Juniper JSA7500 User manual

Juniper Secure Analycs Hardware Guide
Published
2021-05-24

Juniper Networks, Inc.
1133 Innovaon Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respecve owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publicaon without noce.
Juniper Secure Analycs Hardware Guide
Copyright © 2021 Juniper Networks, Inc. All rights reserved.
The informaon in this document is current as of the date on the tle page.
YEAR 2000 NOTICE
Juniper Networks hardware and soware products are Year 2000 compliant. Junos OS has no known me-related
limitaons through the year 2038. However, the NTP applicaon is known to have some diculty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentaon consists of (or is intended for use
with) Juniper Networks soware. Use of such soware is subject to the terms and condions of the End User License
Agreement ("EULA") posted at hps://support.juniper.net/support/eula/. By downloading, installing or using such
soware, you agree to the terms and condions of that EULA.
ii

Table of Contents
About This Guide | vii
1
Overview
Introducon | 2
JSA Appliance Models | 2
JSA Appliance Hardware Features | 3
2
Components
Hardware Components and Specicaons | 6
Hardware Specicaons | 6
JSA Transceiver Interface | 8
JSA7500 | 10
JSA7500 Front Panel | 10
JSA7500 Back Panel | 12
3
Planning
Site Preparaon | 15
Addional Hardware Requirements | 15
General Site Installaon Guidelines for the JSA Appliance | 16
JSA Appliance Rack Requirements | 17
4
Safety
General Safety and Regulatory Informaon | 20
General Safety Guidelines and Warnings | 20
Denions of Safety Warning Levels | 21
Fire Safety Requirements | 23
Qualied Personnel Warning | 24
Warning Statement for Norway and Sweden | 25
iii

Agency Approvals for JSA | 26
Radiaon and Laser Warnings | 28
Laser and LED Safety Guidelines and Warnings for JSA | 28
Radiaon from Open Port Apertures Warning | 31
Installaon and Maintenance Safety Informaon | 33
Installaon Instrucons Warning | 33
Chassis Liing Guidelines for JSA | 34
Ramp Warning | 35
Rack-Mounng Warnings | 35
Grounded Equipment Warning | 40
Maintenance and Operaonal Safety Guidelines and Warnings | 41
Power and Electrical Safety Informaon | 47
General Electrical Safety Guidelines and Warnings | 47
Prevenon of Electrostac Discharge Damage | 49
AC Power Electrical Safety Guidelines | 51
AC Power Disconnecon Warning | 52
DC Power Electrical Safety Guidelines | 53
DC Power Disconnecon Warning | 54
DC Power Grounding Requirements and Warning | 56
DC Power Wiring Sequence Warning | 57
DC Power Wiring Terminaons Warning | 59
Mulple Power Supplies Disconnecon Warning | 60
TN Power Warning | 61
Acon to Take Aer an Electrical Accident | 61
Compliance Statements | 63
Compliance Statements for EMC Requirements for JSA | 63
iv

Compliance Statements for Acousc Noise for JSA | 66
Compliance Statements for NEBS Standards for JSA7500 | 66
5
Installaon
Hardware Installaon Overview | 69
Rack-Mount Installaon Overview | 69
Required Tools and Parts for Installing the JSA Appliance | 69
Soware Installaon Overview | 71
JSA Components | 71
Browser Support | 73
Preparing the Network Hierarchy | 73
Connecng the JSA Appliance | 77
Grounding the JSA7500 Appliance | 77
Connecng JSA7500 to a DC Power Source | 80
Connecng to a Management Device | 82
Installing the JSA Appliance | 83
Installing the JSA Hardware | 83
Front-and-Rear-Mounng the JSA Appliance Flush to a Rack | 86
Front-and-Rear-Mounng the JSA Appliance Recessed in a Rack | 87
Front-and-Rear-Mounng the JSA7500 in a 4-Post Sliding Rail Rack | 88
Mid-Mounng the JSA Appliance in a Two-Post Rack | 92
Installing the CNA Module on the JSA7500 Appliance | 94
Conguring Basic Sengs | 96
Idenfying Network Sengs | 96
Idenfying Security Monitoring Devices and Flow Data Sources | 97
Idenfying Network Assets | 97
Conguring Secure Web Access | 99
Conguring the Basic Sengs | 99
v

Accessing the JSA Interface | 102
6
Maintenance
Maintaining the Hardware | 105
Field-Replaceable Units on the JSA Appliance | 105
Replacing the Fan on the JSA Appliance | 106
Replacing the Air Filter on the JSA7500 Appliance | 109
Replacing an AC Power Supply on the JSA Appliance | 110
Replacing AC Power Supply Cables on the JSA Appliance | 111
Replacing a DC Power Supply on the JSA Appliance | 112
Replacing DC Power Supply Cables on the JSA Appliance | 113
7
Troubleshoong
Monitoring Hardware Components | 115
RAID Array | 115
Power Supply | 116
Cooling Fans | 117
Maintaining the JSA7500 Air Filter | 117
Juniper Networks Technical Assistance Center | 119
Contacng Juniper Networks Technical Assistance Center | 119
Knowledge Base | 120
vi

