NETASQ U Series Reference guide

Copyright NETASQ 2014
NETASQ Multi-function Firewall
PRESENTATION AND INSTALLATION
OF NETASQ PRODUCTS
U SERIES –S Models
Document version: 1.2
Reference: naengde_product-installaton_S-model
Publication date: January 2014

U SERIES –S Models
CONTENTS
Copyright NETASQ 2014
Presentation and Installation Manual
2
CONTENTS
FOREWORD 3
General conditions of use and user license................................................................................................................. 3
Assumptions derived from the Common Criteria........................................................................................................ 9
Regulations................................................................................................................................................................10
INTRODUCTION 11
UPON RECEIVING YOUR FIREWALL 13
Integrity of the product .............................................................................................................................................13
Contents of the packaging .........................................................................................................................................15
SAFETY RULES 16
Before connecting to the mains power supply...........................................................................................................16
Warranty and safety rules .........................................................................................................................................16
PRESENTATION OF "S" MODELS 18
General points ...........................................................................................................................................................18
Presentation of the "S" U range.................................................................................................................................20
U30S model................................................................................................................................................................. 20
U70S model................................................................................................................................................................. 21
U150S model............................................................................................................................................................... 21
U250S model............................................................................................................................................................... 21
U500S model............................................................................................................................................................... 22
U800S model............................................................................................................................................................... 22
RJ45 Ethernet connectors ..........................................................................................................................................23
Ethernet connectors for optional fiber or copper modules ........................................................................................24
INSTALLATION PRECAUTIONS 25
Conditions of use.......................................................................................................................................................25
Installation in a 19” cabinet .......................................................................................................................................26
Connecting to the mains............................................................................................................................................28
Connecting for the administration of the product .....................................................................................................29
Connecting to the network........................................................................................................................................29
INITIAL CONNECTION TO THE PRODUCT 31
Requirements ............................................................................................................................................................31
Connection ................................................................................................................................................................32
Configuration.............................................................................................................................................................32
Documentation..........................................................................................................................................................35
Assistance..................................................................................................................................................................35
APPENDIX A: UPDATING THE LICENSE 36
APPENDIX B: RESETTING THE FIREWALL 38
APPENDIX C: EXTERNAL LOG STORAGE ON SD CARDS 39
APPENDIX D: FIBER AND COPPER MODULES 41
APPENDIX E: INSTALLING THE 3G MODEM 43

Copyright NETASQ 2014
Presentation and Installation Manual
3
U SERIES –S Models
FOREWORD
FOREWORD
You are strongly advised to read this whole document before installing a NETASQ UTM
product.
This installation guide presents the S Models of NETASQ’s U Series and explains how to
conduct the physical installation needed for integrating an appliance into your network
architecture. It also provides the necessary details for adding extra network modules to
U500S and U800S products.
The aim of this manual is to allow you to quickly integrate a NETASQ firewall into your
network but does not provide any information on how to configure the product. For help
in configuration, there is a full user guide in the form of online help, which you can look
up at http://documentation.netasq.com.
Alternatively, you can download a document that contains the full help file from the
Document Base, accessible from your Secure-access area (please refer to the chapter
Documentation).
Products concerned
U30S, U70S, U150S, U250S, U500S and U800S
General conditions of use and user license
Preamble
These conditions (points 1-8) are intended to define the terms and conditions applicable
to the use of the NETASQ Product(s) by the Customer.
These Conditions of Use apply to the following Products: U30S, U70S, U150S, U250S,
U500S and U800S and their possible modifications and updates.
By opening the packaging of the Product(s), installing the administration software
and/or registering the Product(s), the Customer acknowledges full acceptance of these
General Conditions of Use and the User License for the Product(s).

