Stormshield Sn series Reference guide

GUIDE

STORMSHIELD NETWORK SECURITY

PRODUCT PRESENTATION AND

INSTALLATION 2019

Date: September 2019

Document version: 1.0

Reference: sns-en-SNrange_installation_guide-2019

Page 2/66 sns-en-SNrange_installation_guide-2019 - 09/2019

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

Starting 46

Shutting down 51

UPDATING THE LICENSE 53

Retrieving the license 53

Installing the license 53

DOCUMENTATION & ASSISTANCE 54

APPENDIX A: RESETTING THE FIREWALL 55

All models except SN6100 and SNi40 55

SN6100 and SNi40 models 56

APPENDIX B: LOG STORAGE 57

External storage option - storing logs

externally on an SD card 57

Enable log storage 57

Log consultation 58

APPENDIX C: MANAGING SSDs 59

Detecting issues 59

Replacing an SSD 59

RAID option (SN2100) 60

Big Data option (SN2100, SN3100 and

SN6100) 60

APPENDIX D: CHANGING A POWER SUPPLY

MODULE (SN2100, SN3100 AND

SN6100) 61

SN2100 and SN3100 61

SN6100 62

APPENDIX E: CONFIGURATION AND

ADMINISTRATION VIA IPMI (SN6100) 64

SN6100 64

Table of contents

FOREWORD 3

Recommendations on the operating

environment 3

Regulations 5

INTRODUCTION 6

UPON RECEIVING YOUR FIREWALL 8

Integrity of the product 8

Contents of the packaging 9

SAFETY RULES 11

All models except SNi40 11

SNi40 model 13

INSTALLATION PRECAUTIONS 15

Conditions of use (all models except

SNi40) 15

Conditions of use (SNi40 model) 16

Connecting to the mains 17

Connecting to a 24VDC power supply

unit (SNi40) 18

Connecting to the network 18

INSTALLATION IN A 19" CABINET AND

RACK 19

PRESENTATION OF SN MODELS 24

SN160 and SN160W models 24

SN210 and SN210W models 25

SN310 model 27

SN510 and SN710 models 28

SN910 model 29

SN2100 and SN3100 models 30

SN6100 model 32

SNi40 model 34

NETWORK CONNECTORS 35

RJ45 Ethernet connectors 35

Fiber Ethernet connectors 37

Extension modules (SN710 and

upwards) 40

Recommended connectors for high

availability (HA) links 43

INITIAL CONNECTION TO THE PRODUCT44

Requirements 44

Connections 45

Configuration 46

FOREWORD

You are strongly advised to read this whole document before installing a Stormshield Network

Firewall.

This installation guide presents the Stormshield Network range marketed by Stormshield. This

guide explains how to conduct the physical installation needed for integrating an appliance into

your network architecture. It also provides the necessary details for adding transceivers and

network modules to SN710, SN910, SN2100, SN3100, SN6100 and SNi40 products.

The aim of this manual is to allow you to quickly integrate a Stormshield Network Firewall into

your network but does not provide any information on how to configure the product. For help in

configuration, there is a full User guide in the form of online help, which you can look up on the

Stormshield Technical Documentation website, at:

https://documentation.stormshield.eu

The SNS user configuration manual, an exhaustive help file, can be downloaded from the section

PDF download (refer to the section DOCUMENTATION & ASSISTANCE).

Products concerned

SN160, SN160W, SN210, SN210W, SN310, SN510, SN710, SN2100, SN3100, SN6100 and

SNi40.

NOTE

For earlier products in the Stormshield Network range (SN150, SN200, SN300, SN500,

SN700, SN900, SN2000, SN3000 and SN6000), please refer to the 2017 version of this

Product presentation and installation guide.

Recommendations on the operating environment

DEFINITION

The common criteria evaluate (on an Evaluation Assurance Level or EAL scale of 1 to 7) a

product’s capacity to provide security functions for which it had been designed, as well as the

quality of its life cycle (development, production, delivery, putting into service, updates).

