M86 Security HL User manual

M86 Threat Analysis Reporter
INSTALLATION GUIDE
Models: HL, SL, MSA
Software Version: 2.1.10
Document Version: 06.01.10

II M86 SECURITY INSTALLATION GUIDE
M86 THREAT ANALYSIS REPORTER
INSTALLATION GUIDE FOR HL, SL, MSA
© 2010 M86 Security
All rights reserved. Printed in the United States of America
Local: 714.282.6111 • Domestic U.S.: 1.888.786.7999 • International: +1.714.282.6111
This document may not, in whole or in part, be copied, photocopied, reproduced, trans-
lated, or reduced to any electronic medium or machine readable form without prior writ-
ten consent from M86 Security.
Every effort has been made to ensure the accuracy of this document. However, M86
Security makes no warranties with respect to this documentation and disclaims any
implied warranties of merchantability and fitness for a particular purpose. M86 Security
shall not be liable for any error or for incidental or consequential damages in connec-
tion with the furnishing, performance, or use of this manual or the examples herein.
Due to future enhancements and modifications of this product, the information
described in this documentation is subject to change without notice.
Trademarks
Other product names mentioned in this manual may be trademarks or registered trade-
marks of their respective companies and are the sole property of their respective man-
ufacturers.
Part# TAR-IG-HSM-100601

M86 SECURITY INSTALLATION GUIDE iii
CONTENTS
T HREAT A NALYSIS R EPORTER I NTRODUCTION .................................................1
About this Document...................................................................................................... 2
Conventions Used in this Document. ........................................................................... 2
S ERVICE I NFORMATION ....................................................................................3
M86 Security Corporate Headquarters (USA)............................................................... 3
M86 Security Taiwan....................................................................................................... 3
Procedures. .....................................................................................................................3
P RELIMINARY S ETUP P ROCEDURES .................................................................4
Unpack the Unit from the Carton................................................................................... 4
Select a Site for the Server............................................................................................. 5
Rack Mount the Server. .................................................................................................. 6
Rack Setup Precautions ...........................................................................................................6
Rack Mount Instructions for HL Servers .................................................................................. 7
Rack Setup Suggestions ...................................................................................................7
Identify the Sections of the Rack Rails ..............................................................................7
Install the Inner Rails .........................................................................................................7
Install the Outer Rails . .......................................................................................................8
Install the Server into the Rack ..........................................................................................9
Install the Server into a Telco Rack ................................................................................. 10
Rack Mount Instructions for SL Servers .................................................................................11
Rack Setup Suggestions .................................................................................................11
Install the Inner Slides .....................................................................................................11
Install the Outer Slides ....................................................................................................11
Install the Slide Assemblies to the Rack ..........................................................................12
Install the Chassis into the Rack . .................................................................................... 13
Rack Mount Instructions for MSA Servers ............................................................................. 14
Optional: Install the Chassis Rails ...................................................................................14
Optional: Install the Traditional UP Racks . ...................................................................... 16
Optional: Install the Open Racks . ....................................................................................18
Install the Chassis into the Rack . .................................................................................... 21
Install the SL or HL Server Bezel ........................................................................................... 22
Check the Power Supply. ............................................................................................. 23
Power Supply Precautions ..................................................................................................... 23
General Safety Information. ......................................................................................... 24
Server Operation and Maintenance Precautions ...................................................................24
AC Power Cord and Cable Precautions .................................................................................25
Electrical Safety Precautions .................................................................................................25
Motherboard Battery Precautions .......................................................................................... 26
I NSTALL THE S ERVER ....................................................................................27

CONTENTS
iv M86 SECURITY INSTALLATION GUIDE
Step 1: Initial Setup Procedures.................................................................................. 27
Quick Start Setup Requirements ............................................................................................27
LCD Panel Setup Requirements (for SL and HL Units) .........................................................27
Step 1A: Quick Start Setup Procedures...................................................................... 28
Link the Workstation to the Threat Analysis Reporter ............................................................ 28
Monitor and Keyboard Setup ........................................................................................... 28
Serial Console Setup ....................................................................................................... 28
HyperTerminal Setup Procedures ..........................................................................................30
Quick Start menu instructions ................................................................................................33
Login screen, password prompts ..................................................................................... 33
Configure Network Interface screen . ...............................................................................34
Configure default gateway screen ...................................................................................34
Configure Domain Name Servers screen ........................................................................35
Configure Host Name screen ..........................................................................................35
Time zone regional configuration screen .........................................................................36
Configure Wizard user screen ......................................................................................... 36
Quick Start Setup confirmation screen ............................................................................ 37
Administration menu ........................................................................................................37
System Status screen ............................................................................................................38
Log Off, Disconnect the Peripherals ................................................................................ 38
Step 1B: LCD Panel Setup Procedures....................................................................... 39
LCD Menu ..............................................................................................................................39
Main Menu .............................................................................................................................39
IP / LAN1 and LAN2 . ....................................................................................................... 40
Gateway ..........................................................................................................................40
DNS 1 and 2 ....................................................................................................................40
Host Name .......................................................................................................................41
Regional Setting (Time Zone, date, time) ........................................................................ 41
Admin Console Wizard User ............................................................................................41
Non-Quick Start procedures or settings ...........................................................................42
Current Patch Level ...................................................................................................42
Reboot........................................................................................................................42
Shutdown ...................................................................................................................42
LCD Options menu .................................................................................................................42
Heartbeat .........................................................................................................................42
Backlight ..........................................................................................................................43
LCD Controls ...................................................................................................................43
Step 2: Physically Connect the Unit to the Network.................................................. 44
Bandwidth Management ........................................................................................................44
Step 3: Register TAR and its Applications. ................................................................ 45
Access TAR via its LAN 1 IP Address ....................................................................................45
Accept the Security Certificate in Firefox ......................................................................... 46
Temporarily Accept the Security Certificate in IE . ...........................................................47
Accept the Security Certificate in Safari . .........................................................................48
Accept the End User License Agreement ..............................................................................49
Log in to the Threat Analysis Reporter Wizard ......................................................................49
Use the TAR Wizard to Specify Application Settings ............................................................. 50
Enter Main Administrator Criteria .....................................................................................50
Enter Bandwidth Range ...................................................................................................50
Enter Web Filter Setup Criteria ........................................................................................ 51
Enterprise Reporter registration ...................................................................................... 51
Save settings ...................................................................................................................51

