tufin T-1100 User manual

T-1100/1100XL Quick Start Guide
Version 11.5

Table of Contents
Table of Contents 2
Chapter 1: Introduction 3
Welcome 3
Overview 3
Chapter 2: The T-1100 Front and Rear Panels 4
Front Panel 4
Front Panel LEDs and Buttons 4
Rear Panel 6
Chapter 3: Setting Up The T-1100 7
Power up and Connect to the Network 7
Advanced CLI Configuration 7
Chapter 4: Installing and Configuring Tufin Orchestration Suite Classic 8
Install Tufin Orchestration Suite Classic 8
Configure SecureTrack 8
Configure SecureChange 11
Chapter 5: Installing and Configuring Tufin Orchestration Suite Aurora 13
Network Requirements for Tufin Orchestration Suite Aurora 13
Install Tufin Orchestration Suite Aurora 13
Configure SecureTrack 15
Configure SecureChange 16
Chapter 6: Setting up the Remote Management Module 18
Prerequisites for Remote Computer 18
Ports 18
Configure RMM Using BIOS 18
Configure RMM Using SSH or a Console 21
Installing TufinOS 22
Chapter 7: Restoring Factory Defaults 23
The Next Step 24
Support 24
Tufin at a Glance 24
Trademarks 24
T-1100/1100XL Quick Start Guide
Table of Contents
Copyright 2003-2021, Tufin Software Technologies Ltd. 2

Chapter 1: Introduction
Welcome
Congratulations on choosing the T-1100 Appliance from Tufin Technologies, the industry’s most comprehensive firewall operations management
solution.Our worldwide technical services team is available to you through the web, email, or telephone. See http://www.tufin.com/support for your
preferred mode of communication. We look forward to supporting all of your current and future firewall operation’s needs.
Overview
Information in this guide applies to both the T-1100 and the T-1100XL. (All references to T-1100 include T-1100XL as well.)
The Tufin T-1100 appliance is designed to simplify integration and use of Tufin Orchestration Suite (TOS) by providing a unified hardware and
software solution. The T-1100 is preinstalled with TufinOS, a proprietary hardened Linux operating system, and the Tufin Orchestration Suite,
which includes these software solutions: SecureTrack™, SecureChange™ and SecureApp™. By default, all TOS products are enabled. You can
modify these settings according to your needs.
The T-Series Appliances come pre-installed with TufinOS and are designed to support both Tufin Orchestration Suite Classic (default) and Aurora.
You will need to choose the desired Tufin Orchestration Suite product and install it using the instructions provided in this document.
When setting up the appliance, we recommend that you also configure the Remote Management Module (RMM). With this module you can install
newer versions of TufinOS on the appliance without having to physically access the server.
All Tufin Appliances are rigorously lab-tested by our network security experts.
This document provides:
lShipping container contents, and descriptions of the appliance panels
lA step by step guide to getting the appliance and software up and running
lInstructions for restoring factory defaults
To set up device monitoring by SecureTrack, to configure SecureChange, or for more information about the Tufin Orchestration Suite, see the
Tufin Knowledge Center at https://forum.tufin.com/support/kc/latest (for Classic) or https://forum.tufin.com/support/kc/aurora (for Aurora).
Shipping Container Contents
Item Description
Appliance T-1100 appliance
Cables 2 power cables
1 RJ-45 (CAT 5e) network cable
1 DB9 console cable
USB flash drive USB flash drive for appliance recovery
Documentation This Quick Start Guide
Other hardware Rack mounting kit
Appliance front bezel
T-1100/1100XL Quick Start Guide
Chapter 1: Introduction
Copyright 2003-2021, Tufin Software Technologies Ltd. 3

Chapter 2: The T-1100 Front and Rear Panels
These sections describe the different elements in the front and rear panels.
Front Panel
Item Description
A VGA port
B 2 USB 3.0 ports
C Front panel LEDs and buttons
D Hard drive bay 0
E Hard drive bay 1
F Hard drive bay 2
G Hard drive bay 3
H Hard drive bay 4
I Hard drive bay 5
J Hard drive bay 6
K Hard drive bay 7
Front Panel LEDs and Buttons
All control buttons and status LEDs are located on the front of the appliance.
Item Feature Description
A System ID button
with integrated LED
(green)
When pressed, it toggles the ID LEDs on the front and back of the appliance.
B Halt button When pressed, it puts the server in a halt state so that the memory can be downloaded for diagnostics.
C Onboard LAN LED
(green)
Indicates NIC activity for each of the two onboard network interfaces.
D System cold-reset
button
When pressed, it reboots the appliance.
E HDD activity/ fault
LED (green/red)
Indicates HDD activity when green, or an HDD fault when red. This is an aggregated indication for all hard
disk drives in the system. Each hard disk contains its own activity and fault indicators.
F System status
(green/red)
Indicates system status as follows:
lSteady green indicates system in standby or ready for operation.
T-1100/1100XL Quick Start Guide
Chapter 2: The T-1100 Front and Rear Panels
Copyright 2003-2021, Tufin Software Technologies Ltd. 4