Introduction

The installation of a Firewall often comes within the scope of setting up a global security policy. To

ensure optimal protection of your assets, resources or information, it is not only a matter of

installing a Firewall between your network and the Internet. This is namely because the majority

of attacks come from the inside (accidents, disgruntled employees, dismissed employee having

retained internal access, etc.). And one would also agree that installing a steel security door

defeats its purpose when the walls are made of paper.

Backed by the Common Criteria, Stormshield Network advises taking into consideration the

recommendations of use for the Administration Suite and Firewall product stated below. These

recommendations set out the usage requirements by which to abide in order to ensure that your

Firewall operates within the context of the common criteria certification.

For further information on Common Criteria compliance, please go to:

https://documentation.stormshield.eu/common-criteria.html

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

FOREWORD

Page 3/66 sns-en-SNrange_installation_guide-2019 - 09/2019

Security watch

Please regularly check Stormshield security advisories published on

https://advisories.stomshield.eu.

Always update your firewall if it allows fixing a security flaw. Updates are available here:

https://mystormshield.eu.

Physical security measures

Stormshield Network Firewall-VPN appliances must be installed and stored in compliance with

the state of the art regarding sensitive security devices: secured access to the premises,

Shielded cables with twisted pairs, labeled cables, etc.

Organizational security measures

The default password of the “admin” user (super administrator) must be changed the very first

time the product is used. In the web administration interface, this password can be changed in

the Administrator module (System menu), under the Administrator account tab.

The definition of this password must observe the best practices described in the User Guide, in

the section Welcome, sub-section User awareness, paragraph User password management,

available at: https://documentation.stormshield.eu/

A particular administrative role – that of the super-administrator – has the following

characteristics:

lOnly the super-administrator is permitted to connect via the local console on firewall-VPN

appliances, and only when installing the Firewall or for maintenance operations, apart from

actual use of the equipment.

lHe is in charge of defining the profiles of other administrators,

lAll access to the premises where the appliances are stored has to be under his supervision,

regardless of whether the access is due to an intervention on the appliance or on other

equipment. He is responsible for all interventions carried out on appliances.

IT security environment

Stormshield Network firewall-VPN appliances must be installed in accordance with the current

network interconnection policy and are the only passageways between the different networks on

which the control policy for traffic has to be applied. They are scaled according to the capacities

of the adjacent devices or these devices restrict the number of packets per second, positioned

slightly below the maximum treatment capacities of each firewall-VPN appliance installed in the

network architecture.

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

FOREWORD

Page 4/66 sns-en-SNrange_installation_guide-2019 - 09/2019

Regulations

WEEE (Waste Electrical and Electronic Equipment) directive

All Stormshield Network products that are subject to the WEEE directive will

be marked with the mandated "crossed-out wheelie bin" symbol. This

symbol means that the product meets the requirements laid down by the

WEEE directive with regards to the destruction and reuse of waste electrical

and electronic equipment.

RoHS (Restriction of Hazardous Substances) directive

For further information on RoHS compliance or on recycling program of Stormshield Network Firewalls

(WEEE), please refer to:

https://www.stormshield.eu/about/recycling/

Certifications

Part 15 Subpart B

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

FOREWORD

Page 5/66 sns-en-SNrange_installation_guide-2019 - 09/2019

INTRODUCTION

Thank you for choosing Stormshield Network. Designed to protect networks of all sizes,

Stormshield Network - SN range appliances are pre-configured: no hardware or software

installation is needed and no UNIX knowledge is necessary, just a user-friendly configuration via

a graphical interface.

The Stormshield Network (SN) range consists of twelve products:

SN160, SN160W, SN210, SN210W, SN310, SN510, SN710, SN910, SN2100, SN3100, SN6100

and SNi40.

The architecture of the new-generation SN range was specifically designed to maximize the

performance of the Stormshield Network protection engine. Complex application traffic is therefore

inspected at high speed at the heart of the network and without discernible latency (less than 1

millisecond).

Hardware acceleration for data encryption also anticipates the multiplication of high-speed VPN

access.

The SN Firewall allows the definition of incoming or outgoing access control rules. Its concept is

simple: any incoming or outgoing transmission passing through the Firewall is monitored,

authorized or denied according to the rules, packet by packet.

