McAfee Network Security Platform

Reference Guide Revision I McAfee Network Security Platform NS-series Interface Modules

COPYRIGHT Copyright 2017 McAfee, LLC TRADEMARK ATTRIBUTIONS McAfee and the McAfee logo, McAfee Active Protection, epolicy Orchestrator, McAfee epo, McAfee EMM, Foundstone, McAfee LiveSafe, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, McAfee Stinger, True Key, TrustedSource, VirusScan are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. LICENSE INFMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FTH THE GENERAL TERMS AND CONDITIONS F THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT PURCHASE DER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE THE PLACE OF PURCHASE F A FULL REFUND. 2 McAfee Network Security Platform Reference Guide

Contents 1 Overview 5 Contents of the box.................................. 5 Installation of the interface module............................ 8 Install the interface module during a fresh installation of the Sensor............. 8 Install the interface module on an up and running Sensor................. 8 Install the transceiver module.............................. 9 2 Technical 11 2-port QSFP+ 40 Gigabit interface module......................... 11 4-port QSFP+ 40 Gigabit interface module......................... 11 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module.............. 12 4-port 10/1 Gig MM 50 micron with internal fail-open interface module.............. 13 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module.............. 13 4-port RJ-45 10 Gbps/1 Gbps/100 Mbps with internal fail-open interface module........... 14 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module.............. 15 8-port SFP/SFP+ 1/10 Gigabit interface module....................... 15 McAfee Network Security Platform Reference Guide 3

Contents 4 McAfee Network Security Platform Reference Guide

1 1 Overview McAfee's NS-series network modules offer a variety of network interfaces, densities, and Sensor deployment options. The 2-port QSFP+ (Quad Small Form-Factor Pluggable Plus) Network Interface Module provides 40 Gigabit ethernet performance on each port. The 4-port QSFP+ (Quad Small Form-Factor Pluggable Plus) Network Interface Module provides 40 Gigabit ethernet performance on each port. The 4-port SM 8.5 micron with internal fail-open Network Interface Module provides 10/1 Gigabit ethernet performance on each port. The 4-port MM 50 micron with internal fail-open Network Interface Module provides 10/1 Gigabit ethernet performance on each port. The 4-port MM 62.5 micron with internal fail-open Network Interface Module provides 10/1 Gigabit ethernet performance on each port. The 6-port RJ 45 with internal fail-open Network Interface Module provides 10/100/1000 Mbps ethernet performance on each port. The 8-port SFP+/SFP (Small Form-Factor Pluggable Plus) Network Interface Module provides 10/1 Gigabit ethernet performance on each port. Contents Contents of the box Installation of the interface module Install the transceiver module Contents of the box The following interface modules are shipped. McAfee Network Security Platform Reference Guide 5

1 Overview Contents of the box 2-port QSFP+ 40 Gigabit interface module (screws fixed on the sides of the module to attach it to the Sensor ) Figure 1-1 2-port QSFP+ 40 Gigabit interface module 4-port QSFP+ 40 Gigabit interface module (screws fixed on the sides of the module to attach it to the Sensor ) Figure 1-2 4-port QSFP+ 40 Gigabit interface module 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor ) Figure 1-3 4-port 10/1 Gig SM 8.5 µm with internal fail-open interface module 6 McAfee Network Security Platform Reference Guide

Overview Contents of the box 1 4-port 10/1 Gig MM 50 micron with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor ) Figure 1-4 4-port 10/1 Gig MM 50 µm with internal fail-open interface module 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor ) Figure 1-5 4-port 10/1 Gig MM 62.5 µm with internal fail-open interface module 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module (screws fixed on the sides of the module to attach it to the Sensor ) Figure 1-6 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module McAfee Network Security Platform Reference Guide 7

