NSFOCUS 100M WAF NX3 Series User manual

Version: V6.0R07F00(2018-04-25)
NSFOCUS WAF V6.0
Installation Guide
©2020 NSFOCUS

■ Copyright © 2018 NSFOCUS Technologies, Inc. All rights reserved.
Unless otherwise stated, NSFOCUS Technologies, Inc. holds the copyright for the content of this document,
including but not limited to the layout, figures, photos, methods, and procedures, which are protected under the
intellectual property and copyright laws. No part of this publication may be reproduced or quoted, in any form
or by any means, without prior written permission of NSFOCUS Technologies, Inc.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
i
V6.0R07F00 (2018-04-25)
Contents
Preface........................................................................................................................................... 1
1 Overview ................................................................................................................................... 3
1.1 Introduction............................................................................................................................................... 3
1.2 Product Appearance................................................................................................................................... 3
1.2.1 100M WAF NX3 Series.................................................................................................................... 3
1.2.2 WAF NX3-P1000B........................................................................................................................... 5
1.2.3 WAF NX5-P6000E........................................................................................................................... 6
1.2.4 Other 1000M and 10G Series............................................................................................................ 7
1.3 Power Supply............................................................................................................................................ 8
1.4 LEDs......................................................................................................................................................... 8
1.5 System Software.......................................................................................................................................10
1.6 System Information..................................................................................................................................10
2 Preparation.............................................................................................................................. 15
2.1 Accessories Shipped with the Device ........................................................................................................15
2.2 Network Environment Preparation............................................................................................................15
2.3 User-Provided Tools and Devices..............................................................................................................16
2.4 Environment.............................................................................................................................................16
3 Installation Procedure............................................................................................................ 17
3.1 Installation Flow.......................................................................................................................................17
3.2 Connecting Power Cables.........................................................................................................................18
3.3 Connecting Interface Cables .....................................................................................................................18
3.3.1 Connecting the Serial Cable.............................................................................................................18
3.3.2 Connecting the Ethernet Cable.........................................................................................................18
3.4 Shutdown.................................................................................................................................................18
4 Basic Configuration ............................................................................................................... 20
4.1 Device Configurations..............................................................................................................................20
4.1.1 Logging In to the Web-based Manager .............................................................................................20
4.1.2 Configuring the Management Interface ............................................................................................23
4.1.3 Importing the License......................................................................................................................25
4.1.4 Verifying the Bypass Function..........................................................................................................26
4.2 Connecting WAF to the Network...............................................................................................................26
4.3 Configuring WAF via Console..................................................................................................................27

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
ii
V6.0R07F00 (2018-04-25)
4.3.1 Logging In to the Console................................................................................................................27
4.3.2 Modifying Network Settings on the Console ....................................................................................30
A Default Parameters................................................................................................................ 33
A.1 Default Settings of the Management Interface ..........................................................................................33
A.2 Default Accounts.....................................................................................................................................33
A.3 Communication Parameters of the Console Port.......................................................................................33

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
iii
V6.0R07F00 (2018-04-25)
Figures
Figure 1-1 Front panel of WAF NX3-P100A.................................................................................................... 4
Figure 1-2 Rear panel of WAF NX3-P100A..................................................................................................... 4
Figure 1-3 Front panel of WAF NX3-P1000B.................................................................................................. 5
Figure 1-4 Rear panel of WAF NX3-P1000B................................................................................................... 5
Figure 1-5 Front panel of WAF NX5-P6000E .................................................................................................. 6
Figure 1-6 Rear panel of WAF NX5-P6000E.................................................................................................... 6
Figure 1-7 Front panel of the other 1000M and 10G series ............................................................................... 7
Figure 1-8 Rear panel of the other 1000M and 10G series ................................................................................ 8
Figure 3-1 Installation flow ............................................................................................................................17
Figure 4-1 Security alert dialog box................................................................................................................21
Figure 4-2 Login page....................................................................................................................................21
Figure 4-3 Password change page...................................................................................................................22
Figure 4-4 Overview page ..............................................................................................................................23
Figure 4-5 Work Group Management page......................................................................................................24
Figure 4-6 Editing an interface .......................................................................................................................24
Figure 4-7 Confirming license information and EULA....................................................................................25
Figure 4-8 License information.......................................................................................................................26
Figure 4-9 WAF deployment topology............................................................................................................27
Figure 4-10 Location Information dialog box..................................................................................................28
Figure 4-11 Connection Description dialog box ..............................................................................................29
Figure 4-12 Connect To dialog box.................................................................................................................29
Figure 4-13 COM1 Properties dialog box........................................................................................................30
Figure 4-14 Console login interface................................................................................................................30
Figure 4-15 Selecting the language.................................................................................................................31
Figure 4-16 Main menu on the console...........................................................................................................31
Figure 4-17 Setting the IP address...................................................................................................................32

