NTBA Applince T-200 nd T-500 Quick Strt Guide Revision B McAfee Network Security Pltform 1 Instll the mounting rils Position the mounting rils correctly nd instll them t sme levels. At the front of the rck, position one of the mounting rils so tht its mounting rcket ligns with the required rck holes. Clip the ril into the rck. Figure 1 Slide ril instlltion c d e At the ck of the rck, pull the ck mounting-rcket (extending the mounting ril) so tht it ligns with the required rck holes. Clip the ril to the rck nd secure it. Repet these steps to secure the second mounting ril to the rck. Mke sure tht the mounting rils re t the sme level on ech side of the rck. Mke sure tht you follow the sfety wrnings. When identifying where you wnt the NTBA Applince to go in the rck, rememer tht you should lwys lod the rck from the ottom up. If you re instlling multiple NTBA Applinces, strt with the lowest ville position first. 1
Instll the NTBA Applince in the mounting rils 1 With help from nother person, lift the NTBA Applince so tht the side rils t the ck of the NTBA Applince re ligned with the mounting rils in the rck, then push the NTBA Applince into the mounting rils until it stops. Lifting the NTBA Applince nd ttching it to the rck is two-person jo. 2 Use screwdriver to fix screw through the front nd ck rck holes to secure the system to the rck. 3 Attch the provided cle mngement rm if required. 4 Attch the lockle ezel to protect the front pnel if required. 2 Front pnel fetures nd indictors T-500 nd T-200 The front pnel fetures nd indictors of NTBA Applince T-500 nd T-200 re s follows: Figure 2 Front pnel T-500 nd T-200 Item Description 1 Hrd drives 2 Opticl drive 3 Power-on indictor (on the Mini Control Pnel) 4 System identifiction indictor light (on the Mini Control Pnel) 5 USB connector (on the Mini Control Pnel) 2
3 Bck pnel fetures nd indictors T-500 The ck pnel fetures nd indictors of NTBA Applince T-500 re s follows: Figure 3 Bck pnel T-500 Item Description 1 System identifiction indictor light 2 Console port 3 Video connector 4 USB ports (4) 5 Mngement port 6 Remote mngement module NIC 7 Collection ports (2-copper) 8 Power supply 1 9 Power supply 2 10 Collection ports (2-fier) 11 Power supply 1 sttus indictor light 12 Power supply 2 sttus indictor light 4 Bck pnel fetures nd indictors T-200 The ck pnel fetures nd indictors of NTBA Applince T-200 re s follows: Figure 4 T-200 ck pnel Item Description 1 System identifiction indictor light 2 Console port 3
Item Description 3 Video connector 4 USB ports (4) 5 Mngement port 6 Remote mngement module NIC 7 Collection ports (4-copper) 8 Power supply 1 sttus indictor light 9 Power supply 1 10 Power supply 2 sttus indictor light 11 Power supply 2 5 Hrdwre specifictions Tle 1 Hrdwre specifictions Applince model T-200 T-500 Form fctor 1U 1U Width 16.9" (430 mm) 16.9" (430 mm) Depth 27.19" (690.6 mm) 27.19" (690.6 mm) Height 1.69" (43 mm) 1.69" (43 mm) Mximum weight 17.2 kg (38.1 ls) 17.2 kg (38.1 ls) Redundnt power supply 650W 650W Quiescent power utiliztion 170W 225W Estimted inlet power utiliztion (worst cse scenrio) 426W 544W 6 NTBA Applince - technicl specifictions Tle 2 NTBA Applince technicl specifictions Prmeter Limits Dimensions Height - 43.2 mm 1.70 in Depth without CMA - 665.5 mm 26.2 in Width without rils - 430.0 mm 16.93 in Width with rils - 470.0 mm 18.50 in Depth with CMA - 812.8 mm 32.00 in Operting Temperture Non- Operting Temperture +10 C to +35 C with the mximum rte of chnge not to exceed 10 C per hour -40 C to +70 C 4
