Page 2
END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at http://www.juniper.net/support/eula.html.
® To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at http://www.juniper.net/techpubs/ If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes.
Juniper Secure Analytics 3800 Hardware Guide Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death.
We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can provide feedback by using either of the following methods: Online feedback rating system—On any page at the Juniper Networks Technical Documentation site at , simply click the http://www.juniper.net/techpubs/index.html...
7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: http://www.juniper.net/customers/support/...
JSA3800 Appliance Description on page 3 JSA3800 Appliance Hardware Overview on page 4 JSA3800 Appliance Description The Juniper Secure Analytics 3800 (JSA3800) is an enterprise-class appliance that provides a scalable network security management solution for medium-sized companies up to large global organizations.
Juniper Secure Analytics 3800 Hardware Guide JSA3800 Appliance Hardware Overview The JSA3800 appliance provides the following features: Monitor utility for power supply unit (PSU) and fans Add setup logs automatically Support high availability (HA) Hot-swappable hard disk supporting RAID Automatic RAID rebuild on HDD swap...
Hardware Component Overview JSA3800 Appliance Components Overview on page 5 JSA3800 Appliance Components Overview Juniper Secure Analytics (JSA) includes the following deployment components: Flow Processor —Collects data from devices, and various live and recorded feeds, such as network taps, span/mirror ports, NetFlow, and JSA flow logs. When the data is collected, the Flow Processor groups related individual packets into a flow.
Page 22
Juniper Secure Analytics 3800 Hardware Guide A non-console Event Processor can be connected to the Event Processor on the console or connected to another Event Processor in your deployment. The Accumulator is responsible for gathering flow and event information from the Event Processor.
Juniper Secure Analytics 3800 Hardware Guide Table 5: JSA3800 Back Panel Components Callout Components Description Power supply Provides power to all components. Dedicated IPMI LAN port 1 dedicated IPMI LAN port. GB ports 2 RJ-45 Gigabit Ethernet LAN ports. The left Ethernet port is Eth0 and the right Ethernet port is Eth1.
Juniper Secure Analytics 3800 Hardware Guide Table 7: JSA3800 Appliance Physical Specifications Specification JSA3800 Dimensions (D x W x H) 437 mm x 43 mm x 597 mm (17.2 in. x 1.7 in. x 23.5 in.) Weight 27.9 lb Warranty...
We recommend that you install JSA on your LAN to ensure that it can communicate with your applicable resources, such as authentication servers, DNS servers, internal webservers through HTTP/HTTPS, external websites through HTTP/HTTPS (optional), the Juniper Networks update server through HTTP, network file system (NFS) file servers (optional), and client/server applications (optional).
Page 40
Juniper Secure Analytics 3800 Hardware Guide Table 11: Required Tools and Parts for Installing the JSA3800 Appliance (continued) Task Tools and Parts Packing the JSA3800 appliance Electrostatic bag or antistatic mat, for each component ESD grounding wrist strap Related Overview of Installing the JSA3800 Appliance in a Rack on page 23...
Juniper Secure Analytics 3800 Hardware Guide When you turn on the power, the internal port uses two LEDs to indicate the LAN connection status, as shown in Figure 6 on page Figure 6: JSA3800 Front Panel LEDs 1— Information LED 4—...
Juniper Secure Analytics 3800 Hardware Guide Figure 8: Installing the Outer Rails in a Rack Align the rear of the chassis inner rails with the front of the rack rails as shown in Figure 9 on page Figure 9: Aligning the Chassis in a Rack...
Juniper Secure Analytics 3800 Hardware Guide a. Place the inner rail extensions on the side of the chassis such that the hooks on the chassis clip securely into the rail extension holes. b. Slide the extensions toward the front of the chassis.
Page 52
Juniper Secure Analytics 3800 Hardware Guide Plug an Ethernet cable into the network port on the back panel. Plug a RS-232 (DB-9 F/F) cable into the console port. NOTE: When using a laptop to connect to the appliance, you must use a terminal program, such as HyperTerminal, to connect to the appliance.
Page 54
Juniper Secure Analytics 3800 Hardware Guide WARNING: Before you perform the following procedure, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF position, and tape the switch handle of the circuit breaker in the OFF position.
Accessing the JSA Interface on page 43 Preparing the Network Hierarchy Juniper Secure Analytics (JSA) uses the network hierarchy to determine your network traffic and provides you with the ability to view network activity for your entire deployment. JSA supports any network hierarchy that can be defined by a range of IP addresses.
