IBM Proventia Management SiteProtector SP1001 User manual

IBM Proventia®Management SiteProtector™
SP1001 Hardware Configuration Guide
Version 2.0, Service Pack 7.0


IBM Proventia®Management SiteProtector™
SP1001 Hardware Configuration Guide
Version 2.0, Service Pack 7.0


Copyright Statement
© Copyright IBM Corporation 1994, 2008.
IBM Global Services
Route 100
Somers, NY 10589
U.S.A.
Produced in the United States of America.
All Rights Reserved.

Trademarks and Disclaimer
IBM and the IBM logo are trademarks or registered trademarks of International
Business Machines Corporation in the United States, other countries, or both.
ADDME, Ahead of the threat, BlackICE, Internet Scanner, Proventia, RealSecure,
SecurePartner, SecurityFusion, SiteProtector, System Scanner, Virtual Patch, X-Force
and X-Press Update are trademarks or registered trademarks of Internet Security
Systems, Inc. in the United States, other countries, or both. Internet Security
Systems, Inc. is a wholly-owned subsidiary of International Business Machines
Corporation.
Microsoft, Windows, and Windows NT are trademarks of Microsoft Corporation in
the United States, other countries, or both.
Other company, product and service names may be trademarks or service marks of
others.
References in this publication to IBM products or services do not imply that IBM
intends to make them available in all countries in which IBM operates.
Disclaimer: The information contained in this document may change without
notice, and may have been altered or changed if you have received it from a
source other than IBM Internet Security Systems (IBM ISS). Use of this information
constitutes acceptance for use in an “AS IS” condition, without warranties of any
kind, and any use of this information is at the user’s own risk. IBM Internet
Security Systems disclaims all warranties, either expressed or implied, including
the warranties of merchantability and fitness for a particular purpose. In no event
shall IBM ISS be liable for any damages whatsoever, including direct, indirect,
incidental, consequential or special damages, arising from the use or dissemination
hereof, even if IBM Internet Security Systems has been advised of the possibility of
such damages. Some states do not allow the exclusion or limitation of liability for
consequential or incidental damages, so the foregoing limitation may not apply.
Reference herein to any specific commercial products, process, or service by trade
name, trademark, manufacturer, or otherwise, does not necessarily constitute or
imply its endorsement, recommendation, or favoring by IBM Internet Security
Systems. The views and opinions of authors expressed herein do not necessarily
state or reflect those of IBM Internet Security Systems, and shall not be used for
advertising or product endorsement purposes.
Links and addresses to Internet resources are inspected thoroughly prior to release,
but the ever-changing nature of the Internet prevents IBM Internet Security
Systems, Inc. from guaranteeing the content or existence of the resource. When
possible, the reference contains alternate sites or keywords that could be used to
acquire the information by other methods. If you find a broken or inappropriate
link, please send an email with the topic name, link, and its behavior to
mailto://[email protected].
November 27, 2007
© Copyright IBM Corp. 1994, 2008 iii

iv SiteProtector System: SP1001 Hardware Configuration

Contents
Trademarks and Disclaimer ......iii
Overview ..............vii
How to Use the SP1001 Appliance Documentation viii
Getting Technical Support ..........x
Safety, Environmental, and Electronic Emissions
Notices ................xi
Chapter 1. Introduction to the
SiteProtector SP1001 Appliance ....1
What is the SiteProtector SP1001 Appliance?....2
SiteProtector Components ..........3
Proventia Server IPS for Windows .......5
Chapter 2. Before You Begin ......7
Requirements and Considerations .......8
Pre-configuration Checklists .........10
Chapter 3. Connecting and Configuring
the SiteProtector SP1001 Appliance . . 11
SiteProtector SP1001 Appliance Configuration
Checklist ...............12
The SiteProtector SP1001 Appliance Front Panel . . 13
The SiteProtector SP1001 Appliance Back Panel . . 14
Connecting the SiteProtector SP1001 Appliance . . 15
Configuring the SiteProtector SP1001 Appliance to
Communicate with the Network .......15
Entering Network Information ........16
Installing and Starting the SiteProtector Console . . 17
Installing the SiteProtector Console .....17
Starting the SiteProtector Console and logging on 18
Chapter 4. Configuring the
SiteProtector Console ........19
SiteProtector Console Configuration Checklist . . . 20
Installing License Files...........21
Choosing the SP1001 Appliance Language ....22
Securing SP1001 Appliance Passwords .....22
Setting the Database Administrator password . . . 23
Setting the Windows Administrator Password . . . 23
Setting the Date and Time .........23
Chapter 5. Optional Configuration
Tasks ...............25
Starting and Shutting Down the SiteProtector
SP1001 ................26
Scheduling a server shut down or restart . . . 27
Configuring SNMP Services .........27
Securing the SiteProtector SP1001 Appliance
Hardware ...............28
Chapter 6. Troubleshooting ......29
Restoring Factory Defaults .........30
Issue Related to the LCD Panel ........31
Appendix. SiteProtector SP1001
Appliance Configuration Options . . . 33
Configuration Options...........34
Index ...............37
© Copyright IBM Corp. 1994, 2008 v

