M-1250/M-1450 Sensor Product Guide Revision B McAfee® Network Security Platform
COPYRIGHT Copyright © 2014 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766, www.intelsecurity.com TRADEMARK ATTRIBUTIONS Intel and the Intel logo are registered trademarks of the Intel Corporation in the US and/or other countries.
Contents 1 2 Preface 5 About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What's in this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Find product documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Index 4 McAfee® Network Security Platform 29 M-1250/M-1450 Sensor Product Guide
Preface This guide provides the information you need to configure, use, and maintain your McAfee product. Contents About this guide Find product documentation About this guide This information describes the guide's target audience, the typographical conventions and icons used in this guide, and how the guide is organized. Audience McAfee documentation is carefully researched and written for the target audience.
Preface Find product documentation Tip: Suggestions and recommendations. Important/Caution: Valuable advice to protect your computer system, software installation, network, business, or data. Warning: Critical advice to prevent bodily harm when using a hardware product. What's in this guide This guide contains information necessary to setup your M-1250/M-1450 Sensor model. This information includes guiding you through preconfiguring, cabling, and troubleshooting your Sensor.
1 Introducing Network Security Sensors This section describes the McAfee® Network Security Sensors at a high-level and also describes the McAfee® M-1250/M-1450 Network Security Sensor (Sensor) in detail. Sensors are high-performance, scalable, and flexible content processing appliances built for the accurate detection and prevention of intrusions, misuse, distributed denial of service (DDoS) attacks, and network access control(NAC) of hosts.
1 Introducing Network Security Sensors Physical description of the M-1250/M-1450 Sensor Network Access Control of hosts is regulating access to network resources based on host System Health level (Standard/ DHCP NAC), identity of the user logged into the host (IBAC), or both. The Sensor also provides the Hybrid NAC functionality where a host is first subjected to DHCP-NAC and then Standard NAC at different ports of the same Sensor.
Introducing Network Security Sensors Physical description of the M-1250/M-1450 Sensor 1 3 One RS-232C Console port, which is used to set up and configure the Sensor. 4 One RS-232C Auxiliary port, which may be used to dial in remotely to set up and configure the Sensor. 5 Eight 10/100/1000 Monitoring ports, which enable you to monitor eight SPAN ports or four full-duplex tapped segments or four segments in-line.
1 Introducing Network Security Sensors Physical description of the M-1250/M-1450 Sensor LED Status Description Fan Green Fan is operating. Amber The fan has failed. Management Port Speed Management Port Link Response Port Speed Green The port speed is 1000 Mbps. Amber The port speed is 100 Mbps. Off The port speed is 10 Mbps. Green The link is connected. Off The link is disconnected. Green The port speed is 1000 Mbps. Amber The port speed is 100 Mbps.
2 Before you install This chapter describes the best practices for deployment of Sensors on your network. Topics include system requirements, site planning, safety considerations for handling the Sensor, and usage restrictions that apply to the Sensor. Contents Usage restrictions Safety measures Contents of the Sensor box Unpack the Sensor Usage restrictions The following restrictions apply to the use and operation of a Sensor: • You may not remove the outer shell of the Sensor.
2 Before you install Contents of the Sensor box • Only trained and qualified personnel should be allowed to install, replace, or service this equipment. • Before working on an equipment that is connected to power lines, remove jewelry (including rings, necklaces, and watches). Metal objects will heat up when connected to power and ground, and can cause serious burns or weld the metal object to the terminals. • This equipment is intended to be grounded.
Before you install Unpack the Sensor 5 2 Verify you have received all parts. These parts are listed on the packing list and in Contents of the Sensor box. 6 Remove the Slide Rail Kit. 7 Pull out the packing material surrounding the Sensor. 8 Remove the Sensor from the anti-static bag. 9 Save the box and packing materials for later use in case you need to move or ship the Sensor. If any of the contents from the preceding list are missing or damaged, contact McAfee support.
2 Before you install Unpack the Sensor 14 McAfee® Network Security Platform M-1250/M-1450 Sensor Product Guide
3 Setting up the Sensor This chapter describes the process of setting up a Sensor to prepare it for configuration. Contents Setup overview Position the Sensor Cable the Sensor Power on the Sensor Setup overview Setting up a Sensor involves the following steps: Task 1 Positioning the Sensor. 2 Attaching power, network, and monitoring cables. 3 Powering on the Sensor. Once you have set up and powered on the Sensor, you can proceed with the configuration.
