McAfee NS9100 User manual

NS9x00 Quick Start Guide
Revision E
McAfee® Network Security Platform
This quick start guide explains how to quickly set up and activate your McAfee® Network Security Platform
NS-series Sensor in in-line mode.
All product documentation referenced in this quick start guide is found on the McAfee Service Portal.
The NS9100/NS9200 Sensor model
Figure 1 Sensor front panel
1Console port (1)
2QSFP+ 40 Gigabit Ethernet ports (2)
3Two slots for I/O modules (Any combination of the interface modules can be used)
• QSFP+ 40 Gigabit Ethernet ports (4)
• QSFP+ 40 Gigabit Ethernet ports (2)
1

• SFP/SFP+ 1/10 Gigabit Ethernet Monitoring ports (8)
• RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (6)
4RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (8)
The supported transceiver modules are QSFP+, SFP+ (M2M and SM), SFP Fiber (MM and SM) and SFP Copper.
Figure 2 Sensor rear panel
1USB ports (2) 4RJ-45 100/1000/10000 Management port
(Mgmt) (1)
2Power supply A (Pwr A) 5RJ-45 100/1000/10000 Response port (R1) (1)
3Power supply B (Pwr B) (optional on NS9100) 6RJ-45 Auxiliary port (Aux) (1)
The NS9300 Sensor model
Figure 3 Sensor front panel
2

The NS9300 Sensor consists of a Primary Sensor, NS9300P, and a Secondary Sensor, NS9300S.
1Console ports on the NS9300P and NS9300S Sensors (2)
2QSFP+ 40 Gigabit Ethernet Interconnect ports (4). G0/1 and G0/2 on NS9300P Sensor and G4/1 and G4/2 on
NS9300S Sensor.
3Four slots for I/O modules (Any combination of the interface modules can be used)
• QSFP+ 40 Gigabit Ethernet ports (4)
• QSFP+ 40 Gigabit Ethernet ports (2)
• SFP/SFP+ 1/10 Gigabit Ethernet Monitoring ports (8)
• RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (6)
4RJ-45 10/100/1000 Mbps Ethernet Monitoring ports (16)
The supported transceiver modules are QSFP+, SFP+ (MM and SM), SFP Fiber (MM and SM) and SFP Copper.
Figure 4 Sensor rear panel
1USB ports (4)
2Power supply A (Pwr A)
3Power supply B (Pwr B)
4RJ‑45 100/1000/10000 Management port (Mgmt) (2). Mgmt on NS9300S Sensor is used as an interconnect
port.
5RJ‑45 100/1000/10000 Response port (R1) (2). R1 on NS9300P Sensor is used as an interconnect port.
6RJ‑45 Auxiliary ports (Aux) (2)
3

Verify the contents in the box
The following accessories are shipped in the NS-series Sensor crate:
• Sensor
• Power supply
• Power cords. McAfee provides a standard and international power cables.
• Set of rack mounting rails
• Printed Quick Start Guide
Verify the hardware and software requirements
The following hardware requirements are to be met. For more information, see the Installation Guide.
The following are the system requirements for a Manager server.
Minimum required Recommended
OS Any of the following:
• Windows Server 2008 R2 Standard or Enterprise Edition,
English OS, SP1 (64 bit) (Full Installation)
• Windows Server 2008 R2 Standard or Enterprise Edition,
Japanese OS, SP1 (64 bit) (Full Installation)
Only X64 architecture is supported.
Same as the minimum
required.
Memory 4GB 8GB
CPU Server model processor such as Intel Xeon Same
Disk space 100GB 300GB or more
Network 100Mbps card 100/1000/10000 Mbps card
Monitor 32-bit color, 1024 x 768 display setting 1280 x 1024
The following are the system requirements for client systems connecting to the Manager application.
Minimum Recommended
OS Windows 7
RAM 2 GB 4 GB
CPU 1.5 GHz processor 1.5 GHz or faster
Browser • Internet Explorer 8.0 or 9.0.
• Mozilla Firefox 4.0 and above.
Internet Explorer 9.0 .
Minimum Recommended
OS Windows XP SP3.
RAM 1 GB 2 GB
Browser • Internet Explorer 7.0 or 8.0.
• Mozilla Firefox 4.0 and above.
Internet Explorer 8.0
4

