Juniper JSA1500 Kasutusjuhend

Juniper Secure Analytics Hardware Guide

Modified: 2018-09-05

Juniper Networks, Inc.

1133 Innovation Way

Sunnyvale, California 94089

USA

408-745-2000

www.juniper.net

Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. and/or its affiliates in

the United States and other countries. All other trademarks may be property of their respective owners.

Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,

transfer, or otherwise revise this publication without notice.

Juniper Secure Analytics Hardware Guide

The information in this document is current as of the date on the title page.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the

year 2038. However, the NTP application is known to have some difficulty in the year 2036.

END USER LICENSE AGREEMENT

The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks

software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at

https://www.juniper.net/support/eula/. By downloading, installing or using such software, you agree to the terms and conditions of that

EULA.

Table of Contents

About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii

Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

Part 1 Overview

Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

JSA Appliance Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

JSA Appliance Hardware Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Part 2 Components

Chapter 2 Hardware Components and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Hardware Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

JSA Transceiver Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Chassis Console Port Pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Chapter 3 JSA3500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

JSA3500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

JSA3500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Chapter 4 JSA3800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

JSA3800 Appliance Front Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

JSA3800 Appliance Back Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Chapter 5 JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

JSA5500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

JSA5500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Chapter 6 JSA5800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

JSA5800 Appliance Front Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

JSA5800 Appliance Back Panel Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Chapter 7 JSA7500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

JSA7500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

JSA7500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Part 3 Planning

Chapter 8 Site Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Additional Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

General Site Installation Guidelines for the JSA Appliance . . . . . . . . . . . . . . . . . . 38

JSA Appliance Rack Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Part 4 Safety

Chapter 9 General Safety and Regulatory Information . . . . . . . . . . . . . . . . . . . . . . . . . . 43

General Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Definitions of Safety Warning Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

Fire Safety Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Qualified Personnel Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Warning Statement for Norway and Sweden . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

Agency Approvals for JSA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

Chapter 10 Radiation and Laser Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Laser and LED Safety Guidelines and Warnings for JSA . . . . . . . . . . . . . . . . . . . . . 51

General Laser Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Class 1 Laser Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Class 1 LED Product Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Laser Beam Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Radiation from Open Port Apertures Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Chapter 11 Installation and Maintenance Safety Information . . . . . . . . . . . . . . . . . . . . . 55

Installation Instructions Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Chassis Lifting Guidelines for JSA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Ramp Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Rack-Mounting Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Grounded Equipment Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Maintenance and Operational Safety Guidelines and Warnings . . . . . . . . . . . . . . 62

Battery Handling Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Jewelry Removal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Lightning Activity Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Operating Temperature Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Product Disposal Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Chapter 12 Power and Electrical Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

General Electrical Safety Guidelines and Warnings . . . . . . . . . . . . . . . . . . . . . . . . 69

Prevention of Electrostatic Discharge Damage . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

AC Power Electrical Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

AC Power Disconnection Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

DC Power Electrical Safety Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

DC Power Disconnection Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

DC Power Grounding Requirements and Warning . . . . . . . . . . . . . . . . . . . . . . . . . . 77

DC Power Wiring Sequence Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

DC Power Wiring Terminations Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Multiple Power Supplies Disconnection Warning . . . . . . . . . . . . . . . . . . . . . . . . . . 81

TN Power Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

Action to Take After an Electrical Accident . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Juniper Secure Analytics Hardware Guide

Chapter 13 Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Compliance Statements for EMC Requirements for JSA . . . . . . . . . . . . . . . . . . . . 83

Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

European Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Japan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Korea . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

United States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

FCC Part 15 Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Compliance Statements for Acoustic Noise for JSA . . . . . . . . . . . . . . . . . . . . . . . . 85

Compliance Statements for NEBS Standards for JSA7500 . . . . . . . . . . . . . . . . . 86

Part 5 Installation

Chapter 14 Hardware Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Rack-Mount Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Required Tools and Parts for Installing the JSA Appliance . . . . . . . . . . . . . . . . . . 89

Chapter 15 Software Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

JSA Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

Browser Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Preparing the Network Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Identifying Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

Identifying Security Monitoring Devices and Flow Data Sources . . . . . . . . . . 94

Identifying Network Assets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Chapter 16 Connecting the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Grounding the JSA7500 Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Connecting JSA to a DC Power Source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Connecting to a Management Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Chapter 17 Installing the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Installing the JSA Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Front-and-Rear-Mounting the JSA Appliance Flush to a Rack . . . . . . . . . . . . . . . 104

Front-and-Rear-Mounting the JSA Appliance Recessed in a Rack . . . . . . . . . . . 105

Front-and-Rear-Mounting the JSA7500 in a 4-Post Sliding Rail Rack . . . . . . . . 106

Mid-Mounting the JSA Appliance in a Two-Post Rack . . . . . . . . . . . . . . . . . . . . . 109

Installing the CNA Module on the JSA1500 Appliance . . . . . . . . . . . . . . . . . . . . . 110

Chapter 18 Configuring Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Identifying Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Identifying Security Monitoring Devices and Flow Data Sources . . . . . . . . . . . . . . 114

Identifying Network Assets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Chapter 19 Configuring Secure Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

