Symantec SIEM 9700 Series Appliances Hardware Installation Guide

Transcription

1 Symantec SIEM 9700 Series Appliances Hardware Installation Guide

2 Symantec SIEM 9700 Series Appliances Hardware Installation Guide The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Documentation version: 1.0 Legal Notice Copyright 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This Symantec product may contain third party software for which Symantec is required to provide attribution to the third party ( Third Party Programs ). Some of the Third Party Programs are available under open source or free software licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those open source or free software licenses. Please see the Third Party Legal Notice Appendix to this Documentation or TPIP ReadMe File accompanying this Symantec product for more information on the Third Party Programs. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

3 Symantec Corporation 350 Ellis Street Mountain View, CA

4 Technical Support Contacting Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our Web site at the following URL: All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Customers with a current support agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level

5 Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Licensing and registration Customer service Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: Customer service information is available at the following URL: Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs, DVDs, or manuals

6 Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America

7 Contents Technical Support... 4 Chapter 1 Introduction... 9 About SIEM 9700 Series Appliances... 9 SIEM 9700 Series appliance front and rear views Dimensions Panels, slots, and ports SIEM 9700 Series appliance rear panel - details SIEM 9700 Series appliance control panel Chapter 2 Safety Safety overview Symbol conventions Identifier conventions Electrical safety High voltage precautions High voltage tools Power cable Electrical storms Short-Circuit protection Combustible gas Batteries Lasers Personal injuries Device damage User of optical fibre Cleaning optical connectors and ports Replacing optical fibres Hot line work Power on/off Troubleshooting Additional safety precautions Lifting heavy objects Sharp objects Plugging and unplugging boards... 26

8 8 Contents Binding signal cables Chapter 3 Installation requirements Environmental requirements Power supply requirements Power values Power cable and power socket Electrical safety Heat dissipation Heat dissipation guidelines Air flow Installation checklist Chapter 4 Unpacking and checking the devices Checking before unpacking devices Procedure Chapter 5 Hardware installation About hardware installation Installation preparation Learning the product Learning safety precautions Checking installation requirements Preparing materials Unpacking and checking the devices Assuring rack readiness Chapter 6 Installing hardware into racks Installing the SIEM 9700 Series appliance guide rails Installing the SIEM 9700 Series appliance into a rack Chapter 7 Powering on the Symantec SIEM 9700 Series Appliances Check before powering on Powering on the SIEM 9700 Series appliance On/Off switch Powering off the SIEM 9700 Series appliance... 46

9 Chapter 1 Introduction This chapter includes the following topics: About SIEM 9700 Series Appliances SIEM 9700 Series appliance front and rear views Dimensions Panels, slots, and ports SIEM 9700 Series appliance rear panel - details SIEM 9700 Series appliance control panel About SIEM 9700 Series Appliances Symantec SIEM 9700 Series Appliances are scalable Security Information and Event Management appliances, offering assured performance with Symantec's Security Information Manager software. SIEM 9700 Series is comprised of three models; the 9750, 9751, and Each provide features such as 3.9TB of redundant event storage, Enterprise connectivity via 8GB Fibre Channel (on the 9751 and 9752) and robust, dedicated out-of-band remote management designed to enhance Symantec s already industry-leading ease-of-use and accelerate time-to-value Series physical appliances can also be combined seamlessly with virtual appliances ensuring full interoperability with the technology platforms of the modern Enterprise. The differences in the SIEM 9700 Series appliance models are as follows: SIEM contains no FC HBA card. SIEM contains a 2-Port 8 Gb FC HBA card. SIEM contains a 4-Port 8 Gb FC HBA card.

