Juniper JSA5800 Manuale utente

Tipo
Manuale utente

Questo manuale è adatto anche per

Juniper Secure Analytics Hardware Guide
Modified: 2018-09-05
Copyright © 2018, Juniper Networks, Inc.
Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. and/or its affiliates in
the United States and other countries. All other trademarks may be property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
Juniper Secure Analytics Hardware Guide
Copyright © 2018 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the
year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks
software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at
https://www.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions of that
EULA.
Copyright © 2018, Juniper Networks, Inc.ii
Table of Contents
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Part 1 Overview
Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
JSA Appliance Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
JSA Appliance Hardware Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Part 2 Components
Chapter 2 Hardware Components and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Hardware Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
JSA Transceiver Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chassis Console Port Pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 3 JSA3500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
JSA3500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
JSA3500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 4 JSA3800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
JSA3800 Appliance Front Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
JSA3800 Appliance Back Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Chapter 5 JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
JSA5500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
JSA5500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Chapter 6 JSA5800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
JSA5800 Appliance Front Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
JSA5800 Appliance Back Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Chapter 7 JSA7500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
JSA7500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
JSA7500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
iiiCopyright © 2018, Juniper Networks, Inc.
Part 3 Planning
Chapter 8 Site Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Additional Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
General Site Installation Guidelines for the JSA Appliance . . . . . . . . . . . . . . . . . . 38
JSA Appliance Rack Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Part 4 Safety
Chapter 9 General Safety and Regulatory Information . . . . . . . . . . . . . . . . . . . . . . . . . . 43
General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Definitions of Safety Warning Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Fire Safety Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Qualified Personnel Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Warning Statement for Norway and Sweden . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Agency Approvals for JSA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Chapter 10 Radiation and Laser Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Laser and LED Safety Guidelines and Warnings for JSA . . . . . . . . . . . . . . . . . . . . . 51
General Laser Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Class 1 Laser Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Class 1 LED Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Laser Beam Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Radiation from Open Port Apertures Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Chapter 11 Installation and Maintenance Safety Information . . . . . . . . . . . . . . . . . . . . . 55
Installation Instructions Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Chassis Lifting Guidelines for JSA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Ramp Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Rack-Mounting Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Grounded Equipment Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Maintenance and Operational Safety Guidelines and Warnings . . . . . . . . . . . . . . 62
Battery Handling Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Jewelry Removal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Lightning Activity Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Operating Temperature Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Product Disposal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Chapter 12 Power and Electrical Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
General Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . 69
Prevention of Electrostatic Discharge Damage . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
AC Power Electrical Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
AC Power Disconnection Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
DC Power Electrical Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
DC Power Disconnection Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
DC Power Grounding Requirements and Warning . . . . . . . . . . . . . . . . . . . . . . . . . . 77
DC Power Wiring Sequence Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
DC Power Wiring Terminations Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Multiple Power Supplies Disconnection Warning . . . . . . . . . . . . . . . . . . . . . . . . . . 81
TN Power Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Action to Take After an Electrical Accident . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Copyright © 2018, Juniper Networks, Inc.iv
Juniper Secure Analytics Hardware Guide
Chapter 13 Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Compliance Statements for EMC Requirements for JSA . . . . . . . . . . . . . . . . . . . . 83
Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
European Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Japan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Korea . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
United States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
FCC Part 15 Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Compliance Statements for Acoustic Noise for JSA . . . . . . . . . . . . . . . . . . . . . . . . 85
Compliance Statements for NEBS Standards for JSA7500 . . . . . . . . . . . . . . . . . 86
Part 5 Installation
Chapter 14 Hardware Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Rack-Mount Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Required Tools and Parts for Installing the JSA Appliance . . . . . . . . . . . . . . . . . . 89
Chapter 15 Software Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
JSA Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Browser Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Preparing the Network Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Identifying Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Identifying Security Monitoring Devices and Flow Data Sources . . . . . . . . . . 94
Identifying Network Assets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Chapter 16 Connecting the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Grounding the JSA7500 Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Connecting JSA to a DC Power Source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Connecting to a Management Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Chapter 17 Installing the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Installing the JSA Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Front-and-Rear-Mounting the JSA Appliance Flush to a Rack . . . . . . . . . . . . . . . 104
Front-and-Rear-Mounting the JSA Appliance Recessed in a Rack . . . . . . . . . . . 105
Front-and-Rear-Mounting the JSA7500 in a 4-Post Sliding Rail Rack . . . . . . . . 106
Mid-Mounting the JSA Appliance in a Two-Post Rack . . . . . . . . . . . . . . . . . . . . . 109
Installing the CNA Module on the JSA1500 Appliance . . . . . . . . . . . . . . . . . . . . . 110
Chapter 18 Configuring Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Identifying Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Identifying Security Monitoring Devices and Flow Data Sources . . . . . . . . . . . . . . 114
Identifying Network Assets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Chapter 19 Configuring Secure Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Configuring the Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Accessing the JSA Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
vCopyright © 2018, Juniper Networks, Inc.
