Symantec 10521148 Implementation Guide - Page 5

SYMANTEC NETWORK SECURITY APPLIANCE (7100 SERIES)

LICENSE AND WARRANTY AGREEMENT

SYMANTEC CORPORATION AND/OR ITS SUBSIDIARIES

(“SYMANTEC”) IS WILLING TO LICENSE THE SOFTWARE

INCLUDED WITH THE APPLIANCE YOU HAVE PURCHASED

TO YOU AS AN INDIVIDUAL, THE COMPANY, OR THE LEGAL

ENTITY THAT WILL BE UTILIZING THE SOFTWARE

(REFERENCED BELOW AS “YOU OR YOUR”) AND TO

PROVIDE WARRANTIES ON THE APPLIANCE ONLY ON THE

CONDITION THAT YOU ACCEPT ALL OF THE TERMS OF THIS

LICENSE AND WARRANTY AGREEMENT.

READ THE TERMS

AND CONDITIONS OF THIS LICENSE AND WARRANTY

AGREEMENT CAREFULLY BEFORE USING THE APPLIANCE.

THIS IS A LEGAL AND ENFORCEABLE CONTRACT BETWEEN

YOU AND SYMANTEC.

BY OPENING THIS PACKAGE,

BREAKING THE SEAL, CLICKING ON THE “AGREE” OR “YES”

BUTTON OR OTHERWISE INDICATING ASSENT

ELECTRONICALLY, REQUESTING A LICENSE KEY OR USING

THE SOFTWARE AND THE APPLIANCE, YOU AGREE TO THE

TERMS AND CONDITIONS OF THIS AGREEMENT.

IF YOU DO

NOT AGREE TO THESE TERMS AND CONDITIONS, CLICK ON

THE “I DO NOT AGREE” OR “NO” BUTTON IF APPLICABLE

AND DO NOT USE THE SOFTWARE AND THE APPLIANCE.

1.

Software License:

Except for the software, if any, described in the Excluded

Software section at the end of this agreement (the “Excluded

Software”), the software (the “Software”) which accompanies

the appliance You have purchased (the “Appliance”) is the

property of Symantec or its licensors and is protected by

copyright law.

Except for the Excluded Software, You agree

and acknowledge that You must purchase a separate license for

each Software functionality which You intend to use in

connection with the Appliance, and activate such Software

functionalities as designated by Symantec, prior to using the

Appliance.

While Symantec continues to own the Software,

You will have certain rights to use the Software after Your

acceptance of this license.

This license governs any releases,

revisions, or enhancements to the Software that the Licensor

may furnish to You as well as the copy of the Software

provided to You on a CD-ROM or other media in connection

with the Appliance (the “Recovery Software”).

Except as may

be modified by a Symantec license certificate, license coupon,

or license key (each a “License Module”) which accompanies,

precedes, or follows this license, and as may be further defined

in the user documentation accompanying the Appliance and/or

the Software, Your rights and obligations with respect to the

use of this Software are as follows:

You may:

A. use the Software solely as part of the Appliance for no more

than the number of users as have been licensed to You by

Symantec under a License Module;

B. use the Recovery Software solely to restore the Appliance to

its original factory functionality in the event the Software

preloaded on the Appliance is corrupted or becomes unusable;

C. make copies of the printed documentation which

accompanies the Appliance as necessary to support Your

authorized use of the Appliance; and

D. after written notice to Symantec and in connection with a

transfer of the Appliance, transfer the Software on a

permanent basis to another person or entity, provided that You

retain no copies of the Software, Symantec consents to the

transfer and the transferee agrees in writing to the terms and

conditions of this agreement.

You may not:

A. sublicense, rent or lease any portion of the Software; reverse

engineer, decompile, disassemble, modify, translate, make any

attempt to discover the source code of the Software, or create

derivative works from the Software;

B. use the Recovery Software for any purpose other than to

restore the Appliance to the original factory functionality;

C. use, if You received the Software distributed on an Appliance

containing multiple Symantec products, any Symantec

software on the Appliance for which You have not received a

permission in a License Module; or

D. use the Software in any manner not authorized by this

license.

2. Content Updates:

Certain Symantec software products utilize content that is

updated from time to time (e.g., antivirus products utilize

updated virus definitions; content filtering products utilize

updated URL lists; some firewall products utilize updated

firewall rules; vulnerability assessment products utilize

updated vulnerability data, etc.; collectively, these are referred

to as “Content Updates”).

You may obtain Content Updates for

each Software functionality which You have purchased and

activated for use with the Appliance for any period for which

You have (i) purchased a subscription for Content Updates for

such Software functionality; (ii) entered into a support

agreement that includes Content Updates for such Software

functionality; or (iii) otherwise separately acquired the right to

obtain Content Updates for such Software functionality.

This

license does not otherwise permit You to obtain and use

Content Updates.

