Active Fail-Open Kit Quick Start Guide

Transcription

1 Revision G Ative Fil-Open Kit Quik Strt Guide MAfee Network Seurity Pltform IPS Sensors, when deployed in-line, route ll inoming trffi through designted port pir. However, t times Sensor might need to e turned off for mintenne or its ports n go down euse of n outge. At times like this, you might wnt to ontinue llowing trffi to pss through without interruption. For suh requirements, you n onsider n externl devie lled fil-open swith. The fil-open swith n either e n tive fil-open swith or pssive fil-open swith. An tive fil-open swith onstntly monitors Sensor stte. It does this y sending hertet signl through its ports. The hertet signl is sent through the one of the Monitor ports nd reeived through the other, inditing tht the Sensor is funtioning normlly. The tle elow shows you the vrious models of tive fil-open swithes. Fil-open swith SKU NS9x00 NS7x00/ NS7x50 NS5x00 NS3x00 M-8000, M-6050 M-4050, M-3050 M-2950, M-2850 Ative-Fier (850 nm) 10G (62.5 µm) IAC-AF KT1 Yes Yes Yes (supported on G0 only) No Yes Yes No Ative-Fier (1310 nm) 10G (8.5 µm) IAC-AF KT1 Yes Yes Yes (supported on G0 only) No Yes Yes No Ative-Fier (850 nm) 1G (62.5 µm) Ative-Fier (1310 nm) 1G (8.5 µm) Ative-Copper 10/100/1000 module Ative Fil-Open Chssis IAC-AF KT1 IAC-AF KT1 IAC-AFOCG- KT2 IAC-AFOCH- KT2 Yes Yes Yes No Yes Yes Yes Yes Yes Yes No Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes 1

2 You must lso mke sure you hve the requisite SFP/SFP+'s, or XFPs when mking this hoie. Fier fil-open swithes onsist of two types: single mode nd multi-mode fiers. The tle elow gives you some relevnt detils out oth types of fier opti fil-open swithes. This is espeilly relevnt euse you must determine the type of fier tht is used your orgniztion network efore you deide whih type of fil-open swith to use. Also, ll produt doumenttion for fil-open kits nd dels on the fil-open swithes will repetedly refer to these prmeters. The tle elow shows you the differenes etween single-mode nd multi-mode fier speifitions. Type Fier thikness Wvelength rnge Single mode (Long reh) 8.5 µm 1300 nm to 1550 nm Multi-mode (Short reh) 50 µm or 62.5 µm 850 nm to 1300 nm For more detils out fil-open kits, refer the hpter, Fil-Open opertion in Sensors in the MAfee Network Seurity Pltform IPS Administrtion Guide. Sine this Quik Strt Guide will mke referenes to informtion ssoited with tht hpter, it will help to keep opy of it esily essile efore you egin instlling nd onfiguring your fil-open swith. Working To egin with, the Sensor nd the fil-open swith need to e ppropritely led with eh other. The Sensor ports re then onfigured for fil-open opertion. For more detils out onfiguring Sensor monitoring ports, refer to the setion, Configure Sensor Monitoring Ports on pge 12. After onneting nd onfiguring the Sensor nd fil-open swith, the swith egins to send hertet signl to the Sensor. Eh hertet signl, one sent, returns from the Sensor to the fil-open swith. When the fil-open swith does not reeive this response from the Sensor for speified period, the swith removes the Sensor from the dt pth nd egins to route trffi to the network through its own ports. A 1G fier or Copper fil-open swith sends hertet signl every seond. When the fil-open swith does not reeive response for 3 seonds, it hnges its working mode to "unknown" nd egins to route trffi through itself. A 10G fier fil-open swith sends hertet signl every 10 milliseonds (ms). If the fil-open swith does not reeive response from the Sensor for 100 ms, it removes the Sensor from the dt pth nd egins to route trffi through its own ports. 1 Inside the ox Every fil-open kit onsists of similr set of omponents. Although the type of les nd the swith vry from one model to nother, the list of items in the kit itself remins the sme. The tle elow provides you the list of items. 2

