Hardware Guide. McAfee MVM3200 Appliance

Transcription

1 Hardware Guide McAfee MVM3200 Appliance

2 COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARKS McAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism, McAfee Artemis, McAfee CleanBoot, McAfee DeepSAFE, epolicy Orchestrator, McAfee epo, McAfee EMM, McAfee Enterprise Mobility Management, Foundscore, Foundstone, McAfee NetPrism, McAfee Policy Enforcer, Policy Lab, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, SmartFilter, McAfee Stinger, McAfee Total Protection, TrustedSource, VirusScan, WaveSecure, WormTraq are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. Issued 5/7/ :37 / McAfee Vulnerability Manager Appliance Guide A00

3 Contents Introduction... 5 Warnings... 5 Before installing the MVM Hardware specifications and environment requirements... 6 Find product documentation... 7 Unpack the MVM MVM3200 front panel description... 8 MVM3200 back panel description... 9 Install the MVM Position the MVM Install the MVM3200 in a rack Connect the MVM3200 to power and the network Start the MVM3200 and enter the BIOS password Software documentation Reset the MVM3200 to factory defaults Troubleshooting The appliance is not receiving power The appliance is not communicating with the network McAfee MVM3200 Appliance Hardware Guide iii

4

5 Introduction The MVM3200 is part of the McAfee vulnerability management system. The MVM3200 is a 1-U rackmountable server that runs with a pre-installed, hardened Microsoft Windows Server operating system. You can set up the MVM3200 to run: McAfee Vulnerability Manager a b c d Scan Engine, Enterprise Manager, and database configured on the single appliance (All-in-One). Scan Engine and database. In a distributed environment with multiple Scan Engines, this would be the primary Scan Engine. Enterprise Manager only. Scan Engine only. The MVM3200 can also host any of these McAfee Vulnerability Manager components: Configuration Manager Report Engine Data Synchronization Service Notification Service API Server Warnings Caution To ensure the safe operation of the appliance, read all documentation before installing. Appliance power on/off the push-button on/off power switch on the front panel of the appliance does not turn off the AC power. To remove AC power from the appliance, you must unplug the AC power cord from the power supply or wall outlet. Warning The power supplies in your system might produce high voltages and energy hazards, which can cause bodily harm. Do not remove the cover. Only trained service technicians are authorized to remove the covers and access any of the components inside the system. This system might have more than one power supply cable. To reduce the risk of electrical shock, a trained service technician must disconnect all power supply cables before servicing the system. Hazardous conditions devices and cables: Hazardous electrical conditions might be present on power, telephone, and communication cables. Turn off the appliance and disconnect telecommunications systems, networks, modems, and the power cords attached to the appliance before opening it. Otherwise, personal injury or equipment damage can result. Avoid injury: Lifting the appliance and attaching it to the rack is a two-person job. The appliance weighs approximately 15 kg (33 lb). Before installing the MVM3200 Before you install the MVM3200, it is recommended that you do the following: Read the provided safety information. McAfee MVM3200 Appliance Hardware Guide 5

6 Introduction Hardware specifications and environment requirements Make sure that you have selected a suitable location for installing the MVM3200. Check that you have all the necessary equipment and components as described in this document. Familiarize yourself with the MVM3200 NIC ports and connectors as described in this document. Know the ports and IP address(es) to be used by the MVM3200. Before you install McAfee Vulnerability Manager, it is recommended that you do the following: Know the IP address of the database. If you are integrating with a previous installation, you also need to know the name of the database user (both the database and user are named faultline) and the associated password that was created for this user when you initially installed the product. Know the location or port number of the Configuration Manager and the Enterprise Manager. Determine a host name for the MVM3200. Make sure that the name can be resolved from the Enterprise Manager server. This is done by adding it to the hosts file on the Enterprise Manager server, or by registering the name in the Domain Name Server (DNS). Warning: To ensure the safe operation of the MVM3200, read all documentation before installing. Hardware specifications and environment requirements This section describes the network recommendations, hardware specifications, and environmental requirements for the MVM3200. Network recommendations Although the MVM3200 supports both DHCP and static IP address networks, McAfee strongly recommends that you use static IP addresses. In addition, McAfee recommends having a DNS server on your network. This allows reverse mapping between discovered IP addresses and host names, providing better reports and more information from your scans. It also provides the ability to specify credentials using fully-qualified domain names. Hardware specifications and environmental requirements Dimensions mm (26.18")D x mm (19")W x cm (1.70")H Weight (maximum configuration) kg (33.25 lb) Power delivery Power Supply 450w AC power supply, minierp, 80+ Gold, supporting 1+1 redundant configuration Environment Ambient Temperature Operating: +10 C to +35 C, with a maximum rate of change not to exceed 10 C per hour. Non-operating: -40 C to +65 C Non Operational Humidity 50%- 90%, non-condensing with a maximum wet bulb of 28 C McAfee MVM3200 Appliance Hardware Guide 6

