Forum Systems Sentry 556 Series Manuel

Forum Systems Sentry™ 556x

Hardware Installation Guide

Legal Marks

No portion of this document may be reproduced or copied in any form, or by any means – graphic, electronic, or mechanical, including

photocopying, taping, recording, or information retrieval system – without expressed permission from Forum Systems, Inc.

FORUMOS™ Firmware, Forum Systems XMLSec™ WebAdmin, Forum Systems XML Security Appliance™, Forum Sentry™, Forum

Presidio™, Forum XWall™, Forum Sentry™ Web Services Gateway, Forum Presidio™ OpenPGP Gateway, Forum FIA Gateway™,

Forum XWall Type-PCI™, Forum XWall® Web Services Firewall and Forum XRay™ are trademarks and registered trademarks of Forum

Systems, Inc.

All other products are trademarks or registered trademarks of their respective companies.

Forum Systems Sentry™ Hardware Installation Guide 556x Rev B, published November 2019

D-ASF-SE-012440

TABLE OF CONTENTS

INTRODUCTION...................................................................................................................................................................4

Audience..........................................................................................................................................................................4

Conventions Used............................................................................................................................................................4

Overview ..........................................................................................................................................................................4

Product Versions.........................................................................................................................................................4

UNPACK AND INSTALL THE SYSTEM...............................................................................................................................5

Unpacking the Product.....................................................................................................................................................5

Rack Precautions ........................................................................................................................................................5

Server Precautions......................................................................................................................................................5

Installing the Product into a Rack................................................................................................................................5

Electrical Safety Precautions.......................................................................................................................................5

PLAN FOR PHYSICAL INSTALLATION...............................................................................................................................7

System Startup and Shutdown Procedures......................................................................................................................7

Power On.....................................................................................................................................................................7

Power Off.....................................................................................................................................................................7

Restart.........................................................................................................................................................................7

Installation Overview ........................................................................................................................................................7

Decide Among In-Line Two IPs or One Port Network Configuration Modes ....................................................................7

1-port Mode.................................................................................................................................................................8

In-line Mode (Two IP Addresses) ................................................................................................................................8

Physical Interfaces for the Forum 556x Series............................................................................................................9

System Schematics..........................................................................................................................................................9

CONNECT THE NETWORK.................................................................................................................................................9

Configure the Network for One-Port Mode.......................................................................................................................9

Configure the Network for In-line Mode............................................................................................................................9

CONNECT THE CLI............................................................................................................................................................10

CONFIGURE HYPERTERMINAL.......................................................................................................................................11

Change the <Backspace> Key Sends Setting................................................................................................................11

HyperTerminal Settings.............................................................................................................................................11

Configure Terminal Emulation for the Serial Console Port.............................................................................................12

POWER ON........................................................................................................................................................................12

Powering On the System................................................................................................................................................12

CONFIGURE THE SYSTEM...............................................................................................................................................13

Remaining Software Installation Tasks ..........................................................................................................................13

Initialize the System on the CLI......................................................................................................................................13

Configure Network Interfaces for the Product.................................................................................................................13

Overview of Default Device Gateway Settings...............................................................................................................14

Default Gateway Rules...................................................................................................................................................14

In-line Mode Configuration.........................................................................................................................................14

1-port Mode Configuration.........................................................................................................................................15

Establish Enable Mode Password..................................................................................................................................15

Add the Default Administrator User Name and Password..............................................................................................16

Troubleshoot the Management Device Interface Filter...................................................................................................16

Troubleshoot Routing Information for the Product..........................................................................................................16

ACCESS THE WEB ADMINISTRATION INTERFACE .......................................................................................................17

APPENDIX..........................................................................................................................................................................18

Appendix A – Specifications...........................................................................................................................................18

Power Supply ............................................................................................................................................................18

System Operating Environment.................................................................................................................................18

Cooling Fans .............................................................................................................................................................18

System.......................................................................................................................................................................18

Appendix B – Regulatory Information.............................................................................................................................18

Appendix C – FORUM APPLIANCE - LIMITED HARDWARE WARRANTY..................................................................19

Appendix D – Constraints of CLI and Users...................................................................................................................20

INTRODUCTION

Audience

The Forum Systems Sentry™ Hardware Installation Guide is for IT or Network Administrators who will install the product.

