Symantec SIEM 9700 Series Manual

Symantec™SIEM 9700 Series
Appliances Hardware
Installation Guide

Symantec™SIEM 9700 Series Appliances Hardware
Installation Guide
The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.
Documentation version: 1.0
Legal Notice
Copyright © 2011 Symantec Corporation. All rights reserved.
Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec
Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks
of their respective owners.
This Symantec product may contain third party software for which Symantec is required
to provide attribution to the third party (“Third Party Programs”). Some of the Third Party
Programs are available under open source or free software licenses. The License Agreement
accompanying the Software does not alter any rights or obligations you may have under
those open source or free software licenses. Please see the Third Party Legal Notice Appendix
to this Documentation or TPIP ReadMe File accompanying this Symantec product for more
information on the Third Party Programs.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING,
PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED
IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in
Commercial Computer Software or Commercial Computer Software Documentation", as
applicable, and any successor regulations. Any use, modification, reproduction release,
performance, display or disclosure of the Licensed Software and Documentation by the U.S.
Government shall be solely in accordance with the terms of this Agreement.

Symantec Corporation
350 Ellis Street
Mountain View, CA 94043
http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our online
Knowledge Base. The Technical Support group works collaboratively with the
other functional areas within Symantec to answer your questions in a timely
fashion. For example, the Technical Support group works with Product Engineering
and Symantec Security Response to provide alerting services and virus definition
updates.
Symantec’s support offerings include the following:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■Telephone and/or Web-based support that provides rapid response and
up-to-the-minute information
■Upgrade assurance that delivers software upgrades
■Global support purchased on a regional business hours or 24 hours a day, 7
days a week basis
■Premium service offerings that include Account Management Services
For information about Symantec’s support offerings, you can visit our Web site
at the following URL:
www.symantec.com/business/support/
All support services will be delivered in accordance with your support agreement
and the then-current enterprise technical support policy.
Contacting Technical Support
Customers with a current support agreement may access Technical Support
information at the following URL:
www.symantec.com/business/support/
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be
at the computer on which the problem occurred, in case it is necessary to replicate
the problem.
When you contact Technical Support, please have the following information
available:
■Product release level

■Hardware information
■Available memory, disk space, and NIC information
■Operating system
■Version and patch level
■Network topology
■Router, gateway, and IP address information
■Problem description:
■Error messages and log files
■Troubleshooting that was performed before contacting Symantec
■Recent software configuration changes and network changes
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/business/support/
Customer service
Customer service information is available at the following URL:
www.symantec.com/business/support/
Customer Service is available to assist with non-technical questions, such as the
following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates, such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information about product updates and upgrades
■Information about upgrade assurance and support contracts
■Information about the Symantec Buying Programs
■Advice about Symantec's technical support options
■Nontechnical presales questions
■Issues that are related to CD-ROMs, DVDs, or manuals

Support agreement resources
If you want to contact Symantec regarding an existing support agreement, please
contact the support agreement administration team for your region as follows:
[email protected]Asia-Pacific and Japan
[email protected]Europe, Middle-East, and Africa
[email protected]North America and Latin America

Technical Support ............................................................................................... 4
Chapter 1 Introduction ........................................................................... 9
About SIEM 9700 Series Appliances .................................................. 9
SIEM 9700 Series appliance front and rear views ............................... 10
Dimensions ................................................................................. 10
Panels, slots, and ports .................................................................. 11
SIEM 9700 Series appliance rear panel - details ................................. 12
SIEM 9700 Series appliance control panel ........................................ 14
Chapter 2 Safety ..................................................................................... 17
Safety overview ........................................................................... 17
Symbol conventions ..................................................................... 18
Identifier conventions ................................................................... 18
Electrical safety ........................................................................... 19
High voltage precautions ......................................................... 20
High voltage tools .................................................................. 20
Power cable ........................................................................... 21
Electrical storms .................................................................... 21
Short-Circuit protection .......................................................... 21
Combustible gas ........................................................................... 22
Batteries ..................................................................................... 22
Lasers ........................................................................................ 22
Personal injuries .................................................................... 23
Device damage ....................................................................... 23
User of optical fibre ...................................................................... 23
Cleaning optical connectors and ports ........................................ 24
Replacing optical fibres ........................................................... 24
Hot line work .............................................................................. 24
Power on/off ......................................................................... 24
Troubleshooting .................................................................... 25
Additional safety precautions ......................................................... 25
Lifting heavy objects ............................................................... 25
Sharp objects ........................................................................ 26
Plugging and unplugging boards ............................................... 26
Contents

Binding signal cables .............................................................. 26
Chapter 3 Installation requirements .................................................. 27
Environmental requirements ......................................................... 27
Power supply requirements ........................................................... 28
Power values ......................................................................... 28
Power cable and power socket .................................................. 29
Electrical safety ........................................................................... 29
Heat dissipation ........................................................................... 29
Heat dissipation guidelines ...................................................... 30
Air flow ................................................................................ 30
Installation checklist .................................................................... 31
Chapter 4 Unpacking and checking the devices .............................. 35
Checking before unpacking devices ................................................. 35
Procedure ............................................................................. 35
Chapter 5 Hardware installation ......................................................... 37
About hardware installation ........................................................... 37
Installation preparation ................................................................ 38
Learning the product .................................................................... 38
Learning safety precautions ........................................................... 38
Checking installation requirements ................................................. 38
Preparing materials ...................................................................... 38
Unpacking and checking the devices ................................................ 38
Assuring rack readiness ................................................................ 39
Chapter 6 Installing hardware into racks .......................................... 41
Installing the SIEM 9700 Series appliance guide rails .......................... 41
Installing the SIEM 9700 Series appliance into a rack ......................... 41
Chapter 7 Powering on the Symantec SIEM 9700 Series
Appliances ...................................................................... 43
Check before powering on .............................................................. 43
Powering on the SIEM 9700 Series appliance ..................................... 44
On/Off switch .............................................................................. 45
Powering off the SIEM 9700 Series appliance .................................... 46
Contents8

Introduction
This chapter includes the following topics:
■About SIEM 9700 Series Appliances
■SIEM 9700 Series appliance front and rear views
■Dimensions
■Panels, slots, and ports
■SIEM 9700 Series appliance rear panel - details
■SIEM 9700 Series appliance control panel
About SIEM 9700 Series Appliances
Symantec SIEM 9700 Series Appliances are scalable Security Information and
Event Management appliances, offering assured performance with Symantec's
Security Information Manager™software. SIEM 9700 Series is comprised of three
models; the 9750, 9751, and 9752. Each provide features such as 3.9TB of
redundant event storage, Enterprise connectivity via 8GB Fibre Channel (on the
9751 and 9752) and robust, dedicated out-of-band remote management designed
to enhance Symantec’s already industry-leading ease-of-use and accelerate
time-to-value. 9700 Series physical appliances can also be combined seamlessly
with virtual appliances ensuring full interoperability with the technology platforms
of the modern Enterprise.
The differences in the SIEM 9700 Series appliance models are as follows:
■SIEM 9750 - contains no FC HBA card.
■SIEM 9751 - contains a 2-Port 8 Gb FC HBA card.
■SIEM 9752 - contains a 4-Port 8 Gb FC HBA card.
1
Chapter

The SIEM 9700 Series appliance enclosure is 2U high. This device fits into a
standard 19”rack.
See “SIEM 9700 Series appliance front and rear views”on page 10.
See “Dimensions”on page 10.
See “Panels, slots, and ports”on page 11.
See “SIEM 9700 Series appliance rear panel - details”on page 12.
See “SIEM 9700 Series appliance control panel ”on page 14.
SIEM 9700 Series appliance front and rear views
The following figures describe SIEM 9700 Series appliance front and rear views.
Figure 1-1 SIEM 9700 Series appliance front
Figure 1-2 SIEM 9750 Appliance rear
See “About SIEM 9700 Series Appliances”on page 9.
Dimensions
This section describes SIEM 9700 Series appliance dimensions.
The following list describes dimensions of the SIEM 9700 Series appliance:
■Height: 8.7 cm (3.5”)
■Width: 43.0 cm (16.9”)
■Depth: 70.4 cm (27.8”)
■Weight without drives: 29.5 Kg (65 lbs)
Introduction
SIEM 9700 Series appliance front and rear views
10

