Stonesoft SSL-3200 Series, Appliance Installation Manual

Page 1: ...Appliance Installation Guide SSL 3200 Series...

Page 2: ...ce services for the products described in these materials are provided pursuant to the general terms for support and maintenance services and the related service description which can be found at the...

Page 3: ...End User License Agreement which can be found at the Stonesoft website Contents Installation Procedure 4 Product Documentation 4 Safety Precautions 5 Unpacking the Appliance 8 Front Panel 8 Back Panel...

Page 4: ...d Connecting the Cables page 19 4 Configure the basic system settings time interfaces and routing and import the license and a certificate See Configuring the Appliance page 23 Product Documentation T...

Page 5: ...ll cause electrical shock Use extreme caution when using metal tools which can easily damage any electrical components or circuit boards they come into contact with Do not use mats designed to decreas...

Page 6: ...sible The appliance inlet must have SPS approval or have at minimum a 15 AWG wire provided for the power supply The Mains Supply plug on the power supply cord is the disconnect device of the appliance...

Page 7: ...the appliance Otherwise the appliance or the interface modules may be damaged Lithium Battery Precautions For California Perchlorate Material special handling may apply See www dtsc ca gov hazardouswa...

Page 8: ...arrier who delivered the appliance or the components Front Panel On the front panel there are slots for the interface modules a Solid State Disk SSD Drive two USB ports and a serial port There are two...

Page 9: ...When flashing indicates a fan failure When continuously on indicates overheating which may be caused by cables obstructing the airflow in the system or the ambient room temperature being too warm Ind...

Page 10: ...w Back Panel Table 3 SSD Drive Indicators Indicator Status Explanation Power Blue A Solid State Disk is in the drive Disk Unlit This indicator is not currently used Disk Power AC or DC Power Connector...

Page 11: ...t panel see the illustration in Front Panel page 8 3 Press the release button on the Solid State Disk to release the lever on the disk 4 Insert the disk into the drive 5 Press the lever down to lock t...

Page 12: ...trap to your wrist so that it contacts your bare skin and attach the other end of the strap to the appliance 3 Select the slot where you want to install the interface module 4 Push the module into the...

Page 13: ...noise and electromagnetic fields are generated Leave enough clearance in front of the rack to enable you to open the front door completely 63 cm 25 inches Leave enough clearance in the back of the rac...

Page 14: ...onents are securely fastened to the appliance to prevent components falling off from the appliance Be sure to install an AC power disconnect for the entire rack assembly This power disconnect must be...

Page 15: ...ckets 3 Align the holes against the two supports towards the rear of the appliance and push the bracket under the supports The brackets are marked with L for left and R for right 4 Secure the bracket...

Page 16: ...nce into a four post rack 1 Locate the two pairs of brackets in the delivery package two inner rails that attach to the appliance and two outer rails that attach to the rack 2 Detach the inner rails f...

Page 17: ...ponding buttons 5 Secure the rail to the appliance with a screw 6 Repeat steps 3 5 on the other side of the appliance 7 Insert the outer rails to the rack If necessary push the locking tab on the rail...

Page 18: ...10 Slide the inner rails into the outer rails keeping the pressure even on both sides you may have to press the locking tabs when inserting When the appliance has been pushed completely into the rack...

Page 19: ...rk can manage the appliance remotely if they learn the port s IP address and gain access to the credentials needed for remote management Caution Do not connect the appliance to an untrusted network th...

Page 20: ...ure the appliance Configure the computer you use for connecting to the appliance to use an IP address in the same network 192 168 100 0 24 See Configuring the Appliance page 23 for information on how...

Page 21: ...P transceiver Cable Types Make sure that the copper cables are correctly rated CAT 5e or CAT 6 in gigabit networks Speed Duplex Settings Network cards at both ends of each cable must have identical sp...

Page 22: ...d connecting both power connectors to a power source to guarantee that the appliance can function even if one of the power connectors fails 2 Plug the power cords into grounded high quality power stri...

Page 23: ...P address and other default settings for the appliance in the Engine Configuration Wizard To start the Engine Configuration Wizard 1 Connect the supplied null modem cable to the serial port on the app...

Page 24: ...ocal Timezone and press Enter 2 Select the correct timezone in the dialog that opens Note If the desired keyboard layout is not available use the best matching available layout or select US_English No...

Page 25: ...Netmask The default IP address of the SSL VPN Web Console is 192 168 100 1 4 Optional Enter the Web Console IP Default Gateway IP address through which outgoing traffic is routed 5 Optional Highlight...

