McAfee M-2850 Product Manual

McAfee M-2850 Product Manual

Network security platform

Advertisement

M-2850/M-2950 Sensor Product Guide
Revision F
McAfee
Network Security Platform
®

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the M-2850 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for McAfee M-2850

  • Page 1 M-2850/M-2950 Sensor Product Guide Revision F McAfee Network Security Platform ®...
  • Page 2 TRADEMARK ATTRIBUTIONS McAfee and the McAfee logo, McAfee Active Protection, ePolicy Orchestrator, McAfee ePO, McAfee EMM, Foundstone, McAfee LiveSafe, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, McAfee Stinger, True Key, TrustedSource, VirusScan are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries.
  • Page 3: Table Of Contents

    Introducing Network Security Sensors About the M-2850/M-2950 Sensor ......7 M-2850/M-2950 key features ......
  • Page 4 About the fail-open hardware ......27 Troubleshooting the Sensor Technical specifications Regulatory, compliance, and safety information Index McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 5: Preface

    Preface This guide provides the information you need to configure, use, and maintain your McAfee product. Contents About this guide Find product documentation About this guide This information describes the guide's target audience, the typographical conventions and icons used in this guide, and how the guide is organized.
  • Page 6: What's In This Guide

    Preface Find product documentation What's in this guide This guide contains information necessary to setup your M-2850/M-2950 Sensor model. This information includes guiding you through preconfiguring, cabling, and troubleshooting your Sensor. Find product documentation On the ServicePortal, you can find information about a released product, including product documentation, technical articles, and more.
  • Page 7: Introducing Network Security Sensors

    McAfee Network Security Manager (Manager) server. The process of configuring a Sensor and establishing communication with the Manager is described in the later chapters of this guide. The Manager server is described in detail in the McAfee Network Security Platform Manager Administration Guide.
  • Page 8: M-2850/M-2950 Key Features

    External Compact Flash port M-2850/M-2950 physical description A high-port density M-2850/M-2950 Sensor, is designed for high bandwidth links, and is equipped with twenty Fast Ethernet ports (or interfaces). This Sensor can monitor ten 1 Gbps Ethernet segments in full-duplex mode (tap or in-line), and twenty segments in half-duplex mode (monitoring SPAN ports or hubs).
  • Page 9 If you choose to run in fail-over mode, port 6A is used to interconnect with a standby M-2850/M-2950 Sensor. The gigabit ports of the M-2850/M-2950 running in In-line mode fail closed, meaning that if the Sensor fails, it will interrupt/block data flow. Refer to the Gigabit Fail-Open Bypass Kit Guide for more information.
  • Page 10: Front And Back Panel Leds

    The front panel LEDs provide status information for the health of the Sensor and the activity on its ports. The back panel LEDs provide information regarding the Sensor fans and the power supply. The following tables describe the front and back panel LEDs of M-2850/M-2950: Status Description Green Sensor is operating.
  • Page 11 Gigabit Ports (SFP) Link Green The link is connected. The link is disconnected. Fail-Open Control Port FO Green The Sensor is powering the fail-open kit. The Sensor is not powering the fail-open kit. McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 12 The Sensor port pair is in-line, receiving normal traffic. Tap or SPAN The Sensor port receives normal traffic. Traffic is either passing through or has been dropped. Bypass The Sensor port pair is not in-line and traffic is bypassed. McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 13: Before You Install

    ® ® • McAfee prohibits the modification or installation of any hardware or software in the Sensor appliance that is not part of the normal operation of McAfee Network Security Platform. Safety measures Please read the following warnings before you install the product. These safety measures apply to all Sensor models unless otherwise specified.
  • Page 14: Working With Fiber-Optic Ports

    The following accessories are shipped in the Sensor crate: • One Sensor. • One power supply. • Power cords. McAfee provides standard and international power cables. • One set of rack mounting rails. • One set of rack mounting ears. •...
  • Page 15: Unpack The Sensor

    Remove the Sensor from the anti-static bag. Save the box and packing materials for later use in case you need to move or ship the Sensor. If any of the contents from the preceding list are missing or damaged, contact McAfee support. McAfee...
  • Page 16 Before you install Unpack the Sensor McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 17: Setting Up The Sensor

    Place the Sensor in a physically secure location, close to the switches or routers it will be monitoring. Ideally, the Sensor should be located within a standard communications rack. Each M-2850/M-2950 is a 2RU (2 rack unit). To mount the Sensor on a rack, you will attach two mounting ears and rails to the Sensor as described in the subsequent sections.
  • Page 18: Mount The Sensor On A Rack