Item Feature Description
lBlinking green indicates degraded operation (e.g., power supply nonredundancy, part of system
memory mapped out by BIOS).
lBlinking red indicates one or more non-critical fault conditions.
lSteady red indicates one or more critical fault conditions.
G Power button with
integrated LED
(green)
When pressed, it toggles the system power. When continuously lit, indicates the presence of power supply
output power in the appliance. The LED turns off when the power supply is turned off or the power source
is disrupted.
T-1100/1100XL Quick Start Guide
Chapter 2: The T-1100 Front and Rear Panels
Copyright 2003-2021, Tufin Software Technologies Ltd. 5

Rear Panel
Item Description Notes
A Power supply 1
B Power supply 2
C Onboard LAN (eth0)
D Onboard LAN (eth1)
E Video connector
F RJ45 serial port
G 3 USB 3.0 ports
H RJ45 Remote Management Module
(RMM)
For more about this interface, see Chapter 6: Setting up the Remote Management
Module.
I External NIC (eth3)
J External NIC (eth2)
T-1100/1100XL Quick Start Guide
Chapter 2: The T-1100 Front and Rear Panels
Copyright 2003-2021, Tufin Software Technologies Ltd. 6

Chapter 3: Setting Up The T-1100
Power up and Connect to the Network
Note: The appliances have a predefined IP address. Before racking the appliances, make sure to change the IP address either
in the first-time wizard (as described Chapter 4: Configure SecureTrack), or using a console connection (see Advanced CLI
Configuration) in CLI. For CLI instructions, see https://forum.tufin.com/support/kc/latest/Content/Suite/1584.htm.
To power up the appliance and connect it to the network:
1. Connect the power cable.
2. Boot up the appliance by pressing the Power button on the front panel.
3. Connect a network cable to the eth0 port (Chapter 2: Rear Panel, item C) and to a PC (with a crossover cable), or to a local network that is
in the same subnet as the eth0 port. If you have not changed it, the default is 192.168.1.100/24.
Advanced CLI Configuration
You can achieve CLI access using a console connection or SSH access. To use a console connection, configure the terminal to match the
following appliance console port settings:
l57600 bits per second
l8 Data bits
lParity: None
lStop bit: 1
lFlow Control: None
T-1100/1100XL Quick Start Guide
Chapter 3: Setting Up The T-1100
Copyright 2003-2021, Tufin Software Technologies Ltd. 7

Chapter 4: Installing and Configuring Tufin Orchestration
Suite Classic
This section includes instructions to install and configure Tufin Orchestration Suite Classic R21-1 and above running on TufinOS 3.60.
Install Tufin Orchestration Suite Classic
1. Install Tufin Orchestration Suite Classic (SecureTrack and SecureChange/SecureApp):
a. Open a command line via SSH to the IP address of eth0 (if you have not changed it: 192.168.1.100).
b. Log in as tufin-admin with password admin.
You are prompted to change the default password when you first log in.
c. To install Tufin Orchestration Suite Classic, run the following commands:
screen -S install
sudo su –
cd /opt/tufin/data/classic
sh <filename>
The installation file is in /opt/tufin/data/classic.
d. Follow the installation instructions in the command line.
If you disabled SecureTrack and will not be using it on this appliance, skip to Configure SecureChange.
2. (SecureTrack only) Log into SecureTrack:
a. To access SecureTrack with Mozilla Firefox or Google Chrome, browse with HTTPS to the IP address of eth0. If you have not
changed the IP address, browse to: https://192.168.1.100.
b. Accept the certificate.
The login window appears.
c. Log in with these credentials (admin/admin) and click Login.
Configure SecureTrack
After logging into SecureTrack for the first time, the SecureTrack Setup Wizard opens. The wizard includes the following pages:
T-1100/1100XL Quick Start Guide
Chapter 4: Installing and Configuring Tufin Orchestration Suite Classic
Copyright 2003-2021, Tufin Software Technologies Ltd. 8

lLogin: For security reasons, change the admin password.
lEULA: Read and accept the End User License Agreement.
lPassword: Type system for the Old Password of the TufinOS root user, and change the password.
T-1100/1100XL Quick Start Guide
Chapter 4: Installing and Configuring Tufin Orchestration Suite Classic
Copyright 2003-2021, Tufin Software Technologies Ltd. 9

lNetworking (optional): Configure networking (DNS settings can also be configured later from SecureTrack's web interface)
lTime: Configure date and time settings.
lUser Details: Configure the admin user’s details. Username and password cannot be changed in this page.
T-1100/1100XL Quick Start Guide
Chapter 4: Installing and Configuring Tufin Orchestration Suite Classic
Copyright 2003-2021, Tufin Software Technologies Ltd. 10