Identifying Security Monitoring Devices and Flow Data Sources on page 40 Identifying Network Assets on page 41 Identifying Network Settings Before you install Juniper Secure Analytics (JSA), you must have the following information for each system you want to install: Hostname...
Chapter 11: Performing the Initial Configuration Identifying Network Assets Juniper Secure Analytics (JSA) can learn about your network and server infrastructure based on flow data. The Server Discovery function uses the JSA Asset Profile database to discover many types of servers.
Juniper Secure Analytics 3800 Hardware Guide Configuring the Basic Settings on the JSA3800 Appliance To configure the basic setting using the JSA interface: NOTE: When using a laptop to connect to the appliance, you must use a terminal program, such as HyperTerminal, to connect to the appliance.
Page 60
Click Login To JSA The JSA interface appears. You are now ready to start tuning JSA and high availability (HA) settings. For more information, see the Juniper Secure Analytics Administration Guide. NOTE: You will need a permanent license for the JSA appliance to upgrade to a higher version.
Juniper Secure Analytics 3800 Hardware Guide NOTE: Run a consistency check on the JSA3800 appliance at least once a month to ensure that the defects are mapped out in case of a drive failure. Related JSA3800 Appliance Physical Specifications on page 15...
CHAPTER 13 Troubleshooting Components Contacting Juniper Networks Technical Assistance Center on page 49 Contacting Juniper Networks Technical Assistance Center If you need assistance while troubleshooting a JSA appliance, open a support case using the Case Manager link at , or call 1-888-314-JTAC (within http://www.juniper.net/support/...
Juniper Secure Analytics 3800 Hardware Guide Replacing AC Power Supply Cables on the JSA3800 Appliance To replace an AC power supply cord: Attach an ESD grounding strap to your bare wrist and connect the strap to one of the ESD points on the chassis.
Page 78
Juniper Secure Analytics 3800 Hardware Guide schakelingen betrokken risico's en dient u op de hoogte te zijn van standaard maatregelen om ongelukken te voorkomen. Varoitus Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää...
Juniper Secure Analytics 3800 Hardware Guide Avoid touching uninsulated electrical wires or terminals that have not been disconnected from their power source. Such an action could cause electrical shock. Always ensure that all modules, power supplies, and cover panels are fully inserted and that the installation screws are fully tightened.
Juniper Secure Analytics 3800 Hardware Guide If no grounding strap is available, touch the exposed, bare metal of the device to ground yourself before handling the component. Avoid contact between the component that is subject to ESD damage and your clothing.
In addition, you should establish procedures to protect your equipment in the event of a fire emergency. Juniper Networks products should be installed in an environment suitable for electronic equipment. We recommend that fire suppression equipment be available in the event of a fire in the vicinity of the equipment and that all local fire, safety, and electrical codes and ordinances be observed when you install and operate your equipment.
Page 84
To keep warranties effective, do not use a dry chemical fire extinguisher to control a fire at or near a Juniper Networks JSA appliance or other network device provided by Juniper. If a dry chemical fire extinguisher is used, the unit is no longer eligible for coverage under a service agreement.
Juniper Secure Analytics 3800 Hardware Guide Varning! Läs installationsanvisningarna innan du kopplar systemet till dess strömförsörjningsenhet. Related Ramp Warning on page 70 Documentation Rack-Mounting Warnings on page 71 Grounded Equipment Warning on page 75 Maintenance and Operational Safety Guidelines and Warnings on page 83 Chassis Lifting Guidelines for the JSA3800 Appliance The weight of a fully loaded JSA3800 appliance is approximately 37 lb (16.8 kg).
Page 88
Les directives ci-dessous sont destinées à assurer la protection du personnel: Le rack sur lequel est monté le Juniper Networks device doit être fixé à la structure du bâtiment. Si cette unité constitue la seule unité montée en casier, elle doit être placée dans le bas.
Page 89
Le seguenti direttive vengono fornite per garantire la sicurezza personale: Il Juniper Networks device deve essere installato in un telaio, il quale deve essere fissato alla struttura dell'edificio. Questa unità deve venire montata sul fondo del supporto, se si tratta dell'unica unità...
Page 90
Para garantizar su seguridad, proceda según las siguientes instrucciones: El Juniper Networks device debe instalarse en un bastidor fijado a la estructura del edificio. Colocar el equipo en la parte inferior del bastidor, cuando sea la única unidad en el mismo.
Juniper Secure Analytics 3800 Hardware Guide Class 1 Laser Product Warning WARNING: Class 1 laser product. Waarschuwing Klasse-1 laser produkt. Varoitus Luokan 1 lasertuote. Attention Produit laser de classe I. Warnung Laserprodukt der Klasse 1. WARNING: Avvertenza Prodotto laser di Classe 1.