Conventions Used

A red asterisk ( * ) aligned with a field term means that this field is required.

In this and other documentation, the Forum Systems Web Administration Interface is referred to as the WebAdmin and the Forum XML

Security Appliance™ is referred to as the ‘device’, ‘product’ or ‘system’.

In this document, all commands and parameters that must be entered are displayed in italicized boldface.

Instructions for the CLI user are displayed in italicized boldface text inside brackets. Press the <enter> key or



after each command.

Example:



[Enter your User Name, then press <enter>.]

Overview

Forum Systems develops and markets security products that actively guard data as it moves between and within enterprises by

protecting specific content within XML and non-XML Documents – at the origin, during transmission and after it reaches its destination.

Features of the product include:



Fast, non-intrusive installation.



Rack mounted, installs in minutes, works with content servers, firewalls, load balancers, SSL accelerators and Virtual Private

Networks.



Flexible network configuration.



Dual port flexibility – the product operates either in In-line or 1-port physical network configuration modes.

oIn In-line mode, the product uses the WAN and LAN network interfaces with one shared or two distinct IPs.

oIn 1-port mode, the product operates in a standard proxy server network configuration using the WAN interface.

Product Versions

This document covers installation of the Forum Systems 456X Rev B models. All instructions also pertain to HSM-enabled and FIPS-

certified systems.

UNPACK AND INSTALL THE SYSTEM

Unpacking the Product

Follow these steps in the sequence given to unpack the product. Inspect the shipping container that the product arrived in, and note if

any damage had occurred. If the product shows damage, file a damage claim with the carrier who delivered it.

Decide on a suitable location for the rack unit that will hold the product. It should be installed in a clean, dust-free environment that is

well ventilated. Avoid areas where heat, electrical noise and electro-magnetic fields are generated. Place the product near a grounded

power outlet. Leave enough clearance in front of the rack to enable you to open the front door completely (~25 inches). Additionally,

leave approximately 30 inches of clearance in the back of the rack to allow for sufficient airflow and ease in servicing.

Rack Precautions



Ensure that the leveling jacks on the bottom of the rack are fully extended to the floor with the full weight of the rack resting on

them.



In a single rack installation, stabilizers should be attached to the rack.



In multiple rack installations, the racks should be coupled together.



Always make sure rack is stable before extending a component from rack.



Extend only one component at a time; extending two or more simultaneously may cause the rack to become unstable.

Server Precautions



Review the electrical safety precautions in the System Safety section.



Determine placement of each component in rack before you install server.



Install heaviest server components on the bottom of the rack first, and then work up.



Use a regulating uninterruptible power supply (UPS) to protect the server from power surges, voltage spikes and to keep your

system operating in case of a power failure.



Always keep the rack's front door and all panels and components on the servers closed when not servicing to maintain proper

cooling.

Installing the Product into a Rack

Follow these steps to install the product into a rack unit. Additionally, review the installation instructions that came with the rack unit you

are using. It is recommended that two people be involved in lifting the product onto the mounting rails to assure the safety of both the

product and the involved personnel.

The 556x product uses rack mounting rails to attach the system to standard server racks or telco racks. The front product rail is already

attached to the chassis. The rear product rail is included in the product accessories box. And should be attached behind the front product

rail with the locking tab facing the same way. The rear product rail section should be slid under the locking tabs and then screwed into

place using the small flat screws (2 for each rack rail section).

Standard racks

When installing on standard racks, you need to connect the rear rack rail sections (medium length L-shaped sections) to the rear of the

front rack tail. This is accomplished by placing the lugs at the rear of the front rack rail section into the slots in the rear rack rail section

and sliding them until they are correctly sized to be on the outside of the front and rear of the standard rack attachment points. Once the

sizing is correct, lock the rear rack rail section in place using 2 small round screws (2 for each rack rail section). Attach the rack rails to

your standard rack. Once the main rack rails are in place, slide the product into the rails using the product rails and make sure all screws

are tightened before releasing it. The telco rack mounting brackets (small L-shaped sections that attach to the front rack rail) are not

needed for this type of installation and should be set aside and saved in case of the product being moved at a later time to a different

rack type.

