Interface modules

Interface modules
Stonesoft Next
Generation Firewall
Hardware Guide
Models 3201, 3202, 3205, 3206,
3207, 3301, 3305
Revision F
Table of contents
1 Appliance features............................................................................................................................................... 3
Model 3201 and 3205 features..................................................................................................................... 3
Model 3202, 3206, and 3207 features.......................................................................................................... 4
Model 3301 and 3305 features..................................................................................................................... 6
Indicator lights................................................................................................................................................ 7
Interface modules...........................................................................................................................................9
2 Precautions......................................................................................................................................................... 15
Safety precautions........................................................................................................................................15
Electrical safety precautions........................................................................................................................ 15
Power supply safety precautions.................................................................................................................16
3 Install the appliance.......................................................................................................................................... 17
Install the SSD............................................................................................................................................. 17
Install an interface module...........................................................................................................................17
Rack-mount the appliance........................................................................................................................... 18
Connect the cables...................................................................................................................................... 24
4 Maintenance........................................................................................................................................................27
Turn off the appliance..................................................................................................................................27
Replace the power supply........................................................................................................................... 27
Replace appliance fans................................................................................................................................28
Replace the SSD......................................................................................................................................... 29
Replace an interface module.......................................................................................................................29
Remove SFP transceivers........................................................................................................................... 30
5 Find product documentation............................................................................................................................ 31
2
Appliance features
Familiarize yourself with the front panel, back panel, and indicator lights.
Model 3201 and 3205 features
The figures and tables show the appliance components.
Front panel
1.
2.
3.
4.
5.
6.
Interface modules
Indicator lights
Power button
USB ports
Console port (speed 9600 bps)
Solid-state drive (SSD)
Back panel
1.
2.
3.
4.
5.
6.
AC or DC power supplies
IPMI port (usage not recommended)
Console port (not used)
USB ports
VGA port
Fixed Ethernet ports
Appliance features | 3
Ethernet port names
Ethernet port names are based on the slot and port numbers. The first number in the name represents the slot on
the appliance. The second number represents the port on the slot. Example: eth2_0 is located on port 0 of slot 2.
Component
Slot number
Slot location
Port numbers
Fixed Ethernet ports
0
Back panel
eth0_0 and eth0_1.
Interface modules
1–3
Front panel
The port numbers start
from 0 and increase from
left to right.
The slot numbers for the
interface modules start
from 1 and increase from
left to right.
Example: The port farthest
to the left in slot 1 is
eth1_0.
Model 3202, 3206, and 3207 features
The figures and tables show the appliance components.
Front panel
1.
2.
3.
4.
5.
6.
Interface module slots
Indicator lights
Power button
USB ports
Console port (primary; speed 9600 bps)
Fan enclosure plate
Appliance features | 4
3202 appliance back panel
1.
2.
3.
4.
5.
6.
7.
8.
AC or DC power supplies
Solid-state drive (SSD)
Fan enclosure
USB ports
IPMI port (usage not recommended)
Console port (secondary; speed 9600 bps)
VGA port
Fixed Ethernet ports
3206 and 3207 appliance back panel
1.
2.
3.
4.
5.
6.
7.
8.
AC or DC power supplies
Solid-state drive (SSD)
Fan enclosure
Console port (secondary; speed 9600 bps)
IPMI port (usage not recommended)
USB ports
Fixed Ethernet ports
VGA port
Ethernet port names
Ethernet port names are based on the slot and port numbers. The first number in the name represents the slot on
the appliance. The second number represents the port on the slot. Example: eth2_0 is located on port 0 of slot 2.
Component
Slot number
Slot location
Port numbers
Fixed Ethernet ports
0
Back panel
eth0_0 and eth0_1.
Appliance features | 5
Component
Slot number
Slot location
Port numbers
Interface modules
1–3
Front panel
The port numbers start
from 0 and increase from
left to right.
The slot numbers for the
interface modules start
from 1 and increase from
left to right.
Example: The port farthest
to the left in slot 1 is
eth1_0.
Model 3301 and 3305 features
The figures and tables show the appliance components.
Front panel
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
Interface module slots
Indicator lights
USB ports
Console port (speed 115,200 bps)
VGA port
Fixed Ethernet port 2 (3305 appliances only)
Fixed Ethernet ports 0 and 1
USB ports
IPMI port (usage not recommended)
Power button
UID button
Appliance features | 6
Back panel
1.
