Installation guide

McAfee® Network Security Platform 6.0 Configuring the ports on each Sensor
If you choose to fail closed on an Ethernet port pair (not GBICs), the user interface will
remind you to cable the ports with the Network Security Platform dongles.
Note: McAfee
®
Network Security Platform dongles ship with the Sensors.
Potential pitfall
When you configure a failover Pair, you must designate a “Primary” and “Secondary”
Sensor. By design, the configuration of the Primary Sensor is copied to the Secondary
Sensor, overwriting the original configuration on the Secondary.
If you intend to configure both Sensors to fail closed or fail open, you configure the ports
on the Sensor you intend to designate as the primary during the failover Pair creation
process.
If you intend to have one Sensor fail closed and the other fail open, however, you must
revisit the Port Configuration page of one or both Sensors after the failover Pair creation
and make the appropriate changes.
A note on fail open functionality for GE ports
Unlike the Fast Ethernet ports, the GE ports cannot fail open on their own. You must
purchase an optical bypass kit for each port pair you wish to fail open.
If a Sensor is rebooted, hangs, or fails to come up after a power on, the optical bypass kit
takes over and ensures the link remains active. When configured as a failover Pair, this
logic still applies, except in the case in which the Sensor port actually fails. In this case, the
12