Copyright NETASQ 2014
Presentation and Installation Manual
4
U SERIES –S Models
FOREWORD
1. Contractual documents
These Conditions, supplemented by the NETASQ General Sales Terms and Conditions and
the Technical Support Charter, define the scope of the obligations that exist between
NETASQ and the Customer. They supersede any prior oral or written commitment that
may be contradictory pertaining to the subject of the Conditions.
These Conditions have been drafted by taking into account the current state of NETASQ
technology at the time of these were written.
However, NETASQ applies a policy of ongoing development in order to continuously
upgrade the Products to better protect Customers. Therefore, these Conditions of Use
may become obsolete. Accordingly, NETASQ disclaims any liability for inaccuracies that
may appear in this document and the damage that could result from such inaccuracies.
NETASQ reserves the right:
-to make changes and improvements to any Product described in this document, without any
prior notice
-to modify or replace these Conditions at any time
2. Warranties and Liability
1) As of the date of activation of the Product(s), NETASQ guarantees the hardware of the
Product(s), their defects (parts and labor) for a period consistent with the laws of the
country.
As of the date of activation of the Product(s), and unless a maintenance contract has
been signed, NETASQ only guarantees the software of the Product(s), hereinafter
referred to as "the software", for a period of ninety (90) days against serious defects
and malfunctions compared to the manual as it exists on the date of delivery and
exclusively in environments that conform to the prerequisites.
In case of hardware and/or software defects, NETASQ will exercise its discretion to:
- Either repair,
- Or replace the Product.
Beyond the ninety-day (90) software warranty period and without signing a
maintenance contract, the Product(s) is (are) provided "as is" without any kind of
warranty, either express or implied.
The signing of a maintenance contract is necessary for the proper functioning of the
Product(s), insofar as maintenance enables updating the security software associated
with the Product(s). Without maintenance, the Customer is warned that the security
functions of the Product(s) will not provide protection against the most recent
threats.
It is advisable to refer to the terms of the maintenance contract in the case where
such a contract has been signed.

Copyright NETASQ 2014
Presentation and Installation Manual
5
U SERIES –S Models
FOREWORD
2) In addition, in the case where the Customer is proven to be at fault, NETASQ shall only
be held responsible for repairing the financial consequences of any direct and
foreseeable damage resulting from the use of the Product(s).
The responsibility of NETASQ for any direct damage is limited to the amount received
by NETASQ for the purchase of the Product that actually caused the damage.
In no event can NETASQ be held responsible for damage indirectly related to the use
of the Product(s), including any operating losses due to an interruption in service or
any other cause, suffered by the Customer or by any other third parties, even if
NETASQ has been advised of the possibility of such damage.
NETASQ can in no way be held responsible for any loss of data or revenue, as well as
any particular, incidental, consequential or indirect damage arising from the use of
the Product(s) and its associated documentation.
3) The Customer is solely responsible for ensuring that the Product(s) meet(s) his or her
needs.
4) NETASQ does not guarantee that the use of the Product(s) can be uninterrupted or
free of any errors.
5) Similarly, NETASQ disclaims any liability for improper installation, setup, configuration
and/or improper use of the Product(s). NETASQ does not guarantee use by the
Customer that does not comply with the prerequisites and conditions of use
described herein. The same holds for all the consequences of an action, inaction,
error, omission or default attributed to the Customer or any service provider
commissioned by the Customer. All of the installation, setup and configuration tasks
must be performed by the Customer according to the state of the art and the
regulations in force.
When the Customer or any service provider commissioned by the Customer takes the
initiative to download, launch, install or perform any other procedure for updating the
Product(s) offered by NETASQ, NETASQ cannot be responsible for the Customer's
failure to activate the updates or for failure to do so by any service provider
authorized by the Customer.
The Customer or any service provider commissioned by the Customer must comply
with the requirements of the documentation for the installation of the NETASQ
Product(s), including the safety rules, precautions for installation and the
prerequisites for connections that are communicated herein. The Customer shall be
held exclusively responsible for any failure to comply with these rules.
6) Furthermore, the Customer shall be held exclusively responsible for any fraudulent or
illegal use of the Product(s), including any such use by its agents or service provider
commissioned by the Customer, both with regard to that of NETASQ as well as third
parties who have suffered damage due to this fact.