Page 26: ...s Web Console IP Address 10000 The SSL VPN Web Console login page opens If you did not change the SSL VPN Web Console IP address in the Engine Configuration Wizard the address is the default SSL VPN W...

Page 27: ...eb Console and the SSL VPN Administrator 1 In the SSL VPN Web Console expand System in the menu on the left and select Admin Password 2 Enter a new password in both fields on the right and click Chang...

Page 28: ...em Time section and click Apply 4 Synchronize the times by clicking Copy from system time Configuring Interfaces You must add at least one interface in addition to the management port to offer service...

Page 29: ...ck Network Interfaces 3 Under Interfaces Activated at Boot Time click Add a new interface above or below the interface table 4 Enter the Name for the interface 5 Select how the IP address is assigned...

Page 30: ...guring Routing To configure routing 1 In the SSL VPN Web Console under the Networking category in the menu on the left select Network Configuration 2 On the right click Routing and Gateways The Routin...

Page 31: ...pplied or the appliance is rebooted For example you can create a temporary route for testing or for temporarily creating connectivity to a particular network To add temporary routes 1 Click Routing an...

Page 32: ...a Certificate Request Authentication in SSL is based on certificates as the proof of identity The appliance contains a factory installed certificate that allows testing in a closed network without th...

Page 33: ...nd line and run the makecsr script that was extracted from the archive 5 Fill in the required details Information on creating a certificate signing request can be found in the SSL VPN Administrator s...

Page 34: ...t to the SSL VPN Administrator and activate it for the Administration Service and Access Point See Logging in to the SSL VPN Administrator and Importing Certificate Keys and Certificates page 37 Loggi...

Page 35: ...Administrator Password section 4 Optional Deselect Enable Password Policy if you do not want to require the password to meet specific security requirements 5 Enter the Current Password 6 Enter and con...

Page 36: ...as well See the Stonesoft Administrator s Guide or the Online Help of the Management Client for more information To import a license 1 After you log in and change your password select License in the...

Page 37: ...To import a certificate key and certificate 1 In the SSL VPN Administrator switch to the Manage System section at the top menu 2 Select Certificates in the menu on the left The Manage Certificates pa...

Page 38: ...Browse and select the private certificate key file private pk8 Password If you protected the certificate key with a password when you generated it type in the same password here 5 Click Save This impo...

Page 39: ...iance 39 4 Select Access Points in the menu on the left 5 Click Access Point under the title Registered Access Points 6 Select the Server Certificate from the list 7 Scroll to the bottom of the page a...

Page 40: ...trolled with Access rules based on user groups 3 Defining Access rules for allowing access to the services on the appliance 4 Defining the services you want to offer In addition to other services you...

Page 41: ...e menu on the left and select Root Password 3 On the right type in and confirm the command line password for the account root The root account is always the only account for command line access 4 Opti...

Page 42: ...nagement port eth0_0 on the appliance s back panel at the address https Web Console IP Address 10000 For detailed instructions for establishing the local connection see Logging in to the SSL VPN Web C...

Page 43: ...w or through the SSL VPN Web Console as described in Enabling Command Line Access page 41 To change the root password in the Engine Configuration Wizard 1 Connect to the engine command line as describ...

Page 44: ...front panel and to a computer 2 On the computer open a terminal with the following settings 9600 bps 8 databits 1 stopbit no parity 3 Re start the appliance If the appliance is powered on press Enter...

Page 45: ...6 Select System Restore Options and press Enter 7 Type 1 and press Enter to clear the settings A confirmation prompt is shown 8 Type YES and press Enter to perform the reset If you decide to cancel t...

Page 46: ...the AC power supply module 2 Locate the release tab on the left side of the power supply 3 Push the release tab to the right to release the power supply from its locking position 4 Pull out the power...

Page 47: ...and issue the command halt 3 Unplug all power cords from the system or the wall outlets 4 Locate the Solid State Disk drive on the appliance s back panel see Back Panel page 10 5 Press the release bu...

Page 48: ...powered on press Enter log in as the user root with the password you have set for the appliance and issue the command halt 3 Unplug all power cords from the system or the wall outlets 4 Disconnect al...

Page 49: ...ugh the Web Console see Enabling Command Line Access page 41 and issue the command halt 3 Unplug all power cords from the system or the wall outlets 4 Disconnect the cable from the SFP transceiver 5 P...

Page 50: ...documentation See inside for further details All documentation and our technical knowledge base is available at www stonesoft com support Copyright 2013 Stonesoft Corporation Stonesoft Inc Americas He...