Forcepoint 2200 Series Installation instructions

Next Generation
Firewall
Models 2201, 2205, 2210
2200 Series
Hardware Guide
Revision A

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Contents
■Introduction on page 2
■Find product documentation on page 2
■Model 2201 features on page 3
■Model 2205 features on page 5
■Model 2210 features on page 7
■Indicator lights on page 8
■Ethernet port indicators on page 8
■SFP+ port indicators on page 8
■SSD indicators on page 8
■Ethernet port names for appliances with interface modules on page 9
■Supported interface modules on page 9
■Precautions on page 19
■Install the appliance on page 21
■Maintenance on page 29
Introduction
Thank you for choosing a Forcepoint appliance.
Familiarize yourself with the appliance ports and indicators and learn how to install the appliance safely.
Find product documentation
In the Forcepoint Customer Hub, you can find information about a released product, including product
documentation, technical articles, and more.
You can get additional information and support for your product in the Forcepoint Customer Hub at
https://support.forcepoint.com. There, you can access product documentation, release notes, Knowledge Base
articles, downloads, cases, and contact information.
You might need to log on to access the Forcepoint Customer Hub. If you do not yet have credentials, create a
customer account. See https://support.forcepoint.com/CreateAccount.
2

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Model 2201 features
The figures and tables show the appliance components and features.
Front panel
This panel has the following parts.
1357
6
4
8 9 10
12
11
2
1VGA port
2SSD slots 1-2 from top to bottom
Only SSD 1 is included in the delivery.
3Power button and indicator lights
4Fixed Ethernet port. The port name is eth0_0.
5Console port (speed 115,200 bps)
6Fixed SFP+ ports 1–2
The port names are eth0_1 and eth0_2 from top to bottom.
7Fixed SFP+ ports 3–4
The port names are eth0_3 and eth0_4 from top to bottom.
8Fixed Ethernet ports 5–8
The port names are eth0_5, eth0_6, eth0_7, and eth0_8 from left to right.
9Fixed Ethernet ports 9–12
The port names are eth0_9, eth0_10, eth0_11, and eth0_12 from left to right.
10 Interface module slot
11 USB ports
12 IPMI port (usage not recommended)
3

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Back panel
This panel has the following parts.
1 32
1Power supply
An AC power supply is included in the delivery. A DC power supply can optionally be purchased
separately.
2Fixed fans 1–2 from left to right
3Grounding point
4

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Model 2205 features
The figures and tables show the appliance components and features.
Front panel
This panel has the following parts.
135
4
10
13
6
7 8
11
9
12
2
1VGA port
2SSD slots 1-2 from top to bottom
Only SSD 1 is included in the delivery.
3Power button and indicator lights
4Fixed Ethernet port. The port name is eth0_0.
5Console port (speed 115,200 bps)
6Fixed SFP+ ports 1–2
The port names are eth0_1 and eth0_2 from top to bottom.
7Fixed SFP+ ports 3–4
The port names are eth0_3 and eth0_4 from top to bottom.
8Fixed Ethernet ports 5–8
The port names are eth0_5, eth0_6, eth0_7, and eth0_8 from left to right.
9Fixed SFP+ ports 13–16
The port names are eth0_13, eth0_14, eth0_15, and eth0_16 from left to right.
10 Interface module slot
11 Fixed Ethernet ports 9–12
The port names are eth0_9, eth0_10, eth0_11, and eth0_12 from left to right.
12 USB ports
13 IPMI port (usage not recommended)
5

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Back panel
This panel has the following parts.
1 32
1Power supply
An AC power supply is included in the delivery. A DC power supply can optionally be purchased
separately.
2Fixed fans 1–2 from left to right
3Grounding point
6

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Model 2210 features
The figures and tables show the appliance components and features.
Front panel
This panel has the following parts.
135
4
10
13
6
7 8
11
9
12
2
1VGA port
2SSD slots 1-2 from top to bottom
3Power button and indicator lights
4Fixed Ethernet port. The port name is eth0_0.
5Console port (speed 115,200 bps)
6Fixed SFP+ ports 1–2
The port names are eth0_1 and eth0_2 from top to bottom.
7Fixed SFP+ ports 3–4
The port names are eth0_3 and eth0_4 from top to bottom.
8Fixed Ethernet ports 5–8
The port names are eth0_5, eth0_6, eth0_7, and eth0_8 from left to right.
9Fixed SFP+ ports 13–16
The port names are eth0_13, eth0_14, eth0_15, and eth0_16 from left to right.
10 Interface module slot
11 Fixed Ethernet ports 9–12
The port names are eth0_9, eth0_10, eth0_11, and eth0_12 from left to right.
12 USB ports
13 IPMI port (usage not recommended)
7