2.
3.
4.
5.
6.
7.
Fan enclosures
UID button
UID indicator
Solid-state drive (SSD) slots (only the upper slot is used)
SSD indicators
Grounding pin
AC or DC power supplies
Ethernet port names
Ethernet port names are based on the slot and port numbers. The first number in the name represents the slot on
the appliance. The second number represents the port on the slot. Example: eth2_0 is located on port 0 of slot 2.
Component
Slot number
Slot location
Port numbers
Fixed Ethernet ports
0
Front panel
eth0_0, eth0_1, and (3305
appliances) eth0_2.
Interface modules
1–4
Front panel
The port numbers start
from 0 and increase from
left to right.
The slot numbers for the
interface modules start
from 1 and increase from
left to right.
Example: The port farthest
to the left in slot 1 is
eth1_0.
Indicator lights
The front panel indicators vary depending on the appliance model. The SSD indicators are the same for all 2U
appliances.
Front panel indicators on Stonesoft NGFW 3201, 3202, 3205, 3206, 3207
appliances
Indicates that a power supply cable is detached.
Appliance features | 7
When flashing, indicates a fan failure.
When continuously on, indicates an overheat condition, which can be caused by cables
obstructing the airflow in the system or the ambient room temperature being too warm.
When flashing, indicates network activity on the onboard Ethernet interface 1. The interface is
on the back panel of the appliance.
When flashing, indicates network activity on the onboard Ethernet interface 0. The interface is
on the back panel of the appliance.
When flashing, indicates SSD activity.
Indicates that power is supplied to the system power supply units. This indicator is illuminated
when the system is operating normally.
Front panel indicators on Stonesoft NGFW 3301 and 3305 appliances
Number
Indicator
Status
Description
1
Power
Green
The appliance is in running state.
Red
The appliance is in standby state.
2
Warning
Red
Overheating. Blinks on fan failure or system failure.
3
Disk Activity
Amber
Indicates CFast Card activity when flashing.
4
UID
Blue
The UID indicator has been switched on.
SSD indicators
Number
Indicator
Status
Explanation
1
Power indicator
Blue
An SSD is in the bay.
Appliance features | 8
Number
Indicator
Status
Explanation
2
Disk indicator
Unlit
This indicator is not used.
Fixed Ethernet port indicators
3201, 3205, 3301, and 3305 appliances:
1.
2.
Activity indicator
Link indicator
3202, 3206, and 3207 appliances:
1.
2.
Link indicator
Activity indicator
Indicator
Color
Explanation
Activity indicator
Amber
Link OK, blinks on activity.
Link indicator
Unlit
No link.
Note: For 3201, 3205, 3206, or 3207 appliances, this
could indicate that the speed is 10 Mbps.
Orange
100 Mbps link.
Green
1 Gbps link.
Interface modules
Stonesoft NGFW appliances support four types of modules.
•
•
•
•
Copper
Fiber
Small form-factor pluggable (SFP)
Placeholder
Note: Do not remove any stickers from modules — they contain important information.
For a list of all available interface modules and compatibility information, see Knowledge Base article 10245.
Appliance features | 9
Copper interface modules
Stonesoft NGFW appliances support these copper interface modules.
Dual-port modules
•
•
MOD-EM1-10G-2 (10G2) — 10 gigabit interface module
MOD-10G-2-B (10G2B) — 10 gigabit bypass module
Number
Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link indicator
Green
Link OK, blinks on activity.
3
MOD-EM1-10G-2 (10G2) — Link speed
indicator
Yellow
1 Gbps link.
Green
10 Gbps link.
MOD-10G-2-B (10G2B) — Link speed/bypass/
disconnect indicator
Amber
1 Gbps link, blinks in disconnect
mode.
Green
10 Gbps link, blinks in bypass
mode.
Quad-port modules
•
•
MOD-GE-4 (GE4) — Gigabit interface module (not 3301 or 3305 appliances)
MOD-GE-4-B (GE4B) — Gigabit bypass module (not 3301 or 3305 appliances)
Number
Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link indicator
Green
Link OK.
