Forcepoint 6205 Installation instructions

Next Generation
Firewall
Hardware Guide
Model 6205
Revision B

Forcepoint Next Generation Firewall 4U Hardware Guide
2
Contents
•Introduction on page 2
•Find product documentation on page 2
•Model 6205 features on page 3
•Supported interface modules on page 6
•Precautions on page 12
•Install the appliance on page 14
•Maintenance on page 23
Introduction
Thank you for choosing a Forcepoint™ Next Generation Firewall (Forcepoint NGFW) appliance.
Familiarize yourself with the appliance ports and indicators and learn how to install the appliance safely.
Find product documentation
On the Forcepoint support website, you can find information about a released product, including product
documentation, technical articles, and more.
You can get additional information and support for your product on the Forcepoint support website at
https://support.forcepoint.com. There, you can access product documentation, Knowledge Base articles,
downloads, cases, and contact information.

Forcepoint Next Generation Firewall 4U Hardware Guide
3
Model 6205 features
The figures and tables show the appliance components.
6205 front panel
42 6
1
93 5 7 8
1Interface module slots
The upper slots are numbered 1—4 from left to right.
The lower slots are numbered 5—8 from left to right.
22 USB 2.0 ports
3Console port (speed 115,200 bps)
4VGA port
540 gigabit QSFP+ port
The port number is eth0_2.
6Fixed Ethernet ports
The upper port number is eth0_0.
The lower port number is eth0_1.
72 USB 3.0 ports
8IPMI port (do not use)
9(From left to right) power button, indicator lights, UID button

Forcepoint Next Generation Firewall 4U Hardware Guide
4
6205 back panel
31 2 4
5
1Fans
The upper fans are numbered 1, 3, and 5 from left to right.
The lower fans are numbered 2, 4, and 6 from left to right.
2Power supplies 1—2
The upper power supply is 2.
The lower power supply is 1.
3Unit identification (UID) button
Used to locate the appliance in a rack. When you press the UID button, the UID light on the front and
back panel turns on until you press the button again.
4SSD slots
5Grounding nut
Ethernet port names
Ethernet port names are based on the slot and port numbers.
The first number in the name represents the slot on the appliance. The second number represents the port on the
slot. For example, eth2_0 is located on port 0 of slot 2.
Component Slot number Port numbers
Fixed Ethernet ports 0 eth0_0, eth0_1, and eth0_2.

Forcepoint Next Generation Firewall 4U Hardware Guide
5
Component Slot number Port numbers
Interface module
ports
1–8. Slots 1–4 are on the upper row, and
slots 5–8 are on the lower row.
The port numbers start from 0 and increase
from left to right. For example, the port
farthest to the left in slot 1 is eth1_0.
Fixed port indicators
Fixed port indicators show the status and speed of the network ports.
Ethernet port indicators
Ethernet port indicators show the status and speed of the network ports.
1 2
Number Indicator Status Description
1 Activity/link indicator Yellow Link OK. Flashes on activity.
Unlit 10 Mbps link.
Amber 100 Mbps link.
2 Link speed indicator
Green 1 Gbps link.
QSFP+ port indicators
QSFP+ port indicators show the status and speed of the network ports.
12
Number Indicator Status Description
1 Activity/link indicator Amber Link OK, flashes on activity.
Unlit No link2 Link speed indicator
Green 40 Gbps link

Forcepoint Next Generation Firewall 4U Hardware Guide
6
Front panel indicator lights
Indicator lights show the status of the appliance.
Icon Indicator Status Description
Green The appliance is in running state.Power
Red The appliance is in standby state.
Warning Red •Steady — Overheating
•Flashing — Fan failure or general system failure
Disk
Activity
Amber Indicates SSD activity.
UID Blue The unit identification (UID) indicator has been switched on. Used to
locate the appliance in a rack. When you press the UID button, the UID
indicator on the front and back panel turns on until you press the button
again.
SSD indicators
SSD indicators show the status of the SSDs.
1
2
1Power
When lit blue, an SSD is in the bay.
2Disk indicator
When flashing blue, indicates SSD activity.
Supported interface modules
Forcepoint NGFW appliances support copper, fiber, and small form-factor pluggable (SFP) modules.
Note: Do not remove any stickers from modules — they contain important information.

