background image

Chapter 1: Introduction

Welcome

Congratulations on choosing the T-800/1200 Appliance from Tufin Technologies, the industry’s most comprehensive Security Policy Orchestration
solution. Our worldwide technical services team is available to you through the web, email, or telephone. See

http://www.tufin.com/support

for your

preferred mode of communication. We look forward to supporting all of your current and future firewall operation’s needs.

Overview

Information in this guide applies to the T-800 and the T-1200 appliances.

The new T-Series Appliances are a Tufin-in-a-box solution that provides IT organizations with a quick, robust installation that lowers total cost of
ownership. T-Series Appliances are designed to support both Tufin Orchestration Suite Classic (default) and Aurora. You can choose which
product to install.

Using distributed deployment architecture, Tufin’s T-Series Appliances enable virtually unlimited scalability – multiple appliances can be connected
on-demand at multiple sites, according to network needs. With enterprise-grade memory and SSD drives, the T-Series combines power and
flexibility in several models to scale to the needs of mid-size to large enterprises and ensure optimal performance for your organization.

The T-Series Appliances come pre-installed with TufinOS and are designed to support both Tufin Orchestration Suite Classic (default) and Aurora.
You will need to choose the desired Tufin Orchestration Suite product and install it using the instructions provided in this document.

When setting up the appliance, we recommend that you also configure the Remote Management Module (RMM). With this module you can install
newer versions of TufinOS on the appliance without having to physically access the server.

All Tufin Appliances are rigorously lab-tested by our network security experts.

This document provides:

l

Shipping container contents, and descriptions of the appliance panels

l

A step by step guide to getting the appliance and software up and running

l

Instructions for restoring factory defaults

To set up device monitoring by SecureTrack, to configure SecureChange, or for more information about the Tufin Orchestration Suite, see the
Tufin Knowledge Center at

https://forum.tufin.com/support/kc/latest

(for Classic) or

https://forum.tufin.com/support/kc/aurora

(for Aurora).

Shipping Container Contents

Item

Description

Appliance

T-800/1200 appliance

Cables

2 power cables

1 RJ-45 (CAT 5e) network cable

1 DB9 console cable

USB flash drive

USB flash drive for appliance recovery

Documentation

This Quick Start Guide

Other hardware

Rack mounting kit

Appliance front bezel

T-800/1200 Quick Start Guide
Chapter 1: Introduction

Copyright 2003-2021, Tufin Software Technologies Ltd.

3

Summary of Contents for T-1200

Page 1: ...T 800 1200 Quick Start Guide Version 13 11...

Page 2: ...gure SecureChange 11 Chapter 5 Installing and Configuring Tufin Orchestration Suite Aurora 13 Network Requirements for Tufin Orchestration Suite Aurora 13 Install Tufin Orchestration Suite Aurora 13 C...

Page 3: ...liances come pre installed with TufinOS and are designed to support both Tufin Orchestration Suite Classic default and Aurora You will need to choose the desired Tufin Orchestration Suite product and...

Page 4: ...the front of the appliance Item Feature Description A Information LED Indicates system status as follows l Continuously on and red An overheat condition has occurred which may be caused by cable conge...

Page 5: ...the system is operating normally F UID button LED The unit identification UID button turns on or off the blue light function of the Information LED and a blue LED on the rear of the chassis These are...

Page 6: ...ts out management of the system I Serial port Standard serial port that gives you serial access to the system via console redirection J VGA port K 1 PCI E 3 0 low profile slot L 2 PCI E 3 0 full heigh...

Page 7: ...up the appliance by pressing the Power button on the front panel 3 Connect a network cable to the ethernet port 1 Chapter 2 Rear Panel item C and to a PC with a crossover cable or to a local network...

Page 8: ...classic sh filename The installation file is in opt tufin data classic d Follow the installation instructions in the command line If you disabled SecureTrack and will not be using it on this appliance...

Page 9: ...the End User License Agreement l Password Type system for the Old Password of the TufinOS root user and change the password T 800 1200 Quick Start Guide Chapter 4 Installing and Configuring Tufin Orch...

Page 10: ...interface l Time Configure date and time settings l User Details Configure the admin user s details Username and password cannot be changed in this page T 800 1200 Quick Start Guide Chapter 4 Installi...

Page 11: ...ing to your networking needs eth0 may still have the preconfigured IP address of 192 168 1 100 For instructions see https forum tufin com support kc latest Content Suite 1584 htm l Change the root pas...

Page 12: ...https forum tufin com support kc latest Content Suite 2353 htm To add devices to be monitored see the https forum tufin com support kc latest Content Suite 4034 htm To add SecureTrack on this applian...

Page 13: ...k IP that will serve as the internal IP address used by the administrator for CLI commands and this is the one you will use in all other steps of the installation l If additional nodes are subsequentl...

Page 14: ...y and DNS Servers to the IPs used by your organization l or Edit the configuration files directly 1 Edit the file etc sysconfig network scripts ifcfg eno1 2 Change line BOOTPROTO dhcp to BOOTPROTO sta...

Page 15: ...192 168 1 2 services network 10 10 10 0 24 The End User License Agreement EULA appears c After reading enter q to exit the document and then enter y to accept the EULA and continue until the commands...

Page 16: ...ict the administrator to selected domains For more information see https forum tufin com support kc aurora Content Suite 1073 htm 2 Log in to SecureChange a Go to https IP securechangeworkflow where I...

Page 17: ...n be done now or at a later stage l Connect to a mail server For instructions see https forum tufin com support kc aurora Content Suite 1794 htm l optional Connect to an LDAP directory to use LDAP use...

Page 18: ...twork as the appliance l Web browser We recommend Internet Explorer with anti virus enforcement and browser protection disabled l Java version 8 or later Ports The following ports must be open between...

Page 19: ...bnet Netmask ipmitool lan set 1 defgw ipaddr Default Gateway IP Address 3 Verify the configuration ipmitool lan print 1 4 Ping the RMM IP address to confirm connectivity ping RMM IP Address 5 Configur...

Page 20: ...using the username and password defined in the previous step https RMM IP Address Now you can securely connect to the RMM to do remote administration tasks For more about using the RMM refer to the I...

Page 21: ...ation using serial console l serial aurora For Aurora supported installation using serial console If there is no reply within 60 seconds all installation messages are directed to the serial console If...

Page 22: ...need immediate assistance please call 1 877 270 7711 Tufin at a Glance Offices North America EMEA and Asia Pacific Customers More than 2100 in over 50 countries Leading verticals Finance telecom energ...

Reviews: