Forcepoint 3201 Installation instructions

Next Generation
Firewall
Hardware Guide
Models 3201, 3202, 3205, 3206, 3207, 3301, 3305
Revision H

Forcepoint Next Generation Firewall 2U Hardware Guide
2
Contents
•Introduction on page 2
•Find product documentation on page 2
•Model 3201 and 3205 features on page 3
•Model 3202, 3206, and 3207 features on page 5
•Model 3301 and 3305 features on page 8
•Fixed port indicators on page 10
•Front panel indicator lights on page 11
•Supported interface modules on page 12
•Precautions on page 21
•Install the appliance on page 23
•Maintenance on page 36
Introduction
Thank you for choosing a Forcepoint Next Generation Firewall (Forcepoint NGFW) appliance.
Familiarize yourself with the appliance ports and indicators and learn how to install the appliance safely.
Find product documentation
On the Forcepoint support website, you can find information about a released product, including product
documentation, technical articles, and more.
You can get additional information and support for your product on the Forcepoint support website at
https://support.forcepoint.com. There, you can access product documentation, Knowledge Base articles,
downloads, cases, and contact information.

Forcepoint Next Generation Firewall 2U Hardware Guide
3
Model 3201 and 3205 features
The figures and tables show the appliance components.
Front panel
1Interface modules
2Indicator lights
3Power button
4USB ports
5Console port (speed 9600 bps)
6Solid-state drive (SSD)

Forcepoint Next Generation Firewall 2U Hardware Guide
4
Back panel
1AC or DC power supplies
2IPMI port (usage not recommended)
3Console port (not used)
4USB ports
5VGA port
6Fixed Ethernet ports
Ethernet port names
Ethernet port names are based on the slot and port numbers. The first number in the name represents the slot on
the appliance. The second number represents the port on the slot. Example: eth2_0 is located on port 0 of slot 2.
Component Slot number Slot location Port numbers
Fixed Ethernet
ports
0 Back panel eth0_0 and eth0_1.
Interface
modules
1–3
The slot numbers for the interface
modules start from 1 and increase
from left to right.
Front panel The port numbers start from 0 and
increase from left to right.
Example: The port farthest to the
left in slot 1 is eth1_0.

Forcepoint Next Generation Firewall 2U Hardware Guide
5
Model 3202, 3206, and 3207 features
The figures and tables show the appliance components.
Front panel
1Interface module slots
2Indicator lights
3Power button
4USB ports
5Console port (primary; speed 9600 bps)
6Fan enclosure plate

Forcepoint Next Generation Firewall 2U Hardware Guide
6
3202 appliance back panel
1AC or DC power supplies
2Solid-state drive (SSD)
3Fan enclosure
4USB ports
5IPMI port (usage not recommended)
6Console port (secondary; speed 9600 bps)
7VGA port
8Fixed Ethernet ports

Forcepoint Next Generation Firewall 2U Hardware Guide
7
3206 and 3207 appliance back panel
1AC or DC power supplies
2Solid-state drive (SSD)
3Fan enclosure
4Console port (secondary; speed 9600 bps)
5IPMI port (usage not recommended)
6USB ports
7Fixed Ethernet ports
8VGA port
Ethernet port names
Ethernet port names are based on the slot and port numbers. The first number in the name represents the slot on
the appliance. The second number represents the port on the slot. Example: eth2_0 is located on port 0 of slot 2.
Component Slot number Slot location Port numbers
Fixed Ethernet ports 0 Back panel eth0_0 and eth0_1.
Interface modules 1–3
The slot numbers for the
interface modules start
from 1 and increase from
left to right.
Front panel The port numbers start
from 0 and increase from
left to right.
Example: The port farthest
to the left in slot 1 is
eth1_0.

Forcepoint Next Generation Firewall 2U Hardware Guide
8
Model 3301 and 3305 features
The figures and tables show the appliance components.
Front panel
1Interface module slots
2Indicator lights
3USB ports
4Console port (speed 115,200 bps)
5VGA port
6QSFP+ port (3305 appliances only)
Note: You can only use a short-range transceiver in this port.
7Fixed Ethernet ports 0 and 1
8USB ports
9IPMI port (usage not recommended)
10 Power button
11 UID button

