Download Configuration, Signature Set, And Software Updates To The Sensor - McAfee M-1250 - Network Security Platform Manual

McAfee® Network Security Platform 6.0
1
2
3
4
5
6
7
8
Most configuration options are hereafter done at the Failover Pair node level. For example,
you can now apply a policy, update the configuration, or even create an ACL rule at the
Failover Pair node level and it will automatically propagate to each of the member
Sensors. On the other hand, you still configure the port settings, view interface statistics,
and upgrade the Sensor software at the Sensor node level. The easiest way to get a feel
for the Failover Pair configuration process is to examine the user interface once the Pair
has been created.
Note:
configuration. However, you upgrade software at a Sensor level, even those that are
part of a Failover Pair. The recommended upgrade procedure is to therefore
upgrade the software version on both Sensors, and then reboot them sequentially.
That is, once the upgrade process is complete on both, reboot (for example) the
secondary, confirm that it has rebooted without error, and reboot the primary.
Download configuration, signature set, and software updates
to the Sensor
After configuring your ports for inline mode, setting the TCP/IP parameters, and
customizing and applying policy, you will need to download this configuration to the Sensor
in order for all of your changes to be active. This process is described in detail in the
section Updating the Configuration of a Sensor in the
•
•
/ My Company / Device List > Device List > Failover Pairs
Click
New Add a Failover Pair
Click . The
Model
Select the Sensor type. Both Sensors in a failover pair must be the same model.
Name
Type a failover pair that will uniquely identify the grouping.
Select the Primary Sensor
Select the Secondary Sensor
Create
Click . Upon saving, a message informs you that the failover pair creation will
take a few moments.
OK
Click . The new failover pair appears as a child node of the Sensors node under
which it was created. That node contains icons for each interface taking part in the
failover process. Also within the Failover Pair node is a list of its member Sensors.
The Sensors must be running the same software version to run in a failover
Configuration changes, including port configuration, policy, and signature set updates:
/ My Company / Device List / Sensor_Name> Physical Device > Configuration Update
/ My Company / Device List / Sensor_Name > Physical Device > Software
Software updates only:
Upgrade
Failover: configure two Sensors in inline mode
.
dialog opens.
Template Device
from the drop-down menu.
Peer Device
from the drop-down menu.
Sensor Configuration Guide.
12