    Before you mount the Sensor on the rack, make sure that power is OFF. Remove the power cable and all network interface cables from the Sensor. Because of the weight of the appliance, McAfee recommends that two people place the chassis into the rail cabinet.
  • Page 19: Redundant Power Supply

    A basic configuration of the Sensor includes one hot swappable supply. You may install a second hot-swappable power supply (purchased separately from McAfee) for redundancy. Each of these modules has one handle for insertion or extraction from the unit as well as a release latch.
  • Page 20: Cable The Sensor

    SFP optical interfaces are less than half the size of GBIC interfaces. To ensure compatibility, McAfee supports only those SFP modules purchased through McAfee or from a McAfee-approved vendor. For a list of approved vendors, see the on-line KnowledgeBase at http:// mysupport.mcafee.com/Eservice/.
  • Page 21: Sfp Module

    Figure 3-6 SFP module in the Sensor Monitoring port Remove a module Task Disconnect the network cable from the module. Release the module from the slot by pulling the bail-clasp out of its locked position. McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 22: Power On The Sensor

    The Sensor has no power switch. It powers on as soon as one of its power cable is connected to a power source. Power off the Sensor McAfee recommends that you use the shutdown CLI command to halt the Sensor before powering it down. For more information on CLI commands, see McAfee Network Security Platform CLI Guide. McAfee...
  • Page 23: Attaching Cables To The Sensor

    The Console port on the Sensor is used for setup and configuration of the Sensor. Task For console connections, plug the DB9 Console cable supplied by McAfee into the Console port on the Sensor. This port is labeled as Console on the Sensor front panel.
  • Page 24: Cable The Auxiliary Port

    Fail-open functionality for the GE Monitoring ports is accomplished using the standard Gigabit Fail-open Bypass Kit, sold separately. McAfee recommends deploying active fail-open kits for protection of mission critical networks. Both copper and optical versions are available. For more information, see the documentation that accompanies the Kit.
  • Page 25: How To Use Peer Ports

    In-line fail-close (port pair) Auto-negotiation is on. Cable types for routers, switches, hubs, and PCs This section describes the types of cables that you require to connect the Sensor to other network devices: McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 26: Cable For In-Line

    To deploy the Sensor in tap mode, you must use a Sensor's Gigabit Ethernet Monitoring port pair with a third-party external tap. For a list of McAfee-approved third party vendors, see the KnowledgeBase at http://mysupport.mcafee.com/ Eservice/. Click the link Search the KnowledgeBase and locate the relevant KnowledgeBase article.
  • Page 27: Connect The Cables For Span Or Hub Mode

    Gigabit port 6A is the fail-over interconnection port on the M-2850/M-2950 Sensors. Task Plug the cable appropriate for use with your SFP module into port 6A of the M-2850/M-2950 of the active Sensor. Connect the other end of the cable to port 6A of the M-2850/M-2950 of the standby Sensor.
  • Page 28 Installation and troubleshooting instructions for the Kit can be found in the Guide that accompanies the kit. For example, for more information on the Optical kit, see the standard Gigabit Optical Fail-Open Bypass Kit Guide. Figure 4-3 Fail-open switch connected to ports 1A-1B McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 29: Troubleshooting The Sensor

    The control cable has been Check the control cable and ensure it is properly absent" appears in the disconnected. connected to both the Sensor and the Bypass Manager Operational Switch. Status window. McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 30 Troubleshooting the Sensor McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 31: Technical Specifications

    Technical specifications The following table lists the specifications for each M-2850/M-2950 Sensor. Sensor Specifics Description Dimensions Without mounting ears/rails/cable management: • width: 15.88 in. (40.34 cm) • height: 3.5 in. (8.59 cm) • depth: 24.50 in. (62.23 cm) Dimensions do not include cables or power cords.
  • Page 32 Technical specifications McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 33: Regulatory, Compliance, And Safety Information

    EN 55024: 1998 + A1:2001 + A2: 2003 - Emissions: • Radiated Emissions • Conducted Emissions • EN 61000-3-2: 2000 Harmonic Current Emissions • EN 61000-3-3: 1995 + A1: 2001 Voltage Fluctuation/Flicker CISPR/KN22: • Radiated Emissions McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 34 Regulatory, compliance, and safety information Sensor regulatory, safety, and compliance • Conducted Emissions McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 35: Index

    SFP module – typographical conventions and icons Slide Rail Kit fail open port technical support, finding product information Fibre Optic ports three-in-one rails Gigabit Fail-Open Kit hot swappable power supply McAfee Network Security Platform M-2850/M-2950 Sensor Product Guide ®...
  • Page 36 700-3591F00...

This manual is also suitable for:

M-2950

Table of Contents