Tle 2 NTBA Applince technicl specifictions (continued) Prmeter Limits Non- Operting Humidity 90%, non-condensing t 35 C Acoustic noise Shock, operting Shock, unpckged Shock, pckged Virtion, unpckged ESD System Cooling Requirement in BTU/Hr Sound power: 7.0 BA in n idle stte t typicl office mient temperture. (23 +/- 2 C) Hlf sine, 2 g pek, 11 milliseconds Trpezoidl, 25 g, velocity chnge 136 inches/second ( 40 ls to <80 ls) Non-plletized free fll in height 24 inches ( 40 ls to <80 ls) 5 Hz to 500 Hz, 2.20 g RMS rndom +/- 15 KV except I/O port +/- 8 KV per Intel Environmentl test specifiction 2250 BTU/hour 7 Cling the T-500 NTBA Applince The T-500 NTBA Applince hs four collection ports nd one mngement port. The collection ports connect to the network infrstructure tht genertes the NetFlow dt from the routers nd McAfee Network Security Sensor (Sensor)s. The four collection ports cn e used to distriute the NetFlow dt from different routers nd Sensors. The mngement port connects to network device tht in turn connects to the Mnger. The NTBA Applince is mnged through the Mnger. Ports for cling in the ck pnel Figure 5 T-500 ck pnel Item Description 1 Console port 2 Mngement port 3 Collection ports (2-copper) 4 Collection ports (2-fier) 5
8 Cling the T-200 NTBA Applince The T-200 NTBA Applince hs four collection ports nd one mngement port. The collection ports connect to the network infrstructure tht genertes the NetFlow dt from routers nd McAfee Network Security Sensor (Sensor)s. The four collection ports cn e used to distriute the NetFlow dt from different routers nd Sensors. The mngement port connects to network device tht in turn connects to the Mnger. The NTBA Applince is mnged through the Mnger. Ports for cling in the ck pnel Figure 6 T-200 ck pnel ports Item Description 1 Console port 2 Mngement port 3 Collection ports (2-copper) 4 Collection ports (2-copper) 9 Connect the console ports Plug console cle (RJ45 to DB9 seril) to the console port t the ck pnel of the NTBA Applince. Connect the other end of the cle directly to the seril port of the PC or Terminl Server you will e using to configure the NTBA Applince (for exmple, PC running correctly configured Windows HyperTerminl softwre.) 6
You must connect directly to the console for initil configurtion. You cn't configure the NTBA Applince remotely. The required settings for HyperTerminl re: Nme Setting Bud rte 115200 Numer of Bits 8 Prity Stop Bits 1 Control Flow None None The procedure for cling the console port of NTBA Applince T-1200 nd T-600 is similr. 10 Connect the power cles Connect one end of the power cle to the NTBA Applince. Plug the other end of the power cle into grounded electricl outlet or seprte power source such s n uninterrupted power supply (UPS) or power distriution unit (PDU). When you connect power to the pplince, the pplince will immeditely turn on nd oot up. 11 Instll the Mnger softwre c Prepre the system ccording to the requirements outlined in the McAfee Network Security Pltform Instlltion Guide nd McAfee Network Security Pltform Relese Notes. Close ll open pplictions. Insert the Mnger CD into the pproprite drive of the Windows server tht you wnt to use s your Mnger server. Follow the instructions in the Instlltion Wizrd s it guides you through the entire process. You must hve dministrtor rights on the trget Windows server to instll the Mnger softwre. A MySQL dtse is included with the Mnger nd is instlled (emedded) utomticlly on your trget Windows server during this process. 7
12 Add the NTBA Applince to the Mnger Adding n NTBA Applince to the Mnger enles the Mnger to ccept communiction from physiclly instlled nd network-connected Applince. After communiction hs een estlished, the Mnger llows editing of the Applince configurtion. The lert dt is ville in the Attck Log nd Report queries. You cn dd device y selecting Devices <Admin Domin Nme> Glol Add nd Remove Devices ut it is recommended to use the Add Device Wizrd to dd ll devices (except Virtul HIP Sensors) nd to estlish the trust etween the Mnger nd the device. The Add Device Wizrd window is displyed fter the Mnger Initiliztion Wizrd is completed. McAfee recommend to first dd n Applince to the Mnger. Select Devices <Admin Domin Nme> Glol Add Device Wizrd. The Preprtion pge is displyed. Click Next. The Add New Device pge is displyed. c