Fortinet FortiScan-1000C User manual

Hardware Install Guide
for FortiScan™
Donghai Zhao

Hardware Install Guide for FortiScan 2
http://docs.fortinet.com/ • Document feedback
Contents
Introduction ..............................................................................................3
Scope ............................................................................................................................... 3
Conventions .................................................................................................................... 3
IP addresses............................................................................................................... 4
Cautions, notes, & tips................................................................................................ 4
Typographical conventions......................................................................................... 4
Mounting the hardware ............................................................................6
Cautions & warnings ...................................................................................................... 6
Battery disposal.......................................................................................................... 6
Restricted access location.......................................................................................... 6
Grounding................................................................................................................... 6
Rack mounting............................................................................................................ 6
Environmental specifications ........................................................................................ 7
Mounting the FortiScan appliance ................................................................................ 7
FortiScan-1000C......................................................................................................... 8
Removing the system from the rack................................................................... 15
Installing the cable management arm ................................................................ 15
Installing the bezel ............................................................................................. 19
Connecting the power cables............................................................................. 20
FortiScan-3000C....................................................................................................... 20
Removing the system from the rack................................................................... 24
Installing the cable management arm ................................................................ 25
Installing the bezel ............................................................................................. 29
Connecting the power cables............................................................................. 30
Index ........................................................................................................31

Hardware Install Guide for FortiScan 3
http://docs.fortinet.com/ • Document feedback
Introduction
Welcome, and thank you for selecting Fortinet products for your network protection.
FortiScan is a managed security service provider (MSSP)- and enterprise-level IT security
solution. It empowers you to protect your many network hosts from known vulnerabilities
and exploits, and to achieve compliance with many regimes, including:
•PCI DSS
•SOX (Sarbanes-Oxley)
•HIPAA
•FDCC
•USGCB
FortiScan physical or virtual network appliances, together with FortiScan agents, help you
to efficiently address the ever-increasing number of computer security threats. FortiScan
network appliances provide ready-to-deploy fixes and enforcement actions, which can
change host configurations to mitigate weak settings and patch applications. This frees
your time to focus on zero-day vulnerabilities and exploits, before vendor-provided
patches or fixes are available.
FortiScan network appliances can scan your network for vulnerabilities and compliance
exposures, prioritizing hosts by risk.
Scope
This document will assist you in physically installing the FortiScan appliance, such as
assembling the hardware and mounting the appliance in a rack.
It does not cover configuring the FortiScan software, nor does it cover deploying the non-
hardware, virtual machine (FortiScan-VM) version of the appliance. For those, see the
FortiScan Administration Guide and FortiScan-VM Install Guide.
Conventions
This document uses the conventions described below.

Hardware Install Guide for FortiScan 4
http://docs.fortinet.com/ • Document feedback
IP addresses
To avoid publication of public IP addresses that belong to Fortinet or any other
organization, the IP addresses used in Fortinet technical documentation are fictional and
follow the documentation guidelines specific to Fortinet. The addresses used are from the
private IP address ranges defined in RFC 1918: Address Allocation for Private Internets,
available at:
http://ietf.org/rfc/rfc1918.txt?number-1918
For example, even though a real network’s Internet-facing IP address would be routable
on the public Internet, in this document’s examples, it would be shown as a non-Internet-
routable IP such as 10.0.0.1, 192.168.0.1, or 172.16.0.1.
Cautions, notes, & tips
This document uses the following guidance and styles for cautions, notes and tips.
Typographical conventions
Caution: Warns you about procedures or feature behaviors that could result in
loss of data or damage to equipment.
Note: Highlights important, possibly unexpected but non-destructive, details about
a feature’s behavior.
Tip: Presents best practices, troubleshooting, performance tips, or alternative
methods.
Table 1: Typographical conventions in this document
Convention Example
Button,
menu, text
box, field, or
check box
label
From Minimum log level, select Notification.
CLI input config system dns
set primary <address_ipv4>
end
CLI output FGT-602803030703 # get system settings
comments : (null)
opmode : nat

Hardware Install Guide for FortiScan 5
http://docs.fortinet.com/ • Document feedback
Emphasis HTTP connections are not secure and can be intercepted by a third
party.
File content <HTML><HEAD><TITLE>Firewall
Authentication</TITLE></HEAD>
<BODY><H4>You must authenticate to use this
service.</H4>
Hyperlink https://support.fortinet.com
Keyboard
entry Type a name for the remote VPN peer or client, such as Central_Office_1.
Navigation Go to VPN > IPSEC > Auto Key (IKE).
Publication For details, see the FortiScan Administration Guide.
Table 1: Typographical conventions in this document
Convention Example

