tufin T-1100 User manual

T-1100/1100XL Quick Start Guide
Version 11.6

Table of Contents
Table of Contents 2
Introduction 3
T-1100 Front and Rear Panels 5
Front Panel 5
Front Panel LEDs and Buttons 5
Rear Panel 7
Setting Up The T-1100 8
Setting up the Remote Management Module 9
Prerequisites 9
Installing and Configuring TOS Aurora 14
Restoring Factory Defaults 20
Appendix: Installing and Configuring Tufin Orchestration Suite Classic 22
Install TOS Classic 22
Configure SecureTrack 23
Configure SecureChange 26
T-1100/1100XL Quick Start Guide
Table of Contents
Copyright 2003-2022, Tufin Software Technologies Ltd. 2

Introduction
Overview
Congratulations on choosing the T-1100 appliance from Tufin Technologies, the industry’s most comprehensive firewall operations management
solution.
Information in this guide applies to both the T-1100 and the T-1100XL. (All references to T-1100 include T-1100XL as well.)
The Tufin T-1100 appliance is designed to simplify integration and use of Tufin Orchestration Suite (TOS) by providing a unified hardware and
software solution. The T-1100 is preinstalled with TufinOS, a proprietary hardened Linux operating system, and the Tufin Orchestration Suite,
which includes these software solutions: SecureTrack, SecureChange and SecureApp. By default, all TOS products are enabled. You can modify
these settings according to your needs.
This document provides:
lDescriptions of the appliance panels
lA step-by-step guide to getting the appliance and software up and running
lInstructions for restoring factory defaults
Your Appliance and Tufin Orchestration Suite (TOS)
The T-Series appliances come pre-installed with TufinOS and are designed to support both TOS Aurora and TOS Classic.
TOS Aurora is the latest version of TOS and we recommend that you install TOSAurora on your appliance. If you require TOS Classic, consult
your Tufin Sales Engineer before installation. Support for TOSClassic ends on December 31, 2022.
You will need to choose the desired TOS product and install it using the instructions provided in this document. However, before you install TOS,
we recommend the following:
lFamiliarize yourself with the appliance
lSet up your appliance
lConfigure Remote Management Module (RMM)
Shipping Container Contents
All Tufin appliances are lab-tested rigorously by our network security experts. You will find these items in the shipping container:
Item Description
Appliance T-1100 appliance
Cables 2 power cables
1 RJ-45 (CAT 5e) network cable
1 DB9 console cable
USB flash drive USB flash drive for appliance recovery
Documentation This Quick Start Guide
Other hardware Rack mounting kit
Appliance front bezel
Contact Support
Our worldwide technical services team is available to you through the web, email, or telephone. See http://www.tufin.com/support for your
preferred mode of communication. We look forward to supporting all of your current and future firewall operation’s needs.
If you need immediate assistance, please call 1-877-270-7711.
T-1100/1100XL Quick Start Guide
Introduction
Copyright 2003-2022, Tufin Software Technologies Ltd. 3

About Tufin and Trademarks
Tufin at a Glance
Offices: North America, EMEA, and Asia-Pacific
Customers: More than 2100 in over 50 countries
Leading verticals: Finance, telecom, energy and utilities, healthcare, retail, education, government, manufacturing, transportation, and auditors
Channel partners: More than 240 Worldwide
Technology Partners: Amazon Web Services, BMC, Blue Coat, Check Point, Cisco, F5 Networks, Fortinet, Forcepoint, Juniper Networks,
Microsoft Azure, OpenStack, Palo Alto Networks, VMware and more
Trademarks
2022 Tufin Technologies Ltd.
Tufin, Unified Security Policy, Tufin Orchestration Suite and the Tufin logo are trademarks of Tufin. All other product names mentioned herein are
trademarks or registered trademarks of their respective owners.
T-1100/1100XL Quick Start Guide
Introduction
Copyright 2003-2022, Tufin Software Technologies Ltd. 4