The following software are to be installed.
• Sensor image
• Manager image
• Signature set
Install the slide rails
Follow this procedure to assemble the slide rails and position the Sensor on it.
Task
1Rack installation - Remove inner member from slides
1front bracket 4inner member
2outer member 5safety locking pin
3rear bracket 6release button
Pull the release button to remove inner member from slides.
5

2Rack installation - Install slides to rack
Align brackets to desired vertical position on the rack and insert the fasteners. Move the ball retainer to the
front of slides.
Do not handle the NS-series appliance by the mounting brackets
3Chassis installation - Install inner member to chassis
Align inner member key holes to standos on chassis, move inner member following the direction the
picture.
6

4Chassis installation - Install chassis to xed slides
Pull the release button in the inner member to release the lock and allow the chassis to close.
5Chassis removal - Extend slides
Fully extend the slides until it is in the locked position, pull the release button to release lock and disconnect
inner member from slides.
7

6Chassis removal - Remove inner member from chassis
Press safety locking pin to release inner member from chassis.
While installing NS9300, this procedure is to be followed for both the primary and the secondary Sensors.
Install the interface modules
You can purchase the following interface modules and insert them into the relevant slots on your NS-series
Sensor.
• 2-port QSFP+ 40 Gigabit interface module
• 4-port QSFP+ 40 Gigabit interface module
• 4-port SFP/SFP+ 10/1 Gigabit 8.5 µm (SM) interface module with internal fail-open
• 4-port SFP/SFP+ 10/1 Gigabit 50/62.5 µm (MM) interface module with internal fail-open
• 8-port SFP/SFP+ 1/10 Gigabit interface module
• 6-port RJ-45 10/100/1000 Mbps Ethernet interface module
8

Task
1Remove the module from its protective packaging.
2Grip the sides of the module with your thumb and fore-nger and insert the module into the slot.
3Drive in the screws xed on the sides of the module to attach it to the Sensor.
Cable the Management and Console ports
Task
1
Plug a Category 5e Ethernet cable in the Management port (labeled Mgmt):
aon the rear panel of the NS9100 and NS9200 Sensors.
bon the rear panel of the NS9300P Sensor.
2Plug the other end of the cable into the network device connected to your Manager server.
3
9

Plug the DB9 Console cable(s) into the Console port (labeled Console):
aon the front panel of the NS9100 and NS9200 Sensors.
bon the front panel of the NS9300P and NS9300S Sensors.
4Connect the other end of the Console port cable directly to a COM port of the PC or terminal server you will
be using to congure the Sensor (for example, a PC running correctly congured Windows Hyperterminal
software). You must connect directly to the console for initial conguration; you cannot congure the Sensor
remotely.
Terminal servers are provided for console access.
The required settings for Hyperterminal are:
• Baud rate: 115200 • Stop Bits: 1
• Number of Bits: 8 • Control Flow: None
• Parity: None
5Plug one end of the power cable into the power inlet and plug the other end into a power source. The
Sensor ships with standard US power and international cables.
The NS-series Sensor does not have a power switch; you need to only plug the power cable into a power
source.
Cable the Monitoring ports
This procedure describes how to cable a Sensor to run in In-line mode.
Task
1
Plug the cable appropriate for use with your transceiver module into one of the Monitoring ports labeled x
(for example, 1).
2Plug the cable appropriate for use with your transceiver module into one of the Monitoring ports labeled y
(for example, 2).
3Connect the other end of each cable to the network devices that you want to monitor. (For example, if you
plan to monitor trac between a switch and a router, connect the cable connected to 1 to the router and
the one connected to 2 to the switch.)
On the NS9300P Sensor, do not use ports G0/1 and G0/2 and on the NS9300S Sensor, do not use ports G4/1
and G4/2. These ports are reserved for interconnection between the NS9300P and NS9300S Sensors.
10