The SN Firewall is based on a sophisticated packet filtering mechanism that provides a high level

of security. All Firewalls integrate the ASQ (Active Security Qualification) technology developed by

Stormshield Network Security. This technology allows detecting and blocking hacking attempts

in real time illegal packets, denial of service attempts, anomalies in a connection, port scans,

buffer overflows, etc.

In the event of an intrusion attempt, depending on the instructions given in the security policy,

the SN Firewall blocks the transmission, generates an alarm and stores the information linked to

the packet which had set off the alarm. As such, you would be able to analyze the attack and

trace its source.

The SN Firewall not only allows preventing, or restricting to just certain services, incoming

connections on your network, but also allows monitoring the use of the Internet by your internal

users (HTTP, FTP, SMTP, etc.). You may also monitor your users by authenticating them via an

internal or external authentication database.

The SN Firewall also manages port and address translation mechanisms. These mechanisms

provide security (by masking your internal address range) and flexibility (by enabling the use of

any private internal addressing range) and reduce costs (by enabling the provision of several

servers on the Internet with a single public IP address).

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

INTRODUCTION

Page 6/66 sns-en-SNrange_installation_guide-2019 - 09/2019

Stormshield Network Vulnerability Manager, the risk management solution, is based on the

detection of applications and the associated vulnerabilities. It allows you to quickly zero in on the

most vulnerable hosts, identify affected applications and know which bug fixes to apply.

Lastly, the SN Firewall includes VPN gateway functions allowing you to establish encrypted

tunnels with other VPN equipment. In this way, your communications between sites or with your

mobile users may be secured even while using an insecure communication infrastructure like

the Internet.

Administration tools

Thanks to the web administration interface, you can administer your Stormshield Network

Firewall from the operating system of your choice. The new Firewall configuration interface,

accessible from a web browser, benefits from the latest breakthroughs in user friendliness and

simplicity of use.

The dashboard gives an overview of information relating to the Firewall’s activity and its

configuration.

Through SN Activity Reports, available from a dedicated portal, you can view how Internet access

is used, the various attacks that your Firewall has blocked and the vulnerable hosts in your

network. Furthermore, numerous interactions allow you to directly take action on the

configuration of your Firewall.

SN REAL-TIME MONITOR

SN REAL-TIME MONITOR is the application that analyzes security events in real time and allows

you to view your Firewall’s activity simply. The dashboard in particular allows you to monitor all

your SN Firewalls. This application is an excellent tool for the security of your network thanks to

the wide array of information displayed.

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

INTRODUCTION

Page 7/66 sns-en-SNrange_installation_guide-2019 - 09/2019

UPON RECEIVING YOUR FIREWALL

Several security mechanisms have been implemented to guarantee the integrity of the product

that you receive. They also validate the fact that your product has not been tampered with. Check

them carefully in order to avoid disputes later regarding the application of the warranty.

Any abnormality must be reported within 48 hours from receipt of the product, to your reseller if

your product is not as per order.

Integrity of the product

Seals and labels on the packaging

Every Firewall is delivered in a cardboard box sealed by one or two warranty seals. On this

packaging, there is a label indicating information identifying the product it contains and its

version. Check that this information corresponds to your order.

Seals

Every Firewall is sold in a closed cardboard box to which a

"STORMSHIELD QUALITY SEAL" is affixed.

IMPORTANT

If this seal is missing or has been tampered with, contact your

distributor as soon as possible to find out why the packaging has

been opened. Figure 1: " Stormshield Quality seal"

label

Identification labels

These labels indicate the information relating to the Firewall

(product reference, part number, serial number, software

version installed, etc). Check that this information

corresponds to your order. You can also check whether the

version installed has been certified.

Figure 2: Product labels on the cardboard box

Labels on the product

Warranty label

A warranty label is pasted on all Firewalls.

Once this label is torn, the warranty will be

void.