3 Qty Item Desription 1 Fil-Open swith module 10/100/1000 Copper fil-open module, or 1G 850 nm Fier (62.5 µm) fil-open module, or 1G 1310 nm Fier (8.5 µm) fil-open module, or 10G 850 nm Fier (62.5 µm) fil-open module, or 10G 1310 nm Fier (8.5 µm) fil-open module 2 Power supplies nd ords for the host system 4 Copper: 3m RJ-45 to RJ-45 le Fier: 3m LC-LC 1 RS232 RJ-11 progrmming le One power supply ts s the primry nd the other s the redundnt power supply in se of filure Connets the fil-open swith to network devies nd the Sensor. For fier fil-open kit, these les will either e single mode or multi-mode les depending on the requirements provided t the time of purhse. Connets the fil-open swith to omputer to ess the swith CLI tht is used to onfigure swith prmeters. The Ative Fil-Open swith hssis is not shipped with the ox. You hve to purhse 1RU host hrdwre to plug in up to four fil-open swithes in stndrd rk. 2 Instll the tive fil-open swith nd hssis Before you egin Mke sure you hve purhsed the Ative Fil-Open swith hssis. Identify the rk in whih you pln to instll the fil-open hssis. If you re using physil Sensor, mke sure tht you re le to physilly onnet the hssis with the monitoring ports. 3

4 You n instll up to four fil-open swithes in single hssis. You n instll n tive fil-open swith module in the hssis on the fly while the hssis is powered on in the rk. Instll the ers of the hssis. Slide the swith into one of the openings in the hssis, until the fe plte of the swith rests ginst the hssis. Seure the swith to the hssis y inserting srews provided through the holes on the fil-open swith fe plte nd into the pnel. If you re ttempting to instll swith while the hssis is powered on, you must wit for 4 seonds fter inserting the swith nd fstening its srews. d e f Ple the 1U hssis ginst the front of stndrd 19-inh rk. Seure the hssis y inserting srews through holes on ers of the hssis (refer the Before you egin instrutions for this setion). (Optionl) Instll up to three dditionl swithes y following these steps: Remove srews holding eh of the removle lnk pltes from the front of the hssis. Follow steps 1 nd 2 of this proedure for instlling swith in the hssis for dditionl fil-open swithes. The fil-open swith is redy to e onneted to Sensor. 3 Remove n tive fil-open swith from the hssis Before you egin You must mke sure the fil-open swith is fully powered off efore you ttempt to remove it from the hssis. 4

5 Follow the steps in this setion to power off nd remove the fil-open swith. Power off the fil-open swith using the we interfe or CLI ommnd prompt. If you re using the we interfe, lik the Resue t nd hek the Power Off hekox in the System Restore setion. To ess the we interfe, refer Mnge the fil-open swith through we interfe on pge 13. If you re using the CLI ommnd prompt, type power_off nd press Enter. To ess the CLI ommnd prompt, refer Configure fil-open swith prmeters on pge 8. When the fil-open swith is powered off, remove the ptive srews nd slide it out of the hssis. 4 Connetions with the fil-open swith To urtely detet ttks, Sensor must e wre of whih trffi is outside the network nd whih trffi is inside. Identifying trffi diretion is omplished through the proper ling of the fil-open swith s well s pproprite port onfigurtion of the Sensor monitoring ports in the Mnger. The swith LED indites if trffi is pssing to the Sensor. 5