Forcepoint Next Generation Firewall 4U Hardware Guide
7
For a list of all available interface modules and compatibility information, see Knowledge Base article 10245.
Table 1: Copper modules
Module Identifier
2 port 10 gigabit Ethernet RJ45 module MO102
4 port gigabit Ethernet bypass RJ45 module MOG4B
8 port gigabit Ethernet RJ45 module MOG8
Table 2: Fiber modules
Module Identifier
2 port 10 gigabit Ethernet short reach bypass module MO10S2B
2 port 10 gigabit Ethernet long reach bypass module MO10L2B
Table 3: SFP modules
Module Identifier
2 port 10 gigabit Ethernet SFP+ module MO10F2
2 port 40 gigabit Ethernet QSFP module MO40F2
4 port gigabit Ethernet SFP module MOGF4
4 port 10 gigabit Ethernet SFP+ module revision 2 MOE10F4
Copper interface modules
Forcepoint NGFW appliances support these copper interface modules.
MO102 module
The MO102 module is a two-port 10 gigabit copper interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK, flashes on activity.

Forcepoint Next Generation Firewall 4U Hardware Guide
8
Number Component Color Description
Yellow 1 Gbps link.3 Link speed indicator
Green 10 Gbps link.
MOG4B module
The MOG4B module is a quad-port gigabit bypass copper module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Yellow 1 Gbps link, flashes in
disconnect mode.
Green 100 Mbps link, flashes in
bypass mode.
3 Link speed/bypass/disconnect indicator
Unlit 10 Mbps link.
MOG8 module
The MOG8 module is an eight-port gigabit copper interface module.
23
1
5 64
Number Component Color Description
1 Port numbers 0–7 N/A N/A

Forcepoint Next Generation Firewall 4U Hardware Guide
9
Number Component Color Description
2, 5 Activity/link indicator Green Link OK, flashes on activity.
Yellow 1 Gbps link.
Green 100 Mbps link.
3, 6 Link speed indicator
Unlit 10 Mbps link.
4 Release lever N/A N/A
Fiber interface modules
Forcepoint NGFW appliances support these fiber interface modules.
MO10S2B module
The MO10S2B module is a two-port 10 gigabit bypass fiber module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Blue 10 Gbps link.3 Link speed/bypass/disconnect indicator
Green Flashes in bypass mode.

Forcepoint Next Generation Firewall 4U Hardware Guide
10
MO10L2B module
The MO10L2B module is a two-port 10 gigabit bypass fiber module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
Blue 10 Gbps link.3 Link speed/bypass/disconnect indicator
Green Flashes in bypass mode.
SFP interface modules
Forcepoint NGFW appliances support these SFP interface modules.
MO10F2 module
The MO10F2 module is a two-port 10 gigabit SFP+ interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
3 Link speed indicator Blue 10 Gbps link.

Forcepoint Next Generation Firewall 4U Hardware Guide
11
MO40F2 module
The MO40F2 module is a two-port 40 gigabit QSFP+ interface module.
12
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link/link speed indicator Green 40 Gbps link (other speeds not supported),
flashes on activity.
MOGF4 module
The MOGF4 module is a quad-port gigabit SFP interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
3 Link speed indicator Yellow 1 Gbps link.

Forcepoint Next Generation Firewall 4U Hardware Guide
12
MOE10F4 module
The MOE10F4 module is a quad-port 10 gigabit SFP+ interface module.
23
1
Number Component Color Description
1 Release lever N/A N/A
2 Activity/link indicator Green Link OK.
3 Link speed indicator Blue 10 Gbps link.
Precautions
The precautions provide safety guidance when working with Forcepoint appliances and electrical equipment.
Safety precautions
Read the safety information and follow the procedures whenever you are working with electronic equipment.
General safety
Follow these rules to ensure general safety.
•Keep the area around the appliance clean and free of clutter.
•The appliance weighs approximately 44 lbs (20 kg) when fully loaded. When lifting the appliance, two people
at each end should lift slowly with their feet spread out to distribute the weight. Always keep your back straight
and lift with your legs.
•Use a regulating uninterruptible power supply (UPS) to keep your system operating if there is a power failure
and to protect the appliance from power surges and voltage spikes.
•If you need to switch off or unplug the appliance, always wait at least five seconds before turning on or
plugging in the appliance again.