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
iv
V6.0R07F00 (2018-04-25)
Tables
Table 1-1 Power LED indications .................................................................................................................... 9
Table 1-2 Status LED indications..................................................................................................................... 9
Table 1-3 System LED indications................................................................................................................... 9
Table 1-4 Link/Act LED indications ................................................................................................................ 9
Table 1-5 Hardware information of WAF NX3-P600A/P300A/P100A.............................................................10
Table 1-6 Basic hardware information of WAF NX3-P1000B.........................................................................11
Table 1-7 Hardware information of WAF NX3-P1000A/P1600B/P2000A .......................................................11
Table 1-8 Basic hardware information of WAF NX3-P1000E .........................................................................12
Table 1-9 Basic hardware information of WAF NX5-P1600A..........................................................................12
Table 1-10 Basic hardware information of WAF NX5-P2020A........................................................................13
Table 1-11 Basic hardware information of WAF NX5-P1600E ........................................................................13
Table 1-12 Basic hardware information of WAF NX5-P2020E........................................................................14
Table 1-13 Basic hardware information of WAF NX5-P6000E........................................................................14
Table 2-1 Accessories.....................................................................................................................................15
Table 2-2 Network environment preparation ...................................................................................................16

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
1
V6.0R07F00 (2018-04-25)
Preface
Overview
This document describes basic information about NSFOCUS Web Application Firewall (WAF)
V6.0 and takes WAF NX3-P600A as an example to describe how to install and configure
WAF.
This document is provided for reference only. It may slightly differ from the actual product
due to version upgrade or other reasons.
Audience
This document is intended for the following users:
⚫Users who wish to know main features and usage of this product
⚫System administrator
⚫Network administrator
This document assumes that you have knowledge in the following areas:
⚫Network security
⚫Linux and Windows operating systems
⚫TCP/IP protocols
Organization
Chapter
Description
1 Overview
Describes the appearance and basic hardware information of WAF.
2 Preparation
Describes preparations for installing WAF.
3 Installation Procedure
Describes how to install WAF.
4 Basic Configuration
Describes basic configuration of WAF.
A Default Parameters
Describes default settings and communication parameters of the console port of
WAF.
Conventions
Convention
Description
Bold font
Keywords, names of screen elements like buttons, drop-down lists or fields, and
user-entered text appear in bold font.
Italic font
Document titles, new or emphasized terms, and arguments for which you supply
values are in italic font.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
2
V6.0R07F00 (2018-04-25)
Convention
Description
Reminds users to take note.
Indicates a tip to make your operations easier.
Indicates a situation in which you might perform an action that could result in
equipment damage or loss of data.
Indicates a situation in which you might perform an action that could result in
bodily injury.
A > B
Indicates selection of menu options.
Customer Support
Email: support@nsfocusglobal.com
Portal: https://nsfocus.desk.com/
Contacts:
⚫USA: +1-844-673-6287 or +1-844-NSFOCUS
⚫UK: +44 808 164 0673 or +44 808 164 0NSF
⚫Australia: +61 2 8599 0673 or +61 2 8599 0NSF
⚫Netherlands: +31 85 208 2673 or +31 85 208 2NSF
⚫Brazil: +55 13 4042 1673 or +55 13 4042 1NSF
⚫Japan: +81 3-4510-8673 or +81 3-4510-8NSF
⚫Singapore: +65 3158 3757
⚫Hong Kong +852 5803 2673 or +852 5803 2NSF
⚫Middle East: +973 1619 7607

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
3
V6.0R07F00 (2018-04-25)
1 Overview
1.1 Introduction
WAF offers 100M to 10G processing performance for various networking environments of
government agencies, enterprises, operators, and others. WAF devices are classified into two
series:
⚫100M/1000M WAF NX3 series:
−WAF NX3-P100A
−WAF NX3-P300A
−WAF NX3-P600A
−WAF NX3-P1000A
−WAF NX3-P1000B
−WAF NX3-P1000E
−WAF NX3-P1600B
−WAF NX3-P2000A
⚫10G WAF NX5 series:
−WAF NX5-P1600A
−WAF NX5-P2020A
−WAF NX5-P1600E
−WAF NX5-P2020E
−WAF NX5-P6000E
1.2 Product Appearance
Real products of different lots or models may differ slightly.
1.2.1 100M WAF NX3 Series
WAF NX3-P100A, WAF NX3-P300A, and WAF NX3-P600A have the same appearance.
Here WAF NX3-P100A is taken as an example.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
4
V6.0R07F00 (2018-04-25)
Front Panel
Figure 1-1 Front panel of WAF NX3-P100A
①System LED
②Power LED
③Status LED
④Console port
(RJ-45)
⑤USB port
⑥Management
interface
⑦Management interface/working interface
Rear Panel
Figure 1-2 Rear panel of WAF NX3-P100A
①Grounding
②Power switch
③Power cable interface