10 10 Introduction SIEM 9700 Series appliance front and rear views The SIEM 9700 Series appliance enclosure is 2U high. This device fits into a standard 19 rack. See SIEM 9700 Series appliance front and rear views on page 10. See Dimensions on page 10. See Panels, slots, and ports on page 11. See SIEM 9700 Series appliance rear panel - details on page 12. See SIEM 9700 Series appliance control panel on page 14. SIEM 9700 Series appliance front and rear views The following figures describe SIEM 9700 Series appliance front and rear views. Figure 1-1 SIEM 9700 Series appliance front Figure 1-2 SIEM 9750 Appliance rear Dimensions See About SIEM 9700 Series Appliances on page 9. This section describes SIEM 9700 Series appliance dimensions. The following list describes dimensions of the SIEM 9700 Series appliance: Height: 8.7 cm (3.5 ) Width: 43.0 cm (16.9 ) Depth: 70.4 cm (27.8 ) Weight without drives: 29.5 Kg (65 lbs)

11 Introduction Panels, slots, and ports 11 Weight with drives: 32.2 Kg (71 lbs) approximate The installation height (the space occupied by a SIEM 9700 Series appliance in a rack cabinet) is 2U (1U = 44.5 cm). The appliance can be installed in a rack cabinet that is 48 cm (19 inches) wide and 100 cm deep (or deeper). See About SIEM 9700 Series Appliances on page 9. Panels, slots, and ports This section describes the front and rear panels, ports, and indicators of the SIEM 9700 Series appliance. Figure 1-3 SIEM 9700 Series appliance front panel - details Table 1-1 Letter A B C Description Disk modules (qty 8) for 2.5" 600 GB hard disk drive Disk module handle (sty 8) Control panel Note: Disk slots are labeled 0 through 7, from left to right. Slot 7 is the hot spare disk. Disks in the other slots are data disks that form a RAID 5 group.

12 12 Introduction SIEM 9700 Series appliance rear panel - details Figure 1-4 SIEM 9700 Series appliance disk drive modules See About SIEM 9700 Series Appliances on page 9. SIEM 9700 Series appliance rear panel - details This section describes SIEM 9700 Series appliance rear panel - details. Figure 1-5 SIEM 9700 Series appliance rear panel - details Table 1-2 Letter A B C D E SIEM 9700 Series appliance rear panel description Description Upper Power Supply Module Upper Power Receptacle Lower Power Receptacle Lower Power Supply Module Remote Management Module NIC

13 Introduction SIEM 9700 Series appliance rear panel - details 13 Table 1-2 Letter F G H and I J K L Figure 1-6 SIEM 9700 Series appliance rear panel description (continued) Description NIC2 (eth1) 100 Gbps Ethernet port NIC1 (eth0) 100 Gbps Ethernet port USB ports DB-9 Serial B Connector VGA Video RJ-45 Serial A Connector SIEM 9751 with 2-port 8 Gb FC HBA Figure port 8 Gb FC HBA used by SIEM 9752 Table 1-3 Letter A Descriptions for the FC HBA Details LEDs Each port on the FC HBA card has one set of LEDs. Three LEDs labeled 8, 4 and 2 indicate the rate of data transfer (8-Gbit/s, 4-Gbit/s, or 2-Gbit/s).

14 14 Introduction SIEM 9700 Series appliance control panel Table 1-3 Letter B Descriptions for the FC HBA (continued) Details Connectors Dual 8-Gbps Fibre Channel (FC) Connect using SFP+ with LC-style connector port cables See About SIEM 9700 Series Appliances on page 9. SIEM 9700 Series appliance control panel This section provides a physical view and technical specifications for the control panel in the upper right corner of front panel of the SIEM 9700 Series appliance. Figure 1-8 SIEM 9700 Series appliance control panel Table 1-4 Letter A LED function LED function Hard Disk Activity Random flashing green light indicates hard disk drive activity (SAS). No light indicates no hard disk drive activity. B NIC 1 Activity Continuous green light indicates a link between the system and the network to which it is connected. Flashing green light indicates network activity.