Appliance features | 10
Number
Component
Color
Description
3
MOD-GE-4 (GE4) — Link speed indicator
Green
1 Gbps link.
Amber
100 Mbps link.
Yellow
1 Gbps link, blinks in
disconnect mode.
Green
100 Mbps link, blinks in
bypass mode.
Unlit
10 Mbps link.
MOD-GE-4-B (GE4B) — Link speed/bypass/
disconnect indicator
Six-port gigabit interface module
•
MOD-GE-6 (GE6)
Number
Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link indicator
Green
Link OK.
3
Link speed indicator
Green
1 Gbps, 100 Mbps, or 10 Mbps link.
Eight-port gigabit interface module
•
MOD-GE-8 (GE8)
Number
Component
Color
Description
1
Port numbers 0–7
N/A
N/A
2, 5
Activity/link indicator
Green
Link OK, blinks on activity.
Appliance features | 11
Number
Component
Color
Description
3, 6
Link speed indicator
Yellow
1 Gbps link.
Green
100 Mbps link.
Unlit
10 Mbps link.
N/A
N/A
4
Release lever
Fiber interface modules
Stonesoft NGFW appliances support these fiber interface modules.
Dual-port bypass modules
•
•
•
MOD-GE-SX-2-B (GESX2B) — Gigabit bypass module (not 3301 or 3305 appliances)
MOD-10G-SR-2-B (10GSR2B) — 10 gigabit bypass module
MOD-10G-LR-2-B (10GLR2B) — 10 gigabit bypass module
Number
Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link indicator
Green
Link OK.
3
MOD-10G-SR-2-B, MOD-10G-LR-2-B —
Link speed/bypass/disconnect indicator
Blue
10 Gbps link.
Green
Blinks in bypass mode.
MOD-GE-SX-2-B — Link speed/bypass/
disconnect indicator
Green
1 Gbps link, blinks in bypass mode.
Yellow
Blinks in disconnect mode.
Quad-port gigabit bypass module
•
MOD-GE-SX-4-B (GESX4B) (not 3301 or 3305 appliances)
Appliance features | 12
Number
Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link indicator
Green
Link OK.
3
Link speed/bypass/disconnect indicator
Green
1 Gbps link, blinks in bypass mode.
Yellow
Blinks in disconnect mode.
SFP interface modules
Stonesoft NGFW appliances support these SFP interface modules.
Dual-port interface modules
•
MOD-10G-SFP-2 (10GSFP2) — 10 gigabit interface module (SFP+)
Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link indicator
Green
Link OK.
3
Link speed indicator
Blue
10 Gbps link.
•
Number
MOD-40G-2 — 40 gigabit interface module (QSFP+) (3207, 3301, and 3305 appliances only)
Appliance features | 13
Number
Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link/link speed indicator
Green
40 Gbps link (other speeds not supported),
blinks on activity.
Quad-port interface modules
•
•
•
MOD-GE-SFP-4 (GE4SFP) — Gigabit interface module (SFP)
MOD-10G-SFP-4 (10GSFP4) — 10 gigabit interface module (SFP+) (not 3207, 3301, and 3305 appliances)
MOD-EM2-10G-SFP-4 — 10 gigabit interface module (SFP+) (3207, 3301, and 3305 appliances only)
Number Component
Color
Description
1
Release lever
N/A
N/A
2
Activity/link indicator
Green
Link OK.
3
MOD-GE-SFP-4 (GE4SFP) — Link speed indicator
Yellow
1 Gbps link.
MOD-10G-SFP-4 (10GSFP4) — Link speed indicator
Blue
10 Gbps link.
MOD-EM2-10G-SFP-4 — Link speed indicator
Blue
10 Gbps link.
Placeholder modules
A placeholder module (MOD-PH) does not contain a network interface card or any ports.
If you do not have interface modules that contain a network interface card for all slots in the modular appliance,
you must insert placeholder modules in the remaining slots.
Appliance features | 14
Precautions
The precautions provide safety guidance when working with Forcepoint appliances and electrical equipment.
Safety precautions
Read the safety information and follow the procedures whenever you are working with electronic equipment.
CAUTION: Forcepoint appliances cannot be serviced by end users. Never open the appliance
covers for any reason. Doing so can lead to serious injury and void the hardware warranty.