7 Unpack the MVM3200 MVM3200 front panel description Find product documentation McAfee provides the information you need during each phase of product implementation, from installing to using and troubleshooting. 1 Go to the McAfee Product Download ( site. 2 Type in your grant number, then click Submit. 3 Select McAfee Vulnerability Manager. After a product is released, information about the product is entered into the McAfee online KnowledgeBase at Unpack the MVM3200 This section describes the contents of the MVM3200 package. Carefully unpack and remove the contents of the shipping box. You should have the following: 1 MVM3200 appliance 2 Accessory kit, containing: a Rails (2) b Front bezel (with bezel keys) c Power cord(s) 3 Accessory bag, containing: a Safety Warning document b Vulnerability Manager 3200 Appliance Hardware Install Guide c Vulnerability Manager 3200 Appliance License Addendum d Microsoft SQL 2005 Certificate of Authenticity (COA) card Important: It is very important that you retain the Microsoft SQL Certificate of Authenticity (COA) card. This card contains the license key required for installing or re-installing Microsoft SQL. e f g USB flash drive Hardware diagnostic McAfee Limited Warranty on Hardware McAfee Vulnerability Manager Recovery Image MVM3200 DVD Verify that you have all of the components listed above. If you don't, contact McAfee Technical Support. McAfee MVM3200 Appliance Hardware Guide 7

8 Unpack the MVM3200 MVM3200 front panel description MVM3200 front panel description The following illustration shows the location of connectors and indicator lights on the front panel of the MVM3200. Figure 1: MVM3200 front panel Front panel connector and indicator lights Item A B C D E Description Slim-line optical drive bay Dual USB 3.0 ports System control panel HDD power LED HDD activity/fault LED F Hard drive bays 0-3 McAfee MVM3200 Appliance Hardware Guide 8

9 Unpack the MVM3200 MVM3200 back panel description MVM3200 back panel description The following illustration shows the locations of connectors on the back panel of the MVM3200. Figure 2: MVM 3200 back panel Back panel connectors Item A B C D E F G H I J K Description Redundant power supply units Power supply status LED Remote management module 4 (RMM4) NIC 1 and 2 connectors RJ-45 (left and right) NIC 3 and 4 connectors RJ-45 (left and right) Serial port DisplayPort Video out Dual USB 2.0 ports Dual USB 3.0 ports Reserved for IO module external connectors McAfee MVM3200 Appliance Hardware Guide 9

10 Install the MVM3200 Install the MVM3200 in a rack Install the MVM3200 This section describes how to attach rails and mount the MVM3200 in a rack. Position the MVM3200 The MVM3200 must be installed in a suitable location (such as a rack). Since it is designed to be operated remotely, physical access to the MVM3200 is needed only to connect networking cables and the power supply cord and to connect a monitor, keyboard, and mouse to configure the software. Initial setup requires attaching a single network cable to the back of the MVM3200. Once the network setup is finished, physical access to the MVM3200 is necessary only to reset the MVM3200. A rack mounting kit is supplied with the appliance so you can install the appliance in a 19-inch rack, as described in the following rack mounting instructions. Install the MVM3200 in a rack Use the rack mounting kit included with the MVM3200 to install the unit. Follow the rack installation instructions that are included with the rack mounting kit. Connect the MVM3200 to power and the network Once you have installed the MVM3200 in the rack, connect the appliance to the power source and to your network. Connect a monitor, keyboard, and mouse, which are required to install the software. 1 Plug the AC cord into the back of the appliance, and then plug the other end of the cord into an appropriate power source. If power redundancy is required, plug the second power supply into a different power source. 2 Connect a network cable to each network interface card (NIC). If only one NIC is required, connect the network cable to NIC 1. See MVM3200 Front and Back Panel Descriptions (page 8) for more information. 3 Connect a monitor, mouse, and keyboard to the rear of the appliance. Note: Once the initial installation and configuration are completed, you can manage the MVM3200 from a remote computer. McAfee MVM3200 Appliance Hardware Guide 10