Hardware Install Guide for FortiScan 6
http://docs.fortinet.com/ • Document feedback
Mounting the hardware
This section describes mounting FortiScan hardware and supplying power.
Cautions & warnings
Please review the following cautions before installing your FortiScan appliance.
Battery disposal
There is a risk of explosion if the battery on the main board is replaced by an incorrect
type. Dispose of used batteries according to instructions.
Restricted access location
The FortiScan appliance is intended for installation in a restricted access location.
Grounding
•Ensure the FortiScan appliance is connected and properly grounded to a lightning
and surge protector. WAN or LAN connections that enter the premises from outside
the building should be connected through a surge protector.
•Shielded Twisted Pair (STP) Ethernet cables should be used whenever possible
rather than Unshielded Twisted Pair (UTP).
•Do not connect or disconnect cables during lightning activity to avoid damage to the
FortiScan appliance or personal injury.
Rack mounting
• Elevated Operating Ambient — If installed in a closed or multi-appliance rack
assembly, the operating ambient temperature of the rack environment may be
greater than room ambient temperature. Therefore, consideration should be given

Hardware Install Guide for FortiScan 7
http://docs.fortinet.com/ • Document feedback
to installing the equipment in an environment compatible with the maximum
ambient temperature (Tma) specified by the manufacturer.
• Reduced Air Flow — Installation of the equipment in a rack should be such that
the amount of air flow required for safe operation of the equipment is not
compromised.
• Mechanical Loading — Mounting of the equipment in the rack should be such that
a hazardous condition is not achieved due to uneven mechanical loading.
• Circuit Overloading — Consideration should be given to the connection of the
equipment to the supply circuit and the effect that overloading of the circuits might
have on overcurrent protection and supply wiring. Appropriate consideration of
equipment nameplate ratings should be used when addressing this concern.
• Reliable Earthing — Reliable earthing of rack-mounted equipment should be
maintained.
Particular attention should be given to supply connections other than direct connections to
the branch circuit (e.g. use of power strips).
If required to fit into a rack appliance, remove the rubber feet from the bottom of the
FortiScan appliance.
Environmental specifications
• Operating temperature — 32 to 104°F (0 to 40°C)
If you install the FortiScan appliance in a closed or multi-appliance rack assembly,
the operating ambient temperature of the rack environment may be greater than
room ambient temperature. Therefore, make sure to install the equipment in an
environment compatible with the manufacturer's maximum rated ambient
temperature.
• Storage temperature — -13 to 158°F (-25 to 70°C)
• Humidity — 5 to 90% non-condensing
•Airflow— For rack installation, make sure that the amount of air flow required for
safe operation of the equipment is not compromised.
For free-standing installation, make sure that the FortiScan appliance has sufficient
clearance on each side to allow for adequate air flow and cooling.
Mounting the FortiScan appliance
Mounting hardware varies by model.
•FortiScan-1000C
•FortiScan-3000C

Hardware Install Guide for FortiScan 8
http://docs.fortinet.com/ • Document feedback
FortiScan-1000C
The FortiScan-1000C comes with a sliding rail kit. Locate the components for the rail kit
assembly:
•Two sliding rail assemblies
•Two chassis rail members
•Two Velcro straps
•Two cable management arm (CMA) attachment brackets
Use the instructions below to install the rails on racks with square or round holes.
To install in square-hole racks
1Position the left and right rail end pieces of the rail module labeled FRONT facing
inward.
Caution: Before installing the FortiScan unit in a rack, install front and side
stabilizers on stand-alone racks or the front stabilizer on racks joined to other
racks. Failure to install stabilizers accordingly before installing FortiScan in a rack
could cause the rack to tip over, potentially resulting in bodily injury under certain
circumstances. Therefore, always install the stabilizers before installing
components in the rack.
After installing FortiScan components in a rack, never pull more than one
component out of the rack on its slide assemblies at one time. The weight of more
than one extended component could cause the rack to tip over and may result in
serious injury.
Caution: Do not move racks by yourself. Due to the height and weight of the rack,
a minimum of two people should be used to perform this task.
•Before working on the rack, make sure that the stabilizers are secured to
the rack, extended to the floor, and that the full weight of the rack rests on
the floor. Install front and side stabilizers on a single rack or front stabilizers
for joined multiple racks before working on the rack.
•Always load the rack from the bottom up, and load the heaviest item in the
rack first.
•Make sure that the rack is level and stable before extending a component
from the rack.
•Use caution when pressing the component rail release latchesand sliding a
component into or out of a rack; the slide rails can pinch your fingers.
•Do not overload the AC supply branch circuit that provides power to the
rack.
•Ensure that proper airflow is provided to components in the rack.
•Do not step on or stand on any component when servicing other
components in a rack.