6 Connet the fil-open swith to network devies Cllout Desription 1 10/100/1000 Copper fil-open swith module 2 Connetion to network devie (inside) 3 Connetion to network devie (outside) 4 Sensor monitoring port G3/1 (inside) 5 Sensor monitoring port G3/2 (outside) 6 Sensor monitoring ports on n NS9200. The steps elow provide steps for onnetions for oth opper nd fier fil-open swithes. Plug the inside network le onnetor into the Ct 5/Ct 5e/LC port, leled Network 0 or Net 0 for opper or Network A (in tringle) for fier, on the fil-open swith. Plug the other end of this le to the orresponding network devie. Plug the outside network le onnetor into the Ct 5/Ct 5e/LC port, leled Network 1 or Net 1 for opper or Network B (in tringle) for fier, on the fil-open swith. d Plug the other end of this le to the orresponding network devie. The fil-open swith is now onneted to network devies for the inside network nd outside network. Your next step is to onnet the fil-open swith to the Sensor. 6

7 (Either) Connet opper fil-open swith Before you egin You will require two Ct 5/Ct 5e Ethernet les to onnet your fil-open swith to the Sensor. You will require two opper SFPs to e inserted into two orresponding lnk ports on the Sensor. For more detils out your Sensor, refer the Sensor Produt Guide for the pproprite model. d Connet Ct 5/Ct 5e Ethernet le (inside) into the opper SFP in port Gx/ or xa, where x nd re port numers. Connet the other end of the le into the leled Port 0 on the fil-open swith. Connet Ct 5/Ct 5e Ethernet le (outside) into the orresponding Gx/ or xb peer port.(for exmple, if you used G1/1 in step 1, plug the le into port G1/2). Connet the other end of the le into the leled Port 1 of the ypss swith. With this le onfigurtion, Sensor Monitoring port G1/1 views trffi s originting inside the network, nd port G1/2 views trffi s originting outside the network. Note tht this onfigurtion (G1/1 = outside, G1/2 = inside) must mth the port onfigurtion speified for this Sensor, nd tht the ports must e onfigured s suh. (Or) Connet fier fil-open swith Before you egin You will require two LC-LC les to onnet your fil-open swith to the Sensor. If you re onneting 1-Gigit fil-open swith, you will require two fier SFPs to e inserted into two orresponding lnk ports on the Sensor. If you re onneting 10-Gigit fil-open swith, you will require two fier XFP/SFP+s to e inserted into two orresponding lnk ports on the Sensor. For more detils out the SFP/XFP/SFP+ omptile with your Sensor, refer the Sensor Produt Guide for the pproprite model. d Connet n LC-LC le into the LC reeptle of port Gx/ or xa, where x nd re the orresponding 1-Gigit or 10-Gigit port numers. Connet the other end of the LC le into the LC reeptle leled Monitor A of the fil-open swith. Connet n LC-LC le into the orresponding Gx/ or xb peer port. (For exmple, if you used G1/3 in step 1, plug the le into port G1/4). Connet the other end of this le into the port leled Monitor B of the fil-open swith. With this le onfigurtion, Sensor Monitoring port G1/3 views trffi s originting inside the network, nd port G1/4 views trffi s originting outside the network. Note tht this onfigurtion (G1/3 = outside, G1/4 = 7

8 inside) must mth the port onfigurtion speified for this Sensor, nd tht the ports must e onfigured s suh. 5 Configure fil-open swith prmeters You n onfigure vrious prmeters on your fil-open swith. All onfigurtion options, sttus, nd sttistis re essile from the fil-open swith Commnd Line Interfe (CLI). After you hve onfigured si network settings IP ddress, gtewy, nd sunet msk you will e le to ess the fil-open swith through SSH. SSH is enled on every fil-open swith y defult nd n e disled through the CLI. Your fil-open swith only supports IPv4 ddresses. The steps elow explin the onfigurtion of prmeters for your fil-open swith. Connet n RJ-11 le to the front of the module. Connet the other end to omputer running terminl emultion softwre suh s HyperTerminl or PuTTY. Lunh the terminl emultion softwre, nd set the ommunitions prmeters s shown elow: Bud rte: 9600 It is reommended not to lter the ud rte of the Mngement port. Dt its: 8 Prity: None Stop its: 1 Flow ontrol: None d Power up the fil-open swith. The CLI nner nd login prompt pper. e f At the login prompt, type MAfee00 nd press Enter. At the pssword prompt, type MAfee00 nd press Enter. The fil-open swith CLI prompt ppers. g Configure or modify prmeters relted to fil-open swith ess nd its ports using the ommnds listed. 8

