Symantec ASG-S400-20 User manual

ASG-S400-20 to -30 Upgrade Kit
Product Installation Guide

Legal Notice
Copyright © 2017 Symantec Corp. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Blue Coat,
and the Blue Coat logo are trademarks or registered trademarks of Symantec Corp. or its affiliates in the U.S. and other
countries. Other names may be trademarks of their respective owners. This document is provided for informational
purposes only and is not intended as advertising. All warranties relating to the information in this document, either
express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to
change without notice.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE
EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL
NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE
FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN
THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. SYMANTEC CORPORATION
PRODUCTS, TECHNICAL SERVICES, AND ANY OTHER TECHNICAL DATA REFERENCED IN THIS
DOCUMENT ARE SUBJECT TO U.S. EXPORT CONTROL AND SANCTIONS LAWS, REGULATIONS AND
REQUIREMENTS, AND MAY BE SUBJECT TO EXPORT OR IMPORT REGULATIONS IN OTHER COUNTRIES.
YOU AGREE TO COMPLY STRICTLY WITH THESE LAWS, REGULATIONS AND REQUIREMENTS, AND
ACKNOWLEDGE THAT YOU HAVE THE RESPONSIBILITY TO OBTAIN ANY LICENSES, PERMITS OR OTHER
APPROVALS THAT MAY BE REQUIRED IN ORDER TO EXPORT, RE-EXPORT, TRANSFER IN COUNTRY OR
IMPORT AFTER DELIVERY TO YOU.
Symantec Corporation
350 Ellis Street
Mountain View, CA 94043
www.symantec.com
5/19/2017

Symantec Upgrade Installation Guide
Contents
Upgrading the ASG-S400-20 to the ASG-S400-30 4
Review Kit Contents 5
Required Installation Tools 6
Prepare the Appliance for Upgrade Kit Installation 7
Shut Down the Advanced Secure Gateway Appliance 8
Install Additional S400 Series Hard Disk Drives 9
Open the S400 Series Center Cover 11
Remove the S400 Series Rear Cover 13
Remove the S400 Series Airduct 14
Install the ASG-S400 Memory Modules 15
Install an S400 Series Processor and Heatsink 18
Install the S400 Series Airduct 22
Reinstall the S400 Series Rear Cover 23
Close the S400 Series Center Cover 24
Finish the Upgrade Process 25
Verify the ASG Appliance Hardware Configuration 27
Troubleshooting 29
Appendices 30
SafetyWarnings and Cautions 31
Appliance Specifications 33
Hard Disk Drive Status LEDs 38
S400 Series Hard Drives 39
S400 Hard Drive Configuration Table 40
3

Symantec Upgrade Installation Guide
Upgrading the ASG-S400-20 to the ASG-S400-30
To install an upgrade kit for the ASG-S400 Series appliance, follow the tasks listed below for your upgrade kit. Please
note, a qualified technician must perform the following tasks in order to reduce the risk of damage to your appliance.
Review the "SafetyWarnings and Cautions" on page31 before servicing your appliance. ALWAYS observe proper
electrostatic discharge (ESD) conventions. Attach an ESD protective wrist strap to your wrist and to the chassis.
Ensure that the appliance is on an ESD-safe work surface or ground the unit appropriately. Symantec does not
assume responsibility or liability for damage resulting from ESD.
Follow the steps below to install the components of the upgrade kit.
1. Verify the contents of the upgrade kit.
2. Gather the required tools for installation.
3. Prepare the appliance for upgrade kit installation. Archive the configuration settings running on the old appliance
and record your network configuration settings.
4. Gracefully shutdown the appliance.
5. Install three additional HDDs into empty drive bay 4, 5, and 6.
6. Open the center cover.
7. Remove the rear cover.
8. Remove the airduct.
9. Replace the existing memory modules with those included with the kit.
10. Replace the CPU and heatsink unit.
11. Reinstall the front airduct.
12. Reinstall the rear cover.
13. Close the center cover.
14. Finish the upgrade process. (Connect the cables, power on, install license).
15. Verify the new hardware configuration.
16. Troubleshooting
Be sure to recycle your old and unused hardware through the Symantec Recycling Service. For more information,
go to https://www.bluecoat.com/support/support-policies/recycling-blue-coat-products
4

Symantec Upgrade Installation Guide
Review Kit Contents
The contents of the ASG-S400-20 to -30 upgrade kits are shown below. Please verify the contents of the upgrade kit
before continuing with the installation. If any items are missing, please contact your Symantec Support contact for
assistance.
Model Upgrade Kit Contents
ASG-S400-20 to ASG-S400-30
Upgrade Kit
Hard Disk Drives: 1TB HDD x 3
Memory: 48GB (8GB X 6)
Processor: 6 Core Intel CPU x 1
Heatsink: Heatsink unit with pre-applied thermal compound x 1
Miscellaneous: ESD Wriststrap, Information Flyer
5