Table of Contents
Part 6 Maintenance
Chapter 20 Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Field-Replaceable Units on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Replacing the Fan on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Replacing the Air Filter on the JSA7500 Appliance . . . . . . . . . . . . . . . . . . . . . . . . 126
Replacing an AC Power Supply on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . 127
Replacing AC Power Supply Cables on the JSA Appliance . . . . . . . . . . . . . . . . . . 127
Replacing a DC Power Supply on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . 128
Replacing DC Power Supply Cables on the JSA Appliance . . . . . . . . . . . . . . . . . . 129
Part 7 Troubleshooting
Chapter 21 Monitoring Hardware Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
RAID Array . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Cooling Fans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Maintaining the JSA7500 Air Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Chapter 22 Juniper Networks Technical Assistance Center . . . . . . . . . . . . . . . . . . . . . . . 137
Contacting Juniper Networks Technical Assistance Center . . . . . . . . . . . . . . . . . . 137
Copyright © 2018, Juniper Networks, Inc.vi
Juniper Secure Analytics Hardware Guide
List of Figures
Part 2 Components
Chapter 3 JSA3500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Figure 1: JSA3500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Figure 2: JSA3500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Chapter 4 JSA3800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Figure 3: JSA3800 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Figure 4: JSA3800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Figure 5: JSA3800 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Figure 6: JSA3800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Chapter 5 JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Figure 7: JSA5500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Figure 8: JSA5500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Chapter 6 JSA5800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Figure 9: JSA5800 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Figure 10: JSA5800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Figure 11: JSA5800 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Figure 12: JSA5800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Chapter 7 JSA7500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Figure 13: JSA7500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Figure 14: JSA7500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Part 4 Safety
Chapter 12 Power and Electrical Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Figure 15: Placing a Component into an Antistatic Bag . . . . . . . . . . . . . . . . . . . . . . 72
Part 5 Installation
Chapter 16 Connecting the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Figure 16: Grounding the JSA7500 Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Figure 17: Connecting JSA to a DC Power Source . . . . . . . . . . . . . . . . . . . . . . . . . 100
Chapter 17 Installing the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Figure 18: JSA1500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Figure 19: JSA1500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
Figure 20: Front-Rear Mounting Flush to Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Figure 21: Front-Rear-Mounting Recessed in Rack . . . . . . . . . . . . . . . . . . . . . . . . 106
Figure 22: Securing Mounting Brackets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
viiCopyright © 2018, Juniper Networks, Inc.
Figure 23: Slide Assembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Figure 24: Attaching the Slide Sets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Figure 25: Sliding the Appliance into the Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Figure 26: Securing the Front-Mount Rail Brackets . . . . . . . . . . . . . . . . . . . . . . . 109
Figure 27: Mid-Mount in Two-Post Equipment Rack . . . . . . . . . . . . . . . . . . . . . . . 110
Figure 28: JSA1500 with the CNA Card Inserted . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Part 6 Maintenance
Chapter 20 Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Figure 29: Opening the Chassis Lid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Figure 30: Removing the Fan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Figure 31: Replacing the Fan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Copyright © 2018, Juniper Networks, Inc.viii
Juniper Secure Analytics Hardware Guide
List of Tables
About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Table 1: Notice Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Table 2: Text and Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Part 1 Overview
Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Table 3: JSA Appliance Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Part 2 Components
Chapter 2 Hardware Components and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Table 4: Hardware Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Table 5: JSA Appliance Transceiver Interface Types . . . . . . . . . . . . . . . . . . . . . . . . . 9
Table 6: RJ-45 Console Connector Pinouts for JSA1500, JSA3500, and
JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 3 JSA3500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Table 7: JSA3500 Front Panel Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Table 8: JSA3500 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Table 9: JSA3500 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Chapter 4 JSA3800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Table 10: JSA3800 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Table 11: JSA3800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Table 12: JSA3800 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Table 13: JSA3800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Chapter 5 JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Table 14: JSA5500 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Table 15: JSA5500 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Table 16: JSA5500 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Chapter 6 JSA5800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Table 17: JSA5800 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Table 18: JSA5800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Table 19: JSA5800 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Table 20: JSA5800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Chapter 7 JSA7500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Table 21: JSA7500 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Table 22: JSA7500 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
ixCopyright © 2018, Juniper Networks, Inc.