Forcepoint Next Generation Firewall 4U Hardware Guide
13
Operating precautions
•Do not open the power supply casing. Only the manufacturer's qualified technician can access and service
power supplies.
•Keep the cover in place when the appliance is on to ensure proper cooling. Failure to adhere to this guidance
could void your warranty.
Additional safety information can be provided upon request.
Electrical safety precautions
Follow basic electrical safety precautions to protect yourself from harm and the appliance from damage.
•Know the locations of the power on/off button and the emergency turn-off switch, disconnection switch, or
electrical outlet for the room. If an electrical accident occurs, you can quickly turn off power to the system.
•When working with high-voltage components, do not work alone.
•Turn off the system and disconnect the power before removing or installing system components.
•When working with electrical equipment that is turned on, use only one hand. This is to avoid making a
complete circuit, which causes an electric shock. Use extreme caution when using metal tools, which can
easily damage any electrical components or circuit boards the tools come into contact with.
•Do not use mats designed to decrease electrostatic discharge as protection from electric shock. Instead, use
rubber mats that have been designed as electrical insulators.
•The power supply cable must include a grounding plug and must be plugged into a grounded electrical outlet.
Power supply safety precautions
Depending on the type of power supply that your Forcepoint NGFW appliance uses, different safety precautions
and installation guidelines apply.
Note: If the appliance has two power supplies, we recommend that you use both power supplies
for redundancy.
AC power supplies
The appliance power inlet is the disconnect device on the appliance.
DC power supplies
•The appliance must be used in a restricted access location and users must be well trained to operate it.
•The outlet for the appliance must be installed near the appliance and be easily accessible.
•We recommend using a 30A fuse (slow) and a power switch between the appliance and the main power
source.
•The appliance must be protected against electric shock and must have, at minimum, a 12 AWG wire provided
for the DC power supply.

Forcepoint Next Generation Firewall 4U Hardware Guide
14
•The case of the appliance must be grounded using the power connector pin or the grounding nut. We
recommend using both grounding methods.
•The mains supply plug on the power supply cable is the disconnect device on the appliance. To disconnect
the appliance, you must first disconnect the mains, then disconnect the ground.
Install the appliance
Prepare and install the appliance in your network.
Before you begin
•Install a Security Management Center (SMC) on a separate server.
•Configure the NGFW Engine element (Firewall, IPS, or Layer 2 Firewall) in the Management Client,
and save the initial configuration.
Note: For additional information on SMC installation and initial configuration, see the
Forcepoint Next Generation Firewall Installation Guide.
•Inspect the appliance, the delivery box, and all components included in the shipment.
Note: Do not use damaged appliances or components.
Rack-mount the appliance
The rack-mounting procedure varies depending on the type of rack unit. If needed, see the documentation for
your rack unit.
Important: Read the safety precautions before you rack-mount the appliance. Do not install the
appliance upside down.
Preparing for rack-mounting
The rack-mounting kit includes the mounting screws and the rail assemblies or rack-mounting brackets to install
the system into the rack.
Determine the placement of each component in the rack.
•Install the heaviest components on the bottom of the rack first. Install components from the bottom to the top.
•The appliance must be connected to a grounded power outlet.
•Use a UPS to protect the appliance from power surges and voltage spikes, and to keep your system operating
if there is a power failure.
•To maintain proper cooling, always keep the front door of the rack and all panels and components on the
appliances closed when not servicing.

Forcepoint Next Generation Firewall 4U Hardware Guide
15
Install a 6205 appliance in a two-post rack
Use the short rack-mounting brackets to secure the appliance in the rack.
Steps
1) Attach a short bracket to each side of the appliance with one screw through each of the two grooves.
2) Attach the brackets to the rack with four screws through the holes in the front of the brackets.
CAUTION: Use all four screws to attach each rack-mounting bracket to the rack. Using fewer
screws might not provide sufficient support and can damage the appliance.

Forcepoint Next Generation Firewall 4U Hardware Guide
16
Install a 6205 appliance in a four-post rack
Attach the appliance to the front posts of the rack, and optionally use the long rack-mounting brackets to attach
the appliance to the back posts of the rack.
Steps
1) (Optional) Attach a long bracket to the back posts of the rack, then attach the appliance to the bracket.
a) Attach a long bracket to each of the back posts of the rack.
b) Attach four screws to each side of the appliance.
c) Lift the appliance into the rack, and guide the screws in the side of the appliance into the two grooves of
the bracket.
The bracket is used to support the appliance when setting the depth of the appliance in the rack.

