is lit, the DC output
from the power module to the other components and
blade servers is present and within specifications.
During typical operation this LED is lit.

Setup and Configuration Guide
7
Chapter 2 - Finjan Appliances
1.3 NG-8000 Hardware Specifications
The following table contains the hardware specifications for the NG-8000 appliance:
4AC Power LED - When this LED is lit, AC input to
the power module is present and within specifications.
During typical operation this LED is lit.
Management Module
5Power on LED - When this green LED is lit, the
management module has power.
6Active LED - When this green LED is lit it indicates
that the managemnt module is actively controlling the
NG-8000.
7Management Module Error LED - When this
amber LED is lit it indicates that an error has been
detected somewhere on the management module. In
addition, when this LED is lit then the system error
LED on each of the NG-8000 system LED panels is
also lit.
8Ethernet Link LED - When this green LED is lit,
there is an active connection through the port to the
network.
9Network Port
10 Ethernet Activity LED - When this green LED is
flashing it indicates that there is activity through the
port over the network link.
11 Serial Connector
12 Mouse PS2 Connector
13 Keyboard PS2 Connector
14 IP Reset Button
Component Specification
Memory 2 GB
Hard Drive 73 GB SAS (Web appliance)
2 x 146 GB SAS ( RAID 1)
(Policy Server)
CPU Xeon D 2 x 2.0GHz
Gigabit Ethernet NIC 4
Rack Space (7U) 444 x 711.2 x 304.2 mm
(WxDxH)
17.5 x 28 x 12 inches (WxDxH)
Heat Output (max) Four 2000W power supplies
11111BTU (3256 W)
No Description

Setup and Configuration Guide
Chapter 2 - Finjan Appliances8
Environment Air Temperature: BladeCenter
unit on: 10°to 35°C (50°to
95°F), Altitude: 0 to 194m
(2998.69 ft)
BladeCenter unit on: 10°to
32°C (50°to 95°F), Altitude:
194m to 2134m (2998.69 to
7000ft)
BladeCenter unit off: -40°to
60°C (-40°to 140°F)
Humidity: Server on/off 8 % to
80%
Weight Fully configured with modules
and blades: approx 108.86 kg
(240 lb)
Fully configured without blades:
approx 44.91 kg (99lb)
Component Specification

Setup and Configuration Guide
9
Chapter 2 - Finjan Appliances
2Vital Security Appliance Series NG-6000
This appliance is typically deployed to include multiple appliances, each running the Vital
Security Operating System (VSOS). It can, however, also be deployed as an All-in-one,
using a single appliance.
The different services running on each appliance can be configured according to your
organization's network requirements.
Figure 2-4: NG-6000 Superformance Appliance
2.1 NG-6000 Front Panel
Figure 2-5: NG-6000 Front Panel
1234567 8 9 10

Setup and Configuration Guide
Chapter 2 - Finjan Appliances10
The following table describes the NG-6000 Front Panel:
No Description
1Power Control Button - Press this button to turn the
server on and off manually. A power control button shield
comes installed on the server to prevent the server from
being turned off accidentally.
2Power on LED - When this LED is lit and not flashing it
indicates that the server is turned on. When the LED is
flashing it indicates that the server is turned off and still
connected to an AC power source. When this LED is off it
indicates that AC power is not present or the power
supply or the LED itself has failed.
3Hard disk drive activity LED - When this LED is
flashing it indicates that the hard disk drive is in use.
4System locator LED - When this LED is lit or flashing,
it has been turned on by the system administrator to aid
in visually locating the NG-6000 unit.
5Information LED - When this LED is lit it indicates that
a non-critical event has occured. An LED on the light path
diagnostics panel is also lit to help isolate the error.
6System error LED - When the LED is lit it indicates that
a system error has occured. An LED on the light path
diagnostics panel is also lit to help isolate the error.
7Release latch
8USB Connector
9USB Connector
10 Serial Connector

Setup and Configuration Guide
11
Chapter 2 - Finjan Appliances
2.2 NG-6000 Rear Panel
Figure 2-6: NG-6000 Rear Panel
The following table describes the NG-6000 Rear Panel:
No Description
1Power Supply 1
2Power-Cord Connector
3AC Power LED - When lit, this indicates that
sufficient power is coming into the power supply
through the power cord. During typical operation
this LED is lit.
4DC Power LED - When lit, this indicates that the
power supply is supplying adequate DC power to
the system. During typical operation this LED is
lit.
5Power Supply 2
6SAS (serial Attached SCSI) Connector
7Systems Management Ethernet
Connector - This connector is used to connect
the server to the network for systems
management information control. This connector
is active only if you have installed a Remote
Supervisor Adapter II SlimLine - not supplied by
Finjan (and is used only by this).
8Serial Connector

Setup and Configuration Guide
Chapter 2 - Finjan Appliances12
9Power On LED - When this LED is lit and not
flashing, it indicates that the server is turned on.
When this LED is flashing, it indicates that the
server is turned off but still connected to an AC
power source. When this LED is off, it indicates
that AC power is not present, or the power supply
or LED itself has failed.
10 System Locator LED - When this LED is lit or
flashing, it has been turned on by the system
administrator to aid in visually locating the NG-
6000 unit.
11 System Error LED - When this LED is lit, it
indicates that a system error has occured. An
LED on the light path diagnostics panel is also lit
to help isolate this error.
12 Video Connector
13 USB 1 Connector
14 USB 2 Connector
15 Ethernet Activity LED - When this LED is lit it
indicates that the server is transmitting to or
receiving signals from the Ethernet LAN that is
connected to the Ethernet port.
16 Ethernet Connector (GE1)
17 Ethernet Connector (GE0)
18 Ethernet Link LED - When this LED is lit, it
indicates that there is an active link connection on
the 10BASE-T, 100BASE-TX or 1000BASE-TX
interface for the Ethernet port.
19 USB 3 Connector
20 USB 4 Connector
21 Ethernet Connector (GE3)
22 Ethernet Connector (GE2)
No Description

Setup and Configuration Guide
13
Chapter 2 - Finjan Appliances
2.3 NG-6000 Hardware Specifications
The following table contains the hardware specifications for the NG-6000 appliance:
Component Specification
Memory 2GB
Hard Drive 2 x 73 GB SAS (RAID 1)
CPU Intel Xeon dual core x 2.0 GHz
Rack space (2U) 445 x 705 x 86 mm
(WxDxH)
17.5 x 27.5 x 3.4 inches
(WxDxH)
Gigabit Ethernet NIC 4
Power Supply 2 Fully Redundant
Environment Air Temperature: Server on -
10°to 35°C (50°to 95°F),
Server off - 10°to 43°C (50°to
109.4°F), Shipment -40°to60°C
(-40°to 140°F)
Humidity: Server on/off 8 % to
80%, Shipment 5% to 100%
Weight 30kg
Heat Output (max) Minimum configuration - 1230
BTU per hour (360 watts)
Maximum configuration - 3390
BTU per hour (835 watts)

Setup and Configuration Guide
Chapter 2 - Finjan Appliances14
3Vital Security Appliance Series NG-5000
This appliance is typically deployed to include multiple appliances, each running the Vital
Security Operating System (VSOS). It can, however, also be deployed All-in-one, using a
single appliance.
The different services running on each appliance can be configured according to your
organization's network requirements.
Figure 2-7: NG-5000 Superformance Appliance
3.1 NG-5000 Front Panel
Figure 2-8: NG-5000 Front Panel
The following table describes the NG-5000 Front Panel:
1234 5678
9
10
11
No Description
1LCD Display
2Menu Display Buttons (up/down)