15 Introduction SIEM 9700 Series appliance control panel 15 Table 1-4 Letter C LED function (continued) LED function NIC 2 Activity Continuous green light indicates a link between the system and the network to which it is connected. Flashing green light indicates network activity. D System Status Solid amber indicates a critical or non-recoverable condition. Solid green indicates normal operation. Flashing green indicates degraded performance. Flashing amber indicates a non-critical condition. No light indicates POST is running or the system is off. E Power/Sleep Continuous green light indicates the system has power applied to it or the system is S0 state. Flashing green indicates the system is in sleep or ACPI S1 state. No light indicates the power is off or the system is in ACPI S4 or S5 state. F System identification Solid blue indicates system identification is active. No light indicates system identification is not activated. See About SIEM 9700 Series Appliances on page 9.

16 16 Introduction SIEM 9700 Series appliance control panel

17 Chapter 2 Safety This chapter includes the following topics: Safety overview Symbol conventions Identifier conventions Electrical safety Combustible gas Batteries Lasers User of optical fibre Hot line work Additional safety precautions Safety overview Before performing any installation or maintenance operation, learn the safety regulations of the site. Read the safety precautions in this document for correct operating methods to ensure safety of persons and devices. To prevent the risk of accidents, carefully read all operation instructions and precautions in this manual before performing any operation(s). The Caution, Warning, and Danger statements in this document do not cover all possible safety

18 18 Safety Symbol conventions Symbol conventions precautions that must be followed. Only specific supplements to standard safety precautions are provided. Personnel responsible for installing and maintaining Symantec products are required to understand the basics of standard electronic device safety practices. Training and qualification are required to learn the proper operating methods. See Symbol conventions on page 18. See Identifier conventions on page 18. Warning symbols remind you of safety precautions to be followed during installation and maintenance operations. Table 2-1 Warning symbols Symbol Description Indicates a hazard with a high level of risk. If the hazard is not avoided, it could result in death or serious injury. Indicates a hazard with a medium or low level of risk. If the hazard is not avoided, it could result in minor or moderate injury. Indicates a potentially hazardous situation. If the situation is not avoided, it could result in equipment damage, data loss, performance degradation, or unexpected results. See Safety overview on page 17. See Identifier conventions on page 18. Identifier conventions The following table describes warning and safety identifiers.

19 Safety Electrical safety 19 Table 2-2 Identifier Warning and safety identifiers Descriptions Weight warning identifier You must pay attention to the weight of the device before moving it. See Lifting heavy objects on page 25. Warning identifier against inserting and removing system disks You should not insert or remove system disks without following proper procedures. Power warning identifier You must shut off all power sources when turning off a device. See Electrical safety on page 19. Identifier for reading the manual You must read the manual before operating the device. 0, 1, 2, 3, 4, 5, 6, 7 Drive identifier Indicates the ID number of the slot where the disk resides. Electrical safety See Safety overview on page 17. See Symbol conventions on page 18. This section describes electrical safety precautions against personnel and device damage during installation and maintenance of Symantec products. See Symbol conventions on page 18.

20 20 Safety Electrical safety High voltage precautions A high-voltage power supply provides power for the device. Direct or indirect contact (through damp objects) with a high-voltage power supply (including the main power in a building) can result in fatal danger. When installing the AC power supply, follow standard safety regulations. Personnel who install the AC power supply must be qualified to perform high voltage and AC operations. Do not wear conductive objects such as a watch, chain, bracelet, or ring during the operation. Switch off the power supply immediately if you find water in the cabinet or if the rack is damp. Make sure that the device is kept away from water when being operated in a damp environment High voltage tools Improper operation on a high voltage power supply may result in fire and electric shock. To connect and route the AC cables through a certain area, you must follow standard rules and regulations. Personnel must have an up-to-date certificate for operating high voltage and AC power devices. See High voltage tools on page 20. You must use insulated tools when operating on high voltage and AC power. See High voltage precautions on page 20.