Forcepoint Next Generation Firewall 2U Hardware Guide
9
Back panel
1Fan enclosures
2UID button
3UID indicator
4Solid-state drive (SSD) slots (only the upper slot is used)
5SSD indicators
6Grounding pin
7AC or DC power supplies
Ethernet port names
Ethernet port names are based on the slot and port numbers. The first number in the name represents the slot on
the appliance. The second number represents the port on the slot. Example: eth2_0 is located on port 0 of slot 2.
Component Slot number Slot location Port numbers
Fixed Ethernet ports 0 Front panel eth0_0, eth0_1, and (3305
appliances) eth0_2.
Interface modules 1–4
The slot numbers for the
interface modules start
from 1 and increase from
left to right.
Front panel The port numbers start
from 0 and increase from
left to right.
Example: The port farthest
to the left in slot 1 is
eth1_0.

Forcepoint Next Generation Firewall 2U Hardware Guide
10
Fixed port indicators
Fixed port indicators show the status and speed of the network ports.
Ethernet port indicators
Ethernet port indicators show the status and speed of the network ports.
3201, 3205, 3301, and 3305 appliances
1Activity indicator
2Link indicator
3202, 3206, and 3207 appliances
1Link indicator
2Activity indicator
Indicator Color Explanation
Activity indicator Amber Link OK, flashes on activity.
Unlit No link.
Note: For 3201, 3205, 3206, or 3207 appliances, an unlit
link indicator can indicate that the speed is 10 Mbps.
Orange 100 Mbps link.
Link indicator
Green 1 Gbps link.
QSFP+ port indicators
QSFP+ port indicators show the status and speed of the network ports.
12
Number Indicator Status Description
1 Activity/link indicator Amber Link OK, flashes on activity.

Forcepoint Next Generation Firewall 2U Hardware Guide
11
Number Indicator Status Description
Unlit No link2 Link speed indicator
Green 40 Gbps link
Front panel indicator lights
The front panel indicators vary depending on the appliance model. The SSD indicators are the same for all 2U
appliances.
Front panel indicators on models 3201, 3202,
3205, 3206, 3207
Indicates that a power supply cable is detached.
When flashing, indicates a fan failure.
When continuously on, indicates an overheat condition, which can be caused by cables
obstructing the airflow in the system or the ambient room temperature being too warm.
When flashing, indicates network activity on the onboard Ethernet interface 1. The interface is
on the back panel of the appliance.
When flashing, indicates network activity on the onboard Ethernet interface 0. The interface is
on the back panel of the appliance.
When flashing, indicates SSD activity.
Indicates that power is supplied to the system power supply units. This indicator is illuminated
when the system is operating normally.

Forcepoint Next Generation Firewall 2U Hardware Guide
12
Front panel indicators on models 3301 and
3305
Number Indicator Status Description
Green The appliance is in running state.1 Power
Red The appliance is in standby state.
2 Warning Red Overheating. Flashes on fan failure or system failure.
3 Disk Activity Amber Indicates SSD activity when flashing.
4 UID Blue The UID indicator has been switched on.
SSD indicators
1
2
Number Indicator Status Explanation
1 Power indicator Blue An SSD is in the bay.
2 Disk indicator Unlit This indicator is not used.
Supported interface modules
Forcepoint NGFW appliances support copper, fiber, and small form-factor pluggable (SFP) modules.
Note: Do not remove any stickers from modules — they contain important information.

Forcepoint Next Generation Firewall 2U Hardware Guide
13
For a list of all available interface modules and compatibility information, see Knowledge Base article 10245.
Table 1: Copper modules
Module Identifier Appliance models
2 port 10 gigabit Ethernet RJ45 module MO102 3201, 3202, 3205, 3206,
3207, 3301, 3305
2 port 10 gigabit RJ45 bypass module MO102B 3206, 3207
4 port gigabit Ethernet RJ45 module MOG4 3206
4 port gigabit Ethernet bypass RJ45 module MOG4B 3206, 3207
8 port gigabit Ethernet RJ45 module MOG8 3201, 3202, 3205, 3206,
3207, 3301, 3305
Table 2: Fiber modules
Module Identifier Appliance models
2 port Fiber bypass LC module MOE2B 3206, 3207
2 port 10 gigabit Ethernet short reach bypass module MO10S2B 3201, 3202, 3205, 3206,
3207, 3301, 3305
2 port 10 gigabit Ethernet long reach bypass module MO10L2B 3201, 3202, 3205, 3206,
3207, 3301, 3305
4 port gigabit Ethernet SX fiber bypass module MOGS4B 3206, 3207
Table 3: SFP modules
Module Identifier Appliance models
2 port 10 gigabit Ethernet SFP+ module MO10F2 3201, 3202, 3205, 3206,
3207, 3301, 3305
2 port 40 gigabit Ethernet QSFP module MO40F2 3207, 3301, 3305
4 port gigabit Ethernet SFP module MOGF4 3201, 3202, 3205, 3206,
3207, 3301, 3305
4 port 10 gigabit Ethernet SFP+ module MO10F4 3206
4 port 10 gigabit Ethernet SFP+ module revision 2 MOE10F4 3207, 3301, 3305

