Forcepoint 350 Series Installation instructions
Next Generation
Firewall
350 Series
Models N352 (APP-352C1) and N355
(APP-355C1), Internet Security Device
Hardware Guide
Revision A
Next Generation Firewall Hardware Guide | N352 and N355
Contents
■Introduction on page 2
■Find product documentation on page 2
■N352 and N355 features on page 3
■Indicator lights on page 4
■Ethernet port indicators on page 5
■SFP port led indicators on page 6
■Precautions on page 6
■Install the appliance on page 8
■Connect the cables on page 10
■Port settings for plug-and-play configuration method on page 11
■Restoring appliance settings on page 11
■Turn off the appliance on page 12
Introduction
Thank you for choosing a Forcepoint appliance.
Familiarize yourself with the appliance ports and indicators and learn how to install the appliance safely.
Find product documentation
In the Forcepoint Customer Hub, you can find information about a released product, including product
documentation, technical articles, and more.
You can get additional information and support for your product in the Forcepoint Customer Hub at
https://support.forcepoint.com. There, you can access product documentation, release notes, Knowledge Base
articles, downloads, cases, and contact information.
You might need to log on to access the Forcepoint Customer Hub. If you do not yet have credentials, create a
customer account. See https://support.forcepoint.com/CreateAccount.
2
Next Generation Firewall Hardware Guide | N352 and N355
N352 and N355 features
The figures and tables show the appliance components and features.
Front panel
This panel has the following parts.
1USB port.
2Indicators for Ethernet interface port activity and link status.
3Indicators for status, management (MGMT), high availability (HA), and power (PWR).
4Indicators for power (PWR) and disk activity (SSD).
3
Next Generation Firewall Hardware Guide | N352 and N355
Back panel
This panel has the following parts.
1Grounding point.
2Power connector DC IN 1 — Provides 19V DC power for the appliance.
3Power connector DC IN 2 — Provides 19V DC power for the appliance.
4Power button.
5Reset button. Reset button functionality is supported from Engine version 7.0.1 onwards.
6USB ports.
7Console port (speed 115,200 bps).
8Fixed Ethernet 2.5Gbps RJ45 port 12.
9Fixed SFP+ ports 8-11 from top to bottom and right to left.
10 Fixed Ethernet RJ45 ports 0-7 from top to bottom and right to left.
Indicator lights
Indicator lights show the status of the appliance and any fixed Ethernet ports.
1Ethernet port indicators
2Status indicators
4
Next Generation Firewall Hardware Guide | N352 and N355
Indicator Color Description
Unlit No link.Activity/link
status light for
each Ethernet
port (Activity)
Green Link OK. Flashes on activity.
Unlit 10 Mbps link.
Amber 100Mbps link (ports 0-11), 100Mbps/1Gbps (port 12).
Link speed
light for each
Ethernet port
(Link) Green 1 Gbps link (ports 0-11), 2.5Gbps (port 12).
Unlit The initial configuration has not yet been generated.
Amber Flashes while initial contact is being established. Steady amber when initial contact
has been established, but the NGFW Engine is offline.
Alternates with green when the NGFW Engine is in the standby state.
Status
Green Flashes when initial contact is established, but a policy has not been installed. Steady
green when the NGFW Engine is online.
Unlit The NGFW Engine has made initial contact but no policy is yet installed.
MGMT
Green Flashes when the NGFW Engine tries to make initial contact or when the NGFW
Engine is reconnecting to the Log Server. Steady green when initial contact with
the Management Server has been made, the management connection has been
established, and a policy has been installed.
HA Unlit The NGFW Engine does not have a clustering configuration.
SSD Green Flashes on disk activity.
Unlit No power source is connected to the appliance.
Green Power is supplied to the appliance.
PWR 1 and
PWR 2
Red No power source is connected to the respective connector. If both the LEDs are
"Red", the appliance is in a standby powered state.
Ethernet port indicators
Ethernet port indicators show the status and speed of the network ports.
1 2
1 2
1Activity/link indicator
2Link speed indicator
5
Next Generation Firewall Hardware Guide | N352 and N355
Indicator Color Description
Green Steady when link is present. Flashes on activity.Activity/link indicator
Unlit No link.
Unlit 10 Mbps link.
Amber 100 Mbps link.
Link speed indicator
Green 1 Gbps link.
SFP port led indicators
SFP port led indicators show the status and speed of the network ports.
1Activity/link indicator
2Link speed indicator
Indicator Color Description
Activity/link indicator Green Link OK. Flashes on activity.
