Table Of Contents - McAfee M-1250 - Network Security Platform Deployment Manual

Contents
Preface .......................................................................................................... iv
Introducing McAfee Network Security Platform.............................................................................iv
About this Guide............................................................................................................................iv
Audience .......................................................................................................................................iv
Conventions used in this guide .....................................................................................................iv
Related Documentation................................................................................................................. v
Contacting Technical Support ......................................................................................................vii
Chapter 1 Getting Started............................................................................ 1
Deciding where to deploy Sensors and in what operating mode .................................................. 1
Setting up your Sensors ................................................................................................................ 2
Establish Sensor-to-Manager communication............................................................................... 4
Viewing and working with data generated by Network Security Platform ..................................... 5
Configuring your deployment using the Manager ......................................................................... 5
Updating your signatures and software......................................................................................... 6
Tuning your deployment................................................................................................................ 7
Chapter 2 Planning Network Security Platform Installation ..................... 8
Pre-deployment considerations..................................................................................................... 8
What is the size of your network? ..........................................................................................8
How many access points are there between your network and the extranets or Internet? ...9
Where are the critical servers that require protection within your network?...........................9
How complex is your network topology?................................................................................9
How much traffic typically crosses your network?................................................................10
Where are your security operations located?.......................................................................11
Where should I deploy Sensors? .........................................................................................11
Chapter 3 Sensor Deployment Modes ...................................................... 13
Flexible deployment options........................................................................................................ 13
Multi-port Sensor deployment ..............................................................................................13
Supported deployment modes .............................................................................................13
Full-duplex and half-duplex monitoring ................................................................................15
Deploying Sensors in in-line mode.............................................................................................. 15
Fail-open versus fail-closed .................................................................................................17
Deploying Sensors in tap mode .................................................................................................. 18
Deploying the Sensors with FE ports in internal tap mode ..................................................19
Deploying Sensors with GE ports in external tap mode.......................................................20
Shifting from tap mode to in-line mode ................................................................................21
SPAN port and hub monitoring.................................................................................................... 21
SPAN port and hub monitoring ............................................................................................22
High-Availability........................................................................................................................... 22
Understanding failover in Network Security Platform...........................................................23
Interface groups .......................................................................................................................... 24
Chapter 4 Deployment Scenarios.............................................................. 26
Deployment flexibility................................................................................................................... 26
Deployment scenario for beginners............................................................................................. 26
Deployment scenario for intermediate users............................................................................... 27
Deployment scenario for advanced users ................................................................................... 27
Index ............................................................................................................. 29
iii