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
5
V6.0R07F00 (2018-04-25)
1.2.2 WAF NX3-P1000B
Front Panel
Figure 1-3 Front panel of WAF NX3-P1000B
①Reset key
②Status
LED
③Power LED
④System
LED
⑤Console port
(RJ-45)
⑥Management
interface
⑦USB
port
⑧Management
interface/working
interface
⑨Extension module
Rear Panel
Figure 1-4 Rear panel of WAF NX3-P1000B
①Grounding
②Power switch
③Mute button for clearing the
single-supply alert
④Power cable
interface

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
6
V6.0R07F00 (2018-04-25)
1.2.3 WAF NX5-P6000E
WAF NX5-P6000E supports SSL cards.
Front Panel
Figure 1-5 Front panel of WAF NX5-P6000E
①Power switch
②Reset key
③Power LED
④Status LED
⑤System LED
⑥Management
interface
⑦Serial RJ-45 port
⑧USB port
⑨Expansion module
⑩Expansion module
⑪Expansion
module
⑫Expansion module
Rear Panel
Figure 1-6 Rear panel of WAF NX5-P6000E
①Grounding
②Heat dissipation holes
③Mute button: The device
supports two power supplies.
If only one power supply is
configured, a sound alert will
be generated. To clear the

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
7
V6.0R07F00 (2018-04-25)
alert, press the mute button.
④Power switch
⑤Power supply 1
⑥Power supply 2
1.2.4 Other 1000M and 10G Series
Other 1000M and 10G WAF devices such as NX3-P1000A, NX3-P1000E, NX3-P1600B,
NX3-P2000A, NX5-P1600A, NX5-P2020A, NX5-P1600E, and NX5-P2020E have the same
appearance but vary in the type and quantity of working interfaces.
Only NX3-P1000E, NX5-P1600E, and NX5-P2020E support SSL cards.
Front Panel
Figure 1-7 Front panel of the other 1000M and 10G series
①Management
interface
②Management
interface
③Console port
(RJ-45)
④USB port
⑤Reset button
⑥Power LED
⑦Status LED
⑧System LED
⑨Working
interface: GE
electrical interface
(RJ-45)
⑩Working
interface: GE
optical interface
(SFP)
⑪Working
interface: GE
optical interface
(SFP)
⑫Working
interface: 10GE
optical interface
(SFP+)

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
8
V6.0R07F00 (2018-04-25)
Rear Panel
Figure 1-8 Rear panel of the other 1000M and 10G series
①Groun
ding
②Heat
dissipation
holes
③Power switch
④Power
supply
1
⑤Power
supply 2
⑥Mute button: The device supports two power supplies. If only
one power supply is configured, a sound alert will be generated.
To clear the alert, press the mute button.
1.3 Power Supply
WAF 1000M and 10G series can receive AC power input from two power supplies. If two
independent power supplies are used, connect WAF to both of them to maintain WAF's
reliability even when one power supply breaks down.
The power switch and the power cable interface are located at the rear of the chassis, as
shown in Figure 1-2, Figure 1-4, Figure 1-6, and Figure 1-8.
The power module achievesAC input of the following specifications:
⚫Voltage range: 100–240 VAC; 50 Hz/60 Hz
⚫Maximum output power: 400 W
100M WAF series support one power system only.
1.4 LEDs
There are four types of LEDs on the front panel of the chassis: power LED, status LED,
system LED, and network interface LEDs. Different models of devices have different types
and numbers of LEDs.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
9
V6.0R07F00 (2018-04-25)
Power LED
Table 1-1 describes the power LED.
Table 1-1 Power LED indications
LED Status
Indication
On
The power is normal
Off
The power is off or abnormal.
Status LED
Table 1-2 describes the status LED.
Table 1-2 Status LED indications
LED Status
Indication
Off
The system is in the idle state.
Blinking
The system is reading and writing data.
System LED
Table 1-3 describes system LED indications.
Table 1-3 System LED indications
LED Status
Indication
Green
The device runs properly.
Orange
The CPU usage of the device is high.
Red
The CPU usage of the device is too high.
Link/Act LEDs
Table 1-4 describes the indications of network interface LEDs.
Table 1-4 Link/Act LED indications
LED Status
Indication
Link LED on
A link has been established.
Link LED off
No link has been established.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
10
V6.0R07F00 (2018-04-25)
LED Status
Indication
ACT LED blinking
The device is transmitting or receiving data.
ACT LED off
No data is transmitted or received.
1.5 System Software
A web-based manager is provided for users to configure and manage WAF. Users can
implement various configurations and operations by accessing the web-based manager via a
browser, for example, Internet Explorer, Firefox, or Chrome.
1.6 System Information
Table 1-5 shows basic hardware information of WAF NX3-P600A/P300A/P100A.
Table 1-5 Hardware information of WAF NX3-P600A/P300A/P100A
Interfaces
1 x RJ-45 console port
2 x USB port
5 x 1000M Ethernet electrical port
Memory
4 GB
Rack
1 U
Weight
5 kg
Dimensions
430 x 390 x 44 (mm)
Power Supply
100–240 V AC
Maximum power: 60 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-6 shows basic hardware information of WAF NX3-P1000B.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
11
V6.0R07F00 (2018-04-25)
Table 1-6 Basic hardware information ofWAF NX3-P1000B
Ports
1 x RJ-45 console port
2 x USB port
7 x 1000M Ethernet electrical port
4 x 1000M Ethernet electrical port or optical port (optional)
Memory
8 GB
Rack
2 U
Weight
12.6 kg
Dimensions
575 x 432 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-7 shows basic hardware information of WAF NX3-P1000A/P1600B/P2000A.
Table 1-7 Hardware information of WAF NX3-P1000A/P1600B/P2000A
Ports
1 x RJ-45 console port
2 x USB port
4 x 1000M Ethernet electrical port or optical port (optional)
Memory
8 GB
Rack
2 U
Weight
11 kg
Dimensions
575 x 432 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-8 shows basic hardware information of WAF NX3-P1000E

