McAfee IIP-S03K-NA-100I Product Guide

McAfee IIP-S03K-NA-100I - IntruShield 3000 Sensor Appliance Manual

Get McAfee IIP-S03K-NA-100I - IntruShield 3000 Sensor Appliance PDF manuals and user guides
UPC - 731944579931
View all McAfee IIP-S03K-NA-100I manuals
Add to My Manuals
Save this manual to your list of manuals

McAfee IIP-S03K-NA-100I manual content summary:

  • McAfee IIP-S03K-NA-100I | Product Guide - Page 1
    IntruShield Sensor 3000 Product Guide revision 6.0 McAfee® IntruShield® IPS IntruShield Sensor 3000 version 4.1 McAfee® Network Protection Industry-leading intrusion prevention solutions
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 2
    of the University of California, (C) 1990, 1993, with code derived from software contributed to Berkeley by Chris Torek. Issued DECEMBER 2008 / IntruShield Sensor 3000 Product Guide 700-1548-00/ 6.0 - English
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 3
    Contents Preface v Introducing McAfee IntruShield IPS v About this guide ...v Contents of this guide...v Audience ...vi Conventions used in this guide ...vi Related Documentation...vii Contacting Technical Support...viii Chapter 1 An introduction to IntruShield sensors 1 What is an IntruShield
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 4
    Cabling for in-line mode...25 Cabling the I-3000 to monitor in in-line mode 25 Cabling for Tap mode ...26 Cabling the I-3000 SFP ports to monitor in external tap mode 26 Cabling for SPAN mode...26 Cabling the I-3000 sensor to monitor in SPAN or hub mode 26 Cabling the failover interconnection
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 5
    documents for this guide and how to contact McAfee Technical Support. Introducing McAfee IntruShield IPS McAfee IntruShield delivers the most comprehensive, accurate, and scalable network IPS solution for mission-critical enterprise, carrier, and service provider networks, while providing unmatched
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 6
    , or the commands necessary to perform particular tasks. Conventions used in this guide This document uses the following typographical conventions: Convention Example Terms that identify fields, buttons, The Service field on the Properties tab specifies the tabs, options, selections, and name
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 7
    Configuration Guide-using ISM • Sensor Configuration Guide-using ISM Wizard • Alerts & System Health Monitoring Guide • Reports Guide • IntruShield User-Defined Signatures Developer's Guide • IntruShield Troubleshooting Guide • IntruShield Attack Description Guide • IntruShield Special Topics Guide
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 8
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Preface Contacting Technical Support • Database Tuning • Best Practices • Denial-of-Service • Sensor High Availability • Custom Roles Creation • In-line Sensor Deployment • Virtualization • IntruShield Gigabit Optical Fail-Open
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 9
    and prevention of intrusions, misuse, and distributed denial of service (DDoS) attacks. IntruShield sensors are specifically designed to handle later chapters of this guide. The ISM server is described in detail in IntruShield Security Manager, Getting Started Guide. Sensor functionality The primary
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 10
    Sensor 3000 Product Guide An introduction to IntruShield sensors What is an IntruShield sensor? This document describes the I-3000 sensor. The IntruShield 3000 sensor The high-port-density IntruShield 3000 (the I-3000), designed for high-bandwidth links, is equipped to support six full-duplex
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 11
    Fail-Open Bypass Kit Guide. It is also used in troubleshooting situations where the sensor's internal flash is corrupted and you must reboot the sensor via the external compact flash. For more information, see the on-line KnowledgeBase at Mcafee Support
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 12
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide An introduction to IntruShield sensors What is an IntruShield sensor? LED Status Description Power A Green Power Supply A is functioning. Amber Power Supply A is not functioning.
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 13
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide An introduction to IntruShield sensors What is an IntruShield sensor? LED Response Port Link Status Green Off Description The link is connected. The link is disconnected. 5
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 14
    CHAPTER 2 Before you install Sensor specifications, safety measures, unpacking a sensor This chapter describes best practices for deployment of IntruShield sensors on your network. Topics include system requirements, site planning, safety considerations for handling the sensor, and usage
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 15
    Category 5 (Cat 5) OR Cat 5e cable can be used. Note: Throughout this guide, cabling specifications will be mentioned as Cat 5/Cat 5e. Sensor capacity for I-3000 Port Customized attacks Alert filters Default number of supported UDP Flows 500,000 10,000 50,000 64 1000 3000 254 100,000 128,000 100
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 16
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Before you install Network topology considerations Supported UDP Flows DoS Profiles SYN rate (64-byte packets per second) for IntruShield deployment, see Pre-deployment considerations, Planning and Deployment Guide. 8
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 17
    Sensor 3000 Product Guide Before you install qualified personnel should be allowed to install, replace, or service this equipment. • Before working on equipment that is connected not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications.
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 18
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Before you install Usage restrictions • These products have been tested and found to comply with Class 1 limits of IEC 60825-1, IEC 60825-2, EN 60825-1, EN
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 19
