Manager Appliance Installation Guide Revision B. McAfee Network Security Platform

Transcription

1 Manager Appliance Installation Guide Revision B McAfee Network Security Platform

2 COPYRIGHT Copyright 2017 McAfee, LLC TRADEMARK ATTRIBUTIONS McAfee and the McAfee logo, McAfee Active Protection, epolicy Orchestrator, McAfee epo, McAfee EMM, Foundstone, McAfee LiveSafe, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, McAfee Stinger, True Key, TrustedSource, VirusScan are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. 2 McAfee Network Security Platform Manager Appliance Installation Guide

3 Contents Preface 5 About this guide Conventions What's in this guide Find product documentation About the Manager Appliance 7 Warnings and cautions Before installing the Manager Appliance Hardware specifications and environmental requests Verify the shipment 11 Manager Appliance front panel description Indicator lights Manager Appliance back panel description Installing the Manager Appliance 15 Positioning the Manager Appliance Install the Manager Appliance on a rack Install the mounting rails Install the Manager Appliance on the mounting rails Remove the Manager Appliance from the rails Configuring the Manager Appliance 19 Connect the Manager Appliance to power and the network Configure the Manager Appliance Change your settings Configure remote management Working with the Manager software 25 Start the Manager software Access the Manager from a client machine Log on to the Manager Maintaining the Manager Appliance 27 Managing the Manager Appliance using the remote desktop software Applying Microsoft Windows patches Maintaining your Manager Appliance database Upgrading your Manager software Hardening the Manager Appliance operating system Resetting the Manager Appliance to factory default 31 8 Troubleshooting 33 The Manager Appliance is not receiving power McAfee Network Security Platform Manager Appliance Installation Guide 3

4 Contents The Manager Appliance will not start The Manager Appliance is not communicating with the network Troubleshooting a hardware failure Index 35 4 McAfee Network Security Platform Manager Appliance Installation Guide

5 Preface This guide provides the information you need to configure, use, and maintain your McAfee product. Contents About this guide Find product documentation About this guide This information describes the guide's target audience, the typographical conventions and icons used in this guide, and how the guide is organized. Conventions This guide uses these typographical conventions and icons. Italic Bold Monospace Narrow Bold Title of a book, chapter, or topic; a new term; emphasis Text that is emphasized Commands and other text that the user types; a code sample; a displayed message Words from the product interface like options, menus, buttons, and dialog boxes Hypertext blue A link to a topic or to an external website Note: Extra information to emphasize a point, remind the reader of something, or provide an alternative method Tip: Best practice information Caution: Important advice to protect your computer system, software installation, network, business, or data Warning: Critical advice to prevent bodily harm when using a hardware product What's in this guide This guide is organized to help you find the information you need. McAfee Network Security Platform Manager Appliance Installation Guide 5

6 Preface Find product documentation Find product documentation On the ServicePortal, you can find information about a released product, including product documentation, technical articles, and more. Task 1 Go to the ServicePortal at and click the Knowledge Center tab. 2 In the Knowledge Base pane under Content Source, click Product Documentation. 3 Select a product and version, then click Search to display a list of documents. 6 McAfee Network Security Platform Manager Appliance Installation Guide

7 1 About 1 the Manager Appliance The Manager Appliance is part of the McAfee Network Security Platform intrusion prevention system. The Manager Appliance is a 1-U rack dense chassis with multi-core Intel XEON Series Processor and four 3.5" hot-swap hard drive trays. The Manager Appliance runs on a preinstalled, hardened Windows Server operating system and comes preloaded with the Manager software. Contents Warnings and cautions Before installing the Manager Appliance Hardware specifications and environmental requests Warnings and cautions You should be aware of these warning and cautions. Manager Appliance power on or off the push button On/Off power switch on the front panel of the Manager Appliance does not turn off the AC power. To remove AC power from the Manager Appliance, you must unplug the AC power cord from either the power supply or wall outlet. The power supplies in your system might produce high voltages and energy hazards, which can cause bodily harm. Only trained service technicians are authorized to remove the covers and access any of the components inside the system. This system may have more than one power supply cable. To reduce the risk of electrical shock, a trained service technician must disconnect all power supply cables before servicing the system. Hazardous conditions devices and cables: Hazardous electrical conditions may be present on power, telephone, and communication cables. Turn off the Manager Appliance and disconnect telecommunications systems, networks, modems, and the power cord attached to the Manager Appliance before opening it. Otherwise, personal injury or equipment damage can result. Avoid injury lifting the Manager Appliance and attaching it to the rack is a two-person job. The Manager Appliance weighs approximately kg (23.05 lbs). Before installing the Manager Appliance Make sure to check for the following before you install the Manager Appliance. Read all provided safety information. Make sure that you have selected a suitable location for installing the Manager Appliance. McAfee Network Security Platform Manager Appliance Installation Guide 7