vi SiteProtector System: SP1001 Hardware Configuration

Overview
Introduction
The SiteProtector SP1001 Hardware Configuration Guide contains the information you
need to configure the IBM Proventia Management SiteProtector SP1001 appliance
hardware.
Scope
This guide provides procedures for configuring the SiteProtector SP1001 appliance
hardware and Windows administration options. This guide is designed to be a
companion to the SiteProtector documentation suite. After you have configured the
SiteProtector SP1001 appliance hardware, use the SiteProtector Configuration Guide to
configure the SiteProtector security management software.
Audience
This guide is intended for network or security administrators or any other
individuals who are responsible for configuring the SiteProtector SP1001 appliance
and managing network security. This guide assumes that you have a working
knowledge of network devices and Microsoft administration tasks.
© Copyright IBM Corp. 1994, 2008 vii

How to Use the SP1001 Appliance Documentation
This topic explains how the information in the SiteProtector SP1001 Hardware
Configuration Guide is organized and lists other documents in the SiteProtector
documentation suite that you may use to configure SiteProtector.
Document organization
This document is organized into logical units, as described in the following table:
Chapter Description
Chapter 2, “Before You Begin,” on page 7 Contains background information,
prerequisites, and procedures for configuring
the SiteProtector SP1001 appliance hardware.
Chapter 3, “Connecting and Configuring the
SiteProtector SP1001 Appliance,” on page 11
Contains procedures for configuring the
SiteProtector SP1001 appliance hardware and
for accessing the SiteProtector software on
the SiteProtector SP1001 appliance from the
SiteProtector Console. To support less
experienced users, this chapter provides
significantly more background information
than the SiteProtector SP1001 Getting Started
Card.
Chapter 4, “Configuring the SiteProtector
Console,” on page 19
Contains procedures for configuring the
SiteProtector SP1001 appliance
administration options using the
SiteProtector Console. If you configured the
SiteProtector SP1001 appliance hardware
using the SiteProtector SP1001 Getting Started
Card, start here to continue the configuration
process.
Chapter 5, “Optional Configuration Tasks,”
on page 25
Contains procedures for optional hardware
and server administration tasks.
The following table describes other documents in the SiteProtector documentation
suite:
Document Content
SiteProtector SP1001 Getting Started Card Contains the minimal information required
to configure SiteProtector SP1001 appliance
hardware and to connect it to the Console. If
you are an experienced hardware
administrator and do not need significant
background information about the tasks that
you perform, consider using this card to
configure the SiteProtector SP1001 appliance
hardware.
SiteProtector Configuration Guide Contains information about configuring,
updating, and maintaining the SiteProtector
security management software.
SiteProtector Policies and Responses
Configuration Guide
Contains information about configuring
policies and responses, including Central
Responses.
viii SiteProtector System: SP1001 Hardware Configuration

Document Content
SiteProtector Help Contains all the procedures that you need to
use SiteProtector, including some procedures
that may not be available in a printed user
document.
SiteProtector Technical Reference Guide Contains the following:
vinformation about SiteProtector logs that
you may need for troubleshooting
vdatabase schema diagrams
SiteProtector Supported Agents and Appliances Contains information about agents and
appliances that work with SiteProtector.
Related publications
The user documents for SiteProtector and related products are available as portable
document format (PDF) files in the following places:
vthe IBM ISS Web site at http://www.iss.net/support/documentation
vthe Deployment Manager, if installed at your Site
Licensing agreement
For licensing information on IBM Internet Security System products, download the
IBM Licensing Agreement from:http://www-935.ibm.com/services/us/iss/html/
contracts_landing.html
Overview ix