9 Commnd set_ip xxx.xxx.xxx.xxx set_netmsk xxx.xxx.xxx.xxx set_gtewy xxx.xxx.xxx.xxx set_link <port> <on/ off> set_link <port> off fd 100m set_link <port> <enle/ disle>_utoneg Desription Configures fil-open swith IPv4 ddress. Reoot the fil-open swith for the new IPv4 ddress to tke effet. Configures fil-open swith sunet msk. Reoot the fil-open swith for the new sunet msk to tke effet. Configures defult gtewy IPv4 ddress. Reoot the fil-open swith for the new gtewy IPv4 ddress to tke effet. Sets the port of 1G Copper fil-open swith to uto-negotite. For the <port> use mon0, mon1, net0, or net1. Sets the port to 100 Mps full-duplex. For the <port> use the syntxes speified ove. Sets the port of 1G Fier fil-open swith to uto-negotite. For the <port> use mon0, mon1, net0, or net1. 10G Fier fil-open swithes do not hve suh ommnd sine uto-negotite is enled y defult. h Configure or modify prmeters for other settings of the fil-open swith using these ommnds. Commnd set_ssh_stte <on/off> set_we_https_stte <on/ off> set_snmp_srv_ip set_trp <prmeter> <on/ off> Desription Enles or disles the SSH sttus on the fil-open swith. Enles or disles we ess to the fil-open swith interfe. Configures SNMP server IPv4 ddress. The SNMP server IPv4 ddress n lso e set in the we interfe. Enles or disles the following SNMP trps: ppl fil Applition stte hnge. ypss Bypss stte hnge trp. mon link Monitoring port stte hnge trp. net link Network port stte hnge trp. error Error notifition trp. updte Updte omplete trp. i View essentil fil-open swith prmeters using the ommnds listed. If your fil-open swith prmeters hve never een onfigured efore, you will see ftory settings. 9

10 Commnd get_ip get_netmsk get_gtewy get_ssh_stte get_snmp_srv_ip get_prms get_we_https_stte get_link <port> Desription Displys fil-open swith IPv4 ddress. Displys fil-open swith sunet msk. Displys defult gtewy ddress. Displys the SSH sttus, whih is enled y defult. Displys the SNMP server IPv4 ddress. Displys fil-open swith prmeters. Displys sttus of we ess to the fil-open swith interfe. Displys port sttus. For the <port> use mon0, mon1, net0, or net1. Push Button opertions The Intelligent Bypss Swith (IBS) inludes two mngement Push Buttons, PB0 nd PB1. Using the push uttons, you n reset the unit to ftory defult. PB0 nd PB1 uttons re used to ontrol nd query the IBS unit. Following re the funtions of the Push Buttons: PB0 Hold the utton for more thn three seonds to enter or exit the min menu. Short press the utton to move to the next menu. PB1 Hold the utton for more thn three seonds to reset IBS errors. Short press the utton to selet n option nd disply dt for the next option. 10

11 Use the following menu options in the tle to shutdown, set defult prmeters, or reoot the Ative Fil-Open kit: Menu options Min menu INFO sumenu Desription Press PB0 for more thn three seonds to enter the min menu. The min menu inludes the following sumenu: INFO INFOMNF OP EXIT Short press the PB0 utton to move to the next sumenu. Short press the PB1 utton to enter the sumenu. The INFO sumenu inludes the following options: HW_VER - Displys the hrdwre version FW_VER - Displys the firmwre version SW_VER - Displys the softwre version UB_VER - Displys u-oot version KERN_VER - Displys kernel version UNIT - Displys the unit nme EXIT - Exits to the min menu Short press the PB0 utton to move to the next option. Short press the PB1 utton to selet the option nd disply dt for the next option. INFOMNF sumenu The INFOMNF sumenu inludes the following options: PRODUCT - Displys the produt nme TK_NUM - Displys produt trking numer MAC MGMT - Displys the mngement port MAC ddress EXIT - Exits to the min menu Short press the PB0 utton to move to the next option. Short press the PB1 utton to selet the option nd disply dt for the next option. OP sumenu The OP sumenu inludes the following tions: SHUTDOWN - Shutdown the IBS module (the module will relod y removl nd insertion of the module) REBOOT - Reset the IBS module DEFAULT - Set ftory defult prmeters EXIT - Exits to the min menu Short press the PB0 utton to move to the next option. Short press the PB1 utton to selet the option nd disply dt for the next option. 11