8 1 About the Manager Appliance Hardware specifications and environmental requests Check that you have all the necessary equipment and components outlined in this document. Familiarize yourself with the Manager Appliance network access card (NIC) ports and connectors as described in this document. Decide whether you will be using static or dynamic IP address assignment. If you use a static IP address for the Manager Appliance, you must request a static IP address from your network administrator, who must then update your DNS server with a valid Manager Appliance host name entry. You must have the following information available when you configure the Manager Appliance: Static IP address. Network mask. Default gateway address. A primary and an optional secondary DNS server IP address. To ensure the safe operation of the Manager Appliance, read all documentation before installation. Hardware specifications and environmental requests These are the hardware recommendations and requirements for the Manager Appliance. Network recommendations Although the Manager Appliance supports both DHCP and static IP address networks, McAfee strongly recommends that you use static IP addresses. In addition, McAfee recommends having a DNS server on your network. This enables you to set a fully qualified domain name for your Manager server. Manager generates a public key certificate that uses the Manager Appliance host name. This certificate is used to authenticate the Manager server to any Manager clients in your deployment. Changing the host name after the certificate is generated will create a host name mismatch error, which could prevent the Manager server from communicating with the Manager client. If you desire to change the host name of the Manager Appliance, it is important that you use the Manager Appliance Configuration Tool to do so, as it automatically regenerates the Manager server certificate. Hardware specifications and environmental requirements Dimensions 59.1 cm (23.26 in.) D x 43.8 cm ( in.) W x 4.32 cm (1.7 in.) H Weight (maximum configuration) kg (23.05 lbs) Power delivery DC power supply AC voltage Environment 450W, redundant, hot-pluggable, 80 plus energy efficiency VAC, auto ranging, Hz, 6 A Operating temperature +10 C to +35 C with the maximum rate of change not to exceed 10 C per hour Non-operating temperature Non-operating humidity 40 C to +70 C 50% 90%, non-condensing with a maximum wet bulb of 28 C (at temperatures from 25 C to 35 C) 8 McAfee Network Security Platform Manager Appliance Installation Guide

9 About the Manager Appliance Hardware specifications and environmental requests 1 Dimensions Acoustic noise Shock, operating Shock, unpackaged Shock, packaged Vibration, unpackaged Vibration, packaged ESD, Air Discharged ESD, Contact Discharge System cooling requirement in BTU/Hr EMI operating Sound Power: 7.0 BA in an idle state at typical office ambient temperature. (23 +/-2 degrees C.) Half sine, 2 g peak, 11 msec Trapezoidal, 25 g, velocity change is based on weight Non-palletized free fall in height 18 inches (>=40 lbs to < 80 lbs) 5 Hz to 500 Hz, 2.20 g RMS random 5 Hz to 500 Hz, 1.09 g RMS random 12.0 kv 8.0 kv 1090 BTU/hour Required to meet EMI emission requirements, tested as part of system Manager Appliance supports only USB-compliant mouse and keyboard (PS/2 mouse and keyboard are not supported). McAfee Network Security Platform Manager Appliance Installation Guide 9

10 1 About the Manager Appliance Hardware specifications and environmental requests 10 McAfee Network Security Platform Manager Appliance Installation Guide

11 2 2 Verify the shipment Check for these contents that are shipped with the Manager Appliance. Manager Appliance Accessory kit containing: Manager Appliance Quick Start Guide Lockable front bezel Power cord (s) System restore disk (Manager Appliance image re-installation) System diagnostic memory stick Tool-less slide rail (2) Chassis cable management arm If any of the contents from the preceding list are missing or damaged, contact McAfee support at mysupport.mcafee.com. Contents Manager Appliance front panel description Manager Appliance back panel description Manager Appliance front panel description The Manager Appliance front panel has these lights and buttons. An optional lockable bezel is included with the Manager Appliance, which can be installed to cover the front panel. McAfee Network Security Platform Manager Appliance Installation Guide 11