CONTENTS
M86 SECURITY INSTALLATION GUIDE v
Step 4: Generate SSL Certificate................................................................................. 52
Generate a Self-Signed Certificate for TAR ........................................................................... 52
IE Security Certificate Installation Procedures .......................................................................54
Accept the Security Certificate in IE ................................................................................ 54
Windows XP or Vista with IE 7 or 8............................................................................54
Windows 7 with IE 8...................................................................................................57
Map TAR’s IP Address to the Server’s Host Name .........................................................58
C ONCLUSION ................................................................................................60
B
EST U SAGE P RACTICES ..............................................................................61
Threat Analysis Reporter Usage Scenarios. .............................................................. 61
I. Screen navigation exercise .................................................................................................61
Step A: Navigate panels in the Gauges section .............................................................. 61
Step B: Navigate panels in the Policy section .................................................................62
Step C: Navigate panels in the Report/Analysis section ..................................................63
Step D: Navigate panels in the Administration section . ...................................................63
II. Drill down into a gauge exercise ........................................................................................ 64
Step A: Select the gauge with the highest score .............................................................64
Step B: Investigate a user’s activity in a specified gauge ................................................66
Step C: Investigate the user’s Internet activity in other gauges ....................................... 67
III. Create a gauge exercise ...................................................................................................68
Step A: Access the Add/Edit Gauges panel .................................................................... 68
Step B: Add a URL Gauge ..............................................................................................69
IV. Create an email alert exercise ..........................................................................................71
Step A: Add a new alert ................................................................................................... 71
Step C: Select Email Alert Action ....................................................................................73
Step D: Receiving an email alert ..................................................................................... 74
LED I NDICATORS AND B UTTONS ...................................................................75
SL and MSA Units. ........................................................................................................ 75
Front LED Indicators and Buttons for Hardware Status Monitoring .......................................75
HL Unit. .......................................................................................................................... 76
Front LED Indicators and Buttons for Hardware Status Monitoring .......................................76
Rear LED Indicators for Hardware Status Monitoring ............................................................ 77
HL and SL Units. ........................................................................................................... 78
Front LED Indicators for Software and Hardware Status Monitoring .....................................78
R EGULATORY S PECIFICATIONS AND D ISCLAIMERS .........................................79
Declaration of the Manufacturer or Importer.............................................................. 79
Safety Compliance .................................................................................................................79
Electromagnetic Compatibility (EMC) .................................................................................... 79
Federal Communications Commission (FCC) Class A Notice (USA) .................................... 80
FCC Declaration of Conformity ..............................................................................................80
Electromagnetic Compatibility Class A Notice .......................................................................81
Industry Canada Equipment Standard for Digital Equipment (ICES-003) .......................81
Bureau of Standards Metrology and Inspection (BSMI) - Taiwan .................................... 81
EC Declaration of Conformity .................................................................................................82
European Community Directives Requirement (CE) .......................................................82

CONTENTS
vi M86 SECURITY INSTALLATION GUIDE
A PPENDIX : O PTIONAL E THERNET T AP I NSTALLATION .....................................83
Preliminary Setup Procedures..................................................................................... 83
Unpack the Ethernet Tap Unit from the Box ..........................................................................83
Other Required Installation Items ........................................................................................... 83
Install the Ethernet Tap Unit. ....................................................................................... 84
I NDEX ...........................................................................................................87

THREAT ANALYSIS REPORTER INTRODUCTION
M86 SECURITY INSTALLATION GUIDE 1
THREAT ANALYSIS REPORTER INTRODUCTION
Thank you for choosing to install the M86 Security Threat Analysis Reporter. This
product addresses user-generated Web threats such as excessive use of band-
width and inappropriate Internet usage, and provides network administrators tools
to monitor such threats so management can enforce corporate Internet usage poli-
cies.
Working in conjunction with M86 Security’s Web Filter, the Threat Analysis
Reporter translates end user Internet activity from the Web Filter’s logs into
dynamic graphical snapshots of network Internet traffic. Using remediation tools in
the console, administrators and management can then manage and control user-
generated Web threats in real time.
The TAR HL and SL server models include RAID technology for fault tolerance and
high performance.
Quick setup procedures—to implement the best usage practices for the Threat
Analysis Reporter—are included in the Best Usage Practices section that follows
the Conclusion of this guide.