About This Guide
Use this guide to install hardware and perform inial soware conguraon, roune maintenance, and
troubleshoong for JSA7500.
Aer compleng the installaon and basic conguraon procedures covered in this guide, refer to the
JSA soware documentaon for informaon about further soware conguraon. See Juniper Secure
Analycs.
Juniper Secure Analycs (JSA) appliances are designed to respond to the right threats at the right me
through eecve analysis of networks, events, and audit log les. JSA has the ability to idenfy
environmental anomalies in the network, an aack path, and the source of a threat. JSA provides
network remediaon for threat responses across all security products.
RELATED DOCUMENTATION
Hardware Guide
Quick Start Guide
Release Notes
Introducing JSA5500
Introducing JSA7500
STRM Series to JSA Series Migraon Guide
Installing JSA Using a Bootable USB Flash-Drive Technical Note
vii

1
PART
Overview
Introducon | 2

CHAPTER 1
Introducon
IN THIS CHAPTER
JSA Appliance Models | 2
JSA Appliance Hardware Features | 3
JSA Appliance Models
Juniper Secure Analycs (JSA) appliances are designed to respond to the right threats at the right me
through eecve analysis of networks, events, and audit log les. JSA has the ability to idenfy
environmental anomalies in the network, an aack path, and the source of a threat. JSA provides
network remediaon for threat responses across all security products.
The JSA appliances use two drivers, Security Informaon Management (SIM) and Security Event
Management (SEM), for security analysis of external and internal threats. SIM provides reporng and
analysis of data from host systems, applicaons, and security devices to support security policy
compliance management, internal threat management, and regulatory compliance iniaves. SEM
improves security incident response capabilies by processing data from security devices and network
devices. It helps network administrators to provide eecve responses to external and internal threats.
Table 1 on page 2 lists the Juniper Secure Analycs (JSA) appliance models.
Table 1: JSA Appliance Models
Model Device Type Memory Storage Conguraon
JSA3800 Low memory 64 GB Six 900 GB HDDs, RAID10
For more informaon on
JSA3800, see JSA3800
Hardware Guide
2

Table 1: JSA Appliance Models (Connued)
Model Device Type Memory Storage Conguraon
JSA5800 High memory 128 GB Eight 900 GB HDDs, RAID10
For more informaon on
JSA5800, see JSA5800
Hardware Guide
JSA7500 High memory 128 GB 28 drives of 900 GB HDDs,
RAID10
JSA7800 High memory 128 GB Sixteen 2 TB HDDs, RAID6
For more informaon on
JSA7800, see JSA7800
Hardware Guide.
RELATED DOCUMENTATION
JSA Appliance Hardware Features | 3
Addional Hardware Requirements | 15
JSA Appliance Hardware Features
The Juniper Secure Analycs (JSA) appliance provides the following features:
• Monitor ulity for power supply unit (PSU) and fans
• Add setup logs automacally
• Support high availability (HA)
• Hot-swappable hard disk supporng RAID
•Automac RAID rebuild on HDD swap
3

• Support hot-swappable dual-AC or dual-DC power supplies with a redundant conguraon in the
chassis
RELATED DOCUMENTATION
Browser Support | 73
General Safety Guidelines and Warnings | 20
Required Tools and Parts for Installing the JSA Appliance | 69
4

2
PART
Components
Hardware Components and Specicaons | 6
JSA7500 | 10

CHAPTER 2
Hardware Components and Specicaons
IN THIS CHAPTER
Hardware Specicaons | 6
JSA Transceiver Interface | 8
Hardware Specicaons
Table 2 on page 6 lists the hardware specicaons for the JSA7500 appliance.
Table 2: Hardware Specicaons
Specicaon JSA7500
Dimensions (D x W x H) 597.5 mm x 438.4 mm x 88 mm (23.52-in. x 17.26-in. x 3.5-in.)
Weight 60 lb
Warranty 1 year HW, 90 days SW
Fans 8 x 80 mm redundant hot swap
Panel Display • LEDs: Power, HW Alert
• HD Acvity and Fail LED on drive tray
Rack mountable Front-and-rear or mid-mount, ush or recessed mounng
6