Part 3 Planning
Chapter 8 Site Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Table 23: Required JSA Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Table 24: Rack Requirements for the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . 39
Part 5 Installation
Chapter 14 Hardware Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Table 25: Required Tools and Parts for Installing the JSA Appliance . . . . . . . . . . . 89
Chapter 15 Software Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Table 26: Network Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Table 27: Asset Identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Chapter 16 Connecting the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Table 28: Grounding Cable and Grounding Lug Specifications for the JSA7500
Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Chapter 18 Configuring Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Table 29: Asset Identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Copyright © 2018, Juniper Networks, Inc.x
Juniper Secure Analytics Hardware Guide
About the Documentation
Documentation and Release Notes on page xi
Documentation Conventions on page xi
Documentation Feedback on page xiii
Requesting Technical Support on page xiv
Documentation and Release Notes
To obtain the most current version of all Juniper Networks
®
technical documentation,
see the product documentation page on the Juniper Networks website at
https://www.juniper.net/documentation/.
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at https://www.juniper.net/books.
Documentation Conventions
Table 1 on page xii defines notice icons used in this guide.
xiCopyright © 2018, Juniper Networks, Inc.
Table 1: Notice Icons
DescriptionMeaningIcon
Indicates important features or instructions.Informational note
Indicates a situation that might result in loss of data or hardware damage.Caution
Alerts you to the risk of personal injury or death.Warning
Alerts you to the risk of personal injury from a laser.Laser warning
Indicates helpful information.Tip
Alerts you to a recommended use or implementation.Best practice
Table 2 on page xii defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
ExamplesDescriptionConvention
To enter configuration mode, type the
configure command:
user@host> configure
Represents text that you type.Bold text like this
user@host> show chassis alarms
No alarms currently active
Represents output that appears on the
terminal screen.
Fixed-width text like this
A policy term is a named structure
that defines match conditions and
actions.
Junos OS CLI User Guide
RFC 1997, BGP Communities Attribute
Introduces or emphasizes important
new terms.
Identifies guide names.
Identifies RFC and Internet draft titles.
Italic text like this
Configure the machine’s domain name:
[edit]
root@# set system domain-name
domain-name
Represents variables (options for which
you substitute a value) in commands or
configuration statements.
Italic text like this
Copyright © 2018, Juniper Networks, Inc.xii
Juniper Secure Analytics Hardware Guide
Table 2: Text and Syntax Conventions (continued)
ExamplesDescriptionConvention
To configure a stub area, include the
stub statement at the [edit protocols
ospf area area-id] hierarchy level.
The consoleport is labeled CONSOLE.
Represents names of configuration
statements, commands, files, and
directories; configuration hierarchy levels;
or labels on routing platform
components.
Text like this
stub <default-metric metric>;Encloses optional keywords or variables.< > (angle brackets)
broadcast | multicast
(string1 | string2 | string3)
Indicates a choice between the mutually
exclusive keywords or variables on either
side of the symbol. The set of choices is
often enclosed in parentheses for clarity.
| (pipe symbol)
rsvp { # Required for dynamic MPLS onlyIndicates a comment specified on the
same line as the configuration statement
to which it applies.
# (pound sign)
community name members [
community-ids ]
Encloses a variable for which you can
substitute one or more values.
[ ] (square brackets)
[edit]
routing-options {
static {
route default {
nexthop address;
retain;
}
}
}
Identifies a level in the configuration
hierarchy.
Indention and braces ( { } )
Identifies a leaf statement at a
configuration hierarchy level.
; (semicolon)
GUI Conventions
In the Logical Interfaces box, select
All Interfaces.
To cancel the configuration, click
Cancel.
Represents graphicaluser interface (GUI)
items you click or select.
Bold text like this
In the configuration editor hierarchy,
select Protocols>Ospf.
Separates levels in a hierarchy of menu
selections.
> (bold right angle bracket)
Documentation Feedback
We encourage you to provide feedback so that we can improve our documentation. You
can use either of the following methods:
Online feedback system—Click TechLibrary Feedback, on the lower right of any page
on the Juniper Networks TechLibrary site, and do one of the following:
xiiiCopyright © 2018, Juniper Networks, Inc.
About the Documentation
Click the thumbs-up icon if the information on the page was helpful to you.
Click the thumbs-down icon if the information on the page was not helpful to you
or if you have suggestions for improvement, and use the pop-up form to provide
feedback.
E-mail—Send your commentstotechpubs-comments@juniper.net. Include the document
or topic name, URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product support is available through the Juniper Networks Technical Assistance
Center (JTAC). If you are a customer with an active J-Care or Partner Support Service
support contract, or are covered under warranty, and need post-sales technical support,
you can access our tools and resources online or open a case with JTAC.