General safety
Follow these rules to ensure general safety.
•
•
•
•
Keep the area around the appliance clean and free of clutter.
The appliance weighs approximately 29 lbs (13 kg) when fully loaded. When lifting the appliance, two people
at each end should lift slowly with their feet spread out to distribute the weight. Always keep your back straight
and lift with your legs.
Use a regulating uninterruptible power supply (UPS) to keep your system operating if there is a power failure
and to protect the appliance from power surges and voltage spikes.
If you need to switch off or unplug the appliance, always wait at least five seconds before turning on or
plugging in the appliance again.
Operating precautions
Do not open the power supply casing. Only the manufacturer's qualified technician can access and service power
supplies.
Electrical safety precautions
Follow basic electrical safety precautions to protect yourself from harm and the appliance from damage.
•
•
•
•
•
•
•
•
•
Know the locations of the power on/off button and the emergency turn-off switch, disconnection switch, or
electrical outlet for the room. If an electrical accident occurs, you can quickly turn off power to the system.
When working with high-voltage components, do not work alone.
Turn off the system and disconnect the power before removing or installing system components.
When working with electrical equipment that is turned on, use only one hand. This is to avoid making a
complete circuit, which causes an electric shock. Use extreme caution when using metal tools, which can
easily damage any electrical components or circuit boards the tools come into contact with.
Do not use mats designed to decrease electrostatic discharge as protection from electric shock. Instead, use
rubber mats that have been designed as electrical insulators.
The power supply cable must include a grounding plug and must be plugged into a grounded electrical outlet.
Use only the cord supplied with the appliance.
The power cord plug cap that plugs into the AC receptacle on the power supply must be an IEC 320, sheet
C13, type female connector.
If you have to replace the motherboard battery, install it the same way as the original battery. Make sure
that the positive side faces up on the motherboard. This battery must be replaced only with the same or an
equivalent type recommended by the manufacturer. Dispose of used batteries according to the manufacturer's
instructions.
Precautions | 15
•
To avoid injury, do not open the enclosures of power supplies or solid-state drives (SSDs).
Power supply safety precautions
Depending on the type of power supply that your Stonesoft NGFW appliance uses, different safety precautions
and installation guidelines apply.
AC power supplies
The appliance has 1–2 connectors for an AC power supply. The appliance inlet is the disconnect device.
DC power supplies
•
•
•
•
The appliance must be used in a restricted access location and users must be well trained to operate it.
The outlet for the appliance must be installed near the appliance and be easily accessible.
The appliance must be protected against electric shock and must have, at minimum, a 15 AWG wire provided
for the DC power supply.
The mains supply plug on the power supply cable is the disconnect device on the appliance. To disconnect
the appliance, you must first disconnect the mains, then disconnect the ground.
Precautions | 16
Install the appliance
Prepare and install the appliance in your network.
•
•
You have installed a Stonesoft Management Center (SMC) on a separate server.
You have configured the Security Engine element (Firewall, IPS, or Layer 2 Firewall) in the Management
Client, and saved the initial configuration on a USB drive.
Note: For additional information on SMC installation and initial configuration, see the Stonesoft
Next Generation Firewall Installation Guide.
•
You have inspected the appliance, the delivery box, and all components included in the shipment.
Note: Do not use damaged appliances or components.
Install the SSD
Install the SSD if it is not already installed.
The SSD is on the front panel of 3201 and 3205 appliances, and on the back panel of 3202, 3206, 3207, 3301,
and 3305 appliances.
There are two SSD slots on the back panel of 3301 and 3305 appliances. Use only the upper slot.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
CAUTION: Uninstalled SSDs are sensitive to damage from electrostatic discharge.
1.
2.
Press the release button on the SSD to release the lever.
Insert the SSD into the bay.
Important: Only use the upper SSD slot on 3301 and 3305 appliances.
3.
Push the lever down to lock the SSD into position.
Install an interface module
If needed, install any interface modules.
•
•
•
Read the safety precautions.
To avoid damaging the modules or the appliance, do not install or remove any interface modules if the
appliance is turned on.
Make sure any interface modules you install are the correct type for your appliance.
You must install an interface module or a placeholder module in each slot before making the appliance
operational.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
Install the appliance | 17
1.
2.
Locate the slot to install the module in.