Unlit 1 GB link.Link speed indicator
Green 10 GB link.
Precautions
The precautions provide safety guidance when working with Forcepoint appliances and electrical equipment.
CAUTION
Forcepoint appliances cannot be serviced by end users. Never open the appliance covers for any
reason. Doing so can lead to serious injury and void the hardware warranty.
For additional safety information, see the Forcepoint Product Safety and Regulatory Compliance Guide.
6
Next Generation Firewall Hardware Guide | N352 and N355
General safety precautions
Read the safety information and follow these rules to ensure general safety whenever you are working with
electronic equipment.
■Keep the area around the appliance clean and free of clutter.
■Use a regulating uninterrupted power supply (UPS) to keep your system operating during power failures and
to protect the appliance from power surges and voltage spikes.
■If you need to turn off or unplug the appliance, always wait at least five seconds before turning on or plugging
in the appliance again.
Operating precautions
Follow these precautions when operating the appliance.
■Do not open the power adapter casing. Only the manufacturer's qualified technician can access and service
power adapters.
■For this specific appliance model, it is recommended to use the power supply that is shipped with the
appliance or additional spare unit from Forecepoint.
Electrical safety precautions
Follow basic electrical safety precautions to protect yourself from harm and the appliance from damage.
■Know the locations of the power on/off button and the emergency turn-off switch, disconnection switch, or
electrical outlet for the room. If an electrical accident occurs, you can quickly turn off power to the system.
■When working with high-voltage components, do not work alone.
■When working with electrical equipment that is turned on, use only one hand. This is to avoid making a
complete circuit, which causes an electric shock. Use extreme caution when using metal tools, which can
easily damage any electrical components or circuit boards the tools come into contact with.
■Do not use mats designed to decrease electrostatic discharge as protection from electric shock. Instead, use
rubber mats that have been designed as electrical insulators.
■If the power supply cable includes a grounding plug, the plug must be plugged into a grounded electrical
outlet.
■Use only the power cable or cables supplied with the appliance.
Note
Standby power is supplied to the appliance even when the appliance is turned off.
AC power supply safety precautions
The appliance power inlet is the disconnect device on the appliance.
7
Next Generation Firewall Hardware Guide | N352 and N355
Install the appliance
There are several tasks that must be completed before the appliance is installed.
These tasks and the installation of the appliance might be done by the same person or by different persons:
■The Security Management Center (SMC) administrator is responsible for the tasks that are needed before the
appliance is installed.
■The on-site installer is responsible for installing the appliance.
For more information, see the Forcepoint Next Generation Firewall Installation Guide.
To prepare for the appliance installation, the SMC administrator must do the following:
1) If the SMC has not yet been installed, install the SMC.
Important
Do not install the SMC on the NGFW appliance.
The SMC can manage many NGFW appliances.
2) In the Management Client component of the SMC, create and configure the NGFW Engine element that
represents the appliance.
3) In the Management Client component of the SMC, save the initial configuration.
The SMC administrator must either:
■Upload the initial configuration to the Installation Server for plug-and-play configuration of the appliance.
Note
There are additional requirements for plug-and play configuration. See Knowledge Base
article 9662.
■Give the on-site installer a USB drive that contains an initial configuration file for each appliance.
The on-site installer must do the following:
1) Inspect the appliance, delivery box, and all components included in the shipment.
Important
Do not use damaged appliances or components.
2) Connect all necessary power, network cables and other components, and then press the power button to
turn on the appliance.
If the plug-and-play configuration method is not used, the on-site installer must insert the USB drive that
contains the initial configuration files to configure the NGFW Engine software to an USB port before the
appliance is turned on.
By default, only one power supply is shipped with the appliance. However, an additional power supply can be
ordered and connected for redundancy.
Power supply monitoring is automatically enabled when the appliance is powered on using two power
adapters. When power supply monitoring is enabled and only one power supply is present, a warning is
provided in SMC engine info status pane.
8
Next Generation Firewall Hardware Guide | N352 and N355
3) When you have finished installing the appliance, inform the SMC administrator so that the administrator can
check the status of the appliance in the Management Client.
Mount the N352/N355 appliance on a wall
You can optionally mount the N352/N355 appliance on a wall.
Important
There are vents on the sides of the appliance. Keep other objects at least 100mm (4 inches) away
from the appliance to ensure good air flow. Do not stack appliances.
Mounting the appliance on a wall has the following requirements:
■You can mount the appliance in a horizontal orientation only with the connectors for the cables facing down.
