McAfee IIP-M80K-ISAA - Network Security Platform M-8000 Product Manual page 12

McAfee® IntruShield® IPS 4.1
M-8000 Sensor Product Guide
1
2
3
4
5
6
7
8
9
10
One RJ-45 10/100/1000 Management port on M-8000 P,
with the Manager server. You can assign an IP address to this port during
installation.
, which is used to set up and configure the sensor using
Two RS-232C Console ports
the CLI of the primary sensor. You can use the Console port on the secondary
sensor to recover the flash image.
Two RS-232C Auxiliary ports , which may be used to dial in remotely to set up and
configure the sensor.
Sixteen small form-factor pluggable (SFP) 1 Gigabit Monitoring ports
monitor sixteen SPAN ports, eight full-duplex tapped segments, eight segments
in-line, or a combination (that is, four full-duplex segment, eight SPAN ports).
The Monitoring interfaces of the M-8000 work in stealth mode, meaning they
have no IP address and are not visible on the monitored segment.
Twelve 10 Gigabit small form-factor pluggable (XFP) 10 Gigabit Monitoring ports
you to monitor twelve SPAN ports, six full-duplex tapped segments, six segments
in-line, or a combination (that is, three full-duplex segment, six SPAN ports).
The Monitoring interfaces of the M-8000 work in stealth mode, meaning they
have no IP address and are not visible on the monitored segment.
If you choose to run in failover mode, ports 4A and 4B are used to interconnect
with a standby sensor.
The gigabit ports of the M-8000 running in In-line Mode fail closed,
Note:
meaning that if the sensor fails, it will interrupt/block data flow. Fail-open
functionality requires either the Layer 2 Passthru feature, described in detail in
the Sensor Configuration Guide—using ISM
Bypass kit for Gigabit ports, described in Cabling the failover interconnection
ports section.
Four 10 Gigabit small form-factor pluggable (XFP) 10 Gigabit Interconnect ports
you to connect the primary sensor to the secondary sensor.
The Interconnect interfaces of the M-8000 work in stealth mode, meaning they
have no IP address and are not visible on the monitored segment.
One RJ-45 Response port on M-8000 S
mode, enables you to inject response packets back through a switch or router.
Fourteen RJ-11 Fail-Open Control ports,
kit. The ports are marked X1, X2, X3, X4, X5, X6, X7, X8, X9, X10, X11, X12,
X13, and X14 and are used in conjunction with ports 1A/1B, 2A/2B, 3A/3B,
4A/4B, 5A/5B, 6A/6B, 7A/7B, 8A/8B, 9A/9B, 10A/10B, 11A/11B, 12A/12B,
13A/13B, and 14A/14B, respectively.
Two External Compact Flash ports.
control optional fail-open hardware as described in the
Bypass Kit Quick Guide . It is also used in troubleshooting situations where the
sensor's internal flash is corrupted and you must reboot the sensor via the
external compact flash. For more information, see the on-line KnowledgeBase at
https://mysupport.mcafee.com.
Two Primary Power Supplies—A
sensor. The supply uses a standard IEC port (IEC320-C13). The supply uses a
standard IEC port (IEC320-C13). McAfee provides a standard, 2m NEMA 5-15P
(US) power cable (3 wire). International customers must procure a country-
appropriate power cable.
which is used for communication
or the hardware Gigabit Fail-Open
, which, when you're operating in SPAN or TAP
designed for use the Optical Fail-Open Bypass
This port is used for two purposes. It is used to
(included). Power supply A is included with each
4
Overview
M-8000 physical description
, which enable you to
, which enable
, which enable
Gigabit Optical Fail-Open