McAfee M-3050 Product Manual

McAfee M-3050 Product Manual

Network security platform
Hide thumbs Also See for M-3050:

Advertisement

M-3050/M-4050 Sensor Product Guide
Revision B
McAfee
Network Security Platform
®

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the M-3050 and is the answer not in the manual?

Questions and answers

Summary of Contents for McAfee M-3050

  • Page 1 M-3050/M-4050 Sensor Product Guide Revision B McAfee Network Security Platform ®...
  • Page 2: License Agreement

    TRADEMARK ATTRIBUTIONS Intel and the Intel logo are registered trademarks of the Intel Corporation in the US and/or other countries. McAfee and the McAfee logo, McAfee Active Protection, McAfee DeepSAFE, ePolicy Orchestrator, McAfee ePO, McAfee EMM, McAfee Evader, Foundscore, Foundstone, Global Threat Intelligence, McAfee LiveSafe, Policy Lab, McAfee QuickClean, Safe Eyes, McAfee SECURE, McAfee Shredder, SiteAdvisor, McAfee Stinger, McAfee TechMaster, McAfee Total Protection, TrustedSource, VirusScan are registered trademarks or trademarks of McAfee, Inc.
  • Page 3: Table Of Contents

    Network topology considerations ......8 M-3050/M-4050 key features ......
  • Page 4 How does the fail-open function work ......Troubleshooting the Sensor Sensor technical specifications Regulatory, compliance, and safety information Index McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 5: Preface

    Preface This guide provides the information you need to configure, use, and maintain your McAfee product. Contents About this guide Find product documentation About this guide This information describes the guide's target audience, the typographical conventions and icons used in this guide, and how the guide is organized.
  • Page 6: What's In This Guide

    Warning: Critical advice to prevent bodily harm when using a hardware product. What's in this guide This guide contains information necessary to setup your M-3050/M-4050 Sensor model. This information includes guiding you through preconfiguring, cabling, and troubleshooting your Sensor. Find product documentation McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting.
  • Page 7: Overview

    When deployed at key network access points, the Sensor provides real-time traffic monitoring to detect malicious activity and respond to the malicious activity as configured by the administrator. After you deploy a Sensor successfully, you configure and manage it using the McAfee ® Network Security Manager (Manager).
  • Page 8: Functions Of A Sensor

    Network topology considerations Deployment of a Sensor requires knowledge of your network to help determine the level of configuration and the number of installed Sensors. You also need to determine the number of McAfee ® ePolicy Orchestrator (McAfee ePO) /McAfee NAC servers required to protect your network. The Sensor is purpose-built for the monitoring of traffic across one or more network segments.
  • Page 9: M-3050/M-4050 Key Features

    High port-density and virtualization provides a highly scalable solution, while Network Security Platform protects against Web and eCommerce mail server exploits. Figure 1-1 A sample Network Security Platform deployment M-3050/M-4050 key features The M-3050/M-4050 Sensor includes the following features: M-3050 M-4050 4 -10-GbE XFP...
  • Page 10: M-3050/M-4050 Physical Description

    Additionally, it supports four 1 Gigabit full-duplex Ethernet segments or eight 1 Gigabit SPAN ports transmitting aggregated traffic. Ports The M-3050/M-4050 is a 2RU (2 rack unit) and is equipped with the following components: Figure 1-2 An M-3050/M-4050 Sensor Item...
  • Page 11: Front And Back Panel Leds

    10 One RJ-45 10/100/1000 Management port, which is used for communication with the Manager server. You can assign an IP address to this port during installation. The M-3050/M-4050 does not have internal taps; you must use it with a third-party external tap to run it in tap mode.
  • Page 12 The Sensor is not providing power to the fail-open kit. Fail-Open Control Port Err Amber The fail-open control cable is disconnected or the Sensor is operating in bypass mode. There is no error. McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 13 Overview M-3050/M-4050 physical description The three back panel LEDs provide information regarding the Sensor fans. Status Description Fan LED The fan is functioning properly. Amber The fan has malfunctioned. McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 14 Overview M-3050/M-4050 physical description McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 15: Before You Install

    • The Sensor appliance is not a general purpose workstation. • McAfee prohibits the use of the Sensor appliance for anything other than operating Network Security Platform. • McAfee prohibits the modification or installation of any hardware or software on the Sensor appliance that is not part of the normal operation of Network Security Platform.
  • Page 16: About Fiber-Optic Ports

    • Only FDA registered, EN 60825-1 and IEC 60825-1 certified Class 1 SFP laser transceivers are acceptable for use with the Sensor. McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 17: Contents Of The Box

    • One power supply. • Two CD-ROMs containing the Sensor software and on-line documentation. • Power cords. McAfee provides a standard and international power cables. • One set of rack mounting rails. • One set of rack mounting ears. •...
  • Page 18 Before you install Unpack the Sensor McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 19: Setting Up The Sensor

    Sensor as described in the subsequent sections of this guide. Tasks • Install the rails and ears on the chassis and rack on page 20 McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 20: Install The Rails And Ears On The Chassis And Rack

    Before you mount the Sensor on the rack, make sure that the power is off. Remove the power cable and all network interface cables from the Sensor. Due to the weight of the appliance, McAfee recommends that two people place the chassis into the rail cabinet.
  • Page 21: Redundant Power Supply