21 Safety Electrical safety 21 Power cable Electrical storms Do not install or remove a power cable with the power on. Even minimal contact between the core of the power cable and the conductor might generate an electric arc or spark, which can cause a fire or injury. Wrap bare wires of the power cable with insulating tape before connecting the cable to the power distribution cabinet. Before installing or removing the power cable, turn off the power switch. Before connecting the power cable, make sure that the power cable and label conform to the requirements for the installation. Short-Circuit protection Do not perform operations on high voltage, power supplies and connections, or other conductive materials during the storms which may produce lightening. Be sure that all devices are properly grounded to prevent damage or injury during storms. To prevent short-circuits, do not leave or drop screws or other metallic parts in the chassis. When installing or maintaining a device, follow regulations concerning use and placement of tools to avoid short-circuits of devices caused by metallic tools.

22 22 Safety Combustible gas Combustible gas Never place or operate a device in an environment with combustible or explosive gases, or smoke. Operations to any electronic devices in the presence of combustible gases cause an extreme danger. See Symbol conventions on page 18. Batteries Follow the safety precautions for operating lithium (Li-ion) batteries against personnel and device damage during installation and maintenance of Symantec products. Be sure that you use correct replacement batteries. Otherwise, an explosion may occur. Only use batteries of the same or a similar model as recommended by the vendor. Deal with the waste batteries according to standard instructions. Do not put a lithium battery into a fire. See Symbol conventions on page 18. Lasers When installing and maintaining equipment, observe standard laser safety precautions to prevent personnel injury or device damage. See Symbol conventions on page 18.

23 Safety User of optical fibre 23 Personal injuries Device damage User of optical fibre The laser emitted by the optical interface board is an invisible infrared ray, which may cause permanent damage to human eyes. During device maintenance, direct eye exposure to the laser light must be avoided. To prevent device damage when you operate the device, take the following precautions: Cap any unused optical interfaces and the optical connectors of unused tail fibres. When removing the optical tail fibre that connects to an optical port that is in use, cover the optical port on the device and the optical connector of the tail fibre with dust-proof caps. When performing a hardware loopback test on the optical connector with the tail optical fibre, you must add an attenuator to protect the optical transceiver from the received optical power. When using the Optical Time Domain Effect Reflectometer (OTDR), you must disconnect the optical tail fibre between the peer device and the local device to protect the optical transceiver from the optical power. Do not remove or insert the optical transceiver that connects to the optical fibre without proper safety procedures. The laser beams of the optical interface board or inside the optical fibre may cause damage to the eyes. Do not expose your eyes to the laser beams. The safe use of optical fibres ensures proper running of the device and avoids personnel injuries and device damage. See Symbol conventions on page 18.

24 24 Safety Hot line work Cleaning optical connectors and ports The fibre connectors and optical fibre interfaces of a laser must be cleaned with special cleaning tools and the materials listed below: Special cleaning solvent (Isoamylol is preferred, propyl alcohol is the next best solvent. Alcohol and formalin are forbidden.) Non-woven lens tissue Special compressed gas Cotton stick (medical cotton or long fibre cotton) Special cleaning roll (Isoamylol is the preferred solvent) Special magnifier for optical connectors Replacing optical fibres Hot line work Power on/off When replacing a fibre, cap the connector of a fibre that is not used. This section describes the safety precautions for troubleshooting when the power is on to avoid personnel injury and device damage. See Electrical safety on page 19. See Symbol conventions on page 18. Before checking the device installation and cable connection, confirm that all power supplies to the device are shut off to prevent personnel injury or device damage caused by incorrect cable connections or loosened cables. Do not plug or unplug cables during power on; otherwise, data loss may occur. Before reconnecting the power supply, wait at least one minute.