1 Overview Installation of the interface module 8-port SFP/SFP+ 1/10 Gigabit interface module (screws fixed on the sides of the module to attach it to the Sensor ) Figure 1-7 8-port SFP/SFP+ 1/10 Gigabit interface module Installation of the interface module This section provides instructions on how to install the interface module based on the following scenarios: Install the interface module during a fresh installation of the Sensor. Install the interface module on an up and running Sensor. Install the interface module during a fresh installation of the Sensor This section provides the steps to install the interface module for a fresh installation of Manager and Sensor. Task 1 Remove the module from its protective packaging. It is assumed that the Sensor is yet to be powered on, and trust between the Sensor and the Manager has not been established. 2 Grip the sides of the module with your thumb and forefinger and insert the module into the slot. Figure 1-8 Install an interface module 3 Drive in the screws fixed on the sides of the module to attach it to the Sensor. 4 Turn on the Sensor. 5 Establish trust between the Sensor and the Manager. Install the interface module on an up and running Sensor This section provides the steps to install the interface module on a Sensor which is up and running. 8 McAfee Network Security Platform Reference Guide

Overview Install the transceiver module 1 Task 1 Power on the Sensor without inserting the pluggable module(s) into the slot(s). 2 Establish trust between the Sensor and the Manager. 3 Grip the sides of the module with your thumb and forefinger and insert the module into the slot. 4 Wait for 5 minutes. 5 Reboot the Sensor from the CLI. Install the transceiver module McAfee's 850 nanometer QSFP+ transceiver modules are designed for use in 40 Gbps links over multimode fiber. McAfee's 850 and 1310 nanometer SFP+/SFP transceivers are designed for use in 10/1 Gbps links over multi mode or single mode fiber. This section provides the steps to install a module. Task 1 Remove the module from its protective packaging. 2 Locate the label on the module and make sure that the alignment groove is down. 3 Grip the sides of the module with your thumb and fore-finger and insert the module into the module socket. Modules are keyed to prevent incorrect insertion. Figure 1-9 Insert a transceiver module For more information, see the McAfee Network Security Platform NS-series Transceiver Modules Reference Guide. The 4-port 10/1 Gig SM 8.5 µm, MM 50 µm, and MM 62.5 µm network interface modules have in-built SFP+ transceivers. McAfee Network Security Platform Reference Guide 9

1 Overview Install the transceiver module 10 McAfee Network Security Platform Reference Guide

2 Technical 2 This section details the technical of the interface modules. Contents 2-port QSFP+ 40 Gigabit interface module 4-port QSFP+ 40 Gigabit interface module 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module 4-port 10/1 Gig MM 50 micron with internal fail-open interface module 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module 4-port RJ-45 10 Gbps/1 Gbps/100 Mbps with internal fail-open interface module 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module 8-port SFP/SFP+ 1/10 Gigabit interface module 2-port QSFP+ 40 Gigabit interface module The technical for the 2-port QSFP+ 40 Gigabit interface module are listed in the following table. Ports per module Product compatibility Front panel LEDs Physical dimensions Environmental 2 ports of 40 Gigabit Ethernet QSFP+ Supported in NS9100, NS9200, NS9300 Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) in Weight: 1Lb Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 4-port QSFP+ 40 Gigabit interface module The technical for the 4-port QSFP+ 40 Gigabit interface module are listed in the following table. McAfee Network Security Platform Reference Guide 11

2 Technical 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module Ports per module Product compatibility Front panel LEDs Physical dimensions Environmental 4 ports of 40 Gigabit Ethernet QSFP+ Supported in NS9100, NS9200, NS9300 Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) in Weight: 1Lb Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 4-port 10/1 Gig SM 8.5 micron with internal fail-open interface module The technical for the 4-port 10/1 Gigabit SM 8.5 micron interface module are listed in the following table: Ports per module Product compatibility Front panel LEDs 4 ports of 10 Gigabit Ethernet using Duplex LC connector and 8.5 µm single mode fiber 4 ports of 1 Gigabit Ethernet using Duplex LC connector and 8.5 µm single mode fiber Supported in NS9100, NS9200, NS9300, NS7100, NS7200, NS7300, NS7150, NS7250, and NS7350 Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Physical dimensions Environmental Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) in Weight: 1Lb Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 12 McAfee Network Security Platform Reference Guide