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Before you install Unpacking the sensor • one power cord. McAfee provides a standard, 2m NEMA 5-15P (US) power cable (3 wire). International customers must procure a country-appropriate
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 20
    CHAPTER 3 Setting up the I-3000 sensor prior to configuration This chapter describes the process of setting up a sensor prior to configuring it via the ISM. Setup overview Setting up a sensor involves the following steps: 1 Positioning the sensor. (See Positioning the I-3000) 2 Installing the GBICs.
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 21
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to configuration Positioning the I-3000 ► To install the ears on the chassis, follow these steps: 1 Verify that you have
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 22
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to configuration Installing the I-3000 redundant power supply Mount the sensor by securing the ears to two posts or
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 23
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to configuration Installing the I-3000 redundant power supply 3 Place the power supply in the slot with the cable outlet
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 24
    IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to of approved vendors, see the on-line KnowledgeBase, McAfee Support Site. https://mysupport.mcafee.com These installation instructions provide information for installing an SFP module that uses a
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 25
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to configuration Installing SFP modules Installing a SFP module ► To install a SFP module with a bail clasp, follow these steps: 1 Remove
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 26
    IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to protection. Connecting copper SFP for 10/100 Fast Ethernet ports In addition to fiber GBICs, McAfee supports copper SFPs for I-3000 and I-4010 sensors. I-3000 and I-4010 sensors, when packaged
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 27
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to configuration Installing SFP modules To connect a copper SFP 1 Remove . Note 2: For more information on configuring monitoring port settings from ISM, see Senor Configuration Guide-using ISM. 19
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 28
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Setting up the I-3000 sensor prior to configuration Cabling the sensor To remove a copper SFP If you are halt the sensor before powering it down. For more information on CLI commands, see Sensor Configuration Guide-using CLI. 20
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 29
    CHAPTER 4 Attaching cables to the I-3000 Sensor Follow the steps outlined in this chapter to connect cables to the various ports on your sensor. Cabling the Console port The Console port is used for setup and configuration of the sensor. 1 For console connections, plug the DB9 Console cable
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 30
    the copper Bypass Kit. For more information, see Gigabit Copper Fail Open Kit Guide. For 1 Gbps port speed setting, you can use either the optical Bypass Kit or the copper Bypass Kit. Installation and troubleshooting instructions for the Kit can be found in the kit's documentation. More details on
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 31
    IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Attaching cables to the I-3000 Sensor Cabling ports. You can deploy sensors in the operating modes shown in the following table. Cabling instructions for the sensor Monitoring ports are shown on the pages indicated. To cable the I-3000
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 32
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Attaching cables to the I-3000 Sensor Cabling the Management port Port Pairs 1A and 1B 2A and 2B 3A and 3B 4A and 4B 5A
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 33
    McAfee® IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Attaching cables to the I-3000 Sensor Cabling for in-line mode Cable types for routers, switches, hubs, and PCs The cabling instructions in this chapter: • Use a crossover Ethernet RJ45 cable to connect a router port to 10/100
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 34
    IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Cabling for Tap mode Attaching cables to the . Note: For a list of approved 3rd-party tap vendors, see the on-line KnowledgeBase, Mcafee Support Site https://mysupport.mcafee.com. ► To connect the sensor to the devices you want to monitor in
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 35
    IntruShield® IPS 4.1 IntruShield Sensor 3000 Product Guide Attaching cables to the I-3000 Sensor Cabling in in-line mode and ports 5A, 5B configured in SPAN mode. Note: TCP reset is not supported when connected in TAP mode. Cabling I-3000 sensors for Failover Monitoring ports 6A-and 6B are the
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 36
    configured as fail-open will remain in 'Bypass' mode until the user manually puts them back to fail-open. Caution 1: Note that sensor outage breaks more than a minute. Installation and troubleshooting instructions for the Kit can be found in the Quick Guide that accompanies the kit. For more
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 37
    LED 3 C cabling 20, 21, 22, 23, 25, 26 cabling Fail-Open control ports 22 cabling for failover 27 cabling for monitoring ports 23 cabling instructions 20 cabling SFP ports 26 cabling the auxiliary port 21 cabling the console port 21 cabling the sensors for failover 27 chasis 12 Compact
  • McAfee IIP-S03K-NA-100I | Product Guide - Page 38
    T tap mode 26 Temp LED 3 U using Copper SFP 18 connecting Copper SFP 19 removing Copper SFP 20 using fail-open hardware 28
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
IntruShield Sensor 3000 Product Guide
revision 6.0
McAfee
®
Network Protection
Industry-leading intrusion prevention solutions
McAfee® IntruShield® IPS
IntruShield Sensor 3000
version 4.1