Symantec EDR S550 User manual

Page 1
01 Unpack the Appliance
Verify the contents of the shipping package for the Symantec EDR S550 appliance:
• (2) AC power cords
• (1) DB9 to RJ45 serial cable
• Two/four-post slide-rail kit
• Safety and Regulatory Guide
• Quick Start Guide (this document)
• Software License Agreement
• Hardware Warranty Information
02 Connect Cables
Symantec recommends plugging in cables, verifying LEDs, and configuring and licensing
the appliance before rack-mounting. Make sure the appliance is on a flat, level surface when
performing the initial configuration. If you would rather rack-mount the appliance before
performing configuration tasks, skip to Step 6—Rack-Mount the Appliance.
The following procedure describes a typical endpoint deployment for Symantec EDR appliances
(see illustration above). For information on other deployments, see the Symantec EDR Installation
Guide, available at: https://support.symantec.com/us/en/documentation.html
Note: Network cables are not included with the appliance. Make sure to use only straight-through
Ethernet cables. Category 6A cables are recommended for Ethernet operation.
To deploy the appliance and connect its cables:
a. Connect the RJ45 end of the included serial cable to the appliance’s real panel RJ45 serial
port and connect the other DB9 end of the cable to the serial terminal or workstation with
terminal emulation software. The serial connections is used to perform the appliance’s
initial configuration.
b. Connect an Ethernet cable to the RJ45 eth0 port labeled 0:0 and connect the other end to
the management network switch.
c. Connect the included AC power cords to the appliance’s power inlets and connect the other
ends to a power source.
Note: If you are only using the endpoint communication channel (ECC) features or the host
is a Management Platform, no further steps are required to connect cables. Proceed to
Step 3—Power on the Appliance and Verify LEDs. If you are using copper ports, continue
to the next step.
d. For an appliance to operate in Inline Block or Inline Monitor mode, connect port 2:0 to the serv-
er that hosts the firewall. Optionally, you can also connect port 2:2 to another upstream firewall
host. For Tap mode, connect either of these ports to a Tap/Span port on a switch or router.
e. For an appliance to operate in Inline Block or Inline Monitor mode, connect port 2:1 to the
corporate LAN. Optionally, you can also connect port 2:3 to the corporate LAN. For Tap
mode, connect either of these ports to a Tap/Span port on a switch or router.
Port to function summary:
• 0:0—Management port
• 2:0—WAN1 port
• 2:1—LAN1 port
• 2:2—WAN2 port
• 2:3—LAN2 port
03 Power on the Appliance and Verify LEDs
To verify the appliance is operational:
a. Confirm the appliance’s power cords are securely connected to a power source.
b. If the appliance does not automatically power on, press the rear soft power switch.
Note: The state of the appliance’s soft power switch (on or off) is retained when power is
removed. This may necessitate pressing the power switch when reapplying power to the
appliance.
c. As the appliance boots, verify the following:
• The Power LED turns amber.
• Near the end of the boot cycle, the Power LED alternates between amber and green,
indicating an unconfigured state.
• Following the initial configuration (see Step4), the Power LED turns green.
The front-panel LEDs indicate the following states:
• Power LED (•) Off: Powered off or no power present
(•) Green: Powered on
• Sys Status LED (•) Off: Powered off or no power present
04 Perform the Initial Configuration
You must have the following network information to initialize the appliance:
• Appliance IP address • Link settings (speed and duplex)
• Primary DNS server IP address • Admin ID and password (admin /
symantec)
• Default Gateway IP address
• Subnet mask
To perform the initial configuration for the appliance:
a. Confirm the appliance’s rear-panel RJ45 serial port is connected to a serial terminal or
workstation with terminal emulation software.
b. Open a terminal emulation program such as Microsoft HyperTerminal®, PuTTY, Tera Term, or
ProComm™.
c. Configure the terminal emulation software to use the following settings:
• Baud rate:9600 bps • Data bits:8
• Parity:none • Stop bits:1
• Flow control:none
d. Power on the appliance (if it is not already powered on) and log in with the default cre-
dentials and bootstrap the appliance. Use the bootstrap mode that’s compatible with the
connection configuration in Step 2.
05 License the Appliance
Upon receiving your order, Symantec sends you a fulfillment confirmation email (“Welcome”
email). Symantec also generates a serial number for you and sends it in a separate email. This
email also contains a link to MySymantec.
Use the Symantec EDR Web UI to set up and license your appliance using the following procedure.
To license the appliance:
a. Click the link to MySymantec and click Enterprise Licensing.
b. Accept the EULA for MySymantec.
c. Sign in if you have an account. If you don’t have an account, create one with NSL.
d. Provide the requested information.
e. On the Symantec Licensing Portal, click the option for a new purchase.
f. Enter the license number provided in the email.
g. Verify the license information. Upon verification, the license file is created and sent to you in
a third email.
h. The verification email contains another link to MySymantec. Click the link.
i. On the Software download page, enter your serial number again.
j. You are provided a link to EDR Cloud and downloads.
Note: For additional information on licenses, see the Symantec EDR Administration Guide,
available at: https://support.symantec.com/us/en/documentation.html
06 Rack-Mount the Appliance
The slide-rail mounting kit included with the Symantec EDR appliance allows it to be rack-
mounted in a two- or four-post equipment rack. The kit provides tool-less racking for 4-post
racks and allows the appliance to be installed or removed from the front of the rack. The slide-
rail kit includes the following parts:
• (2) Inner chassis rails
• (2) Outer rack rails
• (1) Kit for two-post mounting configurations
Note: The following procedure documents how to install the appliance in a four-post
equipment rack. For comprehensive information on rack-mounting the appliance, including
two-post configurations, see the S-Series WebGuide, available at:
http://www.symantec.com/docs/DOC9795.
Quick Start Guide
Symantec EDR S550
Serial
Terminal
Management
Workstation
Serial
Port
PSU2
PSU1
MGMT
0:0 Port
INTERNET
WAN
Router
Main Site
LAN
LAN
Switch
Network Ports
2:3 – 2:2 – 2:1 – 2:0
EDR S550 Endpoint
Deployment
MGMT
Switch
CAUTION:
Before rack-mounting the appliance:
• Power off the appliance and disconnect all cables.
• Verify that the weight of the system does not exceed the rack’s fully
populated weight limit. For more information, refer to the manufac-
turer’s instructions included with the rack.
• For weight stability, load the rack from thebottomup.
• Read the “Rack Mount Warnings” section of the Safety and
Compliance Guide.
• Take adequate safety and grounding measures to avoid creating an
electrical shock hazard and to prevent bodily injury.
• The appliance is very heavy. A two-person lift or mechanical aid is
recommended to lift the appliance from the carton and install it in
the rack.
• Do not place objects on the appliance or use it as a work surface. Its
mounting hardware does not support additional weight.

Copyright © 2019 Symantec Corp. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Blue Coat, and the Blue Coat logo are trademarks or registered trademarks of Symantec Corp. or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this
document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
THE DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR
CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. SYMANTEC CORPORATION PRODUCTS, TECHNICAL SERVICES, AND ANY OTHER TECHNICAL DATA REFERENCED IN THIS DOCUMENT ARE SUBJECT TO U.S. EXPORT CONTROL AND SANCTIONS LAWS, REGULATIONS AND
REQUIREMENTS, AND MAY BE SUBJECT TO EXPORT OR IMPORT REGULATIONS IN OTHER COUNTRIES. YOU AGREE TO COMPLY STRICTLY WITH THESE LAWS, REGULATIONS AND REQUIREMENTS, AND ACKNOWLEDGE THAT YOU HAVE THE RESPONSIBILITY TO OBTAIN ANY LICENSES, PERMITS OR OTHER APPROVALS THAT MAY BE REQUIRED IN ORDER TO EXPORT, RE-EXPORT, TRANSFER IN COUNTRY OR IMPORT AFTER DELIVERY TO YOU.
Page 2
EDR S550 Quick Start Guide
To install the appliance in a four-post equipment rack:
a. Disassemble the two slide-rail assemblies by fully extending each slide-rail and sliding out
the inner chassis rails.
b. Attach the two inner rails to the appliance. Align each rail to the mounting posts on each
side of the chassis and slide the rails toward the front of the chassis until the mounting
posts snap into place.
c. Attach the rack rails to the rack. Insert the front of each rail in the rack while opening and
then releasing the front latch. Repeat to attach the rear of the rails, extending or retracting
the rails as necessary so they fit. Verify the rack rails are installed at the same rack height.
d. Install the appliance in the rack. Align the inner rails (attached to the appliance) with the
slide-rails in the rack and slide the appliance gently all the way into the rack until it clicks
and locks in place. The appliance can be installed from either the front or rear of the rack.
e. Reconnect the cables as documented in Step 2—Connect Cables and verify the appliance
is functioning as in Step 3—Power On the Appliance and Verify LEDs.
To extend or remove the appliance from the rack:
a. Press the blue rack levers up to disengage the slide rail safety locks.
b. While continuing to press the levers, gently pull or push the appliance so it extends out the
front or rear of the rack.
c. Remove pressure from the levers immediately so the rail safety locks engage in the fully-ex-
tended out position. Take care not to push or pull too far, especially while pressing the blue
levers. Doing so could cause the appliance to fall from the rack.
d. To remove the appliance from the rack while the appliance is in the extended position, press
the blue levers up to disengage the slide rail safety locks.
e. While continuing to press the levers, carefully slide the appliance out the front or rear of the
rack. Make sure to use two persons or a mechanical aid to lift the appliance from the rack.
Technical Support
• Contact Information
https://support.symantec.com/us/en/contact-us.html
• MySymantec
https://www.mysymantec.com
Documentation
Symantec EDR Documentation
• https://support.symantec.com/us/en/documentation.html
On the Documentation page, type “EDR” in the Product Name field and
select Symantec Endpoint Detection and Response from the drop-
down menu to see the available EDR documentation.
Appliance Documentation
• S-Series Maintenance and Upgrade Guide
http://www.symantec.com/docs/DOC9795
• S550 Safety and Compliance Guide
http://www.symantec.com/docs/DOC11377