Technical 4-port 10/1 Gig MM 50 micron with internal fail-open interface module 2 4-port 10/1 Gig MM 50 micron with internal fail-open interface module The technical for the 4-port 10/1 Gigabit MM 50 µm interface module are listed in the following table: Ports per module Product compatibility Front panel LEDs 4 ports of 10 Gigabit Ethernet using Duplex LC connector and 50 µm multimode fiber 4 ports of 1 Gigabit Ethernet using Duplex LC connector and 50 µm multimode fiber Supported in NS9100, NS9200, NS9300, NS7100, NS7200, NS7300, NS7150, NS7250, and NS7350 Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Physical dimensions Environmental Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) in Weight: 1Lb Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 4-port 10/1 Gig MM 62.5 micron with internal fail-open interface module The technical for the 4-port 10/1 Gigabit MM 62.5 µm interface module are listed in the following table: Ports per module Product compatibility 4 ports of 10 Gigabit Ethernet using Duplex LC connector and 62.5 µm multimode fiber 4 ports of 1 Gigabit Ethernet using Duplex LC connector and 62.5 µm multimode fiber Supported in NS9100, NS9200, NS9300, NS7100, NS7200, NS7300, NS7150, NS7250, and NS7350 McAfee Network Security Platform Reference Guide 13

2 Technical 4-port RJ-45 10 Gbps/1 Gbps/100 Mbps with internal fail-open interface module Front panel LEDs Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Physical dimensions Environmental Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) in Weight: 1Lb Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 4-port RJ-45 10 Gbps/1 Gbps/100 Mbps with internal fail-open interface module The technical for the 4-port RJ-45 10 Gbps/1 Gbps/100 Mbps interface module are listed in the following table: Ports per module Product compatibility Front panel LEDs 4 RJ-45 ports of 10 Gbps/1 Gbps/100 Mbps Supported in NS9100, NS9200, NS9300, NS7100, NS7200, NS7300, NS7150, NS7250, and NS7350 Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Speed: Bicolor LED (green/amber). 10 Gbps (green), 1 Gbps (amber), and 100 Mbps (off). Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Physical dimensions Environmental Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) inches Weight: 1Lb Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 14 McAfee Network Security Platform Reference Guide

Technical 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module 2 6-port RJ-45 10/100/1000 Mbps with internal fail-open interface module The technical for the 6-port RJ-45 10/100/1000 Mbps interface module are listed in the following table: Ports per module Product compatibility Front panel LEDs 6 ports of 10/100/1000 Mbps Supported in NS9100, NS9200, NS9300, NS7100, NS7200, NS7300, NS7150, NS7250, and NS7350 Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Speed: Bicolor LED (green/amber). 1 Gbps (green), 100 Mbps Gbps (amber), and 10 Mbps (off). Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Physical dimensions Environmental Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) inches Weight: 1Lb Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 8-port SFP/SFP+ 1/10 Gigabit interface module The technical for the 8-port SFP/SFP+ 1/10 Gigabit interface module are listed in the following table: Ports per module Product compatibility A combination of any of the following 8-port modules: 8 ports of 10 Gigabit Ethernet SFP+ (10GBASE-R) 8 ports of 1 Gigabit Ethernet SFP (1GBASE-X) 8 ports of 1000 Mbps Cu SFP Supported in NS9100, NS9200, NS9300, NS7100, NS7200, NS7300, NS7150, NS7250, and NS7350 McAfee Network Security Platform Reference Guide 15

2 Technical 8-port SFP/SFP+ 1/10 Gigabit interface module Front panel LEDs Status: Green (Operational), Off (module not initialized) Link: Green (port enabled and connected), Off (port link down) Activity: Amber (blink amber with stretched pulse as a packet is sent or received) Normal / Bypass: Green (port pair is inline), Off (port pair is in bypass) Green if configured for any port mode (SPAN, Inline Fail-Closed, Inline Fail-Open, Tap) and dark if port pair is configured for internal fail-open and is in bypass mode (during system reboot or when an administrator disables ports). Physical dimensions Occupies one I/O module slot in NS-series Chassis Dimensions: 1.425 (H) x 4.772 (W) x 5.704 (D) inches Weight: 1Lb Environmental Temperature - 0 C to 35 C (operating); -40 C to 70 C (non-operating) Altitude - Support operation up to 10,000 feet Humidity - 5-90% non condensing (operating); 5-95% non condensing (non-operating) 16 McAfee Network Security Platform Reference Guide

0I00