Forcepoint Next Generation Firewall 2U Hardware Guide
14
Copper interface modules
Forcepoint NGFW appliances support these copper interface modules.
MO102 module
The MO102 module is a two-port 10 gigabit copper interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK, flashes on activity.
Yellow 1 Gbps link.3 Link speed indicator
Green 10 Gbps link.
MO102B module
The MO102B module is a two-port 10 gigabit bypass copper module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK, flashes on activity.
Amber 1 Gbps link, flashes in disconnect
mode.
3 Link speed/bypass/disconnect indicator
Green 10 Gbps link, flashes in bypass
mode.

Forcepoint Next Generation Firewall 2U Hardware Guide
15
MOG4 module
The MOG4 module is a quad-port gigabit interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Green 1 Gbps link.3 Link speed indicator
Amber 100 Mbps link.
MOG4B module
The MOG4B module is a quad-port gigabit bypass copper module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Yellow 1 Gbps link, flashes in
disconnect mode.
Green 100 Mbps link, flashes in
bypass mode.
3 Link speed/bypass/disconnect indicator
Unlit 10 Mbps link.

Forcepoint Next Generation Firewall 2U Hardware Guide
16
MOG8 module
The MOG8 module is an eight-port gigabit copper interface module.
23
1
5 64
Number Component Color Description
1 Port numbers 0–7 N/A N/A
2, 5 Activity/link indicator Green Link OK, flashes on activity.
Yellow 1 Gbps link.
Green 100 Mbps link.
3, 6 Link speed indicator
Unlit 10 Mbps link.
4 Release lever N/A N/A
Fiber interface modules
Forcepoint NGFW appliances support these fiber interface modules.
MOE2B module
The MOE2B module is a two-port gigabit bypass fiber module.
23
1
Number Component Color Description
1 Release lever N/A N/A

Forcepoint Next Generation Firewall 2U Hardware Guide
17
Number Component Color Description
2 Activity/link indicator Green Link OK.
Green 1 Gbps link, flashes in bypass mode.3 Link speed/bypass/disconnect indicator
Yellow Flashes in disconnect mode.
MO10S2B module
The MO10S2B module is a two-port 10 gigabit bypass fiber module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Blue 10 Gbps link.3 Link speed/bypass/disconnect indicator
Green Flashes in bypass mode.
MO10L2B module
The MO10L2B module is a two-port 10 gigabit bypass fiber module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Blue 10 Gbps link.3 Link speed/bypass/disconnect indicator
Green Flashes in bypass mode.

Forcepoint Next Generation Firewall 2U Hardware Guide
18
MOGS4B module
The MOGS4B module is a quad-port gigabit bypass fiber module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Green 1 Gbps link, flashes in bypass mode.3 Link speed/bypass/disconnect indicator
Yellow Flashes in disconnect mode.
SFP interface modules
Forcepoint NGFW appliances support these SFP interface modules.
MO10F2 module
The MO10F2 module is a two-port 10 gigabit SFP+ interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
3 Link speed indicator Blue 10 Gbps link.

Forcepoint Next Generation Firewall 2U Hardware Guide
19
MO40F2 module
The MO40F2 module is a two-port 40 gigabit QSFP+ interface module.
12
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link/link speed indicator Green 40 Gbps link (other speeds not supported),
flashes on activity.
MOGF4 module
The MOGF4 module is a quad-port gigabit SFP interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
3 Link speed indicator Yellow 1 Gbps link.

Forcepoint Next Generation Firewall 2U Hardware Guide
20
MO10F4 module
The MO10F4 module is a quad-port 10 gigabit SFP+ interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
3 Link speed indicator Blue 10 Gbps link.
MOE10F4 module
The MOE10F4 module is a quad-port 10 gigabit SFP+ interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
3 Link speed indicator Blue 10 Gbps link.