11 Start the MVM3200 appliance Install the MVM3200 in a rack Start the MVM3200 appliance After the MVM3200 hardware is setup, you can start the appliance and install the product. The BIOS on the MVM3200 is password-protected and you have the option of changing it. 1 Turn on the power for the MVM3200 using the power button on the front panel. Warning: Appliance power on/off the push-button on/off power switch on the front panel of the appliance does not turn off the AC power. To remove AC power from the appliance, you must unplug the AC power cord(s) from either the power supply or wall outlet. 2 The BIOS on the MVM3200 is password protected. By default, it is set to MCAFEE. It is recommended that the system administrator access the BIOS (press F2 Setup during the boot process) and change this BIOS admin password to one that follows the user's security guidelines. Once it s changed, press F10 to save and reboot. 3 When the MVM3200 has finished booting, you can install McAfee Vulnerability Manager. The McAfee Vulnerability Manager installer launches automatically. Software documentation You can install either the latest version or the previous version of McAfee Vulnerability Manager on the MVM3200 appliance. The appliance ships with the McAfee Vulnerability Manager installer on the hard drive. Or you can use the installation disc (in the accessory kit) or visit McAfee Product Downloads to download the software and view the documentation online. You must enter your grant number, select your product, and accept the McAfee End User License Agreement before you can access the software or online documentation. McAfee Vulnerability Manager documentation McAfee Vulnerability Manager allows you to install all the components on one system, install a predefined set of components on two or more systems, or select the components you want to install. There is a Quick Start guide link included in the installer. The Quick Start guide is a simple overview of the software installation process and guides you through to the completion of your first scan. The MVM3200 Software Installation guide and other product documentation can be found on the installation disc, in the product version folder, and must be viewed on a system that has Adobe Acrobat Reader. Note: McAfee Vulnerability Manager documents are on the installation disc and the documentation disc. McAfee MVM3200 Appliance Hardware Guide 11

12 Reset the MVM3200 to factory defaults Install the MVM3200 in a rack Reset the MVM3200 to factory defaults Resetting the MVM3200 to factory defaults overwrites all existing data on the MVM3200 and applies the factory default (fresh) image. Note: Be sure to back up any information you want to retain before starting the reset process. 1 Insert the McAfee Vulnerability Manager Recovery Image MVM3200 disc into the DVD drive and reboot the MVM On the restore the original system installation screen, click Restore to continue. The restoration process might take several minutes. 3 After the restoration process is complete, you will be brought back to the Acronis restore screen. Remove the System Restoration disc and restart the MVM3200 by performing a hard reset (turn the system off by pressing and holding the power button). 4 Once the MVM3200 has started, type a password for the "applianceadmin" account, then retype it to confirm. The system reboots again. 5 Once the MVM3200 has rebooted, log on using "applianceadmin" credentials and the password entered. The MVM3200 Setup Wizard appears. See the McAfee Vulnerability Manager (MVM) 3200 Software Install Guide to reconfigure the appliance. The MVM3200 Software Installation guide and other product documentation can be found on the McAfee Product Download site. McAfee MVM3200 Appliance Hardware Guide 12

13 Troubleshooting The appliance is not communicating with the network Troubleshooting This section provides information on common issues that you might encounter as you configure and use the appliance. The appliance is not receiving power Check the following: The appliance is connected properly to a working power outlet, using the supplied power cord. If the power outlet has a switch, make sure it is on. The power cord is plugged in to the back of the appliance. If the appliance is still not receiving power, check the power outlet by plugging other equipment into it. If the power outlet is working, there is a problem with the appliance or its power cord. Contact your supplier or McAfee Technical Support. The appliance is not communicating with the network Check the following: The appliance is turned on and its software is running, indicated by the lights on the front display panel. The network cables that you are using are undamaged and connected properly to the appliance ports and your existing network equipment. Ensure that the cables you use are the correct specification. You have used the correct LAN ports when connecting the appliance to your existing network equipment. There are no IP address conflicts. If the appliance is still not receiving network traffic, check the network cables and the network ports on your existing network equipment. If the cables and ports are working, there is a problem with the appliance. Contact your supplier or McAfee Technical Support. McAfee MVM3200 Appliance Hardware Guide 13

14 McAfee Vulnerability Manager Vulnerability Manager Appliance Guide A00