Page 1
Stonesoft FW-1030 and FW-1060 Appliance Installation Guide...
Page 2
European Council Regulation (EC) N:o 1334/2000 of 22 June 2000 setting up a Community regime for the control of exports of dual-use items and technology (as amended). Thus, the export of this Stonesoft software in any manner is restricted and requires a license by the relevant authorities.
I n t r o d u c t i o n Thank you for choosing a Stonesoft™ appliance. This guide provides instructions for the initial hardware installation and the maintenance of the FW-1030 and FW-1060 appliances. See Product Documentation (page 4) for information on other available documentation.
I n s t a l l a t i o n P r o c e d u r e Note – You must have a working Management Center on a separate server to bring the appliance(s) operational. See the Stonesoft Management Center Installation Guide.
The following safety information and procedures must be followed whenever working with electronic equipment. However, please be advised that Stonesoft appliances are not end-user serviceable, and you must never open the appliance covers for any reason. Doing so may lead to serious injury and will void any hardware warranty that may be associated with your appliance.
Page 6
Note – Use a UPS (Uninterruptible Power Supply) in critical environments with your Stonesoft appliance. If after a brief power outage your Stonesoft appliance only partially starts up (for example, the power light is on, but the appliance does not connect) turn the appliance off for five seconds and then back on.
Inspect the box the appliance was shipped in and note if it was damaged in any way. If the appliance itself shows damage, file a damage claim with the carrier who delivered it. Confirm that the Stonesoft anti- tamper tape on the appliance is intact.
Fr o n t P a n e l Rack-mounting brackets Power and disk Port indicators activity indicators Note – Standby power is supplied to the system even when the appliance is turned off. The connectors are explained in detail in Connecting the Cables (page 14).
Fixed Ports Activity Link Table 2 Port Indicators Indicator Status Explanation Unlit No link. Activity Amber Link ok. Unlit Speed is 10 Mbps. Link Green Speed is 100 Mbps. Orange Speed is 1 Gbps. Table 3 SFP Port Indicators on FW-1060 SFP Indicator Status Explanation...
R a c k - M o u n t i n g This section provides information on installing the Stonesoft appliance into a rack unit. You can install the appliance into a two-post or a four- post rack unit.
Page 11
Appliance Precautions • Determine the placement of each component in the rack before starting the installation. • Install the heaviest components on the bottom of the rack first, and then work up. • The appliance must be connected to a grounded power outlet. •...
Page 12
Installing the Appliance Into a Four-Post Telco Rack If you are installing the appliance into a four-post Telco-type rack, the rack-mounting brackets on the appliance are in the right position for the installation. You only need to attach the rack-mounting brackets to the rack using four (4) six-millimeter screws and cage nuts.
Page 13
also remove the lifting handle from the bracket by removing the screws that hold the handle to the bracket. Move the rack-mounting bracket to the back of the appliance and re-attach the bracket with three of the screws. It is also recommended to re-attach the three remaining screws back to the front of the appliance.
C o n n e c t i n g t h e C a bl e s Two USB ports Serial port Six or eight Ethernet ports (location and number depends on appliance model) Connecting Network Cables To connect network cables ...
Page 15
To connect cables to SFP ports Insert the SFP transceiver in the port slot until you feel the connector on the transceiver snap into place. The illustration below shows the correct position of inserting the transceiver. SFP transceiver SFP transceiver for for copper cable fiber-optic cable Rubber plug...
Connecting the Appliance to the Power Supply To connect the appliance to the power supply Connect the power cable to the AC power connector on the back of the appliance. Plug the power cord into a grounded, high-quality power strip that offers protection from electrical noise and power surges.
Page 17
Configuring the Engine Automatically The automatic configuration requires that you have a suitable configuration saved on a USB memory stick. See the Firewall/VPN Installation Guide or the Online Help of the Management Client for details. To configure the engine from a USB memory stick Insert the USB stick that contains the configuration saved in your Management Client in one of the USB ports on the appliance.
Page 18
Using the Engine Configuration Wizard You can use the engine configuration wizard with all Management Center and Firewall versions. If you have saved the initial configuration on a USB stick, you can import it in the configuration wizard to reduce typing. ...
Page 19
Highlight the correct layout and press E NTER Tip: Type in the first letter to move forward more quickly in the list of keyboard layouts. Note – If the desired keyboard layout is not available, use the best- matching available layout, or select US_English. ...
Page 20
To set the rest of the OS settings Type in the name of the firewall. Type in the password for the user root. This is the only account for engine command line access. (Optional) Highlight Enable SSH Daemon and press the spacebar on your keyboard to select the option and allow remote access to engine command line using SSH.
Page 21
Configuring the Network Interfaces To map the physical interfaces to interface IDs Type in the Interface IDs to define how physical interfaces are mapped to the Interface IDs you defined in the Firewall element. Highlight the Media column and press E to match the speed/ NTER duplex settings to those used in each network.
Page 22
To activate the initial configuration Highlight Switch Firewall Node to Initial Configuration and press spacebar to activate. Fill in according to your environment. The information must match to what you defined for the Firewall element (Primary Control IP Address). •...
Page 23
(Optional) Fill in the Key fingerprint (also shown when you saved the initial configuration). Filling it in increases the security of the communications. Highlight Finish and press E NTER The engine now tries to make initial Management Server contact. • If you see a “connection refused” error message, ensure that the one-time password is correct and the Management Server IP address is reachable from the node.
M a i n t e n a n c e O p e r a t i o n s Connecting to the Engine Command Line You may need to connect to the engine command line, for example, to undo a software upgrade.
Page 25
Resetting the Appliance to Factory Settings Note – Perform a factory reset only if you have a specific need to do so. Consult Stonesoft Support before performing this operation if you are unsure of whether this operation is necessary or not.
Removing SFP Transceiver FW-1060 SFP appliances have two SFP ports. If necessary, you can remove the SFP transceiver from the SFP ports. Caution – Invisible laser radiation is emitted from the end of fiber- optic cable and from fiber port. Do not stare into the beam and avoid direct exposure to the beam.
Page 27
Stonesoft Appliance Installation Guide This booklet covers the initial installation and configuration tasks specific to your Stonesoft Appliance. For information on how to prepare the Management Center for a new engine installation, see the other available documentation. See inside for fur ther details.
Need help?
Do you have a question about the FW-1030 and is the answer not in the manual?
Questions and answers