Telco racks

When installing on telco racks, you will need to use two L-shaped brackets on either side of the telco rack (4 in total). These brackets will

attach to the main rack rails at the raised locations. Two small round screws should be inserted through each L-shaped bracket into the

main rack rail to hold the brackets to the tail with enough space between the two brackets to accommodate the telco rack. Make any

adjustments needed to balance the weight of the product evenly on the telco rack and install the two main rails to the telco rack using the

L-shaped brackets. Once the main rack rails are in place, slide the product into the rails using the product rails and make sure all screws

are tightened before releasing it. The rear rack rail assemblies (medium length sized L-shaped sections that attach to the front rack rail)

are not needed for this type of installation and should be set aside and saved in case of the product being moved at a later time to a

different rack type.

Electrical Safety Precautions

Basic electrical safety precautions should be followed to protect installers from harm and the product from damage. Follow these rules to

ensure electrical safety:

Be aware of the locations of the power on/off switch on the chassis as well as the room's emergency power-off switch,

disconnection switch or electrical outlet. If an electrical accident occurs, you can then quickly remove power from the system.

Do not work alone when working with high voltage components.

When disconnecting power, you should first power down the system with the operating system first and then unplug the power

cords of all the power supply units in the system.

When working around exposed electrical circuits, another person who is familiar with the power-off controls should be nearby

to switch off the power if necessary.

Use only one hand when working with powered-on electrical equipment. This is to avoid making a complete circuit, which will

cause electrical shock. Use extreme caution when using metal tools, which can easily damage any electrical components or

circuit boards they come into contact with.

Do not use mats designed to decrease static electrical discharge as protection from electrical shock. Instead, use rubber mats

that have been specifically designed as electrical insulators.

The power supply power cords must include a grounding plug and must be plugged into grounded electrical outlets.

PLAN FOR PHYSICAL INSTALLATION

System Startup and Shutdown Procedures

The following sequences are required for powering on/off and restarting the system:

Power On

 Connect the two provided product power cords to the rear of the product and a wall outlet.

 Press product main power switch ON at the front of the product. If the faceplate is in place, you will need to remove it using

the thumbscrews to gain access to the power switch.

Power Off

 From the CLI, enter enable mode and type the <shutdown> command (output truncated):

ForumOS# shutdown



INIT: Switching to runlevel: 0

Power down.

Power the system off using the power switch at the back of the product to the OFF position. The system will begin the

shutdown sequence, power down and display a blinking cursor.

There is a power button at the front of the system that can be used for powering down for short periods of time, but only after shutting

down the system via the CLI or WebAdmin.

Restart

 From the CLI, type the <reboot> command (output truncated):

ForumOS# reboot



000090 IPOLMASTR No Access Control Policies found

000092 IFILEUTLS Found 0 temp files

md: recovery thread finished ...

Flushing ide devices: hda hdc

Restarting system.

Installation Overview

The following is an overview of installation steps, presented in sequence, to install the product:

 Decide on in-line or 1-port physical network configuration for the product.

Setup the serial port console cable connections to the product.

Initialize Command Line Interface (CLI) (start terminal emulation software, e.g. Hyper Terminal™, and connect to product).

 The Forum Systems Installation Wizard* appears and prompts you to configure Network Interfaces for the product,

default gateway, DNS, and default Administration user.*

 Test WebAdmin UI accessibility.

*Refer to the Forum Systems Sentry™ HSM Quick Start Guide for more information on this portion of installation.

Decide Among In-Line Two IPs or One Port Network Configuration Modes

Network configuration options for your product include:



One port mode



In-line (two IP addresses) mode

Before physical installation, IT Administrators must decide which mode best matches your network structure.

Note: Be sure you run the shutdown command before powering off the system to allow policy backup and recovery process to

complete.

1-port Mode

The following figure displays network configuration mode for 1-port:

Figure 1: 1-Port Network Configuration Schematic.

In the 1-port mode configuration, the product operates using only the WAN interface connected to the network and accepts client

requests directed to the configured device IP(s) of the WAN port.