Hardware Install Guide for FortiScan 9
http://docs.fortinet.com/ • Document feedback
2Seat each end piece in the front holes of the vertical rack flanges (1).
3Align each end piece to seat the pegs in the top and bottoms holes of the first U (2).
4Engage the back end of the rail until it fully seats on the vertical rack flange and the
second “tooth” on the latch locks in place. Repeat these steps to position and seat the
front end piece on the vertical flange (3).
Figure 1: Installing and removing the rails (square-hole racks)
To remove the rails, pull on the latch release button on the end piece midpoint and
unseat each rail.
1
3
2

Hardware Install Guide for FortiScan 10
http://docs.fortinet.com/ • Document feedback
To install the rails in round-hole racks
1Position the left and right end pieces of the rail module labeled FRONT facing inward.
Figure 2: Installing and removing the rails (round-hole racks)
2Seat each end piece in the front holes of the vertical rack flanges (1).
3Align each end piece to seat the pegs in the top and bottom holes of the first U (2).
4Engage the back end of the rail until it fully seats on the vertical rack flange and the first
“tooth” on the latch locks in place. Repeat these steps to position and seat the front end
piece on the vertical flange (3).
5To remove the rails, pull on the latch release button on the end piece midpoint and
unseat each rail (4).
1
2
3
4

Hardware Install Guide for FortiScan 11
http://docs.fortinet.com/ • Document feedback
To install and remove the chassis rail members
1Place the system on a level surface and align the four keyhole slots on the chassis rail
members with the corresponding pins on the system (1).
Figure 3: Installing the chassis rail members
2Slide the chassis rail members towards the back of the system until each one locks into
place. To remove the chassis rail members, lift the lock spring until it clears the head of
the pin (2).
3Slide the chassis rail member toward the front of the system until the pins slip through
the keyhole slots.
1
2

Hardware Install Guide for FortiScan 12
http://docs.fortinet.com/ • Document feedback
To install the system in the rack
1Ensure that the system is properly supported until the chassis rail members are locked
into the slide rails on both sides. Pull the sliding rails out of the rack until they lock into
place (1).
Figure 4: Installing the system in the rack
2Align and insert the ends of the chassis rail members into the ends of the rails (2).
3Push the system inward until the chassis rail members lock in place. Push or pull the
front blue tab and slide the system into the rack (3).
3
1
2

Hardware Install Guide for FortiScan 13
http://docs.fortinet.com/ • Document feedback
To engage and release the slam latch
1Facing the front, locate the slam latch on either side of the system (1).
Figure 5: Engaging and releasing the slam latch
2The latches engage automatically as the system is pushed into the rack and are
released by pulling up on the latches (2).
3To secure the system for shipment in the rack or for other unstable environments,
locate the hard-mount screw under each latch and tighten each screw with a #2 Phillips
screwdriver (3).
To install the CMA attachment brackets
1Locate the CMA attachment bracket marked A and install it at the back of the slide rail
marked with a corresponding A (1).
1
2
3

Hardware Install Guide for FortiScan 14
http://docs.fortinet.com/ • Document feedback
2Align the holes on the bracket with the pins on the slide rail and push the bracket
forward until it locks into place. Repeat the same process for the CMA attachment
bracket marked B.
Figure 6: Installing the CMA attachment brackets
To route the cables
1Bundle the cables gently, pulling them clear of the system connectors to the left and
the right sides (1).
Figure 7: Routing the cables
1
1
2

Hardware Install Guide for FortiScan 15
http://docs.fortinet.com/ • Document feedback
2Thread the Velcro straps through the tooled slots on the outer or inner CMA brackets
on each side of the system to secure the cable bundles (2).
Removing the system from the rack
To remove the system from the rack
1Pull the system out of the rack until the sliding rails lock into place (1).
Figure 8: Removing the system from the rack
2Locate the white tabs (2) on the sides of the chassis rail members (1).
3Pull the tabs towards the front of the system to release the chassis rail members from
the rails. Continue pulling the system until the chassis rail members are completely
clear of the rails and place the system on a level surface (3).
Installing the cable management arm
The FortiScan-1000C comes with a cable management arm (CMA). Use the instructions
below to install the CMA.
1
2
3
Caution: Only trained service technicians are authorized to remove the system
cover and access any of the components inside the system. Before you begin,
review the safety instructions that came with the system.