3. Limited Warranty:

Symantec warrants that the media on which the Recovery

Software is distributed will be free from defects for a period of

thirty (30) days from the date of original purchase of the

Appliance. Your sole remedy in the event of a breach of this

warranty will be that Symantec will, at its option, replace any

defective media returned to Symantec within the warranty

period or refund the money You paid for the Recovery

Software.

Symantec warrants that the Software will perform on the

Appliance in substantial compliance with the written

documentation accompanying the Appliance for a period of

thirty (30) days from the date of original purchase of the

Appliance. Your sole remedy in the event of a breach of this

warranty will be that Symantec will, at its option, repair or

replace any defective Software returned to Symantec within

the warranty period or refund the money You paid for the

Appliance.

Symantec warrants that the hardware component of the

Appliance (the “Hardware”) shall be free from defects in

material and workmanship under normal use and service and

substantially conform to the written documentation

accompanying the Appliance for a period of three hundred

sixty-five (365) days from the date of original( purchase of the

Appliance.

Your sole remedy in the event of a breach of this

warranty will be that Symantec will, at its option, repair or

replace any defective Hardware returned to Symantec within

the warranty period or refund the money You paid for the

Appliance.

The warranties contained in this agreement will not apply to

any Software or Hardware which:

A. has been altered, supplemented, upgraded or modified in

any way; or

B. has been repaired except by Symantec or its designee.

Additionally, the warranties contained in this agreement do

not apply to repair or replacement caused or necessitated by:

Symantec 10521148 Implementation Guide - Page 5

Symantec Network Security Appliance 7100 Series, License And Warranty Agreement, Software License