In-line Mode (Two IP Addresses)

The following figure displays network configuration mode for in-line (two IP addresses):

Figure 3: In-Line Configuration Schematic for Two IP Addresses.

With in-line configuration with two IP addresses, the product still sits between the corporate “Local Area Network” and the outside “Wide

Area Network” with two network interfaces being used for bi-directional network traffic via distinct IPs. In-line configuration means the

product provides physical network connectivity between clients and application server(s).

Physical Interfaces for the Forum 556x Series

When physically installing the product, consider the following:

INTERFACE

DESCRIPTION

WAN Port:

The WAN port, the left most of the two upper NIC ports next to each other on the right half of the rear of the

appliance, is used in both in-line and 1-port modes for data traffic. With in-line mode, the WAN port should be

the external-facing (Internet) port, connected to whichever upstream device (router, firewall, etc.) is applicable.

In 1-port mode, only the WAN port is used for data traffic. When in in-line or 1-port mode, traffic is directed to

the security system based on the defined IP(s) on the system.

LAN Port:

The LAN port, the right most of the two upper NIC ports next to each other on the right half of the rear of the

appliance, is only used in in-line mode. This is the internal-facing port, connected to the internal network or a

network device that provides connectivity to the internal network.

MANAGE-

MENT Port:

Forum Systems products can be managed out-of-band using the lower left most NIC port on the rear of the

appliance. This means that management connectivity and associated network traffic are provided from an

interface that is separate from the interface(s) used for regular traffic. Access to the Command Line Interface

(CLI) and the WebAdmin is provided on this interface. The MANAGEMENT interface can be moved to the LAN

or WAN port after initial setup.

There is a single MANAGEMENT IP address on the device that applies to the Management Ethernet interface

only. The IP address used for the MANAGEMENT port is completely independent of whether the device is

configured to run in in-line or 1-port mode. The MANAGEMENT port must have an IP associated, even if you

intend to manage the product via the WAN or LAN interface. If you do not have a physical network connection

to the MANAGEMENT interface, set the IP to the non-routable IP, 169.254.0.1, per RFC 3330.

CONSOLE

Port:

The DB9 (serial) port at the left rear of the appliance next to the power supplies is used for connecting the

product console for direct CLI access.

Smart Card

Reader

Serial

Connector

The smart card reader (HSM products only) is the small round connector on the bottom left hand side of the

appliance which is used for HSM configuration.

System Schematics

The following diagram displays the Forum Systems system:

Figure 4: Product Schematic for non HSM-enabled System.

CONNECT THE NETWORK

Configure the Network for One-Port Mode

 Connect the WAN port to your data network.

Connect the MANAGEMENT port to your private management network

(the network that your organization uses for management.)

Configure the Network for In-line Mode

1. Connect the WAN port to your data network.

2. Connect the LAN port the other side of your data network.

3. Connect the MANAGEMENT port to your private management network

(the network that your organization uses for management.).

CONNECT THE CLI

Connect the CONSOLE serial port at the rear of the product to a laptop / PC serial port in order to access the Command Line Interface

(CLI). The CLI can also be accessed via SSH on port 22 to the management IP address once it is initialized and configured on the

network.

The following two sections describe the configuration of two different terminal emulation tools (HyperTerminal and KiTTy) that can be

used on a PC to connect to the Forum Sentry CLI interface via the serial port.

CONFIGURE HYPERTERMINAL

Change the <Backspace> Key Sends Setting

Before setting the terminal emulation for the serial console port, first change the <Backspace> Key Sends setting in HyperTerminal to

behave in the same manner as the <Delete> key.

1. Launch using Start



Run



and type hypertm.exe.The HyperTerminal screen appears.

2. The Connection Description screen appears. Click Cancel to close.

3. From the menu bar, select File, Properties. The New Connection Properties screen appears. Click the Settings tab.

4. In the Backspace key sends area, check the Del radio button. Click OK to close the screen.

HyperTerminal Settings

Please refer to the following settings for configuring HyperTerminal:

Connect using = COM1

Bits per second = 9600

Data bits = 8

Parity = None

Stop bits = 1

Flow control = Hardware

Table des matières

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZYWALL2 ET 2WE Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur