Trend Micro TippingPoint TPS TX Series User manual

Trend Micro TippingPoint
TM TM
Threat Protection System (TPS)
Hardware Specification and Installation Guide

Privacy and Personal Data Collection Disclosure
Certain features available in Trend Micro products collect and send feedback regarding product usage and detection information to Trend Micro.
Some of this data is considered personal in certain jurisdictions and under certain regulations. If you do not want Trend Micro to collect personal
data, you must ensure that you disable the related features.
The following link outlines the types of data that the Security Management System collects and provides detailed instructions on how to disable the
specific features that feedback the information.
https://success.trendmicro.com/data-collection-disclosure
Data collected by Trend Micro is subject to the conditions stated in the Trend Micro Privacy Policy:
https://www.trendmicro.com/en_us/about/legal/privacy-policy-product.html
Legal Notice
© Copyright 2023Trend Micro Incorporated. All rights reserved.
Trend Micro, the Trend Micro t-ball logo, TippingPoint, and Digital Vaccine are trademarks or registered trademarks of Trend Micro Incorporated.
All other product or company names may be trademarks or registered trademarks of their owners.
Publication: August 2023

Overview
The Trend Micro™ TippingPoint™ Threat Protection System (TPS) is a high-
performance, enterprise-class solution that protects your network by
scanning, detecting, and responding to network trac according to the
lters, action sets, and global settings maintained on each device by a client.
The TPS oers improved technology that is optimized for higher throughput,
high resiliency, high availability, and network segment protection from both
external and internal attacks. In addition, the TXE model oers improved
hardware acceleration that enables characterizing and network visibility
capabilities.
You can install as many TPS security devices as you need to strategically
protect your network enterprise zones. You can manage a device by using its
command line interface (CLI) or by using the Security Management System
(SMS) console.
Learn more about each TPS product in the following sections:
•TPS 9200TXE device on page 1
•TPS TX Series devices on page 2
•TPS 2200T device on page 5
•TPS 440T device on page 6
For information about the Virtual Threat Protection System (vTPS) virtual
appliance, refer to that product documentation.
TPS 9200TXE device
Figure 1. 9200TXE device
This TPS TXE security device provides the following hardware features.
1

Feature Description
Ports 1GbE Copper + 25GbE SFP28 management port
Dual QSFP28-DD (400Gbps Full-Duplex Total) special
purpose ports
RJ-45 serial console port
Slots Two I/O slots
AC Power supply Two hot-swappable, replaceable (1500W/110V and
2000W/220V) PSUs
1+1 redundant
External storage One 240 GB SSD
Fans Seven hot-swappable dual-rotor 40 mm modules
TPS TX Series devices
TPS Hardware Specification and Installation
2

The TPS TX Series security devices provide the following hardware features.
Feature Model Description
Ports 1100TX • One RJ-45 console port
• One 1 GbE copper management
port
TPS Hardware Specification and Installation
3

Feature Model Description
5500TX • Two fixed SFP+ special purpose
(SP) ports (not used in this TOS
release)
• One RJ-45 console port
• One 1 GbE copper management
port
8200TX and 8400TX • Two fixed QSFP+ special
purpose (SP)
• One RJ-45 console port
• One 1 GbE copper management
port
Slots 1100TX One I/O slot
5500TX Two I/O slots
8200TX and 8400TX Four I/O slots
Power supply 1100TX One replaceable 250W AC power
supply
5500TX Two hot-swappable, redundant 250W
AC power supplies
8200TX and 8400TX Two hot-swappable, redundant 750W
AC power supplies
External storage 1100TX One 8 GB SSD
5500TX, 8200TX, and
8400TX
One 32 GB SSD
Fans 1100TX Two (nonreplaceable)
5500TX Three (nonreplaceable)
8200TX and 8400TX Seven (replaceable and hot-
swappable)
TPS Hardware Specification and Installation
4

TPS 2200T device
The TPS 2200T device provides the following hardware features.
Feature 2200T device
Ports One RJ-45 console port
One 1 GbE copper management port
1 GbE copper ports 8
1 GbE SFP ports 8
10 GbE* SFP+ ports 4
Power supply 2 hot-swappable 750W AC power supplies
External storage One 8 GB CFast
System fans 3 fans (not replaceable)
Dedicated High Availability (HA) port Yes
Zero Power High Availability (ZPHA)** Built-in ZPHA for copper segments
External ZPHA port for SFP and SFP+
segments
*Rate does not include autonegotiation. Dual-rate SFP+ transceivers are not supported.
TPS Hardware Specification and Installation
5