Figure 3:

Warranty label

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

UPON RECEIVING YOUR FIREWALL

Page 8/66 sns-en-SNrange_installation_guide-2019 - 09/2019

Serial number label

This label displays your product's serial number and registration password. It is affixed:

lto the underside of SN160, SN160W, SN210, SN210W, SN310, SN2100 and SN3100

models,

lto the back of the firewall on SN510, SN710, SN910 and SN6100 models,

lto the side for the SNi40 appliance.

Figure 4: Serial number label

IMPORTANT

Take note of your registration password 1and your serial number 2. You will be asked

for these during the installation and registration of your product.

Product label

This label, found on the underside of your product, provides information relating to the Firewall,

such as the part number and the product's electrical power characteristics.

Figure 5: Product label

Contents of the packaging

Keep the cardboard packaging in a safe place in case you need it later for transporting the

Firewall. It has been designed to give your SN Firewall optimum protection (shock resistance,

etc.).

Upon delivery, check that the following have been included in the packaging:

lYour Stormshield Network Firewall,

lA power cord (two for SN2100, SN3100 and SN6100 appliances)

lA power adapter (SN160, SN160W, SN210, SN210W and SN310),

lA 6-pole screw connector (SNi40),

lA Category-5e RJ45 crossover cable,

lAn “A to B” USB cable (SN160, SN160W, SN210, SN210W and SN310), or an RJ45 to DB9F

serial cable (SN510, SN710, SN910, SN2100, SN3100 and SN6100) or DB9F serial cable

(SNi40).

lThree Wi-Fi antennae to be screwed to the back of the appliance (SN160W and SN210W)

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

UPON RECEIVING YOUR FIREWALL

Page 9/66 sns-en-SNrange_installation_guide-2019 - 09/2019

For SN510, SN710 and SN910 models, the packaging should also contain four non-slip rubber

feet.

For the purpose of installing the appliance in a rack, SN510, SN710, SN910 and SN6100 models

have brackets mounted by default.

For SN2100 and SN3100 models, the packaging should also contain a set of brackets, rails and

screws for mounting the Firewall in a rack.

For SN6100 models, the packaging should also contain a set of rails and screws for mounting the

Firewall in a rack.

The SNi40 model is equipped with a fastener for a 35mm-wide DIN rail (EN50022 standard)

NOTE

As SN510, SN710 and SN910 Firewalls can be installed on a desk or in a rack, their non-

slip rubber feet are delivered separately. Only products that cannot be racked (SN160,

SN160W, SN210, SN210W and SN310) are sold with the rubber feet already attached.

The documentation provided includes:

lGeneral Conditions of Use and User License,

lSafety Rules and Installation Precautions,

lQuick Installation Guide,

lInstallation guide for the set of rails (SN2100, SN3100 and SN6100).

If any element is missing, contact your distributor immediately.

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

UPON RECEIVING YOUR FIREWALL

Page 10/66 sns-en-SNrange_installation_guide-2019 - 09/2019

SAFETY RULES

Before installing anything, carefully read and follow the safety instructions.

All models except SNi40

IMPORTANT

You must use the power adapter provided with the product.

Before plugging in any devices

lEnsure that neither your Stormshield product, the power cord nor power adapter is damaged.

lEnsure that the power supply or power adapter of your Firewall is compatible with the voltage

of your power supply network.

lWhen the product’s power cord or power adapter has a ground pin, it must be plugged into a

properly grounded electrical outlet. Ensure that the connection is reliable and that the

protective earth circuit of your installation complies with safety standards in force.

lTo be able to disconnect the product, ensure that the connection to the power supply is

always easily accessible.

Before connecting to a 48VDC power supply (SN2100, SN3100 and SN6100)

Special considerations for equipment connected to a DC mains supply:

lPlease follow IEC, NEC, ANSI/NFPA 70 and CEC, Part I, C22.1 for all relevant field wiring

instructions and cautions. The equipement must be installed by a qualified electrician.

lBefore using the equipment, the chassis must be permanently connected to earth using

yellow/green wire rated a minimum of:

o1.5mm² (16 AWG) on SN2100 and SN3100

o3.31mm² (12AWG) on SN6100

lThe equipment shall be connected to the DC mains supply with an approved switch or

breaker.

lOnly wires with the following minimum ratings shall be used to connect the equipment to the

DC mains supply:

o1.5mm² (16 AWG) on SN2100 and SN3100

o3.31mm² (12AWG) on SN6100

Warranty and safety rules

Under no circumstances should you take apart a Stormshield Network appliance on your own.

