Tuning Your Deployment - McAfee M-1250 - Network Security Platform Deployment Manual

McAfee® Network Security Platform 6.0
3
4
5
6
There are several options for loading updates to your Manager and Sensors.
1
2
3

Tuning your deployment

Once you become familiar with the basics of the Manager program, you can further
enhance your deployment by utilizing some of the more advanced features. These
features include:






Field Description
Manager Server
PC/tftp server
Import/disk
Sensor
Note: Manager software installation includes a default signature set image.
Download images from the McAfee Network Security Update Server (Update Server) to your Manager.
You can use the Manager interface to download Sensor software and signature
updates from the Update Server to the Manager server, and then download the
Sensor image to the Sensor. For more information, see
Guide
.
Import image files from a remote workstation to your Manager.
If your Manager server is not connected to the Internet, you can download the
updates from the Update Server to any host, then do one of the following:

Download the image to a remote host, then log in to the Manager via browser
session on the remote host and import the image to the Manager server. You can
then download the Sensor image to the Sensor. For more information, see
Server Configuration Guide

Similar to above, download the image from the Update Server to any host, put it
on a disk, take the disk to the Manager server, and then import the image and
download it to the Sensor.
Download Sensor software from the Update Server to a TFTP client then to a Sensor.
You can download the software image from the Update Server onto a TFTP server,
and then download the image directly to the Sensor using commands on the Sensor
CLI. This is useful if you prefer not to update Sensor software via the Manager, or you
may encounter a situation wherein you cannot do so. For more information on this
CLI Guide
method, see .
Cloning and modifying the Network Security Platform-provided policy.
Working with Security Policies,
Deploying your Sensor to monitor traffic in Tap mode or, ultimately, in In-line mode.
information, see Sensor Deployment Modes (on page 13).
Adding users and assigning management roles.
Network Security Platform,
Adding admin domains for resource management.
Getting Started Guide
Domains,
Changing your interface type to CIDR or VLAN depending on your network configuration.
information, see Interface and Sub-Interface Node,
Using Access Control Lists (ACLs) to block traffic or pass traffic without sending it through the IDS
engine.
For more information, see
.
Getting Started Guide
.
For more information, see Managing Users in
Getting Started Guide
.
For more information, see Administrative
.
Device Configuration Guide
7
Getting Started
Manager Server Configuration
Manager
For more information, see
For more
For more
Device Configuration Guide
.
.