Configuring the Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

Accessing the JSA Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Table of Contents

Part 6 Maintenance

Chapter 20 Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Field-Replaceable Units on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Replacing the Fan on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

Replacing the Air Filter on the JSA7500 Appliance . . . . . . . . . . . . . . . . . . . . . . . . 126

Replacing an AC Power Supply on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . 127

Replacing AC Power Supply Cables on the JSA Appliance . . . . . . . . . . . . . . . . . . 127

Replacing a DC Power Supply on the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . 128

Replacing DC Power Supply Cables on the JSA Appliance . . . . . . . . . . . . . . . . . . 129

Part 7 Troubleshooting

Chapter 21 Monitoring Hardware Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

RAID Array . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

Cooling Fans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

Maintaining the JSA7500 Air Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136

Chapter 22 Juniper Networks Technical Assistance Center . . . . . . . . . . . . . . . . . . . . . . . 137

Contacting Juniper Networks Technical Assistance Center . . . . . . . . . . . . . . . . . . 137

Juniper Secure Analytics Hardware Guide

List of Figures

Part 2 Components

Chapter 3 JSA3500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Figure 1: JSA3500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Figure 2: JSA3500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Chapter 4 JSA3800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Figure 3: JSA3800 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Figure 4: JSA3800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Figure 5: JSA3800 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Figure 6: JSA3800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Chapter 5 JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Figure 7: JSA5500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Figure 8: JSA5500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Chapter 6 JSA5800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Figure 9: JSA5800 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Figure 10: JSA5800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Figure 11: JSA5800 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Figure 12: JSA5800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Chapter 7 JSA7500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Figure 13: JSA7500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Figure 14: JSA7500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Part 4 Safety

Chapter 12 Power and Electrical Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Figure 15: Placing a Component into an Antistatic Bag . . . . . . . . . . . . . . . . . . . . . . 72

Part 5 Installation

Chapter 16 Connecting the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Figure 16: Grounding the JSA7500 Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Figure 17: Connecting JSA to a DC Power Source . . . . . . . . . . . . . . . . . . . . . . . . . 100

Chapter 17 Installing the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Figure 18: JSA1500 Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Figure 19: JSA1500 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Figure 20: Front-Rear Mounting Flush to Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

Figure 21: Front-Rear-Mounting Recessed in Rack . . . . . . . . . . . . . . . . . . . . . . . . 106

Figure 22: Securing Mounting Brackets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

Figure 23: Slide Assembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

Figure 24: Attaching the Slide Sets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

Figure 25: Sliding the Appliance into the Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

Figure 26: Securing the Front-Mount Rail Brackets . . . . . . . . . . . . . . . . . . . . . . . 109

Figure 27: Mid-Mount in Two-Post Equipment Rack . . . . . . . . . . . . . . . . . . . . . . . 110

Figure 28: JSA1500 with the CNA Card Inserted . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

Part 6 Maintenance

Chapter 20 Maintaining the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Figure 29: Opening the Chassis Lid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

Figure 30: Removing the Fan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Figure 31: Replacing the Fan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Juniper Secure Analytics Hardware Guide

List of Tables

About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

Table 1: Notice Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii

Table 2: Text and Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii

Part 1 Overview

Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Table 3: JSA Appliance Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Part 2 Components

Chapter 2 Hardware Components and Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Table 4: Hardware Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Table 5: JSA Appliance Transceiver Interface Types . . . . . . . . . . . . . . . . . . . . . . . . . 9

Table 6: RJ-45 Console Connector Pinouts for JSA1500, JSA3500, and

JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Chapter 3 JSA3500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Table 7: JSA3500 Front Panel Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Table 8: JSA3500 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Table 9: JSA3500 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Chapter 4 JSA3800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Table 10: JSA3800 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Table 11: JSA3800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Table 12: JSA3800 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Table 13: JSA3800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Chapter 5 JSA5500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Table 14: JSA5500 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Table 15: JSA5500 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Table 16: JSA5500 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Chapter 6 JSA5800 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Table 17: JSA5800 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Table 18: JSA5800 Front Panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Table 19: JSA5800 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Table 20: JSA5800 Ethernet Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Chapter 7 JSA7500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Table 21: JSA7500 Front Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Table 22: JSA7500 Back Panel Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Part 3 Planning

Chapter 8 Site Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Table 23: Required JSA Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Table 24: Rack Requirements for the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . 39

Part 5 Installation

Chapter 14 Hardware Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Table 25: Required Tools and Parts for Installing the JSA Appliance . . . . . . . . . . . 89

Chapter 15 Software Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

Table 26: Network Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Table 27: Asset Identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Chapter 16 Connecting the JSA Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Table 28: Grounding Cable and Grounding Lug Specifications for the JSA7500

Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Chapter 18 Configuring Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Table 29: Asset Identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Juniper Secure Analytics Hardware Guide

About the Documentation

•

Documentation and Release Notes on page xi

•

Documentation Conventions on page xi

•

Documentation Feedback on page xiii

•

Requesting Technical Support on page xiv

Documentation and Release Notes

To obtain the most current version of all Juniper Networks

®

technical documentation,

see the product documentation page on the Juniper Networks website at

https://www.juniper.net/documentation/.