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Back panel
This panel has the following parts.
1 2 43
1Power supply 1
An AC power supply is included in the delivery. A DC power supply can optionally be purchased
separately.
2Power supply 2
An AC power supply is included in the delivery. A DC power supply can optionally be purchased
separately.
3Fixed fans 1–4 from left to right
4Grounding point
Indicator lights
Indicator lights show the status of the appliance and any fixed Ethernet ports.
Ethernet port indicators
Ethernet port indicators show the status and speed of the network ports.
SFP+ port indicators
SFP+ port indicators show the status and speed of the network ports.
SSD indicators
SSD indicators show the status of the SSDs.
8

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
Ethernet port names for appliances with
interface modules
Ethernet port names are based on the slot and port numbers.
The first number in the name represents the slot on the appliance. The second number represents the port on the
slot. For example, eth2_0 is located on port 0 of slot 2.
Supported interface modules
Forcepoint NGFW appliances support the following types of interface modules. For a list of all available interface
modules and compatibility information, see Knowledge Base article 10245.
Note
Do not remove any stickers from modules — they contain important information.
Copper modules
Module Identifier Appliance models
8 port gigabit Ethernet RJ45 MODG8 2201, 2205, 2210
8 port gigabit Ethernet RJ45 copper bypass
module
MODG8B 2201, 2205, 2210
Fiber modules
Module Identifier Appliance models
4 port 10 gigabit Ethernet long reach bypass LC
module
MOD10L4B 2201, 2205, 2210
4 port 10 gigabit Ethernet short reach bypass
LC module
MOD10S4B 2201, 2205, 2210
2 Port 40 gigabit Ethernet bypass MPO module MOD40F2B 2201, 2205, 2210
SFP modules
Module Identifier Appliance models
2 port 25 gigabit Ethernet SFP+ MOD25F2 2201, 2205, 2210
2 port 40 gigabit Ethernet QSFP MOD40F2 2201, 2205, 2210
4 port 10 gigabit Ethernet SFP+ MOD10F4 2201, 2205, 2210
8 port gigabit Ethernet SFP MODGF8 2201, 2205, 2210
8 port 10 gigabit Ethernet SFP+ MOD10F8 2201, 2205, 2210
9

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MODG8 module
The MODG8 module is an 8 port gigabit Ethernet RJ45 module.
1
3 4
2
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
When green, the link is OK. Flashes on activity.
4Link speed indicators
When green, the speed is 1 Gbps.
When amber, the speed is 100 Mbps.
10

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MODG8B module
The MODG8B module is an 8 port gigabit Ethernet copper bypass module.
1
3
4
2
56
65
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Ethernet ports 4–7 from left to right
The Ethernet ports are used in the following even-odd pairs for bypass:
■4–5
■6–7
4Ethernet ports 0–3 from left to right
The Ethernet ports are used in the following even-odd pairs for bypass:
■0–1
■2–3
5Activity/link indicators
When green, the link is OK. Flashes on activity.
When amber, bypass mode is active.
6Link speed indicators
When green, the speed is 1 Gbps.
When amber, the speed is 100 Mbps.
11

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MOD10L4B module
The MOD10L4B module is a 4 port 10 gigabit Ethernet long reach bypass module.
1
2
3 4
5 6
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
When green, the link is OK. Flashes on activity.
4Bypass indicator
When amber, bypass mode is active.
5Ethernet ports 0–1 from left to right
6Ethernet ports 2–3 from left to right
The Ethernet ports are used in the following even-odd pairs for bypass:
■0–1
■2–3
12