■Weight with drives: 32.2 Kg (71 lbs) approximate
The installation height (the space occupied by a SIEM 9700 Series appliance in a
rack cabinet) is 2U (1U = 44.5 cm). The appliance can be installed in a rack cabinet
that is 48 cm (19 inches) wide and 100 cm deep (or deeper).
See “About SIEM 9700 Series Appliances”on page 9.
Panels, slots, and ports
This section describes the front and rear panels, ports, and indicators of the SIEM
9700 Series appliance.
Figure 1-3 SIEM 9700 Series appliance front panel - details
Table 1-1
DescriptionLetter
Disk modules (qty 8) for 2.5" 600 GB hard disk driveA
Disk module handle (sty 8)B
Control panelC
Note: Disk slots are labeled 0 through 7, from left to right. Slot 7 is the hot spare
disk. Disks in the other slots are data disks that form a RAID 5 group.
11Introduction
Panels, slots, and ports

Figure 1-4 SIEM 9700 Series appliance disk drive modules
See “About SIEM 9700 Series Appliances”on page 9.
SIEM 9700 Series appliance rear panel - details
This section describes SIEM 9700 Series appliance rear panel - details.
Figure 1-5 SIEM 9700 Series appliance rear panel - details
Table 1-2 SIEM 9700 Series appliance rear panel description
DescriptionLetter
Upper Power Supply ModuleA
Upper Power ReceptacleB
Lower Power ReceptacleC
Lower Power Supply ModuleD
Remote Management Module NICE
Introduction
SIEM 9700 Series appliance rear panel - details
12

Table 1-2 SIEM 9700 Series appliance rear panel description (continued)
DescriptionLetter
NIC2 (eth1) 100 Gbps Ethernet portF
NIC1 (eth0) 100 Gbps Ethernet portG
USB portsH and I
DB-9 Serial B ConnectorJ
VGA VideoK
RJ-45 Serial A ConnectorL
Figure 1-6 SIEM 9751 with 2-port 8 Gb FC HBA
Figure 1-7 4-port 8 Gb FC HBA used by SIEM 9752
Table 1-3 Descriptions for the FC HBA
DetailsLetter
LEDs
Each port on the FC HBA card has one set of LEDs.
Three LEDs labeled “8”,“4”and “2”indicate the rate of data
transfer (8-Gbit/s, 4-Gbit/s, or 2-Gbit/s).
A
13Introduction
SIEM 9700 Series appliance rear panel - details

Table 1-3 Descriptions for the FC HBA (continued)
DetailsLetter
Connectors
Dual 8-Gbps Fibre Channel (FC)
Connect using SFP+ with LC-style connector port cables
B
See “About SIEM 9700 Series Appliances”on page 9.
SIEM 9700 Series appliance control panel
This section provides a physical view and technical specifications for the control
panel in the upper right corner of front panel of the SIEM 9700 Series appliance.
Figure 1-8 SIEM 9700 Series appliance control panel
Table 1-4 LED function
LED functionLetter
Hard Disk Activity
Random flashing green light indicates hard disk drive
activity (SAS).
No light indicates no hard disk drive activity.
A
NIC 1 Activity
Continuous green light indicates a link between the system
and the network to which it is connected.
Flashing green light indicates network activity.
B
Introduction
SIEM 9700 Series appliance control panel
14