Copyright NETASQ 2014
Presentation and Installation Manual
6
U SERIES –S Models
FOREWORD
3. User license
By this license, NETASQ grants the Customer who has registered the Product the
personal, non-exclusive, non-transferable and non-assignable right to use the Product for
the duration of subscription.
The Customer may only use the Product(s) in accordance with its documentation. In
particular, the license related to the Product(s) is granted for the sole purpose of enabling
the Customer to use the Product, and for no other purpose. Thus, the Customer agrees to
use the Product(s) according to its intended purpose.
This license applies to updates.
In addition, the Customer agrees not to make any temporary or permanent copy of the
Product(s) or instructions associated with the Product by any means whatsoever, as well
as any translation, adaptation, arrangement, decompilation or modification, particularly
for the purpose of creating similar solutions.
NETASQ guarantees that it holds all the intellectual property rights or the authorizations,
assignments or licenses of any rights of third parties, on the Product(s), allowing it to
grant the Customer use of said Product(s).
4. Intellectual Property
Copyright © NETASQ 2014. All rights reserved.
Any copying, adaptation or translation of this material without prior authorization is
prohibited.
Patent
The Product(s) include(s) ASQ technology, for which NETASQ holds international patents.
5. Data
1) Some NETASQ Products enable retrieving and analyzing the history of connections and logs.
The data thus analyzed enables monitoring the activity of the internal users and can provide
personal information. The laws in force in the Customer's country may impose certain
measures such as administrative declarations, for instance. The Customer acknowledges that it
is its responsibility to comply with the legal obligations in force in its own country.
2) Certain NETASQ products provide data encryption mechanisms, the use of which may be
prohibited or restricted by the laws in force in the Customer's country. The Customer
acknowledges that it has a responsibility to comply with the legal obligations applicable for
this type of device.
3) NETASQ disclaims all liability for any use of the Product(s) which does not comply with the
local laws of the Customer's country. NETASQ cannot be responsible for the Customer's failure
to comply with the law.

Copyright NETASQ 2014
Presentation and Installation Manual
7
U SERIES –S Models
FOREWORD
4) In general, the Customer guarantees NETASQ that it has met all of its obligations in terms of its
national laws and with regard to personal data, and that, where appropriate, it has informed
the physical individuals concerned by the use made of said personal data. As such, the
Customer guarantees NETASQ against any claims or complaints from a person whose personal
data are replicated and communicated to NETASQ.
5) In no event shall NETASQ be held responsible for the quality, integrity, completeness and
accuracy of the data provided by the Customer, nor by the content and data that may be
available on the Product(s).
6. Force majeure
Neither party may be held liable for a breach of any of its obligations, if such breach is
due to any of the following: a government decision, including any withdrawal or
suspension of authorizations whatsoever, a full or partial internal or external strike at the
company, a fire, a natural disaster, a state of war, a total or partial interruption or
blockage of telecommunication or electrical networks, an act of computer hacking or, in
general, any other event of force majeure as defined by the courts.
The party affected by the event shall immediately inform the other party of its inability to
render its service. The suspension of obligations or delay shall in no case be a cause of
liability for non-performance of the obligation in question, or result in the payment of
damages or late penalties.
7. Exporting
NETASQ informs that the Products may contain technology and software subject to US
and EU laws on the control of exports, as well as subject to the laws of the country where
the Products are delivered or used. In accordance with these laws, the Products may not
be sold, leased or transferred to users or countries subject to restriction. The Retailer,
Customer, or any other service provider commissioned by the Customer agrees to abide
by and comply with these laws.
The Products fall into the category of dual-use Products, which means that they can be
used in a civilian or military context. As dual-use Products, they are subject to (EU)
Regulation No. 428/2009 of the European Council on May 5, 2009, amended by EU
Regulation No. 1232/2011 and Regulation No. 388/212 of the European Parliament and
the European Council, respectively, on November 16, 2011 and April 19, 2012.
In order to comply with the international obligations of the European Union as well as
those of its member states, the export of dual-use goods is subject to control and
authorization.
NETASQ has taken all the steps required by the French authorities to obtain the export
licenses and authorizations for each country to which it exports. This means that NETASQ
is allowed to export its products, but that does not mean that a third party and/or
NETASQ partner can export NETASQ Products to the recipient countries indicated in the
export licenses granted to NETASQ only.