Push the module into the slot.
The module is seated correctly when the front panel of the module is even with the front panel of the
appliance.
Tip: Make sure that the sticker on the module cover faces up.
Important: Do not insert the module in the wrong orientation. Inserting the modules
incorrectly might damage the appliance and the modules and voids the warranty.
Rack-mount the appliance
The rack-mounting procedure varies depending on the type of rack unit. If needed, see the documentation for
your rack unit.
Important: Read the safety precautions before you rack-mount the appliance. Do not install the
appliance upside down.
You can install the appliance into a two-post, a four-post, or a Telco-type rack unit.
Preparing for rack-mounting
The rack-mounting kit includes the mounting screws and the rail assemblies or rack-mounting brackets to install
the system into the rack.
Note: The long brackets used for the four-post installation of a 3301 or 3305 appliance must be
ordered separately.
Determine the placement of each component in the rack.
•
•
•
•
Install the heaviest components on the bottom of the rack first. Install components from the bottom to the top.
The appliance must be connected to a grounded power outlet.
Use a UPS to protect the appliance from power surges and voltage spikes, and to keep your system operating
if there is a power failure.
To maintain proper cooling, always keep the front door of the rack and all panels and components on the
appliances closed when not servicing.
Install a 3201, 3202, 3205, 3206, or 3207 appliance in a
two-post rack
Use the rack-mounting brackets to secure the appliance in the rack.
1.
Locate the two rack-mounting brackets for the two-post rack installation.
Install the appliance | 18
2.
3.
Locate the three pairs of supports on the side of the appliance and the corresponding holes on the brackets.
Align the holes against the two supports toward the rear of the appliance and push the bracket under the
supports.
The brackets are marked with "L" for left and "R" for right.
4.
5.
6.
Secure the bracket to the appliance by inserting a screw through the hole at the end of the bracket.
Attach a bracket to the other side of the appliance.
Attach each bracket to the rack with two screws through the holes in the front of the bracket.
Install a 3301 or 3305 appliance in a two-post rack
Use the rack-mounting brackets to secure the appliance in the rack.
1.
Locate the rack-mounting brackets for the two-post rack installation.
1.
2.
(Usage optional) Two brackets that attach to the front panel of the appliance.
Two brackets for attaching the appliance to the post.
2.
Attach a bracket to each side of the appliance with two screws through the grooves in the bracket.
3.
Attach the brackets to the rack with three screws through the holes in the front of the brackets: one screw
through the top hole, the second through the middle hole, and the third through the bottom hole.
Install the appliance | 19
CAUTION: Use all three screws to attach each rack-mounting bracket to the rack. Using
fewer screws might not provide sufficient support and can damage the appliance.
Install a 3201, 3202, 3205, 3206, or 3207 appliance in a
four-post rack
Use the rack-mounting rails to secure the appliance in the rack.
Use rail sets of these lengths for installing the appliance in the rack.
•
•
1.
19–26.6 in. or 48.26–67.56 cm
26.5–36.4 in. or 67.31–92.46 cm
Locate the two pairs of brackets, two inner rails that attach to the appliance, and two outer rails that attach
to the rack.
The rails are marked with "L" for left and "R" for right.
1.
2.
3.
2.
3.
Outer rail
Inner rail
Locking tab
Detach the inner rails from the outer rails by pressing the locking tab to release the inner rails.
Locate the rail buttons on the side of the appliance and the corresponding holes on an inner rail.
Install the appliance | 20
4.
Align the holes against the corresponding buttons. When all are aligned, push the holes toward the
corresponding buttons.
1.
2.
3.
Front of appliance
Top of appliance
Screws
5.
6.
7.
Secure the rail to the appliance with a screw.
Attach the second inner rail to the other side of the appliance.
Insert the outer rails to the rack.
If necessary, push the locking tab on the rail to pull out the outer rails.
8.
9.
Attach the outer rails to the rack with two screws through the holes at the ends of the rails.
Line up the rear of the inner rails with the front of the extended outer rails.
Install the appliance | 21
1.
2.
10.
Top of appliance
Front of appliance
Slide the inner rails into the outer rails, keeping the pressure even on both sides.
Tip: You might have to press the locking tabs when inserting the rails.
When the appliance is pushed completely into the rack, the locking tabs click as the rails lock.