12 Reset the pssword nd ll the prmeters to ftory defult If you hve forgotten the pssword nd do not know the orret pssword in the login prompt, perform the following steps to reset the pssword nd ll the other prmeters of the Ative Fil-Open kit. On the fil-open swith, press the PB0 push utton for three seonds to enter the min menu seen in the disply pnel. d e Do short press on the PB0 push utton to move to the next sumenu in the list. Perform this step till you move to the OP sumenu. Push the PB1 push utton with short press to selet nd view the options in the OP sumenu. Do short press on the PB0 push utton to move to the next option in the OP sumenu. Perform this step till you move to the DEFAULT option. Push the PB1 push utton with short press to selet the DEFAULT option. When the option DEFAULT is seleted, it sets the defult ftory prmeters. In the disply pnel, you n view smll lines ( _ ) whih indites tht defult ftory prmeters re suessfully set. As result, the pssword is lso reset to the defult pssword. 6 Configure Sensor Monitoring Ports Before you egin The Sensor must e set up with trust estlished with Mnger server. The Sensor hs free port pir whih n e deployed in in-line fil-open mode. It is ssumed tht you hve inserted neessry trnseiver modules into the Sensor if you hve ompleted ling the Sensor nd fil-open swith. When you set up Sensor for the first time, its ports re disled y defult. The Sensor ports must e mnully onfigured for in-line fil-open opertion. In the Mnger, go to Devies <Admin_Domin_Nme> Devies <Devie_Nme> Setup Physil Ports. Doule-lik port one of the onfigurle ports, sy G2/1. A onfigurtion pnel ppers on the right side of the window. Clik the Stte drop-down nd selet Enled. You re sked whether you wnt to proeed sine this onfigurtion will lso impt port G2/2. 12

13 d Clik Yes to proeed. This enles port G2/1-G2/2. e f g Selet the Auto Negotite hekox nd mke sure the Speed (Duplex) is set to 1 Gps (Full). Clik the Mode drop-down nd selet In-line Fil-Open Ative. Clik the Plement drop-down nd selet Inside Network or Outside Network, depending on how you wnt to onfigure your ports. MAfee reommends hoosing Gx/1 or xa s Inside Network nd Gx/2 or xb s Outside Network. h Clik Sve. The Sensor nd fil-open swith re setup. When trffi psses through the ports, you will notie the port link sttus hnges to Up nd turns green. 7 Mnge the fil-open swith through we interfe If you hve onfigured n IPv4 ddress for your fil-open swith, you hve the option to mnge your fil-open swith through we-interfe. To ess the fil-open swith we interfe, enter the IPv4 ddress of the fil-open swith whih you hve onfigured. The fil-open swith we interfe ppers on the log on sreen. To log on, enter the defult usernme nd pssword, MAfee00 nd MAfee00. You re routed to the fil-open we interfe lnding pge whih shows you informtion out the present settings onfigured in the fil-open swith. Configurtion of neessry settings is explined in the relevnt setions. 13