Getting Technical Support
IBM Internet Security Systems (ISS) provides technical support through its Web site
and by email or telephone.
The IBM ISS Web site
The IBM Internet Security Customer Support Web page (http://www-
935.ibm.com/services/us/index.wss/offerfamily/iss/a1029129) provides direct
access to online user documentation, current versions listings, detailed product
literature, white papers, and the Technical Support Knowledgebase.
Hours of support
The following table provides hours for Technical Support at the Americas and
other locations:
Location Hours
Americas 24 hours a day
All other locations Monday through Friday, 9:00 A.M. to 6:00 P.M. during their local
time, excluding IBM ISS published holidays
Note: If your local support office is located outside the Americas,
you may call or send an email to the Americas office for help
during off-hours.
Contact information
For contact information, go to the IBM Internet Security Systems Contact Technical
Support Web page at http://www-935.ibm.com/services/us/index.wss/offering/
iss/a1029178.
xSiteProtector System: SP1001 Hardware Configuration

Safety, Environmental, and Electronic Emissions Notices
Safety notices may be printed throughout this guide. DANGER notices warn you
of conditions or procedures that can result in death or severe personal injury.
CAUTION notices warn you of conditions or procedures that can cause personal
injury that is neither lethal nor extremely hazardous. Attention notices warn you
of conditions or procedures that can cause damage to machines, equipment, or
programs.
DANGER notices
DANGER
To prevent a possible shock from touching two surfaces with different
protective ground (earth), use one hand, when possible, to connect or
disconnect signal cables. (D001)
DANGER
Overloading a branch circuit is potentially a fire hazard and a shock hazard
under certain conditions. To avoid these hazards, ensure that your system
electrical requirements do not exceed branch circuit protection requirements.
Refer to the information that is provided with your device or the power
rating label for electrical specifications. (D002)
DANGER
If the receptacle has a metal shell, do not touch the shell until you have
completed the voltage and grounding checks. Improper wiring or grounding
could place dangerous voltage on the metal shell. If any of the conditions are
not as described, STOP. Ensure the improper voltage or impedance conditions
are corrected before proceeding. (D003)
DANGER
An electrical outlet that is not correctly wired could place hazardous voltage
on the metal parts of the system or the devices that attach to the system. It is
the responsibility of the customer to ensure that the outlet is correctly wired
and grounded to prevent an electrical shock. (D004)
Overview xi

DANGER
When working on or around the system, observe the following precautions:
Electrical voltage and current from power, telephone, and communication
cables are hazardous. To avoid a shock hazard:
vConnect power to this unit only with the IBM ISS provided power cord.
Do not use the IBM ISS provided power cord for any other product.
vDo not open or service any power supply assembly.
vDo not connect or disconnect any cables or perform installation,
maintenance, or reconfiguration of this product during an electrical storm.
vThe product might be equipped with multiple power cords. To remove all
hazardous voltages, disconnect all power cords.
vConnect all power cords to a properly wired and grounded electrical outlet.
Ensure that the outlet supplies proper voltage and phase rotation according
to the system rating plate.
vConnect any equipment that will be attached to this product to properly
wired outlets.
vWhen possible, use one hand only to connect or disconnect signal cables.
vNever turn on any equipment when there is evidence of fire, water, or
structural damage.
vDisconnect the attached power cords, telecommunications systems,
networks, and modems before you open the device covers, unless
instructed otherwise in the installation and configuration procedures.
vConnect and disconnect cables as described in the following procedures
when installing, moving, or opening covers on this product or attached
devices.
To disconnect:
1. Turn off everything (unless instructed otherwise).
2. Remove the power cords from the outlets.
3. Remove the signal cables from the connectors.
4. Remove all cables from the devices.
To connect:
1. Turn off everything (unless instructed otherwise).
2. Attach all cables to the devices.
3. Attach the signal cables to the connectors.
4. Attach the power cords to the outlets.
5. Turn on the devices.
(D005)
CAUTION notices
CAUTION:
Data processing environments can contain equipment transmitting on system
links with laser modules that operate at great than Class 1 power levels. For this
reason, never look into the end of an optical fiber cable or open receptacle.
(C027)
xii SiteProtector System: SP1001 Hardware Configuration