Install a 3301 or 3305 appliance in a four-post rack
Use the rack-mounting brackets to secure the appliance in the rack.
Use bracket sets of these lengths for installing the appliance in the rack.
•
•
medium-length brackets: 15.59–25.59 in. or 39.6–65 cm
long brackets: 25.59–35.43 in or 65–90 cm
Note: The long brackets must be ordered separately.
1.
Locate the two pairs of brackets in the delivery package: two short brackets that attach to the appliance and
two longer brackets that attach to the rack.
Install the appliance | 22
1.
2.
Short bracket (attaches to the appliance)
Longer bracket (attaches to the rack)
2.
Attach a short bracket to both sides of the appliance using two screws for each bracket.
3.
Attach the two longer brackets to the back of the rack with three screws through the holes at the back of
each bracket: one screw through the top hole, another through the middle hole, and the third through the
bottom hole.
CAUTION: Use all three screws to attach each rack-mounting bracket to the rack. Using
fewer screws might not provide sufficient support and can damage the appliance.
4.
Attach two or three screws with a wider head to a suitable position on the side of the appliance. Do the same
for the other side of the appliance.
Install the appliance | 23
Note: These screws support the appliance when it is inserted into the rack. The number and
position of the screws depends on the depth of the rack.
5.
6.
7.
Line up the screws that you have attached to the appliance with the groove in the brackets attached to the
rack.
Slide the appliance into the brackets in the rack.
Attach the appliance to the rack with three screws through the holes in the front of the short brackets: one
screw through the top hole, the second through the middle hole, and the third through the bottom hole.
CAUTION: Use all three screws to attach each rack-mounting bracket to the rack. Using
fewer screws might not provide sufficient support and can damage the appliance.
Connect the cables
Connect the network, management, and power supply cables.
CAUTION: The Intelligent Platform Management Interface (IPMI) port on the back panel is
not supported. Do not connect a cable to the IPMI port. The IPMI uses DHCP to acquire an IP
address. If an unauthorized user determines the IPMI IP address and the system credentials, the
user can access and manage the appliance remotely and compromise the security of the system.
Network settings and cables
Follow these network settings and cable guidelines.
Copper cable types
Use at least CAT5e-rated cables for gigabit networks.
(IPS and Layer 2 Firewall only) Always use standard cabling methods. Use crossover cables to connect the
appliance to hosts and straight cables to connect the appliance to switches or hubs.
Speed and duplex settings
Network interfaces at both ends of each cable must have identical speed and duplex settings. This includes
the automatic negotiation setting. If one end of the cable uses autonegotiation, the other end must also use
autonegotiation. Gigabit standards require interfaces to use autonegotiation — fixed settings are not allowed at
gigabit speeds.
(IPS and Layer 2 Firewall only) The settings for inline interfaces must be identical. All four interfaces — the pair
on the appliance and the interfaces on the two devices connecting to the appliance — must have the same speed
and duplex settings configured.
Ethernet port mapping
For appliances that have removable interface modules, Ethernet port names are based on the slot and port
numbers. The first number in the name represents the slot on the appliance, and the second number represents
the port on the slot. Example: eth2_0 is located on port 0 of slot 2.
•
•
Slot 0 contains the fixed Ethernet ports.
Slots 1 and higher contain the ports on the interface modules. The port numbers start at 0 and increase from
left to right.
Install the appliance | 24
During the initial configuration of the appliance, the Ethernet ports are mapped to the interface IDs that you
defined in the Management Client.
The NGFW Configuration Wizard displays the mapping between the interface IDs and port names. In the
command line version of the NGFW Configuration Wizard, Interface IDs appear in the Id column and port names
appear in the Name column.
This mapping can change if you replace an interface module. If the new module has a larger number of Ethernet
ports, the interface IDs for the new ports start from the next free interface ID number. Use the new interface
IDs to configure new interfaces in the Management Client, then refresh the policy on the engine to transfer the
changes. See the Stonesoft Next Generation Firewall Product Guide (McAfee SMC Administrator's Guide for
version 5.8 or earlier) for more information.
CAUTION: Do not select the Clear action when modifying interface IDs in the NGFW
Configuration Wizard on the command line. Selecting Clear removes all mapping information
between interface IDs and Ethernet ports, and restores the default values.
