Cisco C220 Manual

Server Setup

This chapter provides instructions for setting up the server. It includes the following topics:

•Connect Power Supplies and KVM Adapter, on page 1

•Network Interface Connections Setup, on page 1

•Network Interface Setup Diagram, on page 4

•Firewall Rules, on page 5

•Power On and Boot Up Appliance, on page 8

Connect Power Supplies and KVM Adapter

To begin, connect both power supplies on the back of your appliance. Connect the included KVM adapter to

an external monitor and keyboard, and plug into the KVM port located at the front of the server, as illustrated

in Figure 3.

If CIMC is configured, you can use a remote KVM. See CIMC Configuration.

Refer to the server product documentation for detailed hardware and environmental setup information (See

Product Documentation).

Network Interface Connections Setup

The SFP+ modules must be connected to the chassis before the appliance is powered on for the session in

which the configuration wizard is going to be run. However, wiring the SFP up to the network can be done

between power on and configuration.

For Threat Grid Appliance (version 2.7.2 or later), only the Threat Grid M5 Appliance is supported. Refer to

the Cisco Threat Grid M5 Appliance Hardware Installation Guide for server setup instructions.

Note

C220 M3 Rack Server Setup

The interfaces must be properly connected and configured for the appliance to operate.

Server Setup

All manuals and user guides at all-guides.com

The details for your appliance may differ from the illustrations. Contact support@threatgrid.com if you

have any questions.

Note

Find the two SFP+ ports and three Ethernet ports on the back of the appliance and attach the network cables

as illustrated in Figure 4.

Reserved is the non-Admin SFP+ port that is reserved for future use.

Figure 1: Cisco UCS C220 M3 SFF Rack Server

Figure 2: Cisco UCS C220 M3 Rear View Details

Server Setup

C220 M3 Rack Server Setup

All manuals and user guides at all-guides.com

For releases 1.0-1.2 a reboot may be needed if an interface was not plugged in at boot time. This is a pre-1.3

issue, except for any interface requiring an SFP, which will still needs to be plugged in at boot time post 1.3.

The network cable plugged into the SFP may be safely hot-plugged.

Note

C220 M4 Rack Server Setup

The interfaces must be properly connected and configured for the appliance to operate.

Use port 3 Slot 2 for the (optional) Clust interface.

The details for your appliance may differ from the illustrations. Contact support@threatgrid.com if you

have any questions.

Note

Figure 3: Cisco UCS C220 M4 SFF Rack Server

Server Setup

C220 M4 Rack Server Setup

All manuals and user guides at all-guides.com

Figure 4: CIsco UCS C220 M4 Rear View Details

Connections:

•1Admin, Clust

•8(left) Clean

•8(right) Dirty

•6CIMC

Network Interface Setup Diagram

This section describes the most logical and recommended setup for a Threat Grid Appliance. However, each

customer's interface setup is different. Depending on your network requirements, you may decide to connect

the Dirty interface to the inside, or the Clean interface to the outside with appropriate network security measures

in place, for example.

Server Setup

Network Interface Setup Diagram

All manuals and user guides at all-guides.com

Figure 5: Network Interfaces Setup Diagram

In Threat Grid Appliance (v2.7.2 and later), there is also the enable_clean_interface option, which is disabled

by default. This option (after applying configuration and rebooting) enables access to the administrative

interface on port 8443 of the assigned clean IP.

Note

Firewall Rules

This section provides suggested firewall rules.

Implementing a restrictive outgoing policy on the Dirty interface for ports 22 and 19791 requires tracking

updates over time and spending more time maintaining the firewall. See the required destinations in the

configuration sections.

Note

Using IPv4LL address space (168.254.0.16) for the Dirty interface is NOT supported.

Note

Server Setup

Firewall Rules

All manuals and user guides at all-guides.com

Dirty Interface Outbout

NoteActionPortProtocolDestinationSource

Allow outbound traffic from

samples. (To get accurate

results it is required that

malware be allowed to contact

its command and control

server using whatever port and

protocol it is designed to use.)

AllowANYANYInternetDirty

Interface

Dirty Interface Inbound

NoteActionPortProtocolDestinationSource

Deny all incoming

connections.

DenyANYANYDirty InternetANY

Clean Interface Outbound

NoteActionPortProtocolDestinationSource

The appliance uses the clean

interface to initiate SMTP

connections to the configured

mail server.

Allow25TCPSMTP ServersClean

Interface

Clean Interface Outbound (Optional)

NoteActionPortProtocolDestinationSource

Optional, only required if

Clean DNS is configured.

Allow53TCP/UDPCorporate DNS

Server

Clean

Interface

Optional, only required if

AMP for Endpoints Private

Cloud integration is used.

Allow443TCPAMP Private CloudClean

Interface

Allow connectivity to server

designated to receive Syslog

messages and Threat Grid

notifications.

Allow514UDPSyslog ServersClean

Interface

Optional, only required if

LDAP is configured.

Allow389TCP/UDPLDAP ServersClean

Interface

Optional, only required if

LDAP is configured.

Allow636TCPLDAP ServersCean

Interface

Server Setup

Firewall Rules

All manuals and user guides at all-guides.com

Clean Interface Inbound

NoteActionPortProtocolDestinationSource

Allow SSH conectivity to the

tgsh-dialog.

Allow22TCPClean InterfaceUser Subnet

Appliance API and Threat

Grid user interface. This will

redirect to HTTPS TCP/443.

Allow80TCPClean InterfaceUser Subnet

Appliance API and Threat

Grid user interface.

Allow443TCPClean InterfaceUser Subnet

Allow connectivity to the

Threat Grid UI Glovebox.

Allow9443TCPClean InterfaceUser Subnet

Admin Interface Outbound (Optional)

The following depends on what services are configured.

NoteActionPortProtocolDestinationSource

Optional, only required if

Threat Grid appliance is

configured to send backups to

an NFSv4 share.

Allow2049TCPNFSv4 ServerAdmin

Interface

Admin Interface Inbound

NoteActionPortProtocolDestinationSource

Allow SSH connectivity to the

TGSH Dialog.

Allow22TCPAdmin InterfaceAdmin

Subnet

Allow Access to the OpAdmin

Portal interface. This will

redirect to HTTPS TCP/443.

Allow80TCPAdmin InterfaceAdmin

Subnet

Allow Access to the OpAdmin

Portal interface.

Allow443TCPAdmin InterfaceAdmin

Subnet

Dirty Interface for Non Cisco-Validated/Recommended Deployment

NoteActionPortProtocolDestinationSource

Update, support snapshot, and

licensing services.

Allow22TCPInternetDirty

Interface

Allow outbound DNS.Allow53TCP/UDPInternetDirty

Interface

Allow outbound NTP.Allow123UDPInternetDirty

Interface

Server Setup

Firewall Rules

All manuals and user guides at all-guides.com

NoteActionPortProtocolDestinationSource

Allow connectivity to Threat

Grid support.

Allow19791TCPInternetDirty

Interface

Connect with third-party

detection and enrichment

services.

Allow443TCPCisco UmbrellaDirty

Interface

Connect with third-party

detection and enrichment

services.

Allow443TCPVirusTotalDirty

Interface

Connect with third-party

detection and enrichment

services.

Allow443TCPTitaniumCloudDirty

Interface

Power On and Boot Up Appliance

Once you have connected the server peripherals, network interfaces, and power cables, turn on the appliance

and wait for it to boot up. The Cisco screen is briefly displayed.

Figure 6: Cisco Screen During Bootup

If you want to configure this interface, press F8 after the memory check is completed and follow the instructions

in CIMC Configuration.

Note

Server Setup

Power On and Boot Up Appliance

All manuals and user guides at all-guides.com

The TGSH Dialog is displayed on the console when the server has successfully booted up and connected.

Figure 7: TGSH Dialog

The Admin URL shows as unavailable because the network interface connections are not yet configured and

the OpAdmin Portal cannot be reached yet to perform this task.

The TGSH Dialog displays the initial administrator Password, which will be needed to access and configure

the OpAdmin Portal interface later in the configuration. Make a note of the Password in a separate text file

(copy and paste).

Important

Server Setup

Power On and Boot Up Appliance

All manuals and user guides at all-guides.com

Server Setup

Power On and Boot Up Appliance

All manuals and user guides at all-guides.com

Table of contents

Other Cisco Server manuals

Cisco

Cisco CSACS-1121-K9 User manual

Cisco

Cisco UCS B200 M3 Manual

Cisco

Cisco UCS C22 Installation and maintenance instructions

Cisco

Cisco APP1000 - One Application Server Appliance Instruction Manual

Cisco

Cisco UCS X9508 Quick start guide

Cisco

Cisco C880 M5 User manual

Cisco

Cisco C880 M4 Mounting instructions

Cisco

Cisco TelePresence Video Communication Server... User manual

Cisco

Cisco UCS C Series User manual

Cisco

Cisco UCS C240 M4 Installation and maintenance instructions

Cisco

Cisco C800 Series Owner's manual

Cisco

Cisco Sourcefire Defense Center 750 User manual

Cisco

Cisco UCS 5100 User manual

Cisco

Cisco Profile Series User manual

Cisco

Cisco UCS C210 Installation and maintenance instructions

Cisco

Cisco ISE-3315 User manual

Cisco

Cisco UCS B200 M3 Manual

Cisco

Cisco UCS C220 M4 Installation and maintenance instructions

Cisco

Cisco GSS-4492R-K9 Instruction Manual

Cisco

Cisco Cisco MeetingPlace Express Operating instructions

Cisco

Cisco UCS B440 M2 System manual

Cisco

Cisco AS5300 - Universal Access Server Technical document

Cisco

Cisco 5100 User manual

Cisco

Cisco SNS-3515 series Manual

Popular Server manuals by other brands

HP AlphaServer ES47 Cli reference manual

Dell

Dell PowerEdge R410 Getting started

PowerNAS

PowerNAS CMA quick start guide

Supero

Supero FatTwin F617R3-FT user manual

MSI

MSI P1-109N-L70 user manual

Dell

Dell PowerEdge XE9640 Installation and service manual

Dell

Dell PS4100 Hardware

EtroVISION

EtroVISION EV3151 user manual

NEC

NEC Express5800/T110j System configuration guide

HP ProLiant Gen9 user guide

Compaq

Compaq ProLiant 3000 Maintenance and service guide

Dell

Dell PowerEdge 3YPMN Getting started guide

iRobo

iRobo IPC2U user manual

Nortel

Nortel 1000 Con?guration guide user manual

Asus

Asus AP7500 Hardware reference guide

Avid Technology

Avid Technology AirSpeed 5000 manual

HP Integrity rx2600 overview

Milestone

Milestone Husky IVO 350T Getting started