12 2 Verify the shipment Manager Appliance front panel description Item Description 1 Hard drive bay 2 Hard drive bay 3 Hard drive bay 4 Hard drive bay 5 Front Control Panel 6 USB ports 7 Video out 8 DVD-ROM drive Front Control Panel options 1 System ID button integrated with LED 2 Non-maskable interrupt (NMI) button 3 System NIC 1 Activity LED 4 System NIC 3 Activity LED 5 System Status LED 6 Power button with integrated LED 7 Hard Drive Activity LED 8 System Reset button 9 System NIC 4 Activity LED 10 System NIC 2 Activity LED 12 McAfee Network Security Platform Manager Appliance Installation Guide

13 Verify the shipment Manager Appliance back panel description 2 Indicator lights The Manager Appliance has a variety of system status indicator lights. Front panel light indicators The following table describes the system indicator lights. LED Indicator Color Condition Description Power/Sleep Green On Power On/ACPI S0 state Green Blink Sleep /ACPI S3-S1 state - Off Power Off /ACPI S5 state LAN Green On LAN link no access Green Blink LAN activity - Off No link System Status Green On System ready/no alarm Green Blink System ready, but degraded redundancy lost such as: The power supply or fan failure Non-critical temp/voltage threshold; battery failure Predictive power supply failure Amber On Critical alarm such as: Critical power modules failure Critical fans failure, voltage (power supply) Critical temperature and voltage Amber Blink Non-Critical alarm such as: Redundant fan failure Redundant power module failure Non-critical temperature and voltage - Off Power Off: System unplugged Power On: System powered off and in standby, no prior degraded \non-critical\critical state Manager Appliance back panel description The Manager Appliance back panel has these ports and connectors for configuration. McAfee Network Security Platform Manager Appliance Installation Guide 13

14 2 Verify the shipment Manager Appliance back panel description Item Description 1 Power supply 2 Video out 3 RJ-45 serial port (not used) 4 NIC 2 connector RJ-45 5 USB ports 6 Remote Management Module (RMM4 NIC) port 7 NIC 4 connector RJ-45 8 NIC 3 connector RJ-45 9 NIC 1 connector RJ McAfee Network Security Platform Manager Appliance Installation Guide

15 3 Installing 3 the Manager Appliance This section describes how to attach rails and mount the Manager Appliance on a rack. A rack mounting kit is supplied with the Manager Appliance so you can install the Manager Appliance in a 19-inch rack, as described in the following rack mounting instructions. The rack mounting contains: Slide rails Chassis cable management arm A screwdriver is required for this procedure. Contents Positioning the Manager Appliance Install the Manager Appliance on a rack Remove the Manager Appliance from the rails Positioning the Manager Appliance The Manager Appliance must be installed in a suitable location. Since it is designed to be operated remotely, physical access to the Manager Appliance is needed only to connect networking cables and the power supply cord, a monitor, keyboard, and mouse to configure the software. Initial setup requires attaching a single network cable to the back of the Manager Appliance. After the network setup is finished, physical access to the Manager Appliance is necessary only to restart the appliance. McAfee recommends that you interact with the system using remote desktop software. The remote desktop connection is enabled by default on the appliance. Install the Manager Appliance on a rack Use the rack mounting kit included with the Manager Appliance to install the unit into a four-post 19-inch rack. The kit can be used with most industry-standard rack cabinets. Use the tie wraps to secure the cables from the Manager Appliance to the rack. Make sure that you follow the safety warnings. For example, when identifying where you want the Manager Appliance to go in the rack, remember that you should always load the rack from the bottom upwards. If you are installing multiple Manager Appliances, start first with the lowest available position. Contents Install the mounting rails Install the Manager Appliance on the mounting rails McAfee Network Security Platform Manager Appliance Installation Guide 15

16 3 Installing the Manager Appliance Install the Manager Appliance on a rack Install the mounting rails Position the mounting rails correctly and install them at same levels. Task 1 At the front of the rack, position one of the mounting rails so that its mounting bracket aligns with the required rack holes. Clip the rail into the rack. 2 At the back of the rack, pull the back mounting-bracket (extending the mounting rail) so that it aligns with the required rack holes. 3 Clip the rail to the rack and secure it. 4 Repeat these steps to secure the second mounting rail to the rack. 5 Make sure that the mounting rails are at the same level on each side of the rack. Install the Manager Appliance on the mounting rails Carefully install the Manager Appliance on the mounting rails. Task 1 With help from another person, lift the Manager Appliance so that the side rails at the back of the Manager Appliance are aligned with the mounting rails in the rack, then push the Manager Appliance into the mounting rails until it stops. To avoid injury, use two people to lift the Manager Appliance and attach it to the rack. The Manager Appliance weighs approximately kg (23.05 lbs). 2 Use a screwdriver to fix a screw through the front and back rack holes to secure the system to the rack. 3 Attach the provided cable management arm if desired. 4 If required, attach the lockable bezel to protect the front panel. 16 McAfee Network Security Platform Manager Appliance Installation Guide