Copyright NETASQ 2014
Presentation and Installation Manual
8
U SERIES –S Models
FOREWORD
Any Distributor, Retailer or other NETASQ partner, regardless of the name given to it, is
warned that if it exports NETASQ Products outside the European Union, it must file its
own requests with the competent authorities in order to obtain an export license. If a
Product has been exported outside the EU without authorization, NETASQ recommends
that the Distributor, Retailer, Partner or other party concerned immediately contact the
competent authority in order to regularize the situation.
Due to the nature of the Products, cryptology processes are implemented. NETASQ has
obtained the required authorizations. It is the responsibility of the Distributor, Retailer or
other to make a statement or request authorization from the National Agency for IT
Systems Security (ANSSI, in France) or the competent body (in other countries) for the
Product and the territory concerned. NETASQ agrees to provide the information and
assistance that may be reasonably required for the guarantees necessary in order to
obtain these authorizations.
8. Applicable Law - Assignment of Jurisdiction
ANY DISPUTE RELATING TO ALLEGED DEFECTS IN THE SOFTWARE AND/OR THE
PRODUCT(S) AND/OR RELATING TO THE INTERPRETATION OR THE APPLICATION OF THE
PRESENT GENERAL CONDITIONS OF USE AND USER LICENSE MUST BE SUBMITTED TO
THE JURISDICTION OF THE COURTS IN THE PLACE WHERE THE NETASQ HEADQUARTERS
ARE LOCATED, AND FRENCH LAW IS EXCLUSIVELY APPLICABLE.

Copyright NETASQ 2014
Presentation and Installation Manual
9
U SERIES –S Models
FOREWORD
Assumptions derived from the Common Criteria
DEFINITION
The common criteria evaluate (on an Evaluation Assurance Level or EAL scale of 1 to 7) a
product’s capacity to provide security functions for which it had been designed, as well as
the quality of its life cycle (development, production, delivery, putting into service,
updates). They are a convergence of different security-related quality standards devised
since 1980:
Orange Book –DoD
CTCPEC (Canadian Trusted Computer Product Evaluation Criteria)
ITSEC (Information Technology Security Evaluation Criteria)
TCSEC (Trusted Computer System Evaluation Criteria)
Introduction
The installation of a Firewall often comes within the scope of setting up a global security
policy. To ensure optimal protection of your assets, resources or information, it is not only
a matter of installing a Firewall between your network and the Internet. This is mainly
because the majority of attacks come from the inside (accidents, disgruntled employees,
dismissed employee having retained internal access, etc.). And one would also agree that
installing a steel security door defeats its purpose when the walls are made of paper.
Backed by the Common Criteria, NETASQ advises taking into consideration the
assumptions of use for the Administration Suite and Firewall product stated below. These
assumptions set out the usage requirements by which to abide in order to ensure that
your Firewall operates within the context of the common criteria certification.
For further information on Common Criteria compliance, please go to:
http://documentation.netasq.com/common-criteria.html
Assumptions on physical security measures
NETASQ firewall-VPN appliances are installed and stored in compliance with the state of
the art regarding sensitive security devices: secured access to the premises, shielded
twisted pair cables, labeled cables, etc.

Copyright NETASQ 2014
Presentation and Installation Manual
10
U SERIES –S Models
FOREWORD
Assumptions on organizational security measures
A particular administrative role –that of the super-administrator –has the following
characteristics:
-Only the super-administrator is permitted to connect via the local console on NETASQ
firewall-VPN appliances, and only when installing the Firewall or for maintenance
operations, apart from actual use of the equipment.
-He is in charge of defining the profiles of other administrators,
-All access to the premises where the appliances are stored has to be under his supervision,
regardless of whether the access is due to an intervention on the appliance or on other
equipment. He is responsible for all interventions carried out on appliances.
Assumptions on the IT security environment
NETASQ firewall-VPN appliances are installed in accordance with the current network
interconnection policy and are the only passageways between the different networks on
which the control policy for traffic has to be applied.
Connection peripherals (modems) are prohibited on “trusted” networks.
Regulations
WEEE (Waste Electrical and Electronic Equipment) directive
All NETASQ products that are subject to the WEEE directive will be marked with the
mandated "crossed-out wheeled bin" symbol (as shown at left) for items shipped on
or after August 13, 2005. This symbol means that the product meets the requirements
laid down by the WEEE directive with regards to the destruction and reuse of waste
electrical and electronic equipment.
RoHSRestriction of Hazardous Substances) directive
For further information on RoHS compliance or on NETASQ’s recycling program
(WEEE), please refer to:
www.netasq.com/recycling.html
Certifications
Part 15 Subpart B