Enter the device nme. The nme must egin with letter nd cn contin lphnumeric chrcters, hyphens, underscores nd periods. The length of the nme is not configurle. d e Select the Device Type s NTBA Applince. Enter the Shred Secret (repet t Confirm Shred Secret). The device nme nd shred secret re cse-sensitive. The Device Nme nd Shred Secret must lso e entered on the device commnd line interfce (CLI) during physicl instlltion nd initiliztion. If not, the Applince will not e le to register itself with the Mnger. The shred secret must e minimum of 8 chrcters in length: the length of the shred secret is not configurle. The shred secret cnnot strt with n exclmtion mrk or hve ny spces. The chrcters tht cn e used while creting shred secret re s follows: 26 lph: upper nd lower cse (,,c,...z nd A, B, C,...Z) 10 digits: 0 1 2 3 4 5 6 7 8 9 32 symols: ~ `! @ # $ % ^ & * ( ) _ + - = [ ] { } \ ; : " ',. <? / f g h For NTBA Applince, the Updting mode is set to Online. [Optionl] Enter the Contct Informtion nd Loction. Click Next. The Trust Estlishment pge is displyed. 8
i Follow the instructions on the pge to complete the commnd line interfce (CLI) setup nd click Check Trust. Using the commnd line interfce (CLI), enter the necessry informtion for the Applince identifiction nd communiction s descried in the McAfee Network Security Pltform Instlltion Guide. If you set up the NTBA Applince first, fter the Mnger ddition, you need to return to the Applince to reset the shred secret key nd egin Applince-to-Mnger communiction. j Click Next. The Next utton is enled once the trust etween the Applince nd the Mnger is estlished. The Port Settings pge is displyed. By defult, the collection ports re disled. k Enle the ports nd modify settings. Click Sve nd then Next. The Generl Settings pge is displyed. l Configure NTBA Applince settings for collection ports. Click Next. The DNS Settings pge is displyed. m By defult glol settings re inherited. If you wish, modify the DNS server detils. Click Next. The Exporters pge is displyed. n Add router exporter tht will forwrd records to the NBA Sensor for processing nd click Next. To dd IPS exporter, go to IPS devices. The Inside Zones pge is displyed. o Add new inside zone or edit the defult inside zones. Click Next. The Outside Zones pge is displyed. p Add new outside zone or edit the defult outside zone. Click Next. The Updte Configurtion pge is displyed. q Click Updte to deploy configurtion on the device. This might tke some time. The Updte Sttus r displys 100% complete. r Click Finish. On the Devices t, under the Device drop-down list, the NTBA Applince is dded. From Glol Add nd Remove Devices option, you cn lso view the dded Applince. 13 Set up NTBA Applince Plug console cle (RJ45 to DB9 seril) to the console port t the ck pnel of the NTBA Applince. Connect the other end of the cle directly to the seril port of the PC or Terminl Server you re using to configure the NTBA Applince. (For exmple, PC running correctly configured Windows HyperTerminl softwre.) 9
The required settings for HyperTerminl re: Nme Setting Bud rte 115200 Numer of Bits 8 Prity None Stop Bits 1 Control Flow None c d e f Run the HyperTerminl. At the logon prompt, log on to the NTBA Applince using the defult user nme dmin nd pssword dmin123. At the Press Y to strt the setup now or N to do it lter prompt, enter Y. Set nd confirm setup pssword. Wit for some time to configure the NTBA Applince. At the Plese enter the sensor nme prompt, enter the nme of the NTBA Applince. The vlues etween <> chrcters re to e entered y the user, excluding the <> chrcters. Exmple: nt_pplince_1 The NTBA Applince nme is cse-sensitive lphnumeric chrcter string up to 25 chrcters. The string must egin with letter nd cn include hyphens. underscores, periods ut not spces. The NTBA Applince nme typed here should e identicl to the one entered ginst Device Nme in the Add New Device pge of the Mnger. g At the