17 Installing the Manager Appliance Remove the Manager Appliance from the rails 3 Remove the Manager Appliance from the rails Perform these steps to remove the Manager Appliance. Task 1 Turn off the Manager Appliance and disconnect it from the power outlet. 2 Disconnect all cables, such as network cables. Also disconnect the monitor, keyboard, and mouse cables, if installed. 3 If installed, remove screws securing the appliance to the rack mount rails. 4 Pull the appliance out of the rack until the safety catches stop the movement. 5 Rotate the release latch at the front of each rail to disengage the safety catch. 6 With help from another person, lift the system completely out of the rack. McAfee Network Security Platform Manager Appliance Installation Guide 17

18 3 Installing the Manager Appliance Remove the Manager Appliance from the rails 18 McAfee Network Security Platform Manager Appliance Installation Guide

19 4 Configuring 4 the Manager Appliance The Manager Appliance comes with all Manager components pre-installed. The Manager Appliance Configuration Tool configures the Manager Appliance and starts as soon as you log on to the Manager Appliance. Contents Connect the Manager Appliance to power and the network Configure the Manager Appliance Change your settings Configure remote management Connect the Manager Appliance to power and the network After you have installed the Manager Appliance on the rack, connect the appliance to the power source and to your network. Connect a monitor, keyboard, and a mouse, which are required to configure the Manager Appliance. Perform these steps to connect the Manager Appliance to a power source and network. Task 1 Plug the AC power cord into the back of the Manager Appliance, then plug the other end of the cord into an appropriate power source. 2 Connect a network cable to NIC 1. Use only NIC 1 for initial configuration purposes. The Manager Appliance Configuration Tool will not work with the other NIC interfaces. 3 Connect the monitor, mouse, and keyboard to the rear or front of the Manager Appliance. You can manage the Manager Appliance from a remote computer after the initial installation and configuration are completed. 4 Turn on the power for the Manager Appliance. Appliance power on/off the push-button on/off power switch on the front panel of the Manager Appliance does not turn off the AC power. To remove AC power from the Manager Appliance, you must unplug the AC power cord from either the power supply or wall outlet. 5 When the appliance has started and you log on, the Manager Appliance Configuration Tool appears. McAfee Network Security Platform Manager Appliance Installation Guide 19

20 4 Configuring the Manager Appliance Configure the Manager Appliance Configure the Manager Appliance Log on to the Manager Appliance and configure these settings. Task 1 Log on to the Manager Appliance. Username: ismadmin Password: admin123$ McAfee recommends that you change the password immediately. A new password must be at least 8 characters in length and must contain a combination of numbers, characters, and special characters. 2 The first time you log on, the Windows patching notice and end-user license agreement appear. Follow the on-screen prompts. The Manager Appliance Configuration Tool page is displayed. 3 Determine a host name for the Manager Appliance. In the Change Host Configuration area, do one of the following for Computer Name: Accept the generated host name. Type a new host name. 4 Click Apply. If you changed the host name, and you will be prompted to restart. 5 Determine a host name for the Manager Appliance. An auto-generated name appears in the Computer Name field, or you can type a new name. The Manager generates a public key certificate that uses the Manager Appliance host name. This certificate is used to authenticate the Manager server to any Manager clients in your deployment. Changing the host name after the certificate is generated will create a host name mismatch error, which can prevent the Manager server from communicating with the Manager client. If you wish to change the host name of the Manager Appliance, it is important that you use the Manager Appliance Configuration Tool to do so, as it automatically regenerates the Manager server certificate. 6 In the System Time area, click Change to change the Time zone, Date, and Time fields. 20 McAfee Network Security Platform Manager Appliance Installation Guide