Forcepoint Next Generation Firewall 4U Hardware Guide
17
2) Attach the front panel to the front posts of the rack with two screws in each post.
Result
Figure 1: If attached to front and back posts of the rack

Forcepoint Next Generation Firewall 4U Hardware Guide
18
Figure 2: If attached to front posts of the rack only
Install the SSD
Install the SSD if it is not already installed.
There are two SSD slots on the back panel of the appliances. Use only one SSD.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
CAUTION: Uninstalled SSDs are sensitive to damage from electrostatic discharge.
Steps
1) Press the release button on the SSD to release the lever.
2) Insert the SSD into the bay.
3) Push the lever down to lock the SSD into position.

Forcepoint Next Generation Firewall 4U Hardware Guide
19
Install an interface module
If needed, install any interface modules.
Before you begin
•Read the safety precautions.
•Make sure any interface modules you install are the correct type for your appliance.
CAUTION: To avoid damaging the modules or the appliance, do not install or remove any
interface modules if the appliance is turned on.
You must install an interface module or a placeholder module in each slot before making the appliance
operational. If the appliance was delivered with a plate that covered the interface slot, you can cover the interface
slot with the plate.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
Steps
1) Locate the slot to install the module in.
2) If the interface slot is covered with a plate, unfasten the thumbscrew that attaches the plate to the interface
module slot and remove the plate.
Store the plate and the thumbscrew for later use in case you want to use the appliance without an interface
module.
3) Push the module into the slot.
The module is seated correctly when the module clicks in place with a click.
Tip: Make sure that the sticker on the module cover faces up.
Important: Do not insert the module in the wrong orientation. Inserting the modules
incorrectly might damage the appliance and the modules and voids the warranty.
Connect the cables
Connect the network, management, and power supply cables.
CAUTION: On appliances that have an Intelligent Platform Management Interface (IPMI) port,
the IPMI port is disabled by default. We do not recommend that you enable the IPMI port and
connect a cable to it. This might help an unauthorized user to find a way to access and manage
the appliance remotely and compromise the security of the system.

Forcepoint Next Generation Firewall 4U Hardware Guide
20
Copper cable types
Use at least CAT5e-rated cables for gigabit networks.
(IPS and Layer 2 Firewall only) Always use standard cabling methods. Use crossover cables to connect the
appliance to hosts and straight cables to connect the appliance to switches or hubs.
Speed and duplex settings
Network interfaces at both ends of each cable must have identical speed and duplex settings.
These settings include the automatic negotiation setting. If one end of the cable uses autonegotiation, the other
end must also use autonegotiation. Gigabit standards require interfaces to use autonegotiation — fixed settings
are not allowed at gigabit speeds.
(IPS and Layer 2 Firewall only) The settings for inline interfaces must be identical. All four interfaces — the pair
on the appliance and the interfaces on the two devices connecting to the appliance — must have the same speed
and duplex settings configured.
Ethernet port mapping
For appliances that have removable interface modules, Ethernet port names are based on the slot and port
numbers.
The first number in the name represents the slot on the appliance, and the second number represents the port on
the slot. Example: eth2_0 is located on port 0 of slot 2.
•Slot 0 contains the fixed Ethernet ports.
•Slots 1 and higher contain the ports on the interface modules. The port numbers start at 0 and increase from
left to right.
During the initial configuration of the appliance, the Ethernet ports are mapped to the interface IDs that you
defined in the Management Client.
The NGFW Initial Configuration Wizard displays the mapping between the interface IDs and port names. In the
command line version of the NGFW Initial Configuration Wizard, Interface IDs appear in the Id column and port
names appear in the Name column.
This mapping can change if you replace an interface module. If the new module has a larger number of Ethernet
ports, the interface IDs for the new ports start from the next free interface ID number. Use the new interface
IDs to configure new interfaces in the Management Client, then refresh the policy on the engine to transfer the
changes. See the Forcepoint Next Generation Firewall Product Guide for more information.
CAUTION: Do not select the Clear action when modifying interface IDs in the NGFW Initial
Configuration Wizard on the command line. Selecting Clear removes all mapping information
between interface IDs and Ethernet ports, and restores the default values.
Example: You have seven interfaces numbered 1–7, which includes a four-port module installed in slot 1.