Only Stormshield, which markets the Stormshield Network range, and its approved maintenance

agents are authorized to do so. A seal label protects all Stormshield Network Firewalls from being

opened.

Your warranty will be rendered null and void should you dismantle a Stormshield Network

Firewall on your own.

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

SAFETY RULES

Page 11/66 sns-en-SNrange_installation_guide-2019 - 09/2019

IMPORTANT

Never dismantle your Stormshield appliance, as doing so may cause hardware accidents

and/or bodily harm.

IMPORTANT

Do not insert objects into the appliance’s vents – this may hinder the rotation of an internal

fan or damage it, causing the appliance to overheat. This may also cause a short-circuit

that may lead to the breakdown of the appliance.

IMPORTANT

Copper Ethernet cables connected to your Stormshield Network Firewall must not be

connected to other appliances located in other buildings.

As per legal safety requirements, anyone performing any operation on a Stormshield Network SN-

range product must know and follow the safety indications below:

To the attention of maintenance teams:

WARNING

DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED. REPLACE ONLY WITH SAME

OR EQUIVALENT TYPE RECOMMENDED BY THE MANUFACTURER. DISCARD USED BATTERIES

ACCORDING TO THE MANUFACTURER’S INSTRUCTIONS.

Only qualified personnel from an approved maintenance center can perform operations on

this component.

In the event of hardware problem with your Firewall or if one of the elements does not match its

description, please contact your certified partner.

Installing an appliance outside a rack

Your product must be equipped with its non-slip rubber feet in order to reduce the possibility of

your appliance slipping off the surface on which it has been installed.

These flexible non-slip rubber feet are to be attached to the underside of the chassis for SN510,

SN710 and SN910 models. Please refer to the section INSTALLATION PRECAUTIONS for further

information.

Assembly in a cabinet

For a racked installation, place heavier appliances in the lower section of the rack and lighter

elements in the higher section.

Refer to the section INSTALLATION IN A 19” CABINET for details on how to install an appliance in a

racking bay.

Precautions

lInstallation kit - for rack mounting the original installation kit for this device has to be used.

lElevated Operating Ambient Temperature - If installed in a closed or multi-unit rack assembly,

the operating ambient temperature of the rack environment may be greater than room

ambient. Therefore, consideration should be given to installing the equipment in an

environment compatible with the maximum ambient temperature (Tma) specified by the

manufacturer.

lReduced Air Flow - Installation of the equipment in a rack should be such that the amount of

air flow required for safe operation of the equipment is not compromised.

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

SAFETY RULES

Page 12/66 sns-en-SNrange_installation_guide-2019 - 09/2019

lMechanical Loading - Mounting of the equipment in the rack should be such that hazardous

conditions due to uneven mechanical loading are avoided.

lCircuit Overloading - Consideration should be given to the connection of the equipment to the

supply circuit and the effect that overloading of the circuits might have on overcurrent

protection and supply wiring. Appropriate consideration of equipment nameplate ratings

should be used when addressing this concern.

lReliable Earthing - Reliable earthing of rack-mounted equipment should be maintained.

Particular attention should be given to supply connections other than direct connections to

the branch circuit (e.g. use of power strips).

lLeakage current - considerations should be given to the summation of leakage currents when

installing the equipment in a closed or multi-unit rack assembly.

SNi40 model

Before plugging in any devices

lEnsure that your Stormshield product and its accessories are not damaged.

lEnsure that the electrical characteristics of your product indicated on the product label are

compatible with those of your power supply network.

lThe chassis of your product must be connected to a protective earth circuit, using rated

minimum 16 AWG or 1 mm² wire. Ensure that the connection is permanent and reliable, and

that the protective earth circuit of your installation complies with safety standards in force.

lBefore installing or removing your product, ensure that it has been turned off, and that all

power supply connections have been removed.

lEquipment connected to a DC mains supply: please follow IEC, NEC, ANSI/NFPA 70 and CEC,

Part I, C22.1 for all relevant field wiring instructions and cautions. The equipement must be

installed by a qualified electrician.

lThe equipment shall be connected to the DC mains supply with an approved switch or

breaker and easily accessible.

lOnly wires rated minimum 16AWG or 1mm² shall be used to connect the equipment to the DC

mains supply.

