tufin T-800 User manual

T-800/1200 Quick Start Guide
Revision 13.14

Table of Contents
Table of Contents 2
Introduction 3
T-800/1200 Front and Rear Panels 5
Front Panel LEDs and Buttons 5
Rear Panel 6
Setting Up The T-800/1200 7
Setting up the Remote Management Module 8
Prerequisites 8
Installing and Configuring TOS Aurora 11
Restoring Factory Defaults 17
Appendix: Installing and Configuring Tufin Orchestration Suite Classic 19
Install TOS Classic 19
Configure SecureTrack 20
Configure SecureChange 23
T-800/1200 Quick Start Guide
Table of Contents
Copyright 2003-2022, Tufin Software Technologies Ltd. 2

Introduction
Overview
Congratulations on choosing the T-800/1200 appliance from Tufin Technologies, the industry’s most comprehensive Security Policy Orchestration
solution.
The T-Series appliances are a Tufin-in-a-box solution that provides IT organizations with a quick, robust installation that lowers total cost of
ownership. T-Series appliances are designed to support both Tufin Orchestration Suite Aurora and Classic. You can choose which product to
install.
Using distributed deployment architecture, Tufin’s T-Series appliances enable virtually unlimited scalability – multiple appliances can be connected
on-demand at multiple sites, according to network needs. With enterprise-grade memory and SSD drives, the T-Series combines power and
flexibility in several models to scale to the needs of mid-size to large enterprises and ensure optimal performance for your organization.
This document provides:
lDescriptions of the appliance panels
lA step-by-step guide to getting the appliance and software up and running
lInstructions for restoring factory defaults
Your Appliance and Tufin Orchestration Suite (TOS)
The T-Series appliances come pre-installed with TufinOS and are designed to support both TOS Aurora and TOS Classic.
TOS Aurora is the latest version of TOS and we recommend that you install TOSAurora on your appliance. If you require TOS Classic, consult
your Tufin Sales Engineer before installation. Support for TOSClassic ends on December 31, 2022.
You will need to choose the desired TOS product and install it using the instructions provided in this document. However, before you install TOS,
we recommend the following:
lFamiliarize yourself with the appliance
lSet up your appliance
lConfigure Remote Management Module (RMM)
Shipping Container Contents
All Tufin appliances are lab-tested rigorously by our network security experts. You will find these items in the shipping container:
Item Description
Appliance T-800/1200 appliance
Cables 2 power cables
1 RJ-45 (CAT 5e) network cable
1 DB9 console cable
USB flash drive USB flash drive for appliance recovery
Documentation This Quick Start Guide
Other hardware Rack mounting kit
Appliance front bezel
Contact Support
Our worldwide technical services team is available to you through the web, email, or telephone. See http://www.tufin.com/support for your
preferred mode of communication. We look forward to supporting all of your current and future firewall operation’s needs.
If you need immediate assistance, please call 1-877-270-7711.
T-800/1200 Quick Start Guide
Introduction
Copyright 2003-2022, Tufin Software Technologies Ltd. 3

About Tufin and Trademarks
Tufin at a Glance
Offices: North America, EMEA, and Asia-Pacific
Customers: More than 2100 in over 50 countries
Leading verticals: Finance, telecom, energy and utilities, healthcare, retail, education, government, manufacturing, transportation, and auditors
Channel partners: More than 240 Worldwide
Technology Partners: Amazon Web Services, BMC, Blue Coat, Check Point, Cisco, F5 Networks, Fortinet, Forcepoint, Juniper Networks,
Microsoft Azure, OpenStack, Palo Alto Networks, VMware and more
Trademarks
2022 Tufin Technologies Ltd.
Tufin, Unified Security Policy, Tufin Orchestration Suite and the Tufin logo are trademarks of Tufin. All other product names mentioned herein are
trademarks or registered trademarks of their respective owners.
T-800/1200 Quick Start Guide
Introduction
Copyright 2003-2022, Tufin Software Technologies Ltd. 4

T-800/1200 Front and Rear Panels
These sections describe the different elements in the front and rear panels.
Front Panel LEDs and Buttons
All control buttons and status LEDs are located on the front of the appliance.
Item Feature Description
A Information
LED
Indicates system status as follows:
lContinuously on and red: An overheat condition has occurred (which may be caused by cable
congestion).
lBlinking red (1Hz): Fan failure, check for an inoperative fan.
lBlinking red (0.25Hz): Power failure, check for a non-operational power supply.
lSolid blue: UID has been activated locally to locate the server in a rack environment.
lBlinking blue: UID has been activated using IPMI to locate the server in a rack environment.
B NIC LED When flashing, indicates network activity on LAN1.
C NIC LED When flashing, indicates network activity on LAN2.
D HDD When flashing, indicates activity on the hard drive.
E Power LED Indicates power is being supplied to the system power supply units. This
LED is illuminated when the system is operating normally.
F UID
button/LED
Unit identification (UID) button turns on or off the blue light function of the Information LED and a blue LED on
the rear of the chassis. These are used to locate the server in large racks.
G Power button Main power switch applies or removes primary power from the power supply to the server but maintains
standby power.
H USBports Use these ports for upgrading BIOS information.
T-800/1200 Quick Start Guide
T-800/1200 Front and Rear Panels
Copyright 2003-2022, Tufin Software Technologies Ltd. 5