25 Safety Additional safety precautions 25 Troubleshooting You must shut off all disk drives before turning off the power to the system, to avoid disk damage or data loss. Do not touch the connectors of power cables or communication cables. Otherwise, you might receive an electrical shock. During troubleshooting, pay attention to the following: Do not carry out troubleshooting in stormy weather if lightening is possible. Ensure that the power cables are intact and effective grounding measures are taken. Keep the troubleshooting area clean and dry. Additional safety precautions Lifting heavy objects This section describes the safety precautions for lifting heavy objects, operating sharp objects, plugging and unplugging boards, and bundling signal cables to avoid personnel injuries and device damage. See Symbol conventions on page 18. Do not stand or walk under the heavy objects that are lifted. Only trained and qualified personnel are allowed to lift heavy objects. Before lifting, check whether the required tools are complete and intact.

26 26 Safety Additional safety precautions Before lifting, ensure that the lifting tools are firmly fixed on a wall or fixtures with enough load-bearing capacity. Use simple and short commands to avoid accidents and damage to humans or materials. While lifting, ensure that the angle between two ropes is no larger than 90. Sharp objects When carrying equipment with your hands, wear protective gloves to avoid injuries caused by sharp objects. Plugging and unplugging boards Binding signal cables When inserting a board, wear an antistatic wrist strap and antistatic gloves. Insert the board gently to avoid distorting pins on the backplane. Place the board along the guide rails. To avoid short-circuits and scratches, be sure that boards do not touch other boards. To avoid damaging the sensitive components by the electrostatic discharge of your body, do not touch the board circuit, components, connectors, or connection slots with bare hands. Signal cables must be separately bundled from the strong-current cables and high-voltage cables at a spacing of at least 30 mm.

27 Chapter 3 Installation requirements This chapter includes the following topics: Environmental requirements Power supply requirements Electrical safety Heat dissipation Installation checklist Environmental requirements This chapter describes the operating and storage environments, including temperature, humidity, altitude, and noise. Before installing any devices, check whether the external environment satisfies the conditions for proper running of the devices. Component Operating temperature (a) Details Minimum range; 10 C to 35 C SIEM 9700 Series appliance range; 5 C to 35 C Storage temperature Transportation temperature Maximum temperature variation per hour Operating humidity Operating altitude -40 C to +60 C (-40 to70) (-40 to 60) -40 C to +70 C (-40to 70) (-40 to 60) 10 C/h 10% RH to 80% RH (10-85) (8-80) m to m (0-3000)

28 28 Installation requirements Power supply requirements Component Transportation altitude Noise (b) Details m to m (0-3000) below 35 degrees C < 72 dba (72) (60) Note: (a): The operating temperature ranges from 5 C to 35 C when the SIEM 9700 Series appliance is located at an altitude between 60 m and m. The temperature falls by 0.6 C for every increase of 100 m when the SIEM 9700 Series appliance is located at an altitude between 1800 m and 3000 m. (b): The maximum noise generated by the SIEM 9700 Series appliance. The maximum noise is generated when the ambient temperature is 25 C. See Power supply requirements on page 28. See Electrical safety on page 29. See Heat dissipation on page 29. See Installation checklist on page 31. Power supply requirements Power values This section describes the requirements of the SIEM 9700 Series appliance on the power supply. Before installing the device, check whether the power supply satisfies the conditions for proper running of the device. See Environmental requirements on page 27. See Electrical safety on page 29. See Heat dissipation on page 29. See Installation checklist on page 31. If multiple SIEM 9700 Series Appliances are to be installed on site, check whether the power distribution in your equipment room satisfies the requirements according to the maximum input power and quantity of devices.