Copyright NETASQ 2014
Presentation and Installation Manual
11
U SERIES –S Models
INTRODUCTION
INTRODUCTION
Thank you for choosing NETASQ. Designed to protect networks of all sizes, NETASQ’s U
Series S-model appliances are pre-configured: no hardware or software installation is
needed and no UNIX knowledge is necessary, just a user-friendly configuration via a
graphical interface.
The “S” U range consists of six products: U30S, U70S, U150S, U250S, U500S and U800S.
The architecture of the new-generation U Series was specifically designed to maximize
the performance of the NETASQ protection engine. Complex application traffic is
therefore inspected at high speed at the heart of the network and without discernible
latency (less than 1 millisecond).
Hardware acceleration for data encryption also anticipates the multiplication of high-
speed VPN access.
The NETASQ UTM appliance allows the definition of incoming or outgoing access control
rules. Its concept is simple: any incoming or outgoing transmission passing through the
NETASQ Firewall is monitored, authorized or denied according to the rules, packet by
packet.
The NETASQ Firewall is based on a sophisticated packet filtering mechanism that provides
a high level of security. All NETASQ Firewalls integrate the ASQ (Active Security
Qualification) technology developed by NETASQ. This technology allows detecting and
blocking hacking attempts in real time –illegal packets, denial of service attempts,
anomalies in a connection, port scans, buffer overflows, etc.
In the event of an intrusion attempt, depending on the instructions given in the security
policy, the NETASQ Firewall blocks the transmission, generates an alarm and stores the
information linked to the packet which had set off the alarm. As such, you would be able
to analyze the attack and trace its source.
The Firewall not only allows preventing, or restricting to just certain services, incoming
connections on your network, but also allows monitoring the use of the Internet by your
internal users (HTTP, FTP, SMTP...). You may also monitor your users by authenticating
them via an internal or external authentication database.
The NETASQ Firewall also manages port and address translation mechanisms. These
mechanisms provide security (by masking your internal address range) and flexibility (by
enabling the use of any private internal addressing range) and reduce costs (by enabling
the provision of several servers on the Internet with a single public IP address).

Copyright NETASQ 2014
Presentation and Installation Manual
12
U SERIES –S Models
INTRODUCTION
NETASQ Vulnerability Manager, the risk management solution, is based on the detection
of applications and the associated vulnerabilities. It allows you to quickly zero in on the
most vulnerable hosts, identify affected applications and know which bug fixes to apply.
Lastly, the NETASQ Firewall includes VPN gateway functions allowing you to establish
encrypted tunnels with other VPN equipment. In this way, your communications
between sites or with your mobile users may be secured even while using an insecure
communication infrastructure like the Internet.
Administration tools
Thanks to the web administration interface, you can administer your NETASQ firewall
from the operating system of your choice. From version 9 onwards, the new firewall
configuration interface, now accessible from a web browser, benefits from the latest
breakthroughs in user friendliness and simplicity of use.
The dashboard gives an overview of information relating to the firewall’s activity and its
configuration.
NETASQ Administration Suite
NETASQ UNIFIED MANAGER in Global Administration mode allows you to safely update
several firewalls locally or remotely. You can administer up to five appliances
simultaneously without an additional license.
NETASQ REAL-TIME MONITOR is the application that analyzes security events in real time
and allows you to view your firewall’s activity simply. The dashboard in particular allows
you to monitor all your NETASQ firewalls. This application is an excellent tool for the
security of your network thanks to the wide array of information displayed.
The NETASQ firewall is also equipped with advanced tracking features. In the event of an
intrusion attempt, the network administrator can access all the data sent before the
attacks and understand how it had been prepared. NETASQ EVENT REPORTER gives a
graphic view and detailed analysis of logs generated on the firewall.

Copyright NETASQ 2014
Presentation and Installation Manual
13
U SERIES –S Models
UPON RECEIVING YOUR FIREWALL
UPON RECEIVING YOUR FIREWALL
In order to guarantee the integrity of your product, NETASQ has set up several
mechanisms. Check these mechanisms carefully to confirm that your product has not
been tampered with in order to avoid disputes arising from the application of the
warranty.
Any abnormality should be reported within 48 hours from receipt of the product. Do not
hesitate to contact your reseller if your product is not as per order.
Integrity of the product
Seals and labels on the packaging
Every firewall is delivered in a cardboard box sealed by two warranty seals. On this
packaging, there is a label indicating information identifying the product it contains and
its version. Check that this information corresponds to your order.
Seals on the packaging
Every firewall is delivered in a cardboard box on which two “NETASQ QUALITY SEALs” are
affixed.
Figure 1: "NETASQ Quality seal" label
IMPORTANT
If this seal is missing or has been tampered with, contact your distributor soonest possible
to find out why the packaging has been opened.
Identification labels
These labels, pasted on the packaging, indicate the information relating to the firewall
(model, serial number, software version installed, etc). You can therefore check if the
version installed has been certified.
Figure 2: Identification labels