Example: You have seven interfaces numbered 1–7, which includes a four-port module installed in slot 1.
Figure 1: Original interface ID mapping
If you replace the four-port module installed in slot 1 with a two-port module, eth1_2 with ID 4 and eth1_3 with ID
5 are removed.
Figure 2: Changed interface ID mapping
Connect network and management cables
Connect the appliance to your networks. The management connection allows you to view the system console.
Note: Ethernet ports are mapped to interface IDs during the initial configuration. The ports and
port numbers of the physical appliance must match the interface definitions and interface IDs
configured for the engine in the Management Client.
1.
2.
Determine which Ethernet ports to use and connect the ports to your networks.
Select one of these options for the management connection:
•
•
Connect a monitor to the VGA port on the back or front panel of the appliance and a keyboard to a USB
port.
Connect the supplied null-modem cable to the console port on the front panel of the appliance and to
another computer for a terminal connection.
Install the appliance | 25
Connect network cables to SFP ports
If you installed an SFP interface module on the appliance, insert the copper or fiber-optic SFP transceiver into the
module and connect the cables.
1.
Insert the SFP transceiver in the port slot until you feel the connector on the transceiver snap into place.
Note: Make sure that the latch on the SFP transceiver is up when you insert the SFP
transceiver in the port slot.
2.
3.
If the SFP transceiver has a rubber plug, remove the plug.
Connect the copper or fiber-optic cable to the SFP transceiver.
Note: Each SFP port must match the wavelength specifications at the other end of the cable.
The cable must not exceed the stipulated cable length for reliable communications.
Connect the power supplies
Connect cables to the power supplies on the back of the appliance.
See Safety precautions for information about power supplies.
We highly recommend these configurations.
•
•
1.
2.
Connect both power supplies to a power source. This ensures that the appliance can function if one of the
power connections fails.
Use a UPS to ensure continuous operation and minimize the risk of damage to the appliance in case of
sudden loss of power. For a truly redundant power supply, connect each power connector on the appliance to
a different UPS, so that the failure of one UPS does not cut power to both power supplies.
Connect the power cables to the AC or DC power connectors on the back of the appliance.
Plug the power cord into a grounded, high-quality power strip that offers protection from electrical noise and
power surges.
Install the appliance | 26
Maintenance
Stonesoft NGFW appliances ship with several replaceable components.
Turn off the appliance
Most Stonesoft NGFW 2U appliance hardware components are not hot-swappable.
The only hot-swappable components are the 3202, 3206, 3207, 3301, and 3305 appliance fans. Turn off the
appliance and disconnect power before replacing other hardware components.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
1.
Connect to the engine command line. Depending on your appliance type, use one of these options.
•
•
•
Connect a keyboard to a USB port and a monitor to the VGA port, then press Enter.
Connect a computer running a terminal emulator program to the appliance console port, then press
Enter.
Connect using SSH.
Note: SSH access is not enabled by default.
2.
3.
4.
Enter the logon credentials.
The user name is root and the password is the one you set for the appliance.
Enter the command halt.
Unplug all power cords from the system or the wall outlets.
Replace the power supply
The appliances support both AC and DC power supplies. In the event of a failure, replace the power supply.
CAUTION: Do not open the casing of a power supply module. Power supply modules can only be
repaired by a qualified technician from the manufacturer.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
1.
2.
3.
4.
5.
Unplug the power cord from the AC power supply module or disconnect the wires from the DC power supply
module.
Locate the release tab on the left side of the power supply.
Push the release tab to the right to release the power supply module from the locking position.
Pull out the power supply module using the handle provided.
Push the replacement power supply into the power bay until it clicks in place.
Maintenance | 27
Replace appliance fans
There are four front fans and one back fan on 3202, 3206, or 3207 appliances. There are three back fans on
3301 and 3305 appliances.
You can change the fans without turning off the appliance. We recommend that you replace all appliance fans at
the same time. If one of the fans fails, the other fans might need replacement.
CAUTION: Keep your fingers away from moving fan blades. When you are inserting a fan, the
fan begins spinning as soon as it is connected to the power connector.
Replace front fans
Access the front fans from the fan enclosure plate on the front panel.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
1.
2.
3.
4.
