Broadcom Symantec SSP-S210

To Next Page

To begin using your Symantec Security Platform (SSP) appliance, complete the

following steps in order. For additional instructions, including safety information,

see the SSP-S210 and ISG guides, available at: techdocs.broadcom.com

1 Unpack the Appliance

Verify the contents of the shipping package for your appliance: (2) C13-to-C14

AC power cords; (1) RJ45-to-DB9 null modem serial cable; slide-rail kit; Quick

Start Guide (this document); Software License Agreement; and Hardware

Warranty Information.

2 Connect Cables

Note: If you would rather mount the appliance before conguring it, skip to

Step 7—Mount the Appliance and then come back and proceed from this step.

a. Connect Ethernet cables from the appliance to the following devices.

• Appliance LAN (2:0) port to WAN router (Internet)

• Appliance LAN (2:1) port to LAN switch (main site)

• Appliance MGMT (0:0) port to management switch (workstation)

b. Connect the RJ45 end of the included null modem serial cable to the appli-

ance’s Console port. Connect the other DB9 end of the cable to a serial ter-

minal or workstation with terminal emulation software (a DB9-to-RJ45 rollover

adapter may be necessary).

c. Connect the included power cords to the appliance’s PSU1 and PSU2 inlets

and connect the other ends to a valid power source.

Note: Ethernet cables are not included with the appliance. Use only straight-

through Ethernet cables, category 5E or better for 1000Base-T operation,

category 6A for 10GBase-T operation.

3 Power on the Appliance and Verify LEDs

a. If the appliance does not automatically power on after connecting to a power

source, press the soft power switch on the front panel.

b. As the appliance boots, verify the following:

• The Power LED turns amber.

• Near the end of the boot cycle, the Power LED alternates between amber

and green, indicating an uncongured state.

• After initialization (see Step 4), the Power LED will turn green.

4 Initialize the SSP Host Appliance

a. Conrm the appliance’s Console port is connected to a serial terminal or

workstation with terminal emulation software.

b. Open a terminal emulation program, such as HyperTerminal

, PuTTY, or Tera

Term and congure it to use the following settings:

• Baud rate: 9600 bps • Data bits: 8 • Flow control: none

• Parity: none • Stop bits: 1

c. When prompted, press Enter three times.

d. To initialize the host appliance, perform the following steps.

• On the Menu screen, press 2 to open the Setup Console.

• Press the interface number to be congured: [1, 2, 3, or 4]

• If DHCP is available, press Y to accept the detected network settings

• If DHCP is not available, enter the IP address, IP subnet mask, IP

gateway, and DNS server for the appliance’s network ports.

• Specify the console password and enable password. Press any key to

activate and return to the serial console.

e. To access privileged commands on the host appliance, enter:

localhost# enable

Enable Password: <host-enable-password>

f. To install a license on the host appliance, perform the following steps.

• On the Menu screen, press 1 to open CLI.

• For node-locked licenses, enter: licensing load id <serial-number>

• For ISG application licenses, enter: licensing load id <isg-license>

Note: You can locate your serial number or ISG license in the eFulllment

Letter you received from Broadcom at the time of purchase.

g. To install application images on the host appliance, perform the following steps.

localhost# cong

localhost(cong)# images

localhost(cong-images)# load <url>

Note: Application images have a .bcsi extension and are available for down-

load from: support.broadcom.com/security

5 Add ISG Applications

a. Conrm the appliance’s Console port is still connected to the serial terminal

and that the terminal software is congured as in Step 4.

b. On the Menu screen, press 1 to open CLI.

c. To access privileged commands on the host appliance, enter:

localhost# enable

Enable Password: <host-enable-password>

d. To add an ISG application, enter:

localhost# cong

localhost(cong)# applications

localhost(cong-applications)# create <app-type> im age-id

<app-image> model <app-model> license-id <id> <app-name>

Note: To add a ProxySG application, enter sg as the app-type. To add a

CAS application, enter cas as the app-type. See your eFulfillment Letter

to verify the number and type of ISG applications and models that can be

installed on your host appliance.

e. To start an ISG application, enter:

localhost(cong-applications)# start <app-name>

localhost(cong-applications)# attach-console <app-name>

f. When prompted, press Enter three times.

g. Use the Conguration Wizard to initialize the ISG application.

• Press a to proceed with Manual Setup.

• Enter the IP address, IP subnet mask, IP gateway, and DNS server for

the appliance’s network ports.

• Specify the console password and enable password.

Broadcom, the pulse logo, Connecting everything, Avago Technologies, Avago, the A logo, Symantec, the Symantec logo, the Checkmark logo, Blue Coat, and the Blue Coat logo are among the trademarks of Broadcom and/or its aﬃliates

in the United States, certain other countries, and/or the EU. Copyright 2021 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. For more information, please visit www.broadcom.com.

Symantec Security Platform

SSP-S210 Quick Start Guide

Need help?

Do you have a question about the Broadcom Symantec SSP-S210 and is the answer not in the manual?

The Symantec Security Platform SSP-S210 is a rack-mountable device designed for network security and management. It features a modular design, allowing for flexible configuration and expansion. The device is typically installed in a standard 19-inch rack and requires careful attention to weight distribution and power connections.