Hardware Install Guide for FortiScan 16
http://docs.fortinet.com/ • Document feedback
Locate the components for installing the CMA assembly:
•cable management arm tray (1)
•cable management arm (2)
•nylon cable tie wraps (3)
To install or remove the cable management arm tray
1Align and engage each side of the tray with the receiver brackets on the inner edges of
the rails and push forward until the tray clicks into place (1).
Figure 9: Installing and removing the cable management arm tray
2To remove the tray, squeeze the latch-release buttons on both sides toward the center
and pull the tray out of the receiver brackets (2).
Note: To secure the CMA for shipment in the rack, loop the tie wraps around both
baskets and tray and cinch them firmly. For larger CMAs, the tie wraps can be
threaded through the inner and outer baskets and around the tray to secure them.
Securing the CMA in this manner will also secure your system in unstable
environments.
Note: The CMA tray provides support and acts as a retainer for the CMA.
1
2
Note: You can attach the CMA to either the right or left mounting rail, depending
on how you intend to route cables from the system. Mounting the CMA on the side
opposite of the power supplies is recommended; otherwise, the CMA must be
disconnected in order to remove the outer power supply. You must remove the
tray before removing the power supplies.

Hardware Install Guide for FortiScan 17
http://docs.fortinet.com/ • Document feedback
To install and remove the CMA
1At the back of the system, fit the latch on the front end of the CMA on the innermost
bracket of the slide assembly until the latch engages (1).
Figure 10: Installing and removing the cable management arm
2Fit the other latch on the end of the outermost bracket until the latch engages (2).
3To remove the CMA, disengage both latches by pressing the CMA release buttons at
the top of the inner and outer latch housings (3).
1
2
3

Hardware Install Guide for FortiScan 18
http://docs.fortinet.com/ • Document feedback
To move the CMA away from the CMA tray
1The CMA can be pulled away from the tray for access and service (1).
Figure 11: Moving the CMA away from the CMA tray
2At the hinged end, lift the CMA up and off of the tray to unseat it from the tray catch.
Once it is unseated from the tray, swing the CMA away from the system (2).
To cable the system using the CMA
1Using the tie wraps provided, bundle the cables together as they enter and exit the
baskets so they do not interfere with adjacent systems (1).
2With the CMA in the service position, route the cable bundle through the inner and
outer baskets (2).
3Use the pre-installed Velcro straps on either end of the baskets to secure the cables
(3).
4Adjust the cable slack as needed at the hinge position (4).
1
2
Note: You can also extend the CMA into the service position once it is cabled to
access the back of the system.
Caution: To avoid potential damage from protruding cables, secure any slack in
the status indicator cable before routing this cable through the CMA.

Hardware Install Guide for FortiScan 19
http://docs.fortinet.com/ • Document feedback
5Swing the CMA back in to place on the tray (5).
Figure 12: Cabling the system using the CMA
6Install the status indicator cable at the back of the system and secure the cable by
routing it through the CMA. Attach the other end of this cable to the corner of the outer
CMA basket. (6).
Installing the bezel
A lock on the bezel restricts access to the power button, optical drive, and hard drives. The
LCD panel and navigation buttons are accessible through the front bezel.
To remove the front bezel
1Using the system key, unlock the bezel.
2Pull up on the release latch next to the key lock.
3Rotate the left end of the bezel away from the system to release the right end of the
bezel.
4Pull the bezel away from the system.
To install the front bezel
1Insert the hinge tab on the right of the bezel into the slot on the right side of the system
front panel.
2Rotate the left side of the bezel toward the system.
3Press the bezel to the system to engage the latch.
1
2
3
45
6

Hardware Install Guide for FortiScan 20
http://docs.fortinet.com/ • Document feedback
Connecting the power cables
To connect the system’s power cables
1Connect the power cable or cables into the receptacles.
2Attach the power cord retention bracket on the right bend of the power supply handle.
3Bend the system power cable into a loop as shown in the illustration and attach to the
bracket’s cable clasp.
Figure 13: Installing the power cord retention bracket
4Plug the other end of the power cables into a grounded electrical outlet or a separate
power source such as an uninterrupted power supply (UPS) or a power distribution unit
(PDU).
FortiScan-3000C
The FortiScan-3000C comes with a sliding rail kit. Locate the components for installing the
rail kit assembly:
•Two sliding rail assemblies (1)
•Two Velcro straps (2)
Use the instructions below to install it in square-hole or round-hole racks.
1To install in square-hole racks
2Position the left and right rail end pieces of the rail module labeled FRONT facing
inward.