21 Configuring the Manager Appliance Configure the Manager Appliance 4 7 In the Change Network Configuration area, do one of the following: Do nothing to use a DHCP-provided IP address. Type a static IP address, default gateway address, and primary and secondary DNS server IP addresses. 8 Click Apply. 9 In the Change Database Connection Configuration area, do the following: a Type and confirm a MySQL root password. (Default/old root password is admin123$) Do not lose this password, as you will need this password when upgrading to new versions of the Manager software. b Type and confirm a Connection password. (Default/old root password is admin123$) This password is used internally by the Manager software to connect to the MySQL database. Although not required, as a good security practice we recommend you change it from its default value. 10 Click Apply. 11 Click Finish to accept the values. 12 Reboot and restart the system. 13 Log on using the user name and password you established in step 1. You can now manage the Manager Appliance from a remote location using remote desktop connection. If necessary, unplug the monitor, keyboard, and mouse. McAfee Network Security Platform Manager Appliance Installation Guide 21

22 4 Configuring the Manager Appliance Change your settings Change your settings Use the Manager Appliance Configuration Tool to change your host name, IP address, database passwords, or to generate a new Manager certificate without changing the host name. To view existing network configuration settings, use the Windows Network Configuration Tool, as they are not displayed by this tool after they have been configured. After you have configured static network configuration settings, you must use the Windows Network Configuration Tool to reset the system to use dynamic network configuration settings. Start the Manager Appliance Configuration Tool 1 Double-click the Manager Appliance Configuration Tool icon on the desktop. 2 Change any settings. If you change any settings, you are prompted to restart the appliance. 3 Click Finish. Configure remote management You can manage the appliance remotely. Task 1 While the appliance is starting, press F2 to enter the BIOS configuration screen. Password: MCAFEE 2 Select Server Management BMC LAN Configuration. 22 McAfee Network Security Platform Manager Appliance Installation Guide

23 Configuring the Manager Appliance Configure remote management 4 3 Configure the IP Source, IP address, Subnet Mask, and Gateway IP fields. 4 Configure a user ID with administrator privilege and set a password. 5 Connect a network cable to RMM4 NIC port. 6 Access the configured IP address from another computer. You will be prompted to install a browser plugin which is required to run the remote viewing tool. McAfee Network Security Platform Manager Appliance Installation Guide 23

24 4 Configuring the Manager Appliance Configure remote management 24 McAfee Network Security Platform Manager Appliance Installation Guide

25 5 Working with the Manager software After the configuration, you can access the Manager software from a client system running Microsoft Windows 7 or 2008 R2. For information on using the Manager software, refer to Network Security Platform Manager Administration Guide. Contents Start the Manager software Access the Manager from a client machine Log on to the Manager Start the Manager software The Manager software, by default, starts automatically when the machine is booted. For new installations, or following an upgrade, the Manager software starts when the installation successfully completes. Task Use these steps to start the Manager. 1 In the lower-right corner of the desktop, click the Shield icon in the Windows System Tray. 2 If it is not already selected, select Start Manager. Access the Manager from a client machine You can access the Manager from a client machine. Task Start your browser and then type the URL of the Manager server: or host-ip> McAfee recommends accessing the Manager from a client machine because running the Manager interface client session on the Manager server can result in slower performance due to program dependencies, such as Java, which may consume a lot of memory. McAfee Network Security Platform Manager Appliance Installation Guide 25

26 5 Working with the Manager software Log on to the Manager Log on to the Manager After you have successfully started the Manager service and connected to the server via an Internet Explorer browser, the Login Screen appears. Task 1 Do one of the following: For initial login after a new installation: For Login ID, type admin. For Password, type admin123. McAfee strongly recommends that you change the default username and password as one of your first operations within Manager. If you are not the Network Security Platform system administrator/super User: Type the Login ID supplied to you by your administrator. Type the valid Password for the specified Login ID. 2 Click Login or press Enter. The Manager Home page appears. During initial login (per client), Network Security Platform prompts you to install the following: Security certificate granting the Manager program write access to your client. Click Always. Java runtime engine: You must install this plug-in to view objects in the Manager Home page and other areas of the Manager program, such as the Threat Analyzer. 26 McAfee Network Security Platform Manager Appliance Installation Guide