T-1100 Front and Rear Panels
These sections describe the different elements in the front and rear panels.
Front Panel
Item Description
A VGA port
B 2 USB 3.0 ports
C Front panel LEDs and buttons
D Hard drive bay 0
E Hard drive bay 1
F Hard drive bay 2
G Hard drive bay 3
H Hard drive bay 4
I Hard drive bay 5
J Hard drive bay 6
K Hard drive bay 7
Front Panel LEDs and Buttons
All control buttons and status LEDs are located on the front of the appliance.
Item Feature Description
A System ID button
with integrated LED
(green)
When pressed, it toggles the ID LEDs on the front and back of the appliance.
B Halt button When pressed, it puts the server in a halt state so that the memory can be downloaded for diagnostics.
C Onboard LAN LED
(green)
Indicates NIC activity for each of the two onboard network interfaces.
D System cold-reset
button
When pressed, it reboots the appliance.
E HDD activity/ fault
LED (green/red)
Indicates HDD activity when green, or an HDD fault when red. This is an aggregated indication for all hard
disk drives in the system. Each hard disk contains its own activity and fault indicators.
F System status
(green/red)
Indicates system status as follows:
lSteady green indicates system in standby or ready for operation.
T-1100/1100XL Quick Start Guide
T-1100 Front and Rear Panels
Copyright 2003-2022, Tufin Software Technologies Ltd. 5

Item Feature Description
lBlinking green indicates degraded operation (e.g., power supply nonredundancy, part of system
memory mapped out by BIOS).
lBlinking red indicates one or more non-critical fault conditions.
lSteady red indicates one or more critical fault conditions.
G Power button with
integrated LED
(green)
When pressed, it toggles the system power. When continuously lit, indicates the presence of power supply
output power in the appliance. The LED turns off when the power supply is turned off or the power source
is disrupted.
T-1100/1100XL Quick Start Guide
T-1100 Front and Rear Panels
Copyright 2003-2022, Tufin Software Technologies Ltd. 6

Rear Panel
Item Description Notes
A Power supply 1
B Power supply 2
C Onboard LAN (eth0)
D Onboard LAN (eth1)
E Video connector
F RJ45 serial port
G 3 USB 3.0 ports
H RJ45 Remote Management Module (RMM) For more about this interface, see Setting up the Remote Management Module.
I External NIC (eth3)
J External NIC (eth2)
T-1100/1100XL Quick Start Guide
T-1100 Front and Rear Panels
Copyright 2003-2022, Tufin Software Technologies Ltd. 7

Setting Up The T-1100
Connect Your Appliance to the Network
1. Connect the power cable.
2. Boot up the appliance by pressing the Power button on the front panel.
3. Your appliance has a predefined IP address - 192.168.1.100/24. Before connecting your appliance to your network, make sure to
change the IP address.
4. Connect a network cable to the eth0 port (Chapter 2: Rear Panel, item C) and to a PC (with a crossover cable), or to a local network that is
in the same subnet as the eth0 port.
5. If you are using a crossover cable, configure the terminal to match the following appliance console port settings:
l57600 bits per second
l8 Data bits
lParity: None
lStop bit: 1
lFlow Control: None
Configure Remote Management Module (RMM)
For easier appliance management, we recommend that you also configure the Remote Management Module (RMM) after you connect your
appliance to your network and before you install Tufin Orchestration Suite. Using RMM, you can upgrade TufinOS or TOS on the appliance without
having to physically access the server (see Setting up the Remote Management Module).
T-1100/1100XL Quick Start Guide
Setting Up The T-1100
Copyright 2003-2022, Tufin Software Technologies Ltd. 8

Setting up the Remote Management Module
The remote management module (RMM) or IPMI port in Tufin appliances lets you connect to an administration web interface for the appliance. You
can configureRMMby either using BIOS or using SSH or a Console.
lBIOS:Select this option if the appliance is not yet connected to the network and you need to configure it locally.
lSSH/Console:Select this option if the appliance is already connected to the network.
Prerequisites
We recommend that the remote computer on which you install and use RMMshould be on the same local network as the appliance.
In addition, it should include the following:
lWeb browser:We recommend Internet Explorer with anti-virus enforcement and browser protection disabled.
lJava: Java version 8 or later.
lPorts: These ports must be open between the appliance and the TufinOS remote installation computer:
Use Port
HTTP 80 (TCP)
HTTPS 443 (TCP)
KVM 7578, 7582 (UDP/TCP)
Virtual Media 5120, 5123, 5124, 5127 (UDP/TCP)
Configure RMM Using BIOS
1. Reboot/power on the appliance.
2. In the next screen, press the F2 key to enter the BIOS setup.
T-1100/1100XL Quick Start Guide
Setting up the Remote Management Module
Copyright 2003-2022, Tufin Software Technologies Ltd. 9

3. In the next screen, go to Setup Menu.
4. Select Server Management and enter the BMC LAN Configuration.
T-1100/1100XL Quick Start Guide
Setting up the Remote Management Module
Copyright 2003-2022, Tufin Software Technologies Ltd. 10