■The distance between the holes that you drill for the appliance in the wall must be 200mm (7.9 inches).
■Depending on the wall material, you might need to insert nylon plugs into the mounting holes that you drill for
the appliance. No nylon plugs are supplied with the appliance.
■Two flat undercut screws are required. No screws are supplied with the appliance.
The diameter of the screw heads must be 5.5mm (7/32 inch) and the thickness of the screw heads must be
2mm (5/64 inch).
Select screws that are suitable for the wall material and long enough to provide a firm mounting point for the
appliance. If you have attached the four provided rubber feet to the bottom of the appliance, make sure that
the screws are long enough to provide a firm mounting point for the appliance with the feet attached.
Make sure that the heads of the screws fit into the mounting holes on the bottom of the appliance before you
drill the mounting holes in the wall.
Steps
1) Drill two holes 200mm (7.9 inches) apart in the wall in a horizontal orientation.
Make sure that you leave enough clearance around the appliance.
2) If required, insert nylon plugs into the holes.
3) Insert the two screws into the holes and tighten the screws.
Make sure that the screws are protruding from the wall to provide a firm mounting point for the appliance.
4) Align the mounting holes on the appliance with the screws, then place the appliance on the screws so that
the cables are below the appliance.
After the appliance is mounted on the wall and you have connected the cables, do not pull on the cables.
CAUTION
If you need to disconnect any cables after the appliance is mounted on the wall, hold the
appliance in place while you disconnect the cables.
9
Next Generation Firewall Hardware Guide | N352 and N355
Connect the cables
Connect the network and power cables.
Use at least CAT5e-rated cables for gigabit networks.
Network interfaces at both ends of each cable must have identical speed and duplex settings. These settings
include the automatic negotiation setting. If one end of the cable uses autonegotiation, the other end must also
use autonegotiation. Gigabit standards require interfaces to use autonegotiation. Fixed settings are not allowed at
gigabit speeds.
Connect the SFP+ transceivers
You must install appropriate SFP+ or SFP transceivers into the 8 to 11 interfaces before connecting them to
10Gbps or 1Gbps networks. For supported list of transceivers, see Knowledge Base article 37231 .
To install transceiver:
Steps
1) Power off the appliance.
2) Attach the ESD wrist strap to your wrist and connect the attached grounding wire to the appliance grounding
point.
3) Hold the sides of the transceiver and slide it into the port socket until clicks into place.
4) Disconnect the ESD grounding wire from the appliance.
5) Power on the appliance.
6) Plug the appropriate cables into the transceiver and check the connection using the Ethernet Port Indicator
LEDs.
Connect network cables
Ethernet ports are mapped to interface IDs during the initial configuration. Determine which Ethernet ports to use
for connecting to your networks.
Steps
1) Connect network cables to the Ethernet ports.
If you use the plug-and-play configuration method for a single NGFW appliance, the appliance uses Ethernet
port 0 to contact the Installation Server.
Web based NGFW Configuration Wizard runs on port labeled as LAN (port 2).
If the appliance is a node in an NGFW Engine cluster, connect the cable for the heartbeat connection
between the nodes to interface labeled as HA (port 3).
10
This manual suits for next models
4
Table of contents
Other Forcepoint Firewall manuals
Forcepoint
Forcepoint NGFW User manual
Forcepoint
Forcepoint V5000 G4 User manual
Forcepoint
Forcepoint 110 Installation instructions
Forcepoint
Forcepoint 2200 Series Installation instructions
Forcepoint
Forcepoint 3201 Installation instructions
Forcepoint
Forcepoint V5000 User manual
Forcepoint
Forcepoint NGFW 51 User manual
Forcepoint
Forcepoint 3201 Installation instructions
Forcepoint
Forcepoint 3201 Installation instructions
Forcepoint
Forcepoint V5000 G4R2 User manual
Forcepoint
Forcepoint Stonesoft 320X Installation instructions
Forcepoint
Forcepoint 330 Series Installation instructions
Forcepoint
Forcepoint 6205 Installation instructions
Forcepoint
Forcepoint V5000 G2 User manual
Forcepoint
Forcepoint 120 Series Installation instructions
Forcepoint
Forcepoint N120 Installation instructions
Forcepoint
Forcepoint V5000 G4 User manual
Forcepoint
Forcepoint S4016 Installation instructions
Forcepoint
Forcepoint 110 Installation instructions
Forcepoint
Forcepoint 330 Series Installation instructions