27 6 Maintaining 6 the Manager Appliance The Manager Appliance requires some user interaction for optimal performance. This interaction involves regular monitoring and maintenance of the environment, including the Manager Appliance hardware, Microsoft Windows operating system, updates to the Manager software application including the embedded MySQL database, McAfee Anti-Virus software, and Manager Appliance security hardening posture. Contents Managing the Manager Appliance using the remote desktop software Applying Microsoft Windows patches Maintaining your Manager Appliance database Upgrading your Manager software Hardening the Manager Appliance operating system Managing the Manager Appliance using the remote desktop software Microsoft's Remote Desktop software is enabled by default on the Manager Appliance. 1 From another computer, do the following: For Windows 7 or 2008 R2 systems, select Start Programs Accessories Communications Remote Desktop Connection. Enter the IP address of the Manager Appliance and click Connect. You must launch Remote Desktop to force a single session. In order to do so, change the properties and append /console (for example, the path looks like %SystemRoot%\system32\mstsc.exe /console) For Remote Desktop 6.1 clients or newer, you must launch Remote Desktop to force a single session. In order to do so, change the properties and append /admin (for example, the path looks like %SystemRoot% \system32\mstsc.exe /admin). After connected, you can manage the Manager Appliance using the Manager Appliance Configuration tool, or you can make settings changes using the standard Windows Administration tools. Applying Microsoft Windows patches Microsoft releases updates for the Windows operating system on a regular basis. You will occasionally receive notices from McAfee if a particular update is required for the Manager Appliance. Otherwise, applying patches is at your discretion. Microsoft Windows OS patching very often requires a system restart. In certain cases, an automatic restart can result in an unscheduled shutdown of the Network Security Platform Intrusion Prevention System service or potentially a non-graceful shutdown of the Manager server, leading to configuration data loss and/or database McAfee Network Security Platform Manager Appliance Installation Guide 27

28 6 Maintaining the Manager Appliance Maintaining your Manager Appliance database corruption. The Manager Appliance is configured to automatically download patches from Microsoft, but leave the time of patch application to you. Please see the Windows Automatic Updates help for more information on how to apply patches, or review the process on Microsoft's website for more information. Before applying any Microsoft patches, shut down the Manager software. Shut down the Manager 1 In the lower-right corner of the desktop, click the Shield icon in the Windows System Tray. 2 Select Stop Manager. Maintaining your Manager Appliance database You are entirely responsible for the maintenance of the Manager software, including regular database pruning and tuning as described in the product documentation. McAfee recommends that you develop an Manager database backup, tuning, and archival plan as part of your company's security policy. Database maintenance instructions can be found in the Network Security Platform documentation set. Upgrading your Manager software McAfee recommends that you regularly monitor for maintenance releases and new versions of the Manager software. Depending on its applicability, McAfee encourages you to upgrade to the latest released version. See the Network Security Platform release notes for new Manager feature information as well as known and fixed Manager issues. See the respective Upgrade Guide for information on safely upgrading to a new version of Manager. You should also regularly update your signature set and Sensor software. Refer to the respective Configuration Guide for information on how to download the latest signature set and Sensor software. Hardening the Manager Appliance operating system The Manager Appliance has been hardened by the application of the Microsoft Windows Firewall software and McAfee AntiVirus software. Windows Firewall settings The following ports have been left open for Network Security Platform system communication: Port Description Direction of communication 8501/TCP Proprietary (Install Port) Sensor-->Manager 8502/TCP Proprietary (Alert Channel/Control Channel) Sensor-->Manager 8503/TCP Proprietary (Packet Log Channel) Sensor-->Manager 8504/TCP Proprietary (File Transfer Channel) Sensor-->Manager 8555/TCP SSL/TCP/IP (Threat Analyzer) Client-->Manager 443/TCP SSL Web-based user interface Client -->Manager 28 McAfee Network Security Platform Manager Appliance Installation Guide

29 Maintaining the Manager Appliance Hardening the Manager Appliance operating system 6 Port Description Direction of communication 4167/UDP SNMP (Control Channel) Sensor-->Manager 80/TCP HTTP Client-->Manager (Webstart/JNLP, Console Applets) The system also allows ICMP incoming echo requests (pings). McAfee AntiVirus settings McAfee AntiVirus is locked down, with the following changes to the default settings: Scan once daily at 3:30 AM daily, local time Performs update (new DAT and engine files, as needed) once every 24 hours Restricts full scanning to the c: drive (d: is not scanned) Excludes Manager system files This is a perpetual license that is not necessary to renew. You can uninstall the AntiVirus software; however, you will not be able to reinstall this perpetual license without using the system recovery disc. McAfee Network Security Platform Manager Appliance Installation Guide 29