Symantec Upgrade Installation Guide
Required Installation Tools
To install the S400 upgrade kit, Symantec recommends the following tools and items.
Item Description
Required Tools #2 Phillips head screwdriver
Recommended Items Mechanical lift (if moving the appliance to a separate workspace)
Flashlight or headlamp
Thumb protector (to use when pressing DIMMs into sockets)
6

Symantec Upgrade Installation Guide
Prepare the Appliance for Upgrade Kit Installation
Before performing any hardware upgrades, archive the configuration and keyring that are running on the old appliance and
record your network configuration settings. This should be done periodically as part of general system maintenance
procedures.
IMPORTANT:
nKeys are exported in clear text with no encryption or obfuscation. Take precautions to secure the archive file
appropriately.
nThe archive does not include keyrings saved with the Do not show keypair option. For keyrings that are not
included in the archive, you must manually create a new keyring and import the key and the certificate into the new
ProxySG appliance before you are instructed to restore this archive.
Create a back up of your SGOS configuration using SSH-Console session. The archive generated in this procedure
includes the showable keyrings on the appliance.
1. In your terminal emulation application, enable session logging. Configure the application to log the session output
and save that file on your local system. The following example uses PuTTY:
2. Access the CLI on the appliance and enter the following commands from the CLI command prompt:
SGOS> enable
SGOS# config terminal
SGOS(config) show configuration noprompts with-keyrings
SGOS(config) exit
3. Exit the terminal emulation application, making sure that session logging is turned off.
4. Open the session log/output file and delete all the text/commands before and after the configuration.
5. Save this text file on your local system or hard drive.
6. Record your network settings (Management interface IP address, subnet mask, default gateway, primary DNS
server, alternate DNS server).
7

Symantec Upgrade Installation Guide
Shut Down the Advanced Secure Gateway Appliance
Gracefully shut down and power off the Advanced Security Gateway appliance using the CLI shutdown command. Do
not shut down the appliance using the switch or by removing the power cables! Abruptly removing power can result in
irreparable data loss. Always use the CLI shutdown command to power down the appliance.
Remove the power cords after the appliance has been properly shut down.
To gracefully shutdown the appliance using the shutdown command:
1. Review the safety warnings before proceeding. See "SafetyWarnings and Cautions" on page31.
2. Access the ASG command-line interface using a terminal emulation program.
3. When prompted, press 1to access the CLI.
4. Enter enable to access privileged commands.
5. Enter shutdown to turn off the appliance.
6. Unplug the power cord(s) from the AC power outlet(s).
7. Disconnect the power cord(s) from the power supply unit(s).
8. Be sure to properly ground the chassis before continuing with the installation.
8

Symantec Upgrade Installation Guide
Install Additional S400 Series Hard Disk Drives
The S400 Series appliances are available in configurations with a maximum of 8 hard disk drives for SAS-based
appliances and 2 for SATA-based appliances. Each HDD is equipped with a LEDstatus indicator and are hot-swappable
on certain Symantec appliances. SATA drives can only be removed and installed when power is disconnected from the
appliance. Depending upon the model and configuration of the appliance, some drive bays might be populated with empty
drive carriers. These carriers should not be removed when the appliance is in operation.
For information on where to install hard disk drives, refer to the S400 Series HDD configuration table.
1. Pull the appliance out of the rack (or set the appliance over the workspace edge) several inches to provide room for
the bezel.
2. Open the bezel to access the HDD quick release carriers. Be sure to support both sides when flipping over the
bezel.
3. Properly orientate the new HDDcarrier with the chassis HDD bay and slide into the appliance until it reaches the
chassis stops and secure the drive by closing the latch until it clicks into place.
Note: Do not insert the HDDcarrier with the latch in the closed position! Instead, push the HDD carrier body to
avoid damaging the carrier.
9

Symantec Upgrade Installation Guide
4. Close the appliance bezel.
10

Symantec Upgrade Installation Guide
Open the S400 Series Center Cover
The S400 Series center cover protects and houses the system fan units and provides further access to the appliance
components.
Review the "SafetyWarnings and Cautions" on page31 before servicing your appliance. ALWAYS observe proper
electrostatic discharge (ESD) conventions. Attach an ESD protective wrist strap to your wrist and to the chassis.
Ensure that the appliance is on an ESD-safe work surface or ground the unit appropriately. Symantec does not
assume responsibility or liability for damage resulting from ESD.
1. Verify that the appliance has been gracefully shutdown and the power cords have been removed.
2. Pull the appliance out of the rack to provide ample room for system access.
3. Unlock the shipping latch by pulling towards the front of the appliance.
4. Pull the locking tabs on both sides of the chassis simultaneously towards the front and flip the cover over. Let the
11

Symantec Upgrade Installation Guide
cover rest on top of the front chassis cover.
12