3 Setting up the Sensor Position the Sensor To mount the Sensor on a rack, you will attach two mounting ears to the Sensor, then mount the ears to the rack. The Sensor ears attach to either the front or the middle of the chassis. The illustrations in the sub-sections show the M-1250/M-1450 Sensor. Install the ears on the chassis Before you begin Before you install the ears on the chassis, make sure that power is OFF. Remove the power cable and all network interface cables from the Sensor.
Setting up the Sensor Cable the Sensor 3 Mount the Sensor by securing the ears to two posts or mounting strips in the rack. Because the ears bear the weight of the entire Sensor, be sure to fasten the ears securely to the rack. Figure 3-2 Sensor mounted on a rack Cable the Sensor Follow the steps outlined in Attaching Cables to the Sensor to connect cables to the monitoring, response, console, and management ports on your Sensor.
3 Setting up the Sensor Power on the Sensor 18 McAfee® Network Security Platform M-1250/M-1450 Sensor Product Guide
4 Attaching cables to the Sensor Follow the steps outlined in this chapter to connect cables to the various ports on your M-1250/ M-1450 Network Security Sensor. Note the following cabling specifications for the Sensor: • Category 5 Enhanced (Cat 5e) cable is required for transmission speeds up to 1 Gigabit per second (Gigabit Ethernet). • For Ethernet networks running at 10 or 100 Mbps, Category 5 (Cat 5) OR Cat 5e cable can be used.
4 Attaching cables to the Sensor Cable the Auxiliary port 2 Connect the other end of the Console port cable directly to a COM port of the PC or terminal server you will use to configure the Sensor, for example, a PC running correctly configured Windows HyperTerminal software. You must connect directly to the console for initial configuration.
Attaching cables to the Sensor Cable the Management port 2 4 Connect the other end of the cable to the network device such as a hub, switch, or a router, through which you want to respond to attacks. Cable the Management port The Management port is used for communication with the Manager server. Task 1 Plug a Cat-5e Ethernet cable into the Management port. This port is labeled as Mgmt on the front panel of the Sensor.
4 Attaching cables to the Sensor Cable the Sensor to monitor in in-line mode Default Monitoring port speed settings Make sure that the switch/router ports connected to the Sensor monitoring ports match the Sensor configuration.
Attaching cables to the Sensor Cable the Sensor to monitor in SPAN or hub mode 3 4 Connect the other end of each cable to the network devices that you want to monitor. For example, if you plan to monitor traffic between a switch and a router, connect the cable connected to 1A to the switch and the one connected to 1B to the router.
4 Attaching cables to the Sensor About connecting Sensors for fail-over Task 1 Plug a Cat 5/Cat 5e crossover cable into port 4A of the active Sensor. 2 Connect the other end of the cable to the port 4A of the standby Sensor.
A M-1250/M-1450 Sensor specifications The following table lists the specifications of the M-1250/M-1450 Sensor: Sensor Specifications Description Dimensions M-1250/M-1450: • 1RU, rack mountable • 17.37 (W) x 1.75(H) x 13.5(D) Weight M-1250 : 15 lb (6.804 kg) M-1450: 17 lb (7.71 kg) Voltage Range 100-240 VAC Frequency 50/60 Hz Vibration, operating 5 to 200 Hz, 0.
A M-1250/M-1450 Sensor specifications 26 McAfee® Network Security Platform M-1250/M-1450 Sensor Product Guide
B Regulatory, compliance, and safety information The Sensor meets the following standards: Sensor regulatory, safety, and compliance Regulatory: Products with the CE Marking are compliant with the 89/336/EEC and 73/23/EEC directives, which include the safety and EMC standards listed.
B Regulatory, compliance, and safety information Sensor regulatory, safety, and compliance • Radiated Emissions • Conducted Emissions • EN 61000-3-2: 2000 Harmonic Current Emissions • EN 61000-3-3: 1995 + A1: 2001 Voltage Fluctuation/Flicker CISPR/KN22: • Radiated Emissions • Conducted Emissions 28 McAfee® Network Security Platform M-1250/M-1450 Sensor Product Guide
Index A M about this guide 5 auxiliary port 20 management port 21 McAfee ServicePortal, accessing 6 monitoring ports 21 C chasis 16, 17, 19 conventions and icons used in this guide 5 D documentation audience for this guide 5 product-specific, finding 6 typographical conventions and icons 5 F failover ports for M-1250/M-1450 23 front panel LEDs 9, 11, 12, 15, 25 H hot swappable power supply 17 P peer ports 21, 22 ports on M-1250/M-1450 8 R Response port 20 S Safety 27 Sensor front panel 11, 19 Ser
700-2395B00