CAUTION:
The battery contains lithium. To avoid possible explosion, do not burn or charge
the battery.
Do not:
vThrow or immerse into water
vHeat to more than 100°C (212°F)
vRepair or disassemble
Exchange only with the IBM ISS-approved part. Recycle or discard the battery as
instructed by local regulations. In the United States, IBM ISS has a process for
the collection of this battery. For information, call 1-800-426-4333. Have the IBM
ISS part number for the battery unit available when you call. (C003)
CAUTION:
For 19” rack mount products:
vDo not install a unit in a rack where the internal rack ambient temperatures
will exceed the manufacturer’s recommended ambient temperature for all your
rack-mounted devices.
vDo not install a unit in a rack where the air flow is compromised. Ensure that
air flow is not blocked or reduced on any side, front, or back of a unit used
for air flow through the unit.
vConsideration should be given to the connection of the equipment to the
supply circuit so that overloading the circuits does not compromise the supply
wiring or overcurrent protection. To provide the correct power connection to a
rack, refer to the rating labels located on the equipment in the rack to
determine the total power requirement of the supply circuit.
v(For sliding drawers) Do not pull or install any drawer or feature if the rack
stabilizer brackets are not attached to the rack. Do not pull out more than one
drawer at a time. The rack might become unstable if you pull out more than
one drawer at a time.
v(For fixed drawers) This drawer is a fixed drawer and must not be moved for
servicing unless specified by the manufacturer. Attempting to move the
drawer partially or completely out of the rack might cause the rack to become
unstable or cause the drawer to fall out of the rack.
(R001 Part 2 of 2)
Product handling information
One of the following two safety notices may apply to this product. Please refer to
the specific product specifications to determine the weight of the product to see
which applies.
CAUTION:
This part or unit is heavy but has a weight smaller than 18 kg (39.7 lb). Use care
when lifting, removing, or installing this part or unit. (C008)
CAUTION:
The weight of this part or unit is between 18 and 32 kg (39.7 and 70.5 lb). It
takes two persons to safely lift this part or unit. (C009)
Overview xiii

Product safety labels
One or more of the following safety labels may apply to this product.
DANGER
Hazardous voltage, current, or energy levels are present inside any component
that has this label attached. Do not open any cover or barrier that contains
this label. (L001)
DANGER
Multiple power cords. The product might be equipped with multiple power
cords. To remove all hazardous voltages, cdisconnect all power cords. (L003)
World trade safety information
Several countries require the safety information contained in product publications
to be presented in their national languages. If this requirement applies to your
country, a safety information booklet is included in the publications package
shipped with the product. The booklet contains the safety information in your
national language with references to the US English source. Before using a US
English publication to install, operate, or service this IBM ISS product, you must
first become familiar with the related safety information in the booklet. You should
also refer to the booklet any time you do not clearly understand any safety
information in the US English publications.
xiv SiteProtector System: SP1001 Hardware Configuration

Laser safety information
The following laser safety notices apply to this product:
CAUTION:
This product may contain one or more of the following devices: CD-ROM drive,
DVD-ROM drive, DVD-RAM drive, or laser module, which are Class 1 laser
products. Note the following information:
vDo not remove the covers. Removing the covers of the laser product could
result in exposure to hazardous laser radiation. There are no serviceable parts
inside the device.
vUse of the controls or adjustments or performance of procedures other than
those specified herein might result in hazardous radiation exposure. (C026)
CAUTION:
Data processing environments can contain equipment transmitting on system
links with laser modules that operate at greater than Class 1 power levels. For
this reason, never look into the end of an optical fiber cable or open receptacle.
(C027)
Laser compliance
All lasers are certified in the U.S. to conform to the requirements of DHHS 21 CFR
Subchapter J for class 1 laser products. Outside the U.S., they are certified to be in
compliance with IEC 60825 as a class 1 laser product. Consult the label on each
part for laser certification numbers and approval information.
Product recycling and disposal
This unit must be recycled or discarded according to applicable local and national
regulations. IBM encourages owners of information technology (IT) equipment to
responsibly recycle their equipment when it is no longer needed. IBM offers a
variety of product return programs and services in several countries to assist
equipment owners in recycling their IT products. Information on IBM ISS product
recycling offerings can be found on IBM’s Internet site at http://
www.ibm.com/ibm/environment/products/prp.shtml.
Esta unidad debe reciclarse o desecharse de acuerdo con lo establecido en la
normativa nacional o local aplicable. IBM recomienda a los propietarios de equipos
de tecnología de la información (TI) que reciclen responsablemente sus equipos
cuando éstos ya no les sean útiles. IBM dispone de una serie de programas y
servicios de devolución de productos en varios países, a fin de ayudar a los
propietarios de equipos a reciclar sus productos de TI. Se puede encontrar
información sobre las ofertas de reciclado de productos de IBM en el sitio web de
IBM http:// www.ibm.com/ibm/environment/products/prp.shtml.
Overview xv