Copyright NETASQ 2014
Presentation and Installation Manual
14
U SERIES –S Models
UPON RECEIVING YOUR FIREWALL
Labels on the product
Seal label
A seal label is pasted on all firewalls. Once this label is torn, the warranty will be void.
Figure 3: Firewall seal
Serial number label
This label, pasted on the back panel of the product, displays the serial number and the password
for registering your product.
Figure 4: Serial number label
IMPORTANT
Take note of your registration password 1 and your serial number 2. You will be
asked for these during the installation and registration of your product.
Product label
This label, found on the underside of your product, provides information relating to the
firewall, such as the model and the supported voltage.
Figure 5: Product label
1
2
1
2

Copyright NETASQ 2014
Presentation and Installation Manual
15
U SERIES –S Models
UPON RECEIVING YOUR FIREWALL
Contents of the packaging
Keep the cardboard packaging safely in case you need it later for transporting the firewall.
It has been designed to give your NETASQ firewall optimum protection (shock and
temperature resistance).
Upon delivery, check that the following have been included in the packaging:
Your NETASQ Firewall,
A power cable or an AC adaptor,
A Category-5e RJ45 crossover cable,
A DB9F serial cable.
For U150S, U250S, U500S and U800S models, the packaging should also contain:
A set of brackets, rails and screws for mounting the firewall in a rack,
4 non-slip rubber feet.
NOTE
As U150S, U250S, U500S and U800S firewalls can be installed on a desk or in a rack,
their non-slip rubber feet are delivered separately. Only products that cannot be
racked (U30S and U70S) are sold with the rubber feet already attached.
The documentation provided includes:
License agreement,
Safety rules and installation precautions,
Quickstart installation guide
If any of the elements is missing, contact your distributor immediately.

Copyright NETASQ 2014
Presentation and Installation Manual
16
U SERIES –S Models
SAFETY RULES
SAFETY RULES
IMPORTANT
Before installing any appliance, please read and follow the safety instructions
carefully.
Before connecting to the mains power supply
Do not plug in your NETASQ appliance if it is damaged.
Never use a damaged power cable or AC adaptor.
Ensure that the AC adaptor is compatible with the voltage on your mains power network
The AC adaptor has to be plugged into a protective earth terminal. Ensure that the
connection is reliable and that the protective earth circuit on your installation complies
with current standards.
NETASQ firewalls are not fitted with a power switch. To disconnect the product, ensure
that the connection to the mains power supply is always easily accessible.
Warranty and safety rules
Under no circumstances should you take apart a NETASQ appliance on your own. Only NETASQ
and its approved maintenance agents are authorized to do so. A seal label protects all NETASQ
firewalls from being opened.
Your warranty will be rendered null and void should you dismantle a NETASQ firewall on your
own.
IMPORTANT
Never open your NETASQ firewall as it will expose you to risks of material
damage and bodily injury.
IMPORTANT
Do not insert objects into the appliance’s vents: you might obstruct the rotation of
a fan or damage it, which may cause the appliance to overheat. This may also
cause a short circuit that may cause the appliance to fail.
IMPORTANT
Copper Ethernet cables connected to your NETASQ firewall must not be plugged
into other devices located in other buildings.