Unscrew and remove the fan enclosure plate.
Grasp the fan by the handles on the front of the fan and pull the fan carefully out of the slot.
Align the replacement fan with the guides so that the power connector on the fan aligns with the power
connector on the appliance.
Slide the fan into the slot and press gently to connect the fan to the power connector.
The fan should fit securely in the slot. If the fan is loose, it is not inserted correctly.
CAUTION: Do not use excessive force when reinserting fans. Doing so can damage or
misalign the power connector.
5.
Reattach the fan enclosure plate.
Replace the back fan
Access the back fan from the fan enclosure on the back panel.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
1.
2.
3.
4.
Unscrew the fan enclosure.
Pull the fan enclosure carefully out of the slot.
Align the power connector on the fan with the power connector on the appliance.
Slide the replacement fan enclosure into the slot and press gently to connect the fan to the power connector.
CAUTION: Do not use excessive force when reinserting fans. Doing so can damage or
misalign the power connector.
5.
Secure the screw.
Maintenance | 28
Replace the SSD
Replace an SSD with another of the same model.
The SSD is on the front panel of 3201 and 3205 appliances, and on the back panel of 3202, 3206, 3207, 3301,
and 3305 appliances.
There are two SSD slots on the back panel of 3301 and 3305 appliances. Use only the upper slot.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
CAUTION: Uninstalled SSDs are sensitive to damage from electrostatic discharge.
1.
2.
3.
4.
5.
Turn off the appliance and disconnect any power cables.
Press the release button to release the lever that locks the SSD into position.
Pull the lever carefully and remove the SSD from the bay.
Press the release button on the new SSD to release the lever.
Insert the SSD into the bay.
Important: Only use the upper SSD slot on 3301 and 3305 appliances.
6.
Push the lever down to lock the SSD into position.
Replace an interface module
Replace an interface module with the same type or a different type of module.
If the number of ports in the old and new module are the same, the mapping between the Interface IDs stays the
same. If the number of ports in the new module is different from the old module, you might need to modify the
interface definitions.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
1.
2.
Turn off the appliance and disconnect any power cables.
Release the module from its locking position by pressing the lever right on the appliance, holding the lever
down, and pulling the module carefully out of the slot using the handle or the knob on the module's front
panel.
Note: If the unlocked module does not move, keep the release lever down, press the module
gently toward the back of the slot, and pull the module again by the handle or the knob.
3.
4.
5.
Insert the new module.
Connect the cables and plug the power cables to the system and to the wall outlets.
Turn on the appliance.
CAUTION: To ensure proper cooling, do not turn on the appliance if you have not installed
an interface module or a placeholder module in each slot.
6.
If the number of ports in the new module differs from the old module, update the interface configuration.
1. In the Management Client, modify the interface definitions as needed.
2. Refresh the policy to transfer the interface changes to the engine.
Maintenance | 29
Remove SFP transceivers
Remove or replace an SFP transceiver.
CAUTION: Invisible laser radiation is emitted from the end of a fiber-optic cable and from the fiber
port. Do not stare into the beam and avoid direct exposure to the beam.
Note: We recommend fastening a grounding strap to your wrist so that it contacts your bare skin
and attaching the other end of the strap to the appliance.
1.
2.
3.
4.
5.
Turn off the appliance and disconnect any power cables.
Unplug all power cables from the system or the wall outlets.
Disconnect the cable from the SFP transceiver.
Pull down the latch on the transceiver and carefully pull the SFP transceiver out of the port slot.
If needed, insert a replacement SFP transceiver in the slot.
Maintenance | 30
Find product documentation
On the Forcepoint support website, you can find information about a released product, including product
documentation, technical articles, and more.
You can get additional information and support for your product on the Forcepoint support website at https://
support.forcepoint.com. There, you can access product documentation, Knowledge Base articles, downloads,
cases, and contact information.
Copyright © 1996 - 2016 Forcepoint LLC
Forcepoint™ is a trademark of Forcepoint LLC.
SureView®, ThreatSeeker®, TRITON®, Sidewinder® and Stonesoft® are registered trademarks of Forcepoint LLC.
Raytheon is a registered trademark of Raytheon Company.
All other trademarks and registered trademarks are property of their respective owners.
Find product documentation | 31
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising