1. Manuals
  2. Brands
  3. Symantec Manuals
  4. Firewall
  5. 10521146 - Network Security 7120
  6. User manual

Symantec 10521146 - Network Security 7120 User Manual

In-line bypass unit
Hide thumbs Also See for 10521146 - Network Security 7120:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Administration Manual
Symantec™ Network Security
In-line Bypass Unit User Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 10521146 - Network Security 7120 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Symantec 10521146 - Network Security 7120

Summary of Contents for Symantec 10521146 - Network Security 7120

  • Page 1 Symantec™ Network Security In-line Bypass Unit User Guide...
  • Page 2 Symantec reserves the right to make changes without prior notice. No part of this publication may be copied without the express written permission of Symantec Corporation, 20330 Stevens Creek Blvd., Cupertino, CA 95014. Trademarks. Symantec and the Symantec logo are U.S. registered trademarks of Symantec Corporation.
  • Page 3 Technical support As part of Symantec Security Response, the Symantec global Technical Support group maintains support centers throughout the world. The Technical Support group’s primary role is to respond to specific questions on product feature/function, installation, and configuration, as well as to author content for our Web-accessible Knowledge Base.
  • Page 4 Recent software configuration changes and/or network changes ■ Customer Service To contact Enterprise Customer Service online, go to www.symantec.com, select the appropriate Global Site for your country, then choose Service and Support. Customer Service is available to assist with the following types of issues: Questions regarding product licensing or serialization ■...
  • Page 5 In-line AGREEMENT. READ THE TERMS AND CONDITIONS OF THIS Bypass Unit, Symantec will refund to You the F.O.B. price paid WARRANTY AGREEMENT CAREFULLY BEFORE USING THE by You for the defective In-line Bypass Unit. Defective In-line IN-LINE BYPASS UNIT.
  • Page 6 Should You have any questions concerning this Agreement, or if You desire to contact Symantec for any reason, please write: (i) Symantec Customer Service, 555 International Way, Springfield, OR 97477, USA, or (ii) Symantec Customer Service Center, PO BOX 5689, Dublin 15, Ireland.

  • Page 7: Table Of Contents

    Contents About the Symantec Network Security In-line Bypass unit ......9 Verifying the contents of the box ..............10 In-line Bypass unit features ................10 The 2 In-line Bypass unit ................11 The 4 In-line Bypass unit ................11 USB connection .................... 12 Port groups ....................
  • Page 8 8 Contents...

  • Page 9: About The Symantec Network Security In-Line Bypass Unit

    4 In-line Bypass unit. This user guide contains instructions for both. The bypass unit provides fail-open capability for in-line installations of the Symantec Network Security 7100 Series appliance. Fail-open is a configuration that allows network traffic to continue even if the 7100 Series has a hardware or software failure that affects one or more of its in-line interface pairs.

  • Page 10: Verifying The Contents Of The Box

    ■ Two L-brackets ■ Symantec Network Security In-line Bypass Unit User Guide ■ Note: Cables are provided to connect the In-line Bypass unit to your 7100 Series appliance. However, you will need to provide cables to connect the bypass unit to your network devices.

  • Page 11: The 2 In-Line Bypass Unit

    The 2 In-line Bypass unit has two port groups. It can provide fail-open capability for up to two in-line connections. Note: The 2 In-line Bypass unit is supported only for use with the Symantec Network Security 7120 appliance. Figure 1-1 shows the rear panel of the 2 In-line Bypass unit.

  • Page 12: Usb Connection

    In-line Bypass unit features Note: The 4 In-line Bypass unit is supported only for use with the Symantec Network Security 7160 appliance. Figure 1-2 shows the rear panel of the 4 In-line Bypass unit. Figure 1-2 4 In-line Bypass unit...
  • Page 13 In-line Bypass unit features Each of the four ports has specific cabling requirements. The Net A and App A ports in the port group, along with the even-numbered port of the 7100 Series in-line pair, handle traffic on one side of the network connection. The Net B and App B ports in the port group and the odd-numbered port of the appliance in-line pair handle traffic on the other side of the network connection.

  • Page 14: Matching Port Groups To In-Line Pairs

    In-line Bypass unit features Figure 1-4 Connected port group Network Network 2 In-line Bypass unit Port group 0 Port group 1 7120 appliance 0 - Port 0 (eth0) 4 - Net A 1 - Port 1 (eth1) 5 - App A 2 - Port 2 (eth2) 6 - App B 3 - Port 3 (eth3)

  • Page 15: Online And Bypass Modes

    When a sensor process starts on an in-line pair connected to the bypass unit, the corresponding port group changes to online mode. See the Symantec Network Security 7100 Series Implementation Guide for information about starting a sensor on an in-line pair.

  • Page 16: Auto-Negotiation On Bypass Unit Interfaces

    In-line Bypass unit features mode, in which the two sides of the network are directly connected and the 7100 Series is bypassed. Auto-negotiation on bypass unit interfaces The interface link parameters, including speed and duplex mode, should be auto-negotiated between Net A and App A, and Net B and App B. You should not force the link speed or duplex mode to a specific setting on network devices that connect to Net A or Net B.

  • Page 17: Rear Panel Leds On The Bypass Unit

    In-line Bypass unit features Table 1-3 describes the LEDs shown in the diagram. Table 1-3 Bypass unit front panel LED descriptions Diagram LED label LED name Description location ONLINE Port group 0 The P0 LED glows when port group 0 is operating in online mode.

  • Page 18: Setup Overview

    Setup overview Figure 1-6 Bypass unit rear panel LEDs Table 1-4 describes the LEDs shown in the diagram. Table 1-4 Bypass unit rear panel LED descriptions LED label LED name LED color Description Link test Green The LT LED glows green to indicate an active link signal on the port.

  • Page 19: Mounting Onto A Rack

    Boot up the 7100 Series appliance. Start a sensor on each appliance in-line pair that is connected to the bypass unit. See the Symantec Network Security 7100 Series Implementation Guide. Mounting onto a rack The bypass unit rack mounting hardware includes two L-brackets. The In-line Bypass unit includes four screws that are threaded into the cover sides.

  • Page 20: Cabling The 2 In-Line Bypass Unit To The 7120

    Cabling the 2 In-line Bypass unit to the 7120 Using the screws supplied with your rack, securely attach the L-brackets to the posts on both sides of the bypass unit, as shown in the following diagram. Cabling the 2 In-line Bypass unit to the 7120 You must connect the USB port, and you can connect one or both port groups from the 2 In-line Bypass unit to the 7120.

  • Page 21: Cabling Port Group 0 To The 7120

    Cabling the 2 In-line Bypass unit to the 7120 Figure 1-7 Cabling to the 7120 Network 1 Network 1 AppA AppB Net A Net B 2 In-line Bypass unit Port group 0 Port group 1 Mgmt USB Network 2 Network 2 7120 appliance 0 - Port 0 4 - USB ports...

  • Page 22: Cabling Port Group 1 To The 7120

    Cabling the 2 In-line Bypass unit to the 7120 To cable port group 0 to the 7120 Shut down and disconnect the power from the 7120 appliance and the In-line Bypass unit. On the bypass unit, connect Net A of port group 0 to one side of the network. Connect App A of port group 0 to port 0 on the 7120.

  • Page 23: Cabling The 4 In-Line Bypass Unit To The 7160

    Cabling the 4 In-line Bypass unit to the 7160 Warning: To avoid a shock hazard, the power cords must be connected to properly wired, grounded outlets. Do not use an extension cord. Cabling the 4 In-line Bypass unit to the 7160 You must connect the USB port, and you can connect one to four port groups from the 4 In-line Bypass unit to the 7160.
  • Page 24 Cabling the 4 In-line Bypass unit to the 7160 Figure 1-8 Cabling to the 7160 Networks W, X, Y, Z 4 In-line Bypass unit Port Port group 0 group 2 Port Port group 1 group 3 7160 0 - Port 0 10 - RST2 1 - Port 1 11 - Management port...

  • Page 25: Cabling Port Group 0 To The 7160

    Cabling the 4 In-line Bypass unit to the 7160 Note: Follow the cabling instructions carefully to match each in-line interface pair with its associated port group on the bypass unit. Connect in-line pair 0 (ports 0/1 on the appliance) to port group 0 on the bypass unit. Connect in-line pair 1 on the 7160 to port group 1 on the bypass unit.

  • Page 26: Cabling Port Group 3 To The 7160

    Cabling the 4 In-line Bypass unit to the 7160 To cable port group 2 to the 7160 Shut down and disconnect the power from the 7160 appliance and the In-line Bypass unit. On the bypass unit, connect Net A of port group 2 to one side of the network. Connect App A of port group 2 to port 4 on the 7160.

  • Page 27: Product Specifications

    Product specifications Plug the second power cord into the other socket on the bypass unit and into a second power source. Warning: To avoid a shock hazard, the power cords must be connected to properly wired, grounded outlets. Do not use an extension cord. Product specifications Table 1-5 provides the physical, environmental, and power specifications for the...

  • Page 28: Product Certifications

    General Requirements (to reduce risk of fire, shock, or injury) ■ Remote Power Feeding ■ Safety instructions For your protection, read and follow all safety instructions for the Symantec Network Security In-line Bypass unit. Instructions ■ Read safety and operating instructions before installing and operating the bypass unit.
  • Page 29 Do not use an extension cord. Warning: To reduce the risk of electrical shock, do not disassemble the bypass unit. Return it to Symantec if servicing is required. Opening or removing covers may expose you to dangerous voltage or other risks.
  • Page 30 Safety instructions...

This manual is also suitable for:

Network security

Table of Contents