Page 5 highlights

Section	Page
Introduction	17
About the Symantec Network Security 7100 Series	17
About the core software	18
About the detection architecture	18
About the management system	18
About the 7100 Series models	19
About this guide	19
About the documentation set	21
About the Web sites	22
Verifying the materials	22
Introducing the 7100 Series components	25
About the 7100 Series components	25
About 7100 Series models	25
Model 7120	26
Model 7160	27
Model 7161	28
About core components	29
LCD panel	30
LED lights	32
Serial port	33
USB ports	33
Compact flash adapter	33
About additional components	35
Removable disk drive	35
Dual redundant power supplies	36
Deploying the 7100 Series	37
About deploying the 7100 Series	37
Deployment options	37
Bandwidth licensing options	38
Passive mode	38
In-line mode	39
Blocking and alerting	39
In-line pairs	40
Deployment using in-line mode	41
Comparing in-line mode to passive mode	41
Interface grouping	41
Fail-open	43
About the In-line Bypass unit	43
The 2 In-line Bypass unit	44
The 4 In-line Bypass unit	44
Port groups and the management port on the bypass unit	45
Online and bypass modes	46
Link parameters on bypass unit interfaces	46
Front panel LEDs on the bypass unit	47
Rear panel LEDs on the bypass unit	48
Clustering	49
External IDS products	50
Network Security console accessibility	50
SESA server accessibility	50
Symantec LiveUpdate accessibility	51
Installing the 7100 Series	53
About installing the 7100 Series	53
Rack mounting	54
Mounting the appliance to a two-post rack	54
Mounting the appliance to a four-post rack	55
Cabling	57
Cabling for model 7120	57
Connecting the management, reset, and serial ports	58
Cabling for passive mode monitoring	58
Cabling for in-line mode monitoring	58
Cabling a bypass unit for fail-open	59
Powering the 7120 on or off	62
Powering the 7120 off before initial configuration	62
Cabling for model 7160	62
Connecting the management, reset, and serial ports	63
Cabling for passive mode monitoring	64
Cabling for in-line mode monitoring	64
Cabling a bypass unit for fail-open	65
Powering the 7160 on or off	70
Powering the 7160 off before initial configuration	70
Cabling for model 7161	70
Connecting the management, reset, and serial ports	71
Cabling for passive mode monitoring	72
Cabling for in-line mode monitoring	72
Powering the 7161 on or off	74
Powering the 7161 off before initial configuration	74
Initializing Symantec Network Security	75
About initializing Symantec Network Security	75
LCD panel initial configuration	76
Using the LCD panel to configure a master node	77
Using the LCD panel to configure a slave node	80
Serial console initial configuration	84
Starting a serial console	85
Configuring a master node using the serial console	85
Configuring a slave node using the serial console	88
Compact flash initial configuration	91
Default login accounts	92
Starting the Network Security console	93
About the Network Security console	93
Network Security console requirements	93
Console requirements on Windows	94
Console requirements on Linux	94
Installing the console	94
Installing the Java Runtime Environment	95
Installing the console on Windows	95
Installing the console on Linux	96
Launching the console	96
Using the correct administration IP address	97
Launching the console on Windows	97
Launching the console on Linux	97
Licensing	99
About licensing	99
Bandwidth licensing options	100
Installing licenses	100
Requesting a license file	102
Determining the serial numbers	102
Determining the Symantec System ID	102
Requesting the license file	103
Installing a license file	104
Installing a license file on a master node	104
Installing a license file on a slave node	104
Checking the license status	105
Adding to licenses	106
Understanding excessive traffic	106
Requesting an additive license	106
Installing the additive license file	107
Calling for help	107
Configuring nodes and interfaces	109
About configuring nodes and interfaces	109
Configuring appliance nodes	110
About appliance node fields	110
Node Options tab fields	111
Advanced Network Options tab fields	112
Adding or editing an appliance node	113
Configuring appliance interfaces	114
Configuring monitoring interfaces	115
About monitoring interface fields	115
About Interface tab fields	115
About Networks tab fields	116
Editing a monitoring interface	116
Configuring an in-line pair	117
About in-line pair fields	117
About In-line Pair tab fields	118
About Networks tab fields	118
Adding or editing an in-line pair	119
Configuring an interface group	120
About interface group fields	120
About Interface Group tab fields	120
About Networks tab fields	121
About Interfaces tab fields	121
Adding or editing an interface group	121
Configuring detection and response	123
About detection and response	123
Starting a sensor on an appliance interface	123
About protection policies	124
Creating and applying protection policies	124
Viewing a protection policy	125
Setting policies to interfaces	126
Unapplying or removing policies from interfaces	126
Enabling/disabling blocking on in-line pairs	127
Adding a new protection policy	127
Cloning existing protection policies	127
Modifying custom protection policies	128
Using Search Events	128
Setting logging or blocking on events in a policy	129
Deleting custom protection policies	131
About response rules	132
Adding response rules	132
Deleting response rules	134
Monitoring and reporting events and status	135
About monitoring and reporting events and status	135
Viewing events and incidents	136
Viewing incident data	136
Viewing incident details	136
Viewing event details	137
Managing incident data	137
Generating reports	137
Monitoring appliance status	138
Viewing status on the LEDs	138
Viewing status on the LCD screen	139
Viewing status on the Network Security console	140
Node status parameters	140
Interface status parameters	141
In-line pair status parameters	142
Interface group status parameters	144
Maintaining and administering the 7100 Series	145
About maintaining and administering the appliance	145
Managing log files and backups	146
Rotating log files with SCP	146
Generating SSH keys	146
Using SCP to rotate log files	147
Backing up and restoring	148
Backing up a configuration	149
Restoring a configuration	149
About the compact flash	150
Making a non-bootable compact flash card	151
Making a non-bootable CF card on Windows	151
Making a non-bootable CF card on Linux	151
Using the compact flash for backup and restore	152
Using the compact flash for backup	153
Using the compact flash for restore	153
Saving initial configuration	154
Saving initial configuration to compact flash	154
Viewing a configuration file	155
Using the compact flash during re-imaging and upgrading	156
Restarting, rebooting, and powering off	156
Stopping, starting, and restarting Symantec Network Security	156
Stopping Network Security from the LCD	157
Stopping Network Security from the serial console	157
Starting Network Security from the LCD	158
Starting Network Security from the serial console	158
Restarting Network Security from the Network Security console	158
Restarting Network Security from the serial console	159
Rebooting the appliance	159
Rebooting the appliance from the Network Security console	159
Rebooting the appliance from the LCD	159
Rebooting the appliance from the serial console	160
Powering off the appliance	160
Powering off the appliance from the LCD	160
Powering off the appliance from the serial console	161
Using the LCD run menu	162
Running commands on the LCD run menu	163
Unlocking the LCD panel	163
Enabling or disabling LCD locking	164
Changing the IP address	164
Using the serial console	166
About serial console commands	166
Changing passwords	168
Changing the root password	168
Changing the secadm password	169
Installing the SESA bridge	169
Preparing to use SESA	169
Making the host name resolvable	169
Making the SIP file available on the SESA manager	170
Running install-bridge	171
Uninstalling the SESA bridge	172
Starting the SESA agent manually	173
Stopping the SESA agent manually	173
Re-imaging and unconfiguring	175
About re-imaging and unconfiguring	175
Unconfiguring Symantec Network Security	176
Running Unconfigure in the Network Security console	176
Running Unconfig SNS on the LCD	177
Running unconfigure on the serial console	178
Preparing for re-imaging	178
Saving your configuration	178
Creating a bootable compact flash	179
Creating a bootable compact flash via the serial console	179
Creating a bootable compact flash using the Imaging Server	180
Setting up an Imaging Server	181
Setting up an automatic Imaging Server	181
Setting up a standard Imaging Server	182
Installing the Recovery Software CD onto the Imaging Server	183
Connecting the Imaging Server to the appliance	184
Connecting the Imaging Server to a 7120	185
Connecting the Imaging Server to a 7160	185
Connecting the Imaging Server to a 7161	186
Re-imaging the appliance	186
Upgrading the console application	189
About migration	189
Troubleshooting	191
About troubleshooting	191
Accessing troubleshooting information	191
Specifications and safety	193
Product Specifications	193
Safety guidelines	194
Product certifications	196
Service Manual	199
About the removable hard drive	199
Removing the hard drive	200