Symantec Upgrade Installation Guide
Remove the S400 Series Rear Cover
The S400 Series rear cover protects the primary system components. You must remove this panel to access the option
cards as well as the SSD image storage devices. You cannot remove the rear cover without first opening the center cover.
Review the "SafetyWarnings and Cautions" on page31 before servicing your appliance. ALWAYS observe proper
electrostatic discharge (ESD) conventions. Attach an ESD protective wrist strap to your wrist and to the chassis.
Ensure that the appliance is on an ESD-safe work surface or ground the unit appropriately. Symantec does not
assume responsibility or liability for damage resulting from ESD.
1. Pull the appliance out of the rack to provide ample room for system access.
2. Open the appliance center cover.
3. Unlock the rear cover by lifting the latch.
4. Push the rear cover towards the rear of the appliance then lift to remove the cover. Set the rear cover aside at a
safe location.
13

Symantec Upgrade Installation Guide
Remove the S400 Series Airduct
The S400 Series is equipped with an airduct unit that directs airflow over critical system components and provides further
access to the components. .
Review the "SafetyWarnings and Cautions" on page31 before servicing your appliance. ALWAYS observe proper
electrostatic discharge (ESD) conventions. Attach an ESD protective wrist strap to your wrist and to the chassis.
Ensure that the appliance is on an ESD-safe work surface or ground the unit appropriately. Symantec does not
assume responsibility or liability for damage resulting from ESD.
Remove the rear airduct by using the finger grips and lifting straight up.
14

Symantec Upgrade Installation Guide
Install the ASG-S400 Memory Modules
When upgrading your ASG-S400 appliance, review the appliance memory configuration of the target specification and the
DIMM slot usage for each memory module. DIMMs are grouped by channels and are marked on the motherboard (ex.
slots A1, A2, B1, etc). Moreover, memory upgrades replace all existing memory in the appliance. Take care not to mix the
upgrade memory and existing system memory modules!
The memory configuration details are shown below:
ASG-S400
Upgrade Kit
Memory Slot
Usage
Reference Image
ASG-S400-20 to
ASG-S400-30
48GB total
memory: (8GB x
6) - A1, A2, B1,
B2, C1, C2
ASG-S400-30
to ASG-S400-
40
72GB total
memory: (16GB x
3) - A1, B1, C1;
(8GB x 3) - A2,
B2, C2
Review the "SafetyWarnings and Cautions" on page31 before servicing your appliance. ALWAYS observe proper
electrostatic discharge (ESD) conventions. Attach an ESD protective wrist strap to your wrist and to the chassis.
Ensure that the appliance is on an ESD-safe work surface or ground the unit appropriately. Symantec does not
assume responsibility or liability for damage resulting from ESD.
Notes:
lMemory upgrades replace all existing memory in the appliance. Take care not to mix the upgrade memory and
existing system memory modules!
lDo not install any DIMMs which are not explicitly supported by the appliance. Installation and use of unauthorized
DIMMs might damage the appliance and will invalidate your Symantec service contract!
1. Remove all of the existing memory (do not mix existing DIMMs with the included replacement DIMMs). Depress
both of the locking latches per slot (a) to release the DIMM and remove it from the DIMM slot (b).
15

Symantec Upgrade Installation Guide
Be sure to recycle your old and unused hardware through the Symantec Recycling Service. For more
information, go to https://www.bluecoat.com/support/support-policies/recycling-blue-coat-products
2. To install the new memory, align the notch in the DIMM with the DIMM slot. Be aware that the memory module can
only be installed in one direction.
3. Press each DIMM firmly into place until both locking latches snap into place. Do not force the memory module into
place.
16

Symantec Upgrade Installation Guide
4. If your appliance does not boot up after installing the memory upgrade, please remove then reinstall all memory
modules.
17

Symantec Upgrade Installation Guide
Install an S400 Series Processor and Heatsink
If you are upgrading your S400 Series appliance, review the appliance CPU configuration information on the appliance
specifications page.
Review the "SafetyWarnings and Cautions" on page31 before servicing your appliance. ALWAYS observe proper
electrostatic discharge (ESD) conventions. Attach an ESD protective wrist strap to your wrist and to the chassis.
Ensure that the appliance is on an ESD-safe work surface or ground the unit appropriately. Symantec does not
assume responsibility or liability for damage resulting from ESD.
Do not install any CPUs which are not explicitly supported by the appliance. Installation and use of unauthorized
CPUs might damage the appliance and will invalidate your Symantec service contract!
1. Remove the existing heatsink by unscrewing 4 screws that secure it to the motherboard and lifting out of the
appliance.
2. Release the processor load plate by pressing down and away on the processor plate release lever. Make sure the
lever is pulled all the way back. The processor load plate is now unlocked.
18

Symantec Upgrade Installation Guide
3. Verify that the lever have been pulled back and then flip open the processor load plate to access the processor
socket.
4. Remove the existing processor by holding it by the edges and lifting out of the appliance.
5. To install the processor:
Important! Be sure to handle the processor by the flat edges!
a. Align the gold triangle etched on the corner of the processor with the black triangle etched on the corner of the
socket.
b. Match the key posts on the socket with the processor key cutouts.
c. Gently lower the processor into the socket.
19

Symantec Upgrade Installation Guide
6. To secure the processor:
a. Close the processor load plate.
b. Lower the processor plate lever arm.
c. Lock the plate lever arm into place.
7. Remove the protective cover from the bottom of the new processor heatsink.
20