29 Installation requirements Electrical safety 29 Table 3-1 Component Power values Subcomponent Base System Power consumption Power parameters Maximum power consumption AC voltage range AC frequency range 750 W 100 V to 127 V 47 Hz to 63 Hz Power cable and power socket Electrical safety Heat dissipation Dual power cords (one per power module) are supplied. This enables you to connect each power cord to an independent AC power source. The SIEM 9700 Series appliance has two power modules, providing redundancy. When selecting the installation site of the SIEM 9700 Series appliance, consider the following: See Environmental requirements on page 27. See Power supply requirements on page 28. See Heat dissipation on page 29. See Installation checklist on page 31. Verify proper grounding for the main AC power supply. Overcurrent and overload protection The circuits and associated circuit breakers must provide enough power and overload protection. Separate the power supply from other large distribution loads or engines (such as an air-conditioner, elevator, or factory load) to prevent possible damage to the SIEM 9700 Series appliance. This section describes heat dissipation requirements of the SIEM 9700 Series appliance. Before installing the devices, check whether the heat dissipation on site satisfies the conditions for proper running of the device. See Installation checklist on page 31.

30 30 Installation requirements Heat dissipation See Environmental requirements on page 27. See Power supply requirements on page 28. See Electrical safety on page 29. Heat dissipation guidelines For optimal maintenance, ventilation, and heat dissipation, pay attention to the following when installing the SIEM 9700 Series appliance into the rack cabinet: For proper ventilation, the rack cabinet should be at least 100 cm (4 ) away from surrounding walls and at least 120 cm (4 ) away from any other cabinet(s). To keep a convective air flow between the cabinet and the equipment room, ensure there are no obstructions on the front or back sides of the cabinet. It is recommended to leave 1U (1U=44.45mm) space above and below each device. Air flow The SIEM 9700 Series appliance takes in air from the front panel (along gaps in the front) and circulates air through the system. Fans discharge air from the rear of the device. Air flows from front to rear. The optional bezel can be installed on the front panel without any reduction in air movement.

31 Installation requirements Installation checklist 31 Figure 3-1 Air flow of the SIEM 9700 Series appliance Installation checklist The following table describes the installation checklist. Table 3-2 Item Facility preparation Air conditioning Requirement The floor meets load-bearing requirements. Wiring troughs, ladders, and holes are ready. All construction is complete. If the temperature in the room may exceed 35 C, install air conditioners which can be restarted upon recovery from a power failure. Do not let the air conditioner blow directly on the devices.

32 32 Installation requirements Installation checklist Table 3-2 (continued) Item Moisture proofing Heating Dust proof Lightning strike protection Requirement If the relative humidity is greater than 70%, a dehumidifying device (for example, an air conditioner that provides a dehumidification function or a special-purpose dehumidifier) needs to be installed. Water penetration, dripping, and condensation must all be prevented in the equipment room. If the temperature in the room will be lower than the stated minimum of 10 C, heating devices are required. If the equipment room is located near a potential source of dust or other particulate matter, a double aluminum alloy window and an anti-theft fire door must be installed. The devices must be separated from the door and a baffle must be used to prevent dust pollution. The equipment room must have a lightning protection device such as lightning rod or lightning strip. The grounding of the lightning protection device and the protective grounding of the equipment room must share a grounding body. In addition, make sure that the following special requirements are met: Before installation, check whether you need to submit a qualification certificate of the installation company to the property management in charge of the installation site. Before transportation, ensure that the dimensions of the devices meet the requirements of the transportation passages (such as elevators and passageways). During transportation of the devices, avoid collision or impact with doors, walls, or other structures. Do not touch the surface of components with dirty gloves. See Environmental requirements on page 27.

33 Installation requirements Installation checklist 33 See Power supply requirements on page 28. See Electrical safety on page 29. See Heat dissipation on page 29.

34 34 Installation requirements Installation checklist

35 Chapter 4 Unpacking and checking the devices This chapter includes the following topics: Checking before unpacking devices Checking before unpacking devices Procedure Before unpacking devices, check whether the packages are intact. Have the project supervisor be present during the unpacking process. When unloading the devices, place the packages in order with the labels on the packages facing the same direction. To unpack devices 1 Unload the devices. 2 After the devices are unloaded, check whether the quantity of packages received matches the shipping documentation. If yes, execute Step 4. If no, execute Step 3. 3 The project supervisor should complete the "Cargo Inspection Feedback Form" signed by the customer to the local office within three days.