Rear Panel
Item Description Notes
A Power supply 1
B Power supply 2
C LAN 10GB ethernet port 1 For Tufin Orchestration Suite Aurora, use this port for all network connections.
D LAN 10GB ethernet port 2
E LAN 10GB ethernet port 3
F LAN 10GB ethernet port 4
G 2 USB 3.0 ports
H IPMI LAN Dedicated IPMI management interface that gives you remote management (“lights-out
management”) of the system.
I Serial port Standard serial port that gives you serial access to the system using console redirection.
J VGA port
K 1 PCI-E 3.0 low profile slot
L 2 PCI-E 3.0, full height, full
length slots
T-800/1200 Quick Start Guide
T-800/1200 Front and Rear Panels
Copyright 2003-2022, Tufin Software Technologies Ltd. 6

Setting Up The T-800/1200
Connect Your Appliance to the Network
1. Connect the power cable.
2. Boot up the appliance by pressing the Power button on the front panel.
3. Your appliance has a predefined IP address - 192.168.1.100/24. Before connecting your appliance to your network, make sure to
change the IP address.
4. Connect a network cable to the ethernet port 1 (Chapter 2: Rear Panel, item C) and to a PC (with a crossover cable), or to a local network
that is in the same subnet as the eth0 port.
5. If you are using a crossover cable, configure the terminal to match the following appliance console port settings:
l57600 bits per second
l8 Data bits
lParity: None
lStop bit: 1
lFlow Control: None
Configure Remote Management Module (RMM)
For easier appliance management, we recommend that you also configure the Remote Management Module (RMM) after you connect your
appliance to your network and before you install Tufin Orchestration Suite. Using RMM, you can upgrade TufinOS or TOS on the appliance without
having to physically access the server (see Setting up the Remote Management Module).
T-800/1200 Quick Start Guide
Setting Up The T-800/1200
Copyright 2003-2022, Tufin Software Technologies Ltd. 7

Setting up the Remote Management Module
The remote management module (RMM) or IPMI port in Tufin appliances lets you connect to an administration web interface for the appliance. You
can configureRMMby either using BIOS or using SSH or a Console.
lBIOS:Select this option if the appliance is not yet connected to the network and you need to configure it locally.
lSSH/Console:Select this option if the appliance is already connected to the network.
Prerequisites
We recommend that the remote computer on which you install and use RMMshould be on the same local network as the appliance.
In addition, it should include the following:
lWeb browser:We recommend Internet Explorer with anti-virus enforcement and browser protection disabled.
lJava: Java version 8 or later.
lPorts: These ports must be open between the appliance and the TufinOS remote installation computer:
Use Port
HTTP 80 (TCP)
HTTPS 443 (TCP)
IPMI Virtual Media 623 (UDP/TCP)
Remote Console 5900, 5901 (TCP)
SSH 22 (TCP)
WS-MAN 5985 (TCP)
Configure RMM Using BIOS
1. Reboot or start the appliance and pressDELto enter BIOS setup.
2. SelectIPMI>BMC Network Configuration.
3. Set Update IPMI LAN Configuration to Yes.
T-800/1200 Quick Start Guide
Setting up the Remote Management Module
Copyright 2003-2022, Tufin Software Technologies Ltd. 8

4. Edit the settings as required.
5. SetUpdate IPMI LAN Configurationback toNo.
6. Save settings and reboot the appliance.
Configure RMM Using SSH or a Console
1. Make sure that the MGMT port for the appliance is connected to the network.
2. Connect the appliance using SSH or a console and set the following network settings:
ipmitool lan set 1 ipaddr <RMM IP Address>
ipmitool lan set 1 netmask <Subnet Netmask>
ipmitool lan set 1 defgw ipaddr <Default Gateway IP Address>
3. Verify the configuration:
ipmitool lan print 1
4. Ping theRMMIP address to confirm connectivity:
ping <RMMIPAddress>
5. Configure the user settings:
a. Check the existing user list:
ipmitool user list 1
b. Create or modify users. This command will create a new user or overwrite settings for an existing User ID.
ipmitool user set name <user_id> <username>
ipmitool user set password <user_id>
T-800/1200 Quick Start Guide
Setting up the Remote Management Module
Copyright 2003-2022, Tufin Software Technologies Ltd. 9

ipmitool channel setaccess <channel number> <user id> [callin=on|off] [ipmi=on|off]
[link=on|off] [privilege=level]
For example:
ipmitool user set name 3 myuser
ipmitool user set password 3
ipmitool channel setaccess 1 3 callin=on ipmi=on link=on privilege=4
c. Enable the new user:
ipmitool user enable <user_id>
6. In a browser, log into the Web Interface and confirm that you are able connect using the username and password defined in the previous
step.
https://<RMMIPAddress>
Now you can securely connect to theRMMto do remote administration tasks. For more about using theRMM, refer to theIntel® Remote
Management Module 4 (Intel®RMM4) User Guide.
T-800/1200 Quick Start Guide
Setting up the Remote Management Module
Copyright 2003-2022, Tufin Software Technologies Ltd. 10