30 6 Maintaining the Manager Appliance Hardening the Manager Appliance operating system 30 McAfee Network Security Platform Manager Appliance Installation Guide

31 7 7 Resetting the Manager Appliance to factory default You can re-image the Manager Appliance to return the system to its factory settings. Resetting the Manager Appliance to factory defaults overwrites all existing data on the Manager Appliance and applies the factory default (fresh) image. Make sure to back up any information you want to retain (for example, your Manager configuration settings and your alert data) to another system before starting the reset process. Perform these steps to reset the Manager Appliance to factory defaults. 1 Insert the Manager Appliance Image Re-installation disc into the CD/DVD drive and reboot the Manager Appliance. 2 Click Restore. At the end of the restoration process, the system boots automatically. 3 Select Boot from active partition. 4 You can now remove the Manager Appliance Image Re-installation disc. 5 After the Manager Appliance has rebooted and you logon, the Manager Appliance Configuration Tool appears. Follow the steps in specifying the Manager Appliance settings to reconfigure the Manager Appliance. McAfee Network Security Platform Manager Appliance Installation Guide 31

32 7 Resetting the Manager Appliance to factory default 32 McAfee Network Security Platform Manager Appliance Installation Guide

33 8 8 Troubleshooting This section provides information on common issues that you may encounter as you configure and use the Manager Appliance. Contents The Manager Appliance is not receiving power The Manager Appliance will not start The Manager Appliance is not communicating with the network Troubleshooting a hardware failure The Manager Appliance is not receiving power If the appliance is not receiving power, check for these options. The Manager Appliance is connected properly to a working power outlet, using the supplied power cord. If the power outlet has a switch, make sure it is on. The Manager Appliance is correctly switched on. The power cord is plugged in to the back of the Manager Appliance. If the Manager Appliance is still not receiving power, check the power outlet by plugging other equipment into it. If the power outlet is working, there is a problem with the Manager Appliance or its power cord. The Manager Appliance will not start If the system information lights on the front panel do not appear after the Manager Appliance has had reasonable time to boot, the problem may be an IP address conflict with another computer on your network. To resolve this problem, configure the NICs to ensure they use only available IP addresses on your network. To do this, on the Manager Appliance select Start Settings Network Connection and configure the NIC. McAfee recommends that you use static IP address(es) for the Manager Appliance. McAfee Network Security Platform Manager Appliance Installation Guide 33

34 8 Troubleshooting The Manager Appliance is not communicating with the network The Manager Appliance is not communicating with the network Look for these options if the appliance is not receiving network traffic. Check the following: The Manager Appliance is turned on and its software is running, indicated by the lights on the front display panel. The Manager Appliance has a valid IP address and can ping the gateway (or can be pinged from another system). The network cables that you are using are undamaged and connected properly to the Manager Appliance ports and your existing network equipment. Make sure that the cables you use are the correct specification. You have used the correct LAN ports when connecting the Manager Appliance to your existing network equipment. You used NIC 1 for configuring the system; if not, try connecting via NIC 1 and perform the configuration process again. If the Manager Appliance is still not receiving network traffic, check the network cables and the network ports on your existing network equipment. If the cables and ports are working, there is a problem with the Manager Appliance. Contact your supplier. Troubleshooting a hardware failure If you suspect a hardware failure, contact McAfee Technical Support. McAfee recommends you troubleshoot all hardware issues in conjunction with a Technical Support Technician. 34 McAfee Network Security Platform Manager Appliance Installation Guide

35 Index A about this guide 5 accessing 25 B BIOS 22 C communicating receiving traffic 34 contents 11 conventions and icons used in this guide 5 D documentation product-specific, finding 6 typographical conventions and icons 5 F factory default 31 failure 34 H hardening 28 hardware requirements 8 I indicator lights 13 installing 15 L lights indicator 13 logging 26 McAfee ServicePortal, accessing 6 mounting rails 16 mounting railsinstalling 16 N network recommendations 8 NIC ports 7 P positioning 15 R receiving power 33 remote management 22 removing 17 S ServicePortal, finding product documentation 6 settings 22 starting 25 starting issue 33 T technical support, finding product information 6 U unpacking 11 upgrading 28 W warnings 7 what's in this guide 5 Windows patches 27 working 25 M maintaining 27, 28 McAfee Network Security Platform Manager Appliance Installation Guide 35

36 B00