36 36 Unpacking and checking the devices Checking before unpacking devices 4 Check whether the packages are intact and whether the packages have been upside down during transportation. If the packages are severely damaged or wet, execute Step 7. 5 Check the Shock Watch label which is attached to the shipping container. If the indicator is red, execute Step 7. Shock Watch label and indicator 6 If the packages are intact, unpack the goods. If not, proceed to Step 7. 7 Stop unpacking and identify any issues. Report the situation to the engineering manager of the local office and wait for a reply. Store any unpacked systems indoors to protect them from the weather. If products are damaged, (corroded, broken packaging etc) take photographs and archive them in a safe place along with any shipping records / invoices.

37 Chapter 5 Hardware installation This chapter includes the following topics: About hardware installation Installation preparation Learning the product Learning safety precautions Checking installation requirements Preparing materials Unpacking and checking the devices Assuring rack readiness About hardware installation Basic hardware installation flow is as follows: Understand the SIEM 9700 Series appliance. Check safety precautions. Check installation requirements. Install rack cabinet rails for the SIEM 9700 Series appliance. Install the SIEM 9700 Series appliance into a rack. See Assuring rack readiness on page 39. Plug in all AC power cables and peripherals. Ensure the devices are operating properly.

38 38 Hardware installation Installation preparation Installation preparation Learning the product Before hardware installation, ensure that all the preparation work specified in this section is completed. See About hardware installation on page 37. Before hardware installation, ensure that you have learned how to handle SIEM 9700 Series appliance. See About hardware installation on page 37. Learning safety precautions Before hardware installation, learn and follow all safety precautions. See About hardware installation on page 37. Checking installation requirements Preparing materials Before hardware installation, check whether the installation requirements are met. See About hardware installation on page 37. Before hardware installation, prepare the required materials. See About hardware installation on page 37. Unpacking and checking the devices Before hardware installation, unpack and check the devices. See About hardware installation on page 37.

39 Hardware installation Assuring rack readiness 39 Assuring rack readiness Ensure that the rack cabinet is properly installed and grounded. Ensure that the rack cabinet is at least 100 cm (approx. 3 ) away from the walls. The clearance between any two cabinets must be at least 120 cm (approx 4 ) for convenient maintenance, adequate ventilation, and effective heat dissipation. Ensure that no enclosed space is formed by the devices in the cabinet to keep proper air transfer between the cabinet and the equipment room. See About hardware installation on page 37.

40 40 Hardware installation Assuring rack readiness

41 Chapter 6 Installing hardware into racks This chapter includes the following topics: Installing the SIEM 9700 Series appliance guide rails Installing the SIEM 9700 Series appliance into a rack Installing the SIEM 9700 Series appliance guide rails Before installing the devices in the rack cabinet, determine the installation positions of the toolless guide rails according to the installation planning of the devices. To install the SIEM 9700 Series appliance guide rails: 1 Looking at the front of the rack cabinet, place the left guide rail on the left post of the rack cabinet. 2 Keep the bottom of the guide rail parallel to the bottom of the planned installation position. 3 Insert the guide pins on the front and rear of the guide rails into the holes on the front and rear posts of the cabinet. 4 Pull out the left and right rail extenders as far as they will easily and safely extend. See Installing the SIEM 9700 Series appliance into a rack on page 41. Installing the SIEM 9700 Series appliance into a rack Verify that the guide rails are installed successfully.

42 42 Installing hardware into racks Installing the SIEM 9700 Series appliance into a rack One fully-loaded device weighs up to 33 kg.(73 lbs). More than two persons are required to move and install the device. To install the SIEM 9700 Series appliance into a rack: 1 Locate the three heavy screws projecting from the left and right sides of the SIEM 9700 Series appliance. These three screws fit into the three slots in the rail extenders. 2 Using at least two people, lift the SIEM 9700 Series appliance and place it into the rail extenders. Make sure that the rail slots securely fit the screws on the sides of the device. 3 Gently slide the device into the rack. 4 If needed, install a front mounting plate to the front of the each rail, using a screw to fasten it. 5 Repeat the previous steps to install a guide rail to the right side of the cabinet. See Installing the SIEM 9700 Series appliance guide rails on page 41.

43 Chapter 7 Powering on the Symantec SIEM 9700 Series Appliances This chapter includes the following topics: Check before powering on Powering on the SIEM 9700 Series appliance On/Off switch Powering off the SIEM 9700 Series appliance Check before powering on This section provides information that needs to be checked after the hardware installation and cable connections are completed, but before the device is powered on. Before checking the device installation and cable connections, confirm that all power to the SIEM 9700 Series appliance is turned off to prevent personnel injuries or device damage. Verify that the device and cables are installed correctly. The following table provides instructions for checking device installation.

44 44 Powering on the Symantec SIEM 9700 Series Appliances Powering on the SIEM 9700 Series appliance Table 7-1 Component Installation confirmation Correct Installation Incorrect Installation SIEM 9700 Series appliance AC power cables The SIEM 9700 Series appliance is placed securely in the rack cabinet. The AC power cables of the SIEM 9700 Series appliance are connected securely between the power modules of the device and the main AC power supply. The SIEM 9700 Series appliance is slanted or loose within the rack cabinet. Only one power cable is connected to the device. See Powering on the SIEM 9700 Series appliance on page 44. See On/Off switch on page 45. See Powering off the SIEM 9700 Series appliance on page 46. Powering on the SIEM 9700 Series appliance All devices are correctly installed and all cables are connected properly. When powering on the SIEM 9700 Series appliance, do not remove or handle any disks, optical fibres, or a network cable. Otherwise, data may be lost and equipment may be damaged.

45 Powering on the Symantec SIEM 9700 Series Appliances On/Off switch 45 To power on the SIEM 9700 Series appliance 1 Connect both AC power connectors on the rear panel, right side, of the SIEM 9700 Series appliance to two main AC power supply outlets. SIEM 9700 Series appliance AC power connections On/Off switch 2 Turn on the power switch on the control panel on the front of the SIEM 9700 Series appliance. See Check before powering on on page 43. See On/Off switch on page 45. See Powering off the SIEM 9700 Series appliance on page 46. The On/Off switch of the SIEM 9700 Series appliance is located on the control panel on the front of the device, top right side. Figure 7-1 SIEM 9700 Series appliance control panel and On/Off switch

46 46 Powering on the Symantec SIEM 9700 Series Appliances Powering off the SIEM 9700 Series appliance Figure 7-2 SIEM 9700 Series appliance On/Off switch Check the status of each indicator LED on the front panel of the SIEM 9700 Series appliance to determine whether the appliance is operating properly. See Check before powering on on page 43. See Powering on the SIEM 9700 Series appliance on page 44. See Powering off the SIEM 9700 Series appliance on page 46. Powering off the SIEM 9700 Series appliance This section describes how to power off the SIEM 9700 Series appliance. The SIEM 9700 Series appliance is designed to run 24 hours a day. If the device needs to be maintained or the power supplies are planned to be turned off or disconnected, perform the following steps to completely power off the device. Do not switch off the power before the disks stop running. Otherwise, disks might be damaged and data might be lost. After shutting down the system, wait at least one minute before switching on the power again. To power off the SIEM 9700 Series appliance 1 Log on to the Symantec Security Information Manager Web User Interface at 2 Select Shutdown/Restart from the Home tile. 3 Select the Shutdown button in the toolbar. See Powering on the SIEM 9700 Series appliance on page 44. See On/Off switch on page 45.