JTAC policies—For a complete understanding of our JTAC procedures and policies,
review the JTAC User Guide located at
https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.
Product warranties—For product warranty information, visit
https://www.juniper.net/support/warranty/.
JTAC hours of operation—The JTAC centers have resources available 24 hours a day,
7 days a week, 365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online
self-service portal called the Customer Support Center (CSC) that provides you with the
following features:
Find CSC offerings: https://www.juniper.net/customers/support/
Search for known bugs: https://prsearch.juniper.net/
Find product documentation: https://www.juniper.net/documentation/
Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/
Download the latest versions of software and review release notes:
https://www.juniper.net/customers/csc/software/
Search technical bulletins for relevant hardware and software notifications:
https://kb.juniper.net/InfoCenter/
Copyright © 2018, Juniper Networks, Inc.xiv
Juniper Secure Analytics Hardware Guide
Join and participate in the Juniper Networks Community Forum:
https://www.juniper.net/company/communities/
Open a case online in the CSC Case Management tool: https://www.juniper.net/cm/
To verify service entitlement byproduct serial number, use our Serial Number Entitlement
(SNE) Tool: https://entitlementsearch.juniper.net/entitlementsearch/
Opening a Case with JTAC
You can open a case with JTAC on the Web or by telephone.
Use the Case Management tool in the CSC at https://www.juniper.net/cm/.
Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For international or direct-dial options in countries without toll-free numbers, see
https://www.juniper.net/support/requesting-support.html.
xvCopyright © 2018, Juniper Networks, Inc.
About the Documentation
Copyright © 2018, Juniper Networks, Inc.xvi
Juniper Secure Analytics Hardware Guide
PART 1
Overview
Introduction on page 3
1Copyright © 2018, Juniper Networks, Inc.
Copyright © 2018, Juniper Networks, Inc.2
Juniper Secure Analytics Hardware Guide
CHAPTER 1
Introduction
JSA Appliance Models on page 3
JSA Appliance Hardware Features on page 4
JSA Appliance Models
Juniper Secure Analytics (JSA) appliances are designed to respond to the right threats
at the right time through effective analysis of networks, events, and audit log files. JSA
has the ability to identify environmental anomalies in the network, an attack path, and
the source of a threat. JSA provides network remediation for threat responses across all
security products.
The JSA appliances use twodrivers, Security Information Management (SIM) and Security
Event Management (SEM), for security analysis of external and internal threats. SIM
provides reporting and analysis of data from host systems, applications, and security
devices to support security policy compliance management, internal threat management,
and regulatory compliance initiatives. SEM improves security incident response capabilities
by processing data from security devices and network devices. It helps network
administrators to provide effective responses to external and internal threats.
Table 3 on page 3 lists the Juniper Secure Analytics (JSA) appliance models.
Table 3: JSA Appliance Models
Storage ConfigurationMemoryDevice TypeModel
Six 1-TB HDDs, RAID1032 GBLow memoryJSA3500
Six 900 GB HDDs, RAID1064 GBLow memoryJSA3800
Eight 1-TB HDDs, RAID1096 GBHigh memoryJSA5500
Eight 900 GB HDDs, RAID10128 GBHigh memoryJSA5800
28 drives of 900 GB HDDs,
RAID10
128 GBHigh memoryJSA7500
3Copyright © 2018, Juniper Networks, Inc.
Table 3: JSA Appliance Models (continued)
Storage ConfigurationMemoryDevice TypeModel
Sixteen 2 TB HDDs, RAID6
For more information on
JSA7800, see JSA7800
Hardware Guide.
128 GBHigh memoryJSA7800
Related
Documentation
JSA Appliance Description
JSA Appliance Hardware Features on page 4
Additional Hardware Requirements on page 37
JSA Appliance Hardware Features
The Juniper Secure Analytics (JSA) appliance provides the following features:
Monitor utility for power supply unit (PSU) and fans
Add setup logs automatically
Support high availability (HA)
Hot-swappable hard disk supporting RAID
Automatic RAID rebuild on HDD swap
Support hot-swappable dual-AC or dual-DC power supplies with a redundant
configuration in the chassis
Related
Documentation
Browser Support on page 92
General Safety Guidelines and Warnings on page 43
Required Tools and Parts for Installing the JSA Appliance on page 89
Copyright © 2018, Juniper Networks, Inc.4
Juniper Secure Analytics Hardware Guide
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154

Juniper JSA5800 Manuale utente

Tipo
Manuale utente
Questo manuale è adatto anche per