14 8 Enle tp mode for the fil-open swith Before you egin Configure n IPv4 ddress for your fil-open swith. Mke sure you n ess the fil-open swith we-interfe using we rowser. You re le to enle tp mode for your tive fil-open swith if you use tp to route network trffi to the Sensor Monitoring ports. d Log on to the we interfe of the tive fil-open swith. Use defult redentils to ess the we interfe. For more informtion out the we interfe refer Mnge the fil-open swith through we interfe on pge 13. Clik the Bypss t to ess the Bypss onfigurtion pge. Clik the HB tive mode drop down menu nd selet Off. In the Ative ypss setion, selet tp. e Clik Apply to sve your onfigurtion. You hve set your tive fil-open to tp mode of opertion. Return from tp mode to inline mode Clik the Bypss t to ess the ypss onfigurtion pge. Clik the HB Ative mode drop-down menu nd selet On. Clik Apply to sve your onfigurtion. 14

15 You hve reonfigured your fil-open swith to run in inline mode of opertion. 9 Configure notifition y SNMP trps Before you egin To onfigure SNMP trps, you will require server tht will t s n SNMP server. The SNMP server n e ny Windows or Linux system instlled with n MIB rowser suh s iresoning. Mke sure your fil-open swith IP ddress n e rehed within the network. Mke sure your SNMP server nd fil-open swith re le to ommunite. In ddition, you will need to otin MIB files to deode lert odes sent y the fil-open swith. These files re speifi to the fil-open swith nd n e otined y liking on the following link, KB The SNMP feture of your fil-open swith n only e used to send notifitions through SNMP trps. d Connet n RJ-45 le to the Mngement port t the k of the fil-open swith. Connet the other end to network devie so tht the SNMP server is rehle through the network. Copy the fil-open swith MIB files to suitle lotion on the SNMP server. Set up the fil-open swith IP ddress, network msk, nd SNMP mnger IP ddress y logging on to the we interfe. For detils out the logging on to the we interfe refer Mnge the fil-open swith through we interfe on pge 13. You re lso le to onfigure vrious other prmeters speifi to SNMP trps. For detils out these ommnds, refer Configure fil-open swith prmeters on pge 8. 15

16 e On the we interfe, lik the SNMP t. The SNMP onfigurtion pge ppers. f g To onfigure the SNMP server IPv4 ddress, enter it in the Server IP field. The redentils used will e the defult redentils for the fil-open swith. (Optionl) If you wnt to onfigure multiple SNMP ounts, in the SNMP trp ount setion selet set from the Opertions drop-down. If you do not onfigure dditionl SNMP trp ounts, ll trps will e routed to the min SNMP trp ount you hve setup here. h i Enter the IPv4 ddress for the other ount. (Optionl) You n speify n lternte SNMPv3 pssword for the dditionl SNMP server. SNMP Community strings re used only y devies whih support SNMPv1 nd SNMPv2 protools. SNMPv3 uses usernme nd pssword uthentition, long with n enryption key. You n onfigure ommunity string if the SNMP softwre you use requires you to onfigure one regrdless of the requirements in this user-interfe. j Clik Apply to sve your onfigurtion. 16

17 k In the SNMP server, onfigure these settings to enle SNMPv3 trps for the tive fil-open kit. USM user: MAfee00 Auth pssword: MAfee00 Seurity level: uth, priv Privy lgorithm: AES Auth lgorithm: SHA Privy pssword: MAfee00 l m Lod MIB file. If you do not hve the pproprite MIB file, ontt MAfee Support. Mke sure the SNMP server nd fil-open swith re le to ommunite through the network. You hve onfigured your tive fil-open swith to send SNMP trps to n SNMP server. You re lso provided the option to onfigure multiple SNMP trp ounts. Aess the SNMP server to view triggers. 10 Verify your instlltion Follow these steps to mke sure your setup is working s designed. Chek the ions in the Mnger eside the ports you hve onfigure s in-line fil-open pssive. They must show Up. Chek the Bypss LED on the Sensor. LED sttus ON OFF Desription The Sensor is in inline fil-open, inline fil-losed, SPAN, or TAP mode. The Sensor is in ypss mode. Chek the PWR LEDs on the hssis. Depending on whih power soure you use, you will see tht PWR LED glowing. d Chek the port sttus nd operting mode sttus of the GE in-line fil-open ports. 17

18 The piture elow shows you the fil-open swith in norml mode sine the Sensor ports re operting normlly. When the fil-open swith in ypss mode sine the Sensor ports hve gone down. Item Desription NRM Glows green when the Sensor is in norml mode of opertion. WDT BYP Indites wth dog timer. The Wth Dog Timer LED lwys links mer, whether the fil-open swith is in norml or ypss mode. The link indites tht the hertet pulse is eing sent through the fil-open onnetion. The wthdog timer is lwys linking, even when the fil-open swith is ypssing the Sensor, euse it is lwys sending nd listening for the orret hertet stte from the Sensor monitoring ports. Glows red when fil-open swith is in ypss mode of opertion. 11 Trouleshooting During norml in-line fil-open opertion of the Sensor, fil-open swith onstntly sends hertet signl to the Sensor. If this signl does not return to the fil-open swith within progrmmed intervl, the fil-open swith removes the Sensor from the dt pth, nd moves into ypss mode, providing ontinuous dt flow with little network interruption. While the fil-open swith is in ypss mode, trffi psses diretly through it, ypssing the Sensor. When norml Sensor opertion resumes, you might or might not need to mnully re-enle the monitoring ports from the Mnger interfe, depending on the tivity leding up to the Sensor's filure. The following setion desries how to return the Sensor to in-line mode. Wht hppens when Sensor fils? When Sensor fils with fil-open swith in ple, the following events our in the stted order. The Mnger reports Sensor in d helth or Port pir is in ypss mode error in the System Helth pne. The Sensor reoots nd the fil-open swith egins forwrding trffi. All trffi now ypsses the Sensor nd flows through the fil-open swith with miniml trffi disruption. A Sensor reoot reks the link onneting the devies on either side of the Sensor nd requires the renegotition of the network link etween the two devies surrounding the Sensor. Depending on the network equipment, this disruption rnges from ouple of seonds to more thn minute with ertin vendors' devies. 18

19 Upon reoot ompletion, the Sensor resumes its hertet, nd one of the following ours: If the reoot ourred during norml opertion s desried, the fil-open swith resumes pssing dt through the Sensor nd the Sensor returns to in-line fil-open mode. If the reoot ourred due to n error, the fil-open swith ontinues to ypss the Sensor until the dministrtor mnully re-enles Sensor ports in the Mnger. After the ports re re-enled, the fil-open swith resumes pssing dt through the Sensor nd the Sensor returns to in-line mode. A rief link disruption is likely to our while the links re renegotited to ple the Sensor k in in-line mode. The errors on the Mnger dispper nd norml helth is reported. Common prolems nd solutions This setion lists some ommon instlltion prolems nd their solutions. Prolem Possile Cuse Solution Network or link prolems. Sensor LED is off. Sensor is opertionl, ut is not monitoring trffi. Runts or gints errors on swith nd routers. The system fult Swith sent ppers on the Opertionl Sttus pge of the Mnger. Improper ling or port onfigurtion. The Sensor is turned off. The Sensor port le is disonneted. Network devie les hve een disonneted. The Sensor ports hve not een enled in the Sensor. Improper ling or port onfigurtion. Improper ling. Ensure tht the trnsmit nd reeive les re properly onneted to the fil-open swith. Restore Sensor power. Chek the Sensor le onnetions. Chek the les nd ensure tht they re properly onneted to oth the network devies nd the fil-open swith. Ports re disled on Sensor filure; they must e re-enled in the Mnger for the Sensor monitoring to resume. Ensure tht the trnsmit nd reeive les re properly onneted to the fil-open swith. Ensure tht the trnsmit nd reeive les re properly onneted to the fil-open swith. 19

20 Copyright 2018 MAfee, LLC MAfee nd the MAfee logo re trdemrks or registered trdemrks of MAfee, LLC or its susidiries in the US nd other ountries. Other mrks nd rnds my e limed s the property of others G00