Plese enter the sensor IP(A.B.C.D) prompt, type the mngement port IP ddress of the NTBA Applince. Specify 32-it ddress written s four eight-it numers seprted y periods s in <A.B.C.D>, where A, B, C, or D is n eight-it numer etween 0-255. Exmple: 10.213.173.237 Setting the IP ddress for the first time during the initil configurtion of the NTBA Applince does not require n NTBA Applince reoot. Susequent chnges to the IP ddress however, require reoot for the chnge to tke effect. h At the Plese enter the sensor sunet msk(a.b.c.d) prompt, type the mngement port sunet msk of the Applince. <A.B.C.D> represents the sunet msk. Exmple: 255.255.255.0 i j At the Plese enter the mnger primry IPv4 ddress(a.b.c.d) prompt, type the IPv4 ddress of the Mnger server. Exmple: 192.34.3.2 (Optionl) At the Press Y to configure mnger secondry IP ddress prompt, type Y if you wish to set Mnger secondry IP ddress. By defult, this is set to N. 10
k At the Plese enter the sensor defult gtewy(a.b.c.d) prompt, type the IP ddress. Use the sme convention s for the Sensor IP ddress. Note tht you should e le to ping the gtewy. The gtewy should e rechle. Exmple: 192.34.2.8 l m n o Mke sure you hve set shred secret key on the Mnger for this Sensor. At the Plese enter shred secret key prompt, type the shred secret key vlue. This vlue is used to estlish trust reltionship etween the NTBA Applince nd the Mnger. Type the sme shred secret key vlue tht you typed in the Add New Device pge of the Mnger. The NTBA Applince prompts you to verify the vlue. Mke sure tht the configurtion settings to this point hve successfully estlished the NTBA Applince on the network. Type the vlue gin nd press ENTER. You cn chnge the NTBA Applince pssword y using the psswd commnd. A pssword must e etween 8 nd 25 chrcters, is cse-sensitive, nd cn consist of ny lphnumeric chrcter or symol. McAfee strongly recommends tht you choose pssword with comintion of chrcters tht is esy for you to rememer ut difficult for someone else to guess. 14 Verify successful NTBA Applince configurtion You cn check whether the NTBA Applince is configured nd is ville y executing the following ctions: Verifiction process You cn check the NTBA Applince configurtion s follows: At the NTBA Applince console type sttus. The sttus informtion of the NTBA Applince is displyed. This includes informtion on whether the NTBA Applince is initilized nd its helth sttus. At the NTBA Applince console type show. The system informtion is displyed. This includes informtion on system uptime nd the sttus of the Mngement port link. To exit the session, type exit. To view or configure the settings of the collection ports for the NTBA pplince, you ccess the configurtion pge in Devices <Admin Domin Nme> Devices <Device Nme> Setup Physicl Ports. Downlod the ltest NTBA Applince softwre Select Mnger <Admin Domin Nme> Updting Downlod Device Softwre. The Downlod Device Softwre pge is displyed. Select the ltest softwre listed under Softwre Aville for Downlod nd click Downlod. The Downlod Sttus window is displyed. 11
c Click Close Window once the downlod is complete. The downloded softwre is listed under Softwre on the Mnger in the Downlod Device Softwre pge s lso in the Deploy Device Softwre pge (Devices <Admin Domin Nme> Devices <NTBA Applince> Mintennce Deploy Device Softwre). Upgrde NTBA Applince softwre You need to upgrde to the ltest ville version from the Mnger. c Select Devices <Admin Domin Nme> Devices <NTBA Applince> Mintennce Deploy Device Softwre. The Deploy Device Softwre pge is displyed. Select the ltest softwre listed under Softwre Redy for Instlltion nd click Upgrde. The Downlod Sttus pge is displyed. Click Close Window once the downlod is complete. Copyright 2017 McAfee, LLC McAfee nd the McAfee logo re trdemrks or registered trdemrks of McAfee, LLC or its susidiries in the US nd other countries. Other mrks nd rnds my e climed s the property of others. 12 700-3622B00