Symantec SSP-S410 Quick Start Manual

Symantec Security Platform
SSP-S410 Quick Start Guide
To begin using your Symantec Security Platform (SSP) appliance, complete the
following steps in order. For additional instructions, including safety information,
see the SSP-S410 and ISG guides, available at:
1 Unpack the Appliance
Verify the contents of the shipping package for your appliance: (2) C13-to-C14
AC power cords; (1) RJ45-to-DB9 null modem serial cable; slide-rail kit; Quick
Start Guide (this document); Software License Agreement; and Hardware
Warranty Information.
2 Connect Cables
Note: If you would rather mount the appliance before configuring it, skip to
Step 7—Mount the Appliance and then come back and proceed from this step.
a. Connect Ethernet cables from the appliance to the following devices.
• Appliance LAN (2:0) port to WAN router (Internet)
• Appliance LAN (2:1) port to LAN switch (main site)
• Appliance MGMT (0:0) port to management switch (workstation)
b. Connect the RJ45 end of the included null modem serial cable to the appli-
ance's Console port. Connect the other DB9 end of the cable to a serial ter-
minal or workstation with terminal emulation software (a DB9-to-RJ45 rollover
adapter may be necessary).
c. Connect the included power cords to the appliance's PSU1 and PSU2 inlets
and connect the other ends to a valid power source.
Note: Ethernet cables are not included with the appliance. Use only straight-
through Ethernet cables, category 5E or better for 1000Base-T operation,
category 6A for 10GBase-T operation.
3 Power on the Appliance and Verify LEDs
a. If the appliance does not automatically power on after connecting to a power
source, press the soft power switch on the front panel.
b. As the appliance boots, verify the following:
• The Power LED turns amber.
• Near the end of the boot cycle, the Power LED alternates between amber
and green, indicating an unconfigured state.
• After initialization (see Step 4), the Power LED will turn green.
4 Initialize the SSP Host Appliance
a. Confirm the appliance's Console port is connected to a serial terminal or
workstation with terminal emulation software.
b. Open a terminal emulation program, such as HyperTerminal
Term and configure it to use the following settings:
• Baud rate: 9600 bps • Data bits: 8
• Parity: none • Stop bits: 1
c. When prompted, press Enter three times.
d. To initialize the host appliance, perform the following steps.
Broadcom, the pulse logo, Connecting everything, Avago Technologies, Avago, the A logo, Symantec, the Symantec logo, the Checkmark logo, Blue Coat, and the Blue Coat logo are among the trademarks of Broadcom and/or its affiliates
in the United States, certain other countries, and/or the EU. Copyright © 2020 Broadcom. All Rights Reserved. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries. For more information, please visit www.broadcom.com.
techdocs.broadcom.com
, PuTTY, or Tera
®
• Flow control: none
• On the Menu screen, press 2 to open the Setup Console.
• Enter the IP address, IP subnet mask, IP gateway, and DNS server for
the appliance's network ports.
• Specify the console password and enable password. Press any key to
activate and return to the serial console.
e. To access privileged commands on the host appliance, enter:
localhost# enable
Enable Password: <host-enable-password>
f. To install a license on the host appliance, perform the following steps.
• On the Menu screen, press 1 to open CLI.
• For node-locked licenses, enter: licensing load id <serial-number>
• For ISG application licenses, enter: licensing load id <isg-license>
Note: You can locate your serial number or ISG license in the eFulfillment
Letter you received from Broadcom at the time of purchase.
g. To install application images on the host appliance, perform the following steps.
localhost# config
localhost(config)# images
localhost(config-images)# load <url>
Note: Application images have a .bcsi extension and are available for down-
load from: support.broadcom.com/security
5 Add ISG Applications
a. Confirm the appliance's Console port is still connected to the serial terminal
and that the terminal software is configured as in Step 4.
b. On the Menu screen, press 1 to open CLI.
c. To access privileged commands on the host appliance, enter:
localhost# enable
Enable Password: <host-enable-password>
d. To add an ISG application, enter:
localhost# config
localhost(config)# applications
localhost(config-applications)# create <app-type> image-id
<app-image> model <app-model> license-id <id> <app-name>
Note: To add a ProxySG application, enter sg as the app-type. To add a
CAS application, enter cas as the app-type. See your eFulfillment Letter
to verify the number and type of ISG applications and models that can be
installed on your host appliance.
e. To start an ISG application, enter:
localhost(config-applications)# start <app-name>
localhost(config-applications)# attach-console <app-name>
f. When prompted, press Enter three times.
g. Use the Configuration Wizard to initialize the ISG application.
• Press a to proceed with Manual Setup.
• Enter the IP address, IP subnet mask, IP gateway, and DNS server for
the appliance's network ports.
• Specify the console password and enable password.