**To learn more about installing and operating a ZPHA module, refer to TippingPoint ZPHA
Installation Guide – Modular and Non-Modular.
TPS 440T device
The TPS 440T device provides the following hardware features.
Feature 440T device
Ports One RJ-45 console port
One 1 GbE copper management port
1 GbE copper ports 8
Power supply One 350W (built-in) power supply
External storage One 8 GB CFast
System fans 3 internal fans (not replaceable)
Dedicated High Availability (HA) port Yes
Zero Power High Availability (ZPHA) Built-in ZPHA for copper segments
TPS 9200TXE device overview
The following topics describe the components, chassis, requirements, and
installation specics of the 9200TXE device:
•Chassis – front panel on page 7
•Chassis – rear panel on page 7
TPS Hardware Specification and Installation
6

•Chassis – features on page 7
•Model requirements on page 11
•I/O modules on page 12
•Technical specications on page 16
Learn more on page 51 about installing the device. Prior to installation, have
the TPS CLI Reference available for conguration information.
Chassis – front panel
The following illustration shows the front panel view of the 9200TXE device:
Figure 2. 9200TXE front panel
Chassis – rear panel
The following illustration shows the rear panel view of the 9200TXE device:
Figure 3. 9200TXE rear panel
Chassis – features
Refer to the following topics for information about the 9200TXE chassis
features:
•Fans and power supplies on page 8
TPS Hardware Specification and Installation
7

•External SSD on page 8
•Ports on page 8
•Chassis LEDs on page 10
Fans and power supplies
The 9200TXE device includes:
• Two hot-swappable power supplies
• Seven hot-swappable fans
Learn more about Power supplies on page 62 and Fans on page 69.
External SSD
The TXE device includes an external SSD module that ships pre-installed
with your product. The SSD is used to store trac logs, snapshots, and other
system data. You can remove and install the card while the device is running;
however, to do so, you must issue the appropriate unmounting, mounting,
and preparation commands from the device CLI.
Learn more on page 77 about these external user disk commands.
Ports
The TXE device comes equipped with network slots for standard or bypass
I/O modules.
TPS Hardware Specification and Installation
8

The device provides a console and 1-GbE management port:
Figure 4. Console and management ports
1. 1 RJ-45 serial console port
2. 1 GbE copper management port
3. Activity LED
4. Link LED
The device also provides a 25-GbE-capable SFP28 management port:
Figure 5. SFP28 management port
TPS Hardware Specification and Installation
9

In addition, two special purpose ports can be used for stacking:
Figure 6. Special purpose ports
Chassis LEDs
When you turn on the device, the system completes a series of component
checks and then displays LED indicators to show the status of each
component:
• Stack Primary status
• Solid green: The device is the stack primary.
•O: The device is not the stack primary.
• Stack status
• Amber: The device is not ready to inspect network trac.
• Flashing green: The device is RTI but is not currently inspecting
network trac.
• Solid green: The device is RTI and is inspecting network trac.
•O: Stacking is not enabled on the device.
• Bypass status
• Solid red: The device is in Intrinsic High Availability (Intrinsic HA)
Layer-2 Fallback (L2FB) mode.
TPS Hardware Specification and Installation
10

•O: The device is not in L2FB mode.
•
System health status
• Flashing green: The system is booting up and is not yet ready to
inspect trac.
• Solid green: The system is healthy.
• Red: The system is experiencing a health alert, such as a fan failure.
This state resets to solid green when you view the system log.
• Management port status
• Link LED: Solid green indicates that the port is linked and ready for
data.
• Activity LED: Flashing amber indicates that the port is passing data.
Model requirements
Refer to the following topics for specic requirements of the 9200TXE device.
•Power requirements on page 11
•Cabling requirements on page 12
Power requirements
The 9200TXE device requires Alternating Current (AC) that meets the
following requirements:
• Voltage: 100 V to 240 V
• Current: 15 A to 10 A
• Frequency: 47 Hz to 63 Hz (Tolerance: 50 Hz to 60 Hz)
The 9200TXE device ships with two AC power supplies.
TPS Hardware Specification and Installation
11

Consult your TippingPoint account contact for more information if you
require a DC power supply. The 9200TXE device requires Direct Current (DC)
that meets the following requirements:
• Voltage: -40 V to -60 V
• Current: 50 A (maximum)
• An all-pole mains switch approved to IEC 60947-1 incorporated in the
electrical installation of the building
Cabling requirements
The 9200TXE device ships with the following cables:
• An AC power cable for each of the two power supplies
• Null modem cable (USB to RJ-45) for the serial console management
port
I/O modules
The 9200TXE device supports both standard I/O modules and bypass I/O
modules. Refer to the following table for ber and copper components.
Bypass I/O modules are zero-power high-availability (ZPHA) modules that
permit network trac and services while bypassing the device entirely when
the device loses power.
Table 1. Standard I/O Modules
Module Part Number Module
Description Transceiver Description
TPNN0370 6-Segment
25/10/1 GbE
SFP28
Part Number: TPNN0384
TippingPoint 25 GbE SFP28 SR
Transceiver
Part Number: TPNN0385
TippingPoint 25 GbE SFP28 LR
Transceiver
TPS Hardware Specification and Installation
12