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MOD10S4B module
The MOD10L4B module is a 4 port 10 gigabit Ethernet short reach bypass module.
1
2
3 4
5 6
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
When green, the link is OK. Flashes on activity.
4Bypass indicator
When amber, bypass mode is active.
5Ethernet ports 0–1 from left to right
6Ethernet ports 2–3 from left to right
The Ethernet ports are used in the following even-odd pairs for bypass:
■0–1
■2–3
13

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MOD40F2B module
The MOD40F2B module is a 2 Port 40 gigabit Ethernet QSFP+ bypass module.
1
2
4
3
56
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
When green, the link is OK. Flashes on activity.
4Bypass indicator
When amber, bypass mode is active.
5Ethernet port 0
6Ethernet port 1
The Ethernet ports are used in the following even-odd pair for bypass:
■0–1
14

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MOD25F2 module
The MOD25F2 module is a 2 port 25 gigabit Ethernet SFP+ module.
1
4
3
2
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
The indicators are labeled with the port that is represented.
When green, the link is OK. Flashes on activity.
4Link speed indicators
When green, the speed is 25 Gbps.
15

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MOD40F2 module
The MOD40F2 module is a 2 port 40 gigabit Ethernet QSFP module.
1
2
3
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
The indicators are labeled with the port that is represented.
When green, the link is OK. Flashes on activity.
16

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MOD10F4 module
The MOD10F4 module is a 4 port 10 gigabit Ethernet SFP+ module.
1
2
3
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
The indicators are labeled with the port that is represented.
When green, the link is OK. Flashes on activity.
17

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MODGF8 module
The MODGF8 module is an 8 port gigabit Ethernet SFP module.
2
3
1
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Activity/link indicators
The indicators are labeled with the port that is represented.
When green, the link is OK. Flashes on activity.
18

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
MOD10F8 module
The MOD10F8 module is an 8 port 10 gigabit Ethernet SFP+ module.
1
2
3
1Thumbscrews
You must unfasten the thumbscrews to replace or remove the module.
2Fastening screw
You must remove this screw to replace or remove the module.
3Link status and speed indicators
1 2
3 4
1Link speed indicator for the upper port
When green, the link speed is 10 Gbps.
2Link status indicator for the upper port
When blue, the link is OK.
3Link speed indicator for the lower port
When green, the link speed is 10 Gbps.
4Link status indicator for the lower port
When blue, the link is OK.
Precautions
The precautions provide safety guidance when working with Forcepoint appliances and electrical equipment.
For additional safety information, see the Forcepoint Product Safety and Regulatory Compliance Guide.
19

Next Generation Firewall Hardware Guide | Models 2201, 2205, 2210
General safety precautions
Read the safety information and follow these rules to ensure general safety whenever you are working with
electronic equipment.
■Keep the area around the appliance clean and free of clutter.
■Use a regulating uninterruptible power supply (UPS) to keep your system operating during power failures and
to protect the appliance from power surges and voltage spikes.
■If you need to turn off or unplug the appliance, always wait at least five seconds before turning on or plugging
in the appliance again.
Operating precautions
Follow these precautions when operating the appliance.
Electrical safety precautions
Follow basic electrical safety precautions to protect yourself from harm and the appliance from damage.
■Know the locations of the power on/off button and the emergency turn-off switch, disconnection switch, or
electrical outlet for the room. If an electrical accident occurs, you can quickly turn off power to the system.
■When working with high-voltage components, do not work alone.
■When working with electrical equipment that is turned on, use only one hand. This is to avoid making a
complete circuit, which causes an electric shock. Use extreme caution when using metal tools, which can
easily damage any electrical components or circuit boards the tools come into contact with.
■Do not use mats designed to decrease electrostatic discharge as protection from electric shock. Instead, use
rubber mats that have been designed as electrical insulators.
■If the power supply cable includes a grounding plug, the plug must be plugged into a grounded electrical
outlet.
■Use only the power cable or cables supplied with the appliance.
AC power supply safety precautions
The appliance power inlet is the disconnect device on the appliance.
DC power supply safety precautions
Follow these precautions for DC power supplies.
■The appliance must be used in a restricted access location and users must be well trained to operate it.
■The outlet for the appliance must be installed near the appliance and be easily accessible.
■The appliance must be protected against electric shock.
■The mains supply plug on the power supply cable is the disconnect device on the appliance. To disconnect the
appliance, you must first disconnect the mains, then disconnect the ground.
20