Warranty and safety rules

Under no circumstances should you take apart a Stormshield Network appliance on your own.

Only Stormshield, which markets the Stormshield Network range, and its approved maintenance

agents are authorized to do so. A seal label protects all Stormshield Network Firewalls from being

opened.

Your warranty will be rendered null and void should you dismantle a Stormshield Network

Firewall on your own.

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

SAFETY RULES

Page 13/66 sns-en-SNrange_installation_guide-2019 - 09/2019

IMPORTANT

Never dismantle your Stormshield appliance, as doing so may cause hardware accidents

and/or bodily harm.

IMPORTANT

Copper Ethernet cables connected to your Stormshield Network Firewall must not be

connected to other appliances located in other buildings.

As per legal safety requirements, anyone performing any operation on a Stormshield Network SN-

range product must know and follow the safety indications below:

To the attention of maintenance teams:

WARNING

DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED. REPLACE ONLY WITH SAME

OR EQUIVALENT TYPE RECOMMENDED BY THE MANUFACTURER. DISCARD USED BATTERIES

ACCORDING TO THE MANUFACTURER’S INSTRUCTIONS.

Only qualified personnel from an approved maintenance center can perform operations on

this component.

In the event of hardware problem with your Firewall or if one of the elements does not match its

description, please contact your certified partner.

Assembly in a cabinet

lInstallation kit - Only use the installation kit supplied with the product.

lElevated Operating Ambient - If installed in a closed or multi-unit cabinet assembly, the

operating ambient temperature of the cabinet environment may be greater than room

ambient. Therefore, consideration should be given to installing the equipment in an

environment compatible with the maximum ambient temperature (Tma) specified by the

manufacturer.

lReduced Air Flow - Installation of the equipment in a cabinet should be such that the amount

of air flow required for safe operation of the equipment is not compromised.

lMechanical Loading - Mounting of the equipment in the cabinet should be such that a

hazardous condition is not achieved due to uneven mechanical loading.

lCircuit Overloading - Consideration should be given to the connection of the equipment to the

supply circuit and the effect that overloading of the circuits might have on overcurrent

protection and supply wiring. Appropriate consideration of equipment nameplate ratings

should be used when addressing this concern.

lReliable Earthing - Reliable earthing of cabinet-mounted equipment should be maintained.

Particular attention should be given to supply connections other than direct connections to

the branch circuit (e.g. use of terminal blocks).

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

SAFETY RULES

Page 14/66 sns-en-SNrange_installation_guide-2019 - 09/2019

INSTALLATION PRECAUTIONS

A Firewall is a central device in your network, therefore do not neglect it – install it in the best way

possible, under the best conditions.

NOTE

Instructions on how to connect products are also given in the Poster Quick Installation

Guide provided with the Firewall.

Conditions of use (all models except SNi40)

The Stormshield Network Firewall has been designed to run continuously, in an office or in a

server room. If you wish to install your appliance in an office, choose a flat and uncluttered

surface. Add the non-slip rubber feet to SN510, SN710 and SN910 models; stick a non-slip

rubber foot to the underside of the appliance, close to each corner about 2 cm from the edges.

This will ensure the stability of the Firewall and protect it from scratches.

WARNING

The firewall has to be installed in compliance with the state of the art corresponding to the

practical terms of secure installation, i.e., in a protected office or other premises with limited

access. In order to guarantee the integrity of the product and to avoid compromising the

security of your installation, all unauthorized access to the Firewall has to be avoided.

NOTE

Ensure that the cables do not obstruct passageways to prevent them from being pulled

out or the product from falling.