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
12
V6.0R07F00 (2018-04-25)
Table 1-8 Basic hardware information ofWAF NX3-P1000E
Ports
1 x RJ-45 serial port
2 x USB port
4 x 1000M Ethernet electrical port or optical port or 4 x SSL
card with a 1000M electrical port (optional)
Memory
16 GB
Rack
2 U
Weight
11 kg
Dimensions
575 x 432 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-9 shows basic hardware information of WAF NX5-P1600A.
Table 1-9 Basic hardware information ofWAF NX5-P1600A
Ports
1 x RJ-45 console port
2 x USB port
2 x 10 Gigabit optical ports
4 x 1000M Ethernet electrical port or optical port (optional)
Memory
8 GB
Rack
2 U
Weight
11 kg
Dimensions
575 x 432 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-10 shows basic hardware information of WAF NX5-P2020A.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
13
V6.0R07F00 (2018-04-25)
Table 1-10 Basic hardware information of WAF NX5-P2020A
Ports
1 x RJ-45 console port
2 x USB port
2x 10 Gigabit optical ports
4 x 1000M Ethernet electrical port or optical port (optional)
Memory
32 GB
Rack
2 U
Weight
11 kg
Dimensions
575 x 432 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-11 shows basic hardware information of WAF NX5-P1600E.
Table 1-11 Basic hardware information of WAF NX5-P1600E
Ports
1 x RJ-45 serial port
2 x USB port
4 x 1000M Ethernet electrical port or optical port or 4 x SSL
card with a 1000M electrical port or 2 x 10 Gigabit optical port
(optional)
Memory
32 GB
Rack
2 U
Weight
11 kg
Dimensions
575 x 432 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-12 shows basic hardware information of WAF NX5-P2020E.

NSFOCUS WAFV6.0 Installation Guide
Copyright © NSFOCUS
14
V6.0R07F00 (2018-04-25)
Table 1-12 Basic hardware information of WAF NX5-P2020E
Ports
1 x RJ-45 serial port
2 x USB port
50 Gigabit SSL card
4 x 1000M Ethernet electrical port or optical port or 2 x 10
Gigabit optical port (optional)
Memory
32 GB
Rack
2 U
Weight
11 kg
Dimensions
575 x 432 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
Table 1-13 Basic hardware information of WAF NX5-P6000E
Ports
1 x RJ-45 serial port
2 x USB port
50 Gigabit SSL card (optional)
4 x 1000M Ethernet electrical port or optical port or 2 x 10
Gigabit optical port (optional)
Memory
128 GB
Rack
2 U
Weight
16.5 kg
Dimensions
626 x 443 x 88 (mm)
Power Supply
100–240 V AC
Maximum power: 350 W
Mean Time Between Failures
(MTBF)
45,000 hours
Operating Temperature
0–40°C
Storage Temperature
–20°C to +65°C
This manual suits for next models
15
Table of contents
Other NSFOCUS Network Hardware manuals