    Setting up the Sensor Redundant power supply Because of the weight of the appliance, McAfee recommends that two people remove the chassis from the rail cabinet. When removing the chassis from the rack, pull the chassis forward until you hear the innermost rails snap in place.
  • Page 22: Remove The Power Supply

    Slide in the power supply until it makes contact with the backplane, then push firmly to mate the connectors solidly with the backplane. For true redundant operation with the optional redundant power supply, McAfee recommends that you plug each supply into a different power circuit. For optimal protection, use uninterruptable power sources.
  • Page 23: Small Form-Factor Pluggable Modules

    GBIC interfaces. To ensure compatibility, McAfee supports only those SFP and XFP modules purchased through McAfee or from a McAfee-approved vendor. For a list of approved vendors, locate the relevant KnowledgeBase article at http://mysupport.mcafee.com/Eservice/. Click Search the KnowledgeBase.
  • Page 24: Xfp Modules

    Grip the sides of the module with your thumb and fore-finger and insert the module into the module socket. Modules are keyed to prevent incorrect insertion. Figure 3-6 XFP module in a Monitoring port Figure 3-7 SFP module in a Monitoring port McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 25: Remove A Module

    The Sensor has no power switch. It powers on as soon as one of its power cable is connected to a power source. Power off the Sensor McAfee recommends that you use the shutdown CLI command to halt the Sensor before powering it down. For more information on CLI commands, see McAfee Network Security Platform CLI Guide. McAfee...
  • Page 26 Setting up the Sensor Power off the Sensor McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 27: Attaching Cables To The Sensor

    Cable the Console port The Console port is used to set up and configure the Sensor. Task For console connections, plug the DB9 Console cable supplied by McAfee into the Console port. This port is labeled Console on the Sensor front panel. McAfee...
  • Page 28: Cable The Auxiliary Port

    This port is labeled Rx on the Sensor front panel. Connect the other end of the cable to the network device such as a hub, switch, or a router, through which you want to respond to attacks. McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 29: About The Fail-Open Port

    Connect the other end of the cable to the network device, such as a hub, switch, or a router that in turn connects to the Manager server. To isolate and protect your management traffic, McAfee strongly recommends that you use a separate, dedicated management subnet to interconnect the Sensors and the Manager.
  • Page 30: Default Monitoring Port Speed Settings

    Sensor to fail-open. For instructions, see the subsequent sections of this chapter. This section provides the steps to connect the Sensor's Gigabit Ethernet ports so they fail-close. McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 31: Connect The Cables For Tap Mode

    Fail-over requires connecting two identical M-3050/M-4050 Sensors running on the same software version using an interconnection cable or cables. Gigabit ports 2A is the interconnection port on the M-3050/M-4050. A failover cable is the only additional hardware required to support fail-over communication between two M-3050/M-4050 Sensors.
  • Page 32: How Does The Fail-Open Function Work

    While the Sensor is operating, the switch is "on" and routes all traffic directly through the Sensor. When the Sensor fails, the switch automatically shifts to a bypass state; in-line traffic McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 33 You can find the installation and troubleshooting instructions for the kit in the guide that accompanies the kit. For example, for more information on the Optical kit, see the standard Gigabit Optical Fail-Open Bypass Kit Guide. See also Ports on page 10 McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 34 Attaching Cables to the Sensor How does the fail-open function work McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 35: Troubleshooting The Sensor

    The control cable has been Check the control cable and make sure it is absent" appears in the disconnected. properly connected to both the Sensor and Manager Status page. the bypass switch. McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 36 Troubleshooting the Sensor McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 37: Sensor Technical Specifications

    Random: 2.5 to 200 Hz @ 1.05 g Power requirements 450W Temperature Ambient Temperature Range Operating (Non-condensing) 0C(32F) to 35C(95F) Non-operating -40C(-40F) to 70C(158F) Relative Humidity (Non-condensing) Operating 5%-90% non-condensing Non-operating 5% to 95% non-condensing Sensor Specifics McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 38 Sensor technical specifications Sensor Specifics Description System Heat Dissipation AC (max): 535W, 1825 BTU/hr DC (max): To Be determined Airflow 200 lfm (1 m/s) Altitude Sealevel to 10,000 ft (3050m) McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 39: Regulatory, Compliance, And Safety Information

    VCCI V-1/93.11, V-2/97.04, V-4/97 Class A AS/NZS CISPR22: 2004 Class A CNS 13438: May 1997 SS IEC CISPR22: 1993, Singapore IDA Class A EN 55024: 1998 + A1:2001 + A2: 2003 - Emissions: McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 40 Sensor regulatory, safety, and compliance • Radiated Emissions • Conducted Emissions • EN 61000-3-2: 2000 Harmonic Current Emissions • EN 61000-3-3: 1995 + A1: 2001 Voltage Fluctuation/Flicker CISPR/KN22: • Radiated Emissions • Conducted Emissions McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 41: Index

    SFP module specifications front panel Technical Support, finding product information Troubleshooting hot swappable power supply XFP module Management port McAfee Network Security Platform M-3050/M-4050 Sensor Product Guide ®...
  • Page 42 700-3589B00...

This manual is also suitable for:

M-4050

Table of Contents