Juniper Secure Analytics 3800 Hardware Guide Related Radiation from Open Port Apertures Warning on page 80 Documentation Maintenance and Operational Safety Guidelines and Warnings on page 83 Installation Instructions Warning on page 69 Radiation from Open Port Apertures Warning Supported Platforms...
Juniper Secure Analytics 3800 Hardware Guide recommandée par le fabricant. Jeter les piles usagées conformément aux instructions du fabricant. Warnung Bei Einsetzen einer falschen Batterie besteht Explosionsgefahr. Ersetzen Sie die Batterie nur durch den gleichen oder vom Hersteller empfohlenen Batterietyp. Entsorgen Sie die benutzten Batterien nach den Anweisungen des Herstellers.
To prevent the device from overheating, do not operate it in an area that exceeds the maximum recommended ambient temperature of 104° F (40° C) for network devices of Juniper Networks. To prevent airflow restriction, allow at least 6 in. (15.2 cm) of clearance around the ventilation openings.
15,2 cm à volta das aberturas de ventilação. ¡Atención! Para impedir que un encaminador de la serie Juniper Networks device se recaliente, no lo haga funcionar en un área en la que se supere la temperatura ambiente máxima recomendada de 40°...
Page 104
Juniper Secure Analytics 3800 Hardware Guide Warnung Dieses Produkt muß den geltenden Gesetzen und Vorschriften entsprechend entsorgt werden. Avvertenza L'eliminazione finale di questo prodotto deve essere eseguita osservando le normative italiane vigenti in materia Advarsel Endelig disponering av dette produktet må skje i henhold til nasjonale lover og forskrifter.
Juniper Secure Analytics 3800 Hardware Guide General Electrical Safety Guidelines and Warnings Supported Platforms JSA1500, JSA3500, JSA5500, JSA7500 WARNING: Certain ports on the device are designed for use as intrabuilding (within-the-building) interfaces only (Type 2 or Type 4 ports as described in GR-1089-CORE, Issue 4) and require isolation from the exposed outside plant (OSP) cabling.
Juniper Secure Analytics 3800 Hardware Guide The power cord serves as the main disconnecting device for the AC-powered device. The socket outlet must be near the AC-powered device and be easily accessible. For devices that have more than one power supply connection, you must ensure that all power connections are fully disconnected so that power to the device is completely removed to avoid electric shock.
Juniper Secure Analytics 3800 Hardware Guide NOTE: Primary overcurrent protection is provided by the building circuit breaker. This breaker must protect against excess currents, short circuits, and earth grounding faults in accordance with NEC ANSI/NFPA 70. Ensure that the polarity of the DC input wiring is correct. Under certain conditions, connections with reversed polarity might trip the primary circuit breaker or damage the equipment.
Juniper Secure Analytics 3800 Hardware Guide Related General Electrical Safety Guidelines and Warnings on page 90 Documentation Prevention of Electrostatic Discharge Damage on page 65 AC Power Electrical Safety Guidelines on page 91 DC Power Electrical Safety Guidelines on page 93...
Juniper Secure Analytics 3800 Hardware Guide Advarsel Riktig tilkoples tilkoplingssekvens er jord til jord, +RTN til +RTN, –40 V til –60 V. Riktig frakoples tilkoplingssekvens er –40 V til –60 V, +RTN til +RTN, jord til jord. Aviso Ate con alambre la fuente de potencia cc Usando los terminales apropiados en el extremo del cableado.
Juniper Secure Analytics 3800 Hardware Guide Related General Electrical Safety Guidelines and Warnings on page 90 Documentation AC Power Electrical Safety Guidelines on page 91 DC Power Electrical Safety Guidelines on page 93 DC Power Disconnection Warning on page 94...
Juniper Secure Analytics 3800 Hardware Guide Related Compliance Statements for EMC Requirements for the JSA3800 Appliance on page 104 Documentation Compliance Statements for Acoustic Noise for the JSA3800 Appliance on page 106 Installation Instructions Warning on page 69 Compliance Statements for EMC Requirements for the JSA3800 Appliance...
Juniper Secure Analytics 3800 Hardware Guide equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, might cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.
Page 126
Juniper Secure Analytics 3800 Hardware Guide replacing a DC power supply........56 hardware replacing AC power supply cables......56 installing................25 replacing an AC power supply........55 setting up................17 required parts for installing........23 hardware feature required tools for installing.........23 JSA3800................4 setting up................17 hardware specification site installation guideline..........15...