Table 1-4 LED function (continued)
LED functionLetter
NIC 2 Activity
Continuous green light indicates a link between the system
and the network to which it is connected.
Flashing green light indicates network activity.
C
System Status Solid amber indicates a critical or
non-recoverable condition.
Solid green indicates normal operation.
Flashing green indicates degraded performance.
Flashing amber indicates a non-critical condition.
No light indicates POST is running or the system is off.
D
Power/Sleep
Continuous green light indicates the system has power
applied to it or the system is S0 state.
Flashing green indicates the system is in sleep or ACPI S1
state.
No light indicates the power is off or the system is in ACPI
S4 or S5 state.
E
System identification
Solid blue indicates system identification is active.
No light indicates system identification is not activated.
F
See “About SIEM 9700 Series Appliances”on page 9.
15Introduction
SIEM 9700 Series appliance control panel

Introduction
SIEM 9700 Series appliance control panel
16

Safety
This chapter includes the following topics:
■Safety overview
■Symbol conventions
■Identifier conventions
■Electrical safety
■Combustible gas
■Batteries
■Lasers
■User of optical fibre
■Hot line work
■Additional safety precautions
Safety overview
Before performing any installation or maintenance operation, learn the safety
regulations of the site. Read the safety precautions in this document for correct
operating methods to ensure safety of persons and devices.
To prevent the risk of accidents, carefully read all operation instructions and
precautions in this manual before performing any operation(s). The Caution,
Warning, and Danger statements in this document do not cover all possible safety
2
Chapter

precautions that must be followed. Only specific supplements to standard safety
precautions are provided. Personnel responsible for installing and maintaining
Symantec products are required to understand the basics of standard electronic
device safety practices. Training and qualification are required to learn the proper
operating methods.
See “Symbol conventions”on page 18.
See “Identifier conventions”on page 18.
Symbol conventions
Warning symbols remind you of safety precautions to be followed during
installation and maintenance operations.
Table 2-1 Warning symbols
DescriptionSymbol
Indicates a hazard with a high level of risk.
If the hazard is not avoided, it could result
in death or serious injury.
Indicates a hazard with a medium or low
level of risk. If the hazard is not avoided, it
could result in minor or moderate injury.
Indicates a potentially hazardous situation.
If the situation is not avoided, it could result
in equipment damage, data loss,
performance degradation, or unexpected
results.
See “Safety overview”on page 17.
See “Identifier conventions”on page 18.
Identifier conventions
The following table describes warning and safety identifiers.
Safety
Symbol conventions
18

Table 2-2 Warning and safety identifiers
DescriptionsIdentifier
Weight warning identifier
You must pay attention to the weight of the
device before moving it.
See “Lifting heavy objects”on page 25.
Warning identifier against inserting and
removing system disks
You should not insert or remove system
disks without following proper procedures.
Power warning identifier
You must shut off all power sources when
turning off a device.
See “Electrical safety”on page 19.
Identifier for reading the manual
You must read the manual before operating
the device.
Drive identifier
Indicates the ID number of the slot where
the disk resides.
0, 1, 2, 3, 4, 5, 6, 7
See “Safety overview”on page 17.
See “Symbol conventions”on page 18.
Electrical safety
This section describes electrical safety precautions against personnel and device
damage during installation and maintenance of Symantec products.
See “Symbol conventions”on page 18.
19Safety
Electrical safety

High voltage precautions
A high-voltage power supply provides power for the device. Direct or indirect
contact (through damp objects) with a high-voltage power supply (including the
main power in a building) can result in fatal danger.
■When installing the AC power supply, follow standard safety regulations.
Personnel who install the AC power supply must be qualified to perform high
voltage and AC operations.
■Do not wear conductive objects such as a watch, chain, bracelet, or ring during
the operation.
■Switch off the power supply immediately if you find water in the cabinet or if
the rack is damp.
■Make sure that the device is kept away from water when being operated in a
damp environment
Improper operation on a high voltage power supply may result in fire and electric
shock. To connect and route the AC cables through a certain area, you must follow
standard rules and regulations. Personnel must have an up-to-date certificate for
operating high voltage and AC power devices.
See “High voltage tools”on page 20.
High voltage tools
You must use insulated tools when operating on high voltage and AC power.
See “High voltage precautions”on page 20.
Safety
Electrical safety
20