Function Description

The SSP-S210 serves as a security appliance, providing various network security functions. It integrates with Symantec's broader security ecosystem, offering centralized management and control. Key functions include:

Network Security: The device is designed to protect network infrastructure from various threats.
Management: It provides a console port for local management and a web-based interface for remote administration.
Modular Architecture: The SSP-S210 supports modular components, allowing users to customize its capabilities based on specific security needs.
Power Redundancy: The device is equipped with redundant power supplies (PSU1 and PSU2) to ensure continuous operation in case of a power supply failure.
Network Connectivity: It offers multiple network interfaces, including RJ45-to-DB9 null modem serial cable for console access, slide-rail kit, and Quick Start Guide.

Important Technical Specifications

Rack Compatibility: Standard 19-inch rack.
Power Supplies: Two redundant power supplies (PSU1 and PSU2).
Network Interfaces: Multiple RJ45 ports for network connectivity.
Console Port: RJ45-to-DB9 null modem serial cable for local management.
Weight: The device's weight is a critical consideration for rack installation. The manual emphasizes the importance of verifying the weight of the system and ensuring it does not exceed the rack's fully populated weight limit.
Environmental Requirements: The device is designed for operation within specific environmental conditions, including temperature and humidity. Users should refer to the "Environmental Requirements" section of the Symantec Hardware Warranty Information for detailed specifications.
Compliance: The device complies with various safety and regulatory standards. Users should consult the "Safety Instructions" and "Regulatory Warnings" in the Symantec Hardware Warranty Information for details.

Usage Features

Initial Setup:
- Unpacking: Verify the shipping package for the appliance, including the C13-to-C14 AC power cords, RJ45-to-DB9 null modem serial cable, slide-rail kit, Quick Start Guide, and relevant documentation (Symantec License Agreement, and Hardware Warranty Information).
- Connecting Cables: Connect the console port using the RJ45-to-DB9 null modem serial cable to a management workstation. Connect the power cables to PSU1 and PSU2, ensuring they are connected to independent power sources for redundancy.
- Powering On: Press the soft power switch on the front panel. The power LED will turn amber initially, then green once the boot cycle is complete.
- Initial Configuration: Access the console port using a terminal emulator (e.g., HyperTerminal, PuTTY, or Tera Term) with specific settings (baud rate: 9600 bps, data bits: 8, stop bits: 1, flow control: none). Press Enter to initiate the host appliance configuration.
- Management Interface: The device can be managed via a command-line interface (CLI) through the console port or a web-based graphical user interface (GUI).
Console Management:
- Accessing the Console: After connecting the console cable and powering on, open a terminal emulator and press Enter to access the console.
- Login: Enter the username and password. The default username is "admin" and the default password is "password".
- Enabling the Console: If the console is not enabled, use the command enable to activate it.
- Network Configuration: Configure network settings, including IP address, subnet mask, and gateway, using the config command.
- Password Management: Change the default password for security.
- License Management: Apply necessary licenses using the license command.
- User Management: Create and manage user accounts.
- System Information: View system information, including hardware and software versions.
- Troubleshooting: Use various commands to diagnose and resolve issues.
Rack Mounting:
- Slide-Rail Kit: The device comes with a slide-rail kit for easy installation and removal from a standard 19-inch rack.
- Installation Steps:
  1. Attach the inner rail to the appliance by aligning and inserting the chassis's mounting screws into the rail holes, then lift the clip and slide the rail toward the rear of the chassis until it snaps into place.
  2. Attach each outer rail to the front and rear posts in the equipment rack by aligning and inserting the bracket pins into the rack post holes while lifting the rail's lock lever.
  3. Insert the appliance into the equipment rack by aligning the chassis rails (attached to the appliance) with the slide rails in the rack. Gently slide the appliance all the way into the rack while pressing the release tabs.
- Weight Distribution: Ensure the rack can support the weight of the appliance and any other installed equipment. The manual explicitly states, "Verify the weight of the system and observe all cables. Verify that the weight of the system does not exceed the rack's fully populated weight limit."
Power Management:
- Redundant Power Supplies: The SSP-S210 features two redundant power supplies (PSU1 and PSU2). Both should be connected to independent power sources to ensure high availability.
- Power On/Off: Use the soft power switch on the front panel to power on or off the appliance.
- Graceful Shutdown: For maintenance or relocation, perform a graceful shutdown using the console command shutdown to prevent data loss.
- Power Off During Maintenance: Always use the shutdown command to power off the host appliance. Abruptly removing power can result in data loss.

Maintenance Features

Software Updates: Regularly update the device's software to ensure the latest security patches and features are applied. Information on software downloads can be found on the Symantec support website.
Hardware Maintenance:
- Rack Installation: Ensure the device is securely mounted in the rack, following the instructions for the slide-rail kit.
- Cable Management: Keep cables organized and properly routed to prevent accidental disconnections or damage.
- Environmental Control: Maintain the operating environment within specified temperature and humidity ranges to prevent hardware failures.
Troubleshooting:
- Console Access: The console port is essential for troubleshooting, especially when network access is unavailable.
- Log Files: The device generates log files that can be used to diagnose issues.
- Support Resources: Refer to the Symantec support website for documentation, FAQs, and technical assistance.
- Downloads: Access software downloads, documentation, and license management tools from the Symantec support website.
Documentation:
- Quick Start Guide: Provides initial setup instructions.
- Symantec Hardware Warranty Information: Contains detailed specifications, safety instructions, regulatory warnings, and environmental requirements.
- Installation Guide: Provides comprehensive instructions for rack mounting and hardware installation.
- User Manual: Offers detailed information on configuration, management, and troubleshooting.

The SSP-S210 is designed for robust and reliable operation within a secure network environment. Adhering to the installation, configuration, and maintenance guidelines outlined in the manual is crucial for optimal performance and longevity of the device.