Table 2: Hardware Specicaons (Connued)
Specicaon JSA7500
Ports 1 console, 4x RJ-45 10/100/1000
Power AC Power Supply
• 100 V to 240 V, 50 - 60 Hz, 750 W hot-swap module
•Eciency
• Typical 85% at 115 V, 12 V / 62.5 A 5 Vsb / 3.0 A
DC Power Supply
• 750 W hot-swap module
• -40 V to -60 V
• 20.0 A
(Unit ships with dual DC supplies)
Environmental specicaons
Temperature operang 5° C – 40° C
41° F – 104° F
Temperature storage -40° C – 70° C
-40° F – 158° F
Humidity operang 8% - 90% non-condensing
Humidity storage 5% - 95% non-condensing
Altude operang 10000  max.
7

Table 2: Hardware Specicaons (Connued)
Specicaon JSA7500
Altude storage 40000  max.
RELATED DOCUMENTATION
JSA Appliance Models | 2
JSA Appliance Hardware Features | 3
Addional Hardware Requirements | 15
JSA Transceiver Interface
Table 3 on page 8 lists the dierent types of transceiver interfaces available on the various types of
Juniper Secure Analycs (JSA) appliances.
Table 3: JSA Appliance Transceiver Interface Types
Transceiver Type Card Model Model Descripon
SFP+ • UNIV-SFPP-DUAL-SR
• UNIV-SFPP-DUAL-LR
JSA7500 • UNIV-SFPP-DUAL-SR
Dual Rate 10GBASE-LR/
1000BASE-LX
• UNIV-SFPP-DUAL-LR
Dual Rate 10GBASE-SR/
1000BASE-SX
IOC UNIV-10GE-2SFPP-H JSA7500 Network adapter with support
for dual rate SFP+ opcs for
JSA7500
8

Table 3: JSA Appliance Transceiver Interface Types (Connued)
Transceiver Type Card Model Model Descripon
UNIV-10GE-2SFPP JSA7500 Network adapter with support
for dual rate SFP+ opcs
RELATED DOCUMENTATION
JSA Appliance Models | 2
Installing the CNA Module on the JSA7500 Appliance | 94
Hardware Specicaons | 6
9

CHAPTER 3
JSA7500
IN THIS CHAPTER
JSA7500 Front Panel | 10
JSA7500 Back Panel | 12
JSA7500 Front Panel
The JSA7500 appliance has a 2-U, rack-mountable chassis redundant DC power supplies (oponal AC
power supplies), twenty-eight hot-swappable hard drives in a RAID10 array, 128 GB of memory, and
four Gigabit Ethernet interfaces.
Figure 1 on page 10 shows the front panel components of the JSA7500 appliance.
Figure 1: JSA7500 Front Panel
Table 4 on page 11 lists the front panel components of the JSA7500 appliance.
10

Table 4: JSA7500 Front Panel Components
Callout Component Descripon
1 ESD wrist strap grounding jack Connect the equipment end of your
ESD grounding strap to the ESD
point on the chassis to minimize the
potenal for electrostac discharge
(ESD) damage.
2 Hard drives 24 drives of 900 GB HDDs (Drive0 -
Drive23).
3 Chassis LEDs Power (green)—Indicates that the
appliance is powered on.
4 Hard disk acvity (yellow)—Indicates
the hard disk is in use (wring or
reading data).
5 Fault (red)—Indicates that a fan,
power supply, or temperature alarm
has occurred.
6 Front bezel with air lter Provides opmum cooling.
RELATED DOCUMENTATION
JSA Appliance Models | 2
JSA7500 Back Panel | 12
11

JSA7500 Back Panel
Figure 2 on page 12 shows the back panel components of the JSA7500 appliance.
Figure 2: JSA7500 Back Panel
Table 5 on page 12 lists the back panel components of the JSA7500 appliance.
Table 5: JSA7500 Back Panel Components
Callout Component Descripon
1 Hard drive 4 drives of 900 GB HDDs:
• Drive24 (top le) and Drive25
(boom le)
• Drive26 (top) and Drive27 (boom)
2 Network port 0 RJ-45 Ethernet 10/100/1000 ports
3 Network port 1 RJ-45 Ethernet 10/100/1000 ports
4 Network port 2 RJ-45 Ethernet 10/100/1000 ports
12

Table 5: JSA7500 Back Panel Components (Connued)
Callout Component Descripon
5 IOC expansion slots Two slots for addional IOC expansion
with 2-port dual-rate 1GbE/10GbE
SFP+
6 Network port 3 RJ-45 Ethernet 10/100/1000 ports
7 USB ports Accepts a USB storage device
8 DB-9 Serial Console port one serial console port
9 Power switch Provides power to all components
10 Redundant power supply Provides power to all components
11 Redundant power supply Provides power to all components
RELATED DOCUMENTATION
JSA Appliance Models | 2
JSA7500 Front Panel | 10
13