Do not install and/or operate your Stormshield Firewall in any place that flammable objects are

stored or used in. Your Stormshield Firewall is intended for indoor use (office environment or other

IT environment), away from areas that may receive rainfall, floods or excessive humidity. It must

be installed away from sources of shocks, vibrations, and dust, in an environment where the

temperature conforms to the product's specifications.

The ideal ambient temperature is around 25°C. The tables below set out the operational

temperature, storage temperature and humidity level for all models of SN range.

SN160, SN160W, SN210, SN210W, SN310, SN510, SN710, SN910, SN2100 and SN3100models:

Operating

temperature

Relative humidity

operating (%)

Storage

temperature

Relative humidity

storage (%)

+0° to +40°C

(+32° to +104°F)

0% to 95% at +40°C (+104°F)

without condensation

-30° to +65°C

(-22° to +149°F)

5% to 95% at +60°C (+140°F)

without condensation

SN6100 model

Operating

temperature

Relative humidity

operating (%)

Storage

temperature

Relative humidity

storage (%)

+0° to +40°C

(+32° to +104°F)

0% to 90% at +40°C (+104°F)

without condensation

-20° to +70°C

(-4° to +158°F)

5% to 95%

without condensation

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

INSTALLATION PRECAUTIONS

Page 15/66 sns-en-SNrange_installation_guide-2019 - 09/2019

IMPORTANT

Avoid in particular direct exposure to sunlight. Always keep adequate distance around the

appliance’s vents in order to guarantee a free flow of air, thereby preventing the possibility

of overheating.

IMPORTANT

Do not place objects on your Stormshield Network appliance.

IMPORTANT

The Stormshield Network Firewall has been tested and found to comply with the limits for a

Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to

provide reasonable protection against harmful interference when the Firewall is operated in

a commercial environment. The Stormshield Network Firewall generates, uses and can

radiate radio frequency energy and, if not installed and used in accordance with the

instruction manual, may cause harmful interference to radio communications. Operation of

this Firewall in a residential area is likely to cause harmful interference in which case the

user will be required to correct the interference at his own expense.

The Stormshield Network Firewall complies with the requirements set out in the European

standard EN55032, Class A. In a residential environment, a Class A product may cause

radioelectric interference, for which the user may need to take appropriate measures.

Conditions of use (SNi40 model)

The SNi40 firewall has been designed to run continuously in a server room.

WARNING

The Firewall has to be installed in compliance with the state of the art corresponding to the

practical terms of secure installation, namely: in protected premises with limited access. In

order to guarantee the integrity of the product and to avoid compromising the security of

your installation, all unauthorized access to the Firewall has to be avoided.

NOTE

Ensure that the cables do not obstruct passageways to prevent them from being pulled

out or the product from falling.

Your Stormshield Firewall is intended for indoor use, industrial environment (refer to product

specifications), away from areas that may receive rainfall, floods or excessive humidity. It must

be installed away from sources of shocks, vibrations, and dust, in an environment where the

temperature conforms to the product's specifications.

The ideal ambient temperature is around 25°C. The table below sets out the operational

temperature, storage temperature and humidity level for the SNi40 model.

SNi40 model

Operating

temperature

Relative humidity

operating (%)

Storage

temperature

Relative humidity

storage (%)

-40° to +75°C

(-40° to +167°F)

0% to 95%

without condensation

-40° to +85°C

(-40° to +185°F)

5% to 95%

without condensation

The table below sets out the operational temperature, storage temperature and humidity level for

the power adapter, which is sold separately.

Power adapter for SNi40 models (optional)

Operating

temperature

Relative humidity

operating (%)

Storage

temperature

Relative humidity

storage (%)

0° to +40°C

(+32° to +104°F)

10% to 90%

without condensation

-20° to +70°C

(-4° to +158°F)

10% to 90%

without condensation

SNS - PRODUCT PRESENTATION AND INSTALLATION 2019

INSTALLATION PRECAUTIONS

Page 16/66 sns-en-SNrange_installation_guide-2019 - 09/2019

IMPORTANT

Avoid in particular direct exposure to sunlight. Always keep an adequate distance around

the appliance in order to guarantee a free flow of air, thereby preventing the possibility of

overheating.