Module Part Number Module
Description Transceiver Description
Part Number: TPNN0057
TippingPoint 10 GbE SFP+ SR
Transceiver
Part Number: TPNN0058
TippingPoint 10 GbE SFP+ LR
Transceiver
Part Number: TPNN0054
TippingPoint 1 GbE SFP RJ45
Transceiver (Copper)
Part Number: TPNN0055
TippingPoint 1 GbE SFP SX
Transceiver
Part Number: TPNN0056
TippingPoint 1 GbE SFP LX
Transceiver
TPNN0371 4-Segment
100/40 GbE
QSFP28
Part Number: TPNN0382
TippingPoint 100 GbE QSFP28
SR4 Transceiver
Part Number: TPNN0383
TippingPoint 100 GbE QSFP28
LR4 Transceiver
Part Number: TPNN0067
TippingPoint 40 GbE QSFP+
SR4 Transceiver
Part Number: TPNN0327
TippingPoint 40 GbE QSFP+
LR4 Transceiver
TPS Hardware Specification and Installation
13

Table 2. Bypass I/O Modules
Module Part Number Module Description
TPNN0412 4-Segment 1 GbE SR Bypass
TPNN0413 4-Segment 1 GbE LR Bypass
TPNN0410 4-Segment 10 GbE SR Bypass
TPNN0411 4-Segment 10 GbE LR Bypass
TPS Hardware Specification and Installation
14

Module Part Number Module Description
TPNN0374 4-Segment 25 GbE SR Bypass
TPNN0375 4-Segment 25 GbE LR Bypass
TPNN0408 2-Segment 40GbE SR4 Bypass
TPNN0409 2-Segment 40GbE LR4 Bypass
TPNN0372 2-Segment 100 GbE SR4 Bypass
TPS Hardware Specification and Installation
15

Module Part Number Module Description
TPNN0373 2-Segment 100 GbE LR4 Bypass
CAUTION!
Handle all I/O modules with care. The bypass modules contain mechanical
switches that are very sensitive to handling when not installed in the system.
Network disruption can occur if handled improperly.
Technical specifications
The 9200TXE device has the following specications.
Specification Description
Dimensions
(unpackaged)
1.73 (H) in x 18.54 (W) in x 34.10 (D) in (44 mm x 471 mm x 866 mm)
Weight 42 lbs (19 kg)
AC Power
Requirements
• Voltage: 100 to 240
• Current: 15A to 10A
• Frequency 47 to 63 Hz (Tolerance: 50 Hz to 60 Hz)
The device's maximum power consumption is 1300 W.
Service Provider
operating
requirements
Temperature: 32 to 104° F (0 to 40° C) — Operating
Temperature: -4 to 158° F (-20 to 70° C) — Storage
Altitude: No degradation up to 6561 feet (2000 m)
Humidity: 5% to 95% (noncondensing)
TPS Hardware Specification and Installation
16

Specification Description
External interfaces • One 1 GbE copper management port
• One 25 GbE management port
• One RJ45 console port
• Dual QSFP28-DD (400 Gbps Full-Duplex Total) special purpose ports
• Two IOM network slots
• One SSD slot
TPS 1100TX and 5500TX devices overview
The following topics describe the components, chassis, requirements, and
installation specics of the TPS 1100TX and 5500TX devices:
•Chassis – front panel on page 18
•Chassis – rear panel on page 19
•Chassis – features on page 19
•Model requirements on page 22
•I/O modules on page 23
•Technical specications on page 23
Learn more on page 51 about installing the device. Prior to installation, have
the TPS CLI Reference available for conguration information.
TPS Hardware Specification and Installation
17

Chassis – front panel
Refer to the following illustration for a front panel view of the TPS 1100TX
and 5500TX devices:
1. I/O modules
2. External storage 1.8-inch SSD (1100TX: 8 GB, 5500TX: 32 GB)
3. Bypass LED
4. Health LED
5. Power button
6. RJ-45 console port
7. GbE management port
8. Special purpose (SP) ports (not used in this TOS release)
9. Stack Primary LED (not used in this TOS release)
TPS Hardware Specification and Installation
18