Copyright NETASQ 2014
Presentation and Installation Manual
17
U SERIES –S Models
SAFETY RULES
As per legal safety requirements, anyone performing any operation on a NETASQ S-range
product must know and follow the safety indications below:
To the attention of maintenance teams:
WARNING
CAUTION: DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED.
REPLACE ONLY WITH SAME OR EQUIVALENT TYPE RECOMMENDED BY THE
MANUFACTURER. DISCARD USED BATTERIES ACCORDING TO THE
MANUFACTURERS INSTRUCTIONS.
Only qualified personnel from a NETASQ-approved maintenance center may
perform operations on this component.
In the event a hardware problem arises on your firewall or if one of the accessories does
not correspond to its description, contact your NETASQ-certified partner.
Assembly outside a rack
Your product has to be equipped with its non-slip rubber feet in order to reduce the
possibility of your appliance slipping off the surface on which it has been installed.
These flexible non-slip rubber feet are to be attached to the underside of the chassis for
U150S, U250S, U500S and U800S models. Please refer to the chapter INSTALLATION
PRECAUTIONS for further information.
Assembly in a 19” cabinet
For a racked installation, place heavier appliances in the lower section of the rack and
lighter elements in the higher section.
Refer to the chapter Installation in a 19” cabinet for details on how to install an appliance
in a racking bay.

Copyright NETASQ 2014
Presentation and Installation Manual
18
U SERIES –S Models
PRESENTATION OF "S" MODELS
PRESENTATION OF "S" MODELS
General points
Front panel
The main connectors on NETASQ firewalls in the U range, model “S”are located on the
front panel.
1. The Power button allows switching the firewall on or off.
2. The Power, Status and Online (from bottom to top) LEDs are described in the
following chapter.
3. This is the slot for the SD card* (SDHC standard)
4. The mini-din PS2 port allows connecting a keyboard.
5. The serial port allows accessing the product in console mode; it is possible to
connect the firewall directly to a PC.
6. The VGA port allows connecting a monitor.
7. This button is for resetting to factory configuration (defaultconfig).
8. The USB 2.0 port can be used for secure configurations or upgrades. You can also
connect a USB key, a USB keyboard (V9.0.3 minimum) or a USB modem (V9.0.3
minimum).
* Storage on an SD card is supported from version 9.1 onwards.
The recommended type of SD card should be at least Class 6, SDHC standard. Contact
your NETASQ partner to find out which models are recommended by NETASQ.
Rear panel
The socket for the power cable or the AC adaptor is located on the rear panel of the
product.
The rear panel has two additional USB ports that allow access to the same features as
USB ports located on the front panel.
2
5
1
3
4
6
7
8

Copyright NETASQ 2014
Presentation and Installation Manual
19
U SERIES –S Models
PRESENTATION OF "S" MODELS
3Online LED (green)
2Status LED (green)
1Power LED (yellow)
LEDs
The various models have 3 LEDs on the front panel as described below:
Startup
For all models, upon startup, the LEDs light up in the following order:
Power 1+ Status 2Online 3
The Power and Status LEDs will light up first, then Online.
The Online LED will light up after several minutes, then a beep will indicate that the
product is running.
Shutdown
To shut down your firewall, press once on the ON button then wait for several minutes
for the 3 LEDs Online, Status and Power to go off.
For all models, upon shutdown, the LEDs shut off in the following order:
Online 3Status 2Power 1
A beep will indicate that the appliance is in the process of shutting down.
The Online LED goes off first, then Status followed by Power.
NOTE
The Status 2LED will blink in the event of a major product failure (unexpected
hardware modification, faulty network interface, etc.). Contact your reseller in this case.
During startup, shutdown or upgrading, only the LEDs Status 2and Power 1will light
up.
In High Availability mode (HA), when the firewall is in passive mode, the Online 3LED
will blink (about 2 seconds off for every 1 second it is on).
WARNING
You must not unplug the product when it is starting, shutting down or being upgraded (Power
1 and Status 2 LEDs on).
2
A
3

Copyright NETASQ 2014
Presentation and Installation Manual
20
U SERIES –S Models
PRESENTATION OF "S" MODELS
Presentation of the "S" U range
NETASQ UTM S models rely on the most advanced technologies to provide high
performance and optimum protection.
For more information on interfaces, please refer to the section Connecting to the
network in the chapter INSTALLATION PRECAUTIONS.
U30S model
1OUT interface
2IN interface
The NETASQ U30S multi-function firewall is fanless.
The product comes with an external AC adaptor.
The U30S model holds 5 Gigabit Ethernet interfaces spread out in three zones:
The first zone is by default in external mode (OUT); it is the zone intended for
connecting to the Internet,
The second zone is by default identified in internal mode (IN). It consists of 2 switched
ports,
The third zone allows you to define a third protection zone (DMZ) and consists of 2
switched ports.
2
1