THREAT ANALYSIS REPORTER INTRODUCTION ABOUT THIS DOCUMENT
2M86 SECURITY INSTALLATION GUIDE
About this Document
This document is divided into the following sections:
•Introduction - This section is comprised of an overview of the Threat Analysis
Reporter product and how to use this document
•Service Information - This section provides M86 Security contact information
•Preliminary Setup Procedures - This section includes instructions on how to
physically set up the Threat Analysis Reporter in your network environment
•Install the Server - This section explains how to configure the Threat Analysis
Reporter
•Conclusion - This section indicates that the installation steps have been
completed
•Best Usage Practices - This section includes scenarios and instructions for
implementing the best practices when using the Threat Analysis Reporter
•LED Indicators and Buttons - This section explains how to read LED indica-
tors and use LED buttons for troubleshooting the unit
•Regulatory Specifications and Disclaimers - This section cites safety and
emissions compliance information for the TAR models referenced in this docu-
ment
•Appendix: Optional Ethernet Tap Installation - This appendix explains how
to install the optional Ethernet Tap device on your network for bandwidth moni-
toring
•Index - An alphabetized list of some topics included in this document
Conventions Used in this Document
The following icons are used throughout this document to call attention to impor-
tant information pertaining to handling, operation, and maintenance of the server;
safety and preservation of the equipment, and personal safety:
NOTE: The “note” icon is followed by additional information to be considered.
WARNING: The “warning” icon is followed by information alerting you to a potential situa-
tion that may cause damage to property or equipment.
CAUTION: The “caution” icon is followed by information warning you that a situation has
the potential to cause bodily harm or death.
IMPORTANT: The “important” icon is followed by information M86 Security recommends
that you review before proceeding with the next action.
The “book” icon references the Threat Analysis Reporter User Guide. This icon is found in
the Best Practices section of this document.

SERVICE INFORMATION M86 SECURITY CORPORATE HEADQUARTERS (USA)
M86 SECURITY INSTALLATION GUIDE 3
SERVICE INFORMATION
The user should not attempt any maintenance or service on the unit beyond the
procedures outlined in this document.
Any initial hardware setup problem that cannot be resolved at your internal organi-
zation should be referred to an M86 Security solutions engineer or technical
support representative.
M86 Security Corporate Headquarters (USA)
Local : 714.282.6111
Domestic US : 1.888.786.7999
International : +1.714.282.6111
M86 Security Taiwan
Taipei Local : 2397-0300
Domestic Taiwan : 02-2397-0300
International : 886-2-2397-0300
Procedures
When calling M86 Security regarding a problem, please provide the representative
the following information:
• Your contact information.
• Serial number or original order number.
• Description of the problem.
• Network environment in which the unit is used.
• State of the unit before the problem occurred.
• Frequency and repeatability of the problem.
• Can the product continue to operate with this problem?
• Can you identify anything that may have caused the problem?

PRELIMINARY SETUP PROCEDURES UNPACK THE UNIT FROM THE CARTON
4M86 SECURITY INSTALLATION GUIDE
PRELIMINARY SETUP PROCEDURES
Unpack the Unit from the Carton
Inspect the packaging container for evidence of mishandling during transit. If the
packaging container is damaged, photograph it for reference.
Carefully unpack the unit from the carton and verify that all accessories are
included. Save all packing materials in the event that the unit needs to be returned
to M86 Security.
The carton should contain the following items:
• 1 Threat Analysis Reporter unit
• 1 AC Power Cord, 2 AC Power Cords for HL servers
• 1 Serial Port Cable
• 1 CAT-5E Crossover Cable
• Rack Mount Brackets (2)
• 1 End User License Agreement (EULA)
• 1 CD-ROM containing supplemental product applications and EULA
User guides can be obtained at http://www.m86security.com/support/
Threat-Analysis-Reporter/documentation.asp
NOTES: Threat Analysis Reporter servers come with a NetOptics 10/100 BaseT Ethernet
Tap kit to be installed at your option. For HL and SL servers, 1 bezel to be installed on the
front of the chassis also is included, as well as 1 spare parts kit. For HL servers, this kit
contains a hard drive and power supply. For SL servers, this kit contains a hard drive.
Please refer to the appendix of the user guide for information on replacing a hard drive or
power supply.
Inspect the server and accessories for damage. If the contents appear damaged,
file a damage claim with the carrier immediately.
WARNING: To avoid danger of suffocation, do not leave plastic bags used for packaging
the server or any of its components in places where children or infants may play with
them.