Notice: This mark applies only to countries within the European Union (EU) and
Norway.
Appliances are labeled in accordance with European Directive 2002/96/EC
concerning waste electrical and electronic equipment (WEEE). The Directive
determines the framework for the return and recycling of used appliances as
applicable through the European Union. This label is applied to various products
to indicate that the product is not to be thrown away, but rather reclaimed upon
end of life per this Directive.
In accordance with the European WEEE Directive, electrical and electronic
equipment (EEE) is to be collected separately and to be reused, recycled, or
recovered at end of life. Users of EEE with the WEEE marking per Annex IV of the
WEEE Directive, as shown above, must not dispose of end of life EEE as unsorted
municipal waste, but use the collection framework available to customers for the
return, recycling, and recovery of WEEE. Customer participation is important to
minimize any potential effects of EEE on the environment and human health due
to the potential presence of hazardous substances in EEE. For proper collection and
treatment, contact your local IBM representative.
Remarque: Cette marque s’applique uniquement aux pays de l’Union Européenne
et à la Norvège.
L’etiquette du système respecte la Directive européenne 2002/96/EC en matière de
Déchets des Equipements Electriques et Electroniques (DEEE), qui détermine les
dispositions de retour et de recyclage applicables aux systèmes utilisés à travers
l’Union européenne. Conformément à la directive, ladite étiquette précise que le
produit sur lequel elle est apposée ne doit pas être jeté mais être récupéré en fin de
vie.
Battery return program
This product contains a lithium battery. The battery must be recycled or disposed
of properly. Recycling facilities may not be available in your area. For information
xvi SiteProtector System: SP1001 Hardware Configuration

on disposal of batteries outside the United States, go to http://www.ibm.com/
ibm/environment/products/ batteryrecycle.shtm or contact your local waste
disposal facility.
In the United States, IBM has established a return process for reuse, recycling, or
proper disposal of used IBM sealed lead acid, nickel cadmium, nickel metal
hydride, and other battery packs from IBM equipment. For information on proper
disposal of these batteries, contact IBM at 1-800-426- 4333. Please have the IBM
part number listed on the battery available prior to your call.
For Taiwan:
Please recycle batteries
For the European Union:
Notice: This mark applies only to countries within the European Union (EU).
Batteries or packing for batteries are labeled in accordance with European Directive
2006/66/EC concerning batteries and accumulators and waste batteries and
accumulators. The Directive determines the framework for the return and recycling
of used batteries and accumulators as applicable throughout the European Union.
This label is applied to various batteries to indicate that the battery is not to be
thrown away, but rather reclaimed upon end of life per this Directive.
Les batteries ou emballages pour batteries sont étiquetés conformément aux
directives européennes 2006/66/EC, norme relative aux batteries et accumulateurs
en usage et aux batteries et accumulateurs usés. Les directives déterminent la
marche à suivre en vigueur dans l’Union Européenne pour le retour et le recyclage
des batteries et accumulateurs usés. Cette étiquette est appliquée sur diverses
batteries pour indiquer que la batterie ne doit pas être mise au rebut mais plutôt
récupérée en fin de cycle de vie selon cette norme.
Overview xvii

In accordance with the European Directive 2006/66/EC, batteries and accumulators
are labeled to indicate that they are to be collected separately and recycled at end
of life. The label on the battery may also include a symbol for the metal concerned
in the battery (Pb for lead, Hg for the mercury, and Cd for cadmium). Users of
batteries and accumulators must not dispose of batteries and accumulators as
unsorted municipal waste, but use the collection framework available to customers
for the return, recycling, and treatment of batteries and accumulators. Customer
participation is important to minimize any potential effects of batteries and
accumulators on the environment and human health due to potential presence of
hazardous substances. For proper collection and treatment, contact your local IBM
representative.
For California:
Perchlorate Material - special handling may apply. See http://www.dtsc.ca.gov/
hazardouswaste/perchlorate.
The foregoing notice is provided in accordance with California Code of
Regulations Title 22, Division 4.5, Chapter 33. Best Management Practices for
Perchlorate Materials. This product, part, or both may include a lithium manganese
dioxide battery which contains a perchlorate substance.
Electronic emissions notices
The following statements apply to this IBM product. The statement for other IBM
products intended for use with this product will appear in their accompanying
manuals.
Federal Communications Commission (FCC) Statement
Note: This equipment has been tested and found to comply with the limits for a
Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are
designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. this equipment generates,
uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instructions contained in the installation manual, may cause
harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference, in which case the user will
be required to correct the interference at his own expense.
Note: Properly shielded and grounded cables and connectors must be used in
order to meet FCC emission limits. IBM is not responsible for any radio or
television interference caused by using other than recommended cables and
connectors, by installation or use of this equipment other than xvi IBM Internet
Security Systems as specified in the installation manual, or by any other
unauthorized changes or modifications to this equipment. Unauthorized changes
or modifications could void the user’s authority to operate the equipment.
xviii SiteProtector System: SP1001 Hardware Configuration