If the information in the latest release notes differs from the information in the

documentation, follow the product Release Notes.

Juniper Networks Books publishes books by Juniper Networks engineers and subject

matter experts. These books go beyond the technical documentation to explore the

nuances of network architecture, deployment, and administration. The current list can

be viewed at https://www.juniper.net/books.

Documentation Conventions

Table 1 on page xii defines notice icons used in this guide.

Table 1: Notice Icons

DescriptionMeaningIcon

Indicates important features or instructions.Informational note

Indicates a situation that might result in loss of data or hardware damage.Caution

Alerts you to the risk of personal injury or death.Warning

Alerts you to the risk of personal injury from a laser.Laser warning

Indicates helpful information.Tip

Alerts you to a recommended use or implementation.Best practice

Table 2 on page xii defines the text and syntax conventions used in this guide.

Table 2: Text and Syntax Conventions

ExamplesDescriptionConvention

To enter configuration mode, type the

configure command:

user@host> configure

Represents text that you type.Bold text like this

user@host> show chassis alarms

No alarms currently active

Represents output that appears on the

terminal screen.

Fixed-width text like this

•

A policy term is a named structure

that defines match conditions and

actions.

•

Junos OS CLI User Guide

•

RFC 1997, BGP Communities Attribute

•

Introduces or emphasizes important

new terms.

•

Identifies guide names.

•

Identifies RFC and Internet draft titles.

Italic text like this

Configure the machine’s domain name:

[edit]

root@# set system domain-name

domain-name

Represents variables (options for which

you substitute a value) in commands or

configuration statements.

Italic text like this

Juniper Secure Analytics Hardware Guide

Table 2: Text and Syntax Conventions (continued)

ExamplesDescriptionConvention

•

To configure a stub area, include the

stub statement at the [edit protocols

ospf area area-id] hierarchy level.

•

The consoleport is labeled CONSOLE.

Represents names of configuration

statements, commands, files, and

directories; configuration hierarchy levels;

or labels on routing platform

components.

Text like this

stub <default-metric metric>;Encloses optional keywords or variables.< > (angle brackets)

broadcast | multicast

(string1 | string2 | string3)

Indicates a choice between the mutually

exclusive keywords or variables on either

side of the symbol. The set of choices is

often enclosed in parentheses for clarity.

| (pipe symbol)

rsvp { # Required for dynamic MPLS onlyIndicates a comment specified on the

same line as the configuration statement

to which it applies.

# (pound sign)

community name members [

community-ids ]

Encloses a variable for which you can

substitute one or more values.

[ ] (square brackets)

[edit]

routing-options {

static {

route default {

nexthop address;

retain;

}

Identifies a level in the configuration

hierarchy.

Indention and braces ( { } )

Identifies a leaf statement at a

configuration hierarchy level.

; (semicolon)

GUI Conventions

•

In the Logical Interfaces box, select

All Interfaces.

•

To cancel the configuration, click

Cancel.

Represents graphicaluser interface (GUI)

items you click or select.

Bold text like this

In the configuration editor hierarchy,

select Protocols>Ospf.

Separates levels in a hierarchy of menu

selections.

> (bold right angle bracket)

Documentation Feedback

We encourage you to provide feedback so that we can improve our documentation. You

can use either of the following methods:

•

Online feedback system—Click TechLibrary Feedback, on the lower right of any page

on the Juniper Networks TechLibrary site, and do one of the following:

About the Documentation

•

Click the thumbs-up icon if the information on the page was helpful to you.

•

Click the thumbs-down icon if the information on the page was not helpful to you

or if you have suggestions for improvement, and use the pop-up form to provide

feedback.

•

E-mail—Send your commentstotechpubs-comments@juniper.net. Include the document

or topic name, URL or page number, and software version (if applicable).

Requesting Technical Support

Technical product support is available through the Juniper Networks Technical Assistance

Center (JTAC). If you are a customer with an active J-Care or Partner Support Service

support contract, or are covered under warranty, and need post-sales technical support,

you can access our tools and resources online or open a case with JTAC.

•

JTAC policies—For a complete understanding of our JTAC procedures and policies,

review the JTAC User Guide located at

https://www.juniper.net/us/en/local/pdf/resource-guides/7100059-en.pdf.

•

Product warranties—For product warranty information, visit

https://www.juniper.net/support/warranty/.

•

JTAC hours of operation—The JTAC centers have resources available 24 hours a day,

7 days a week, 365 days a year.

Self-Help Online Tools and Resources

For quick and easy problem resolution, Juniper Networks has designed an online

self-service portal called the Customer Support Center (CSC) that provides you with the

following features:

•

Find CSC offerings: https://www.juniper.net/customers/support/

•

Search for known bugs: https://prsearch.juniper.net/

•

Find product documentation: https://www.juniper.net/documentation/

•

Find solutions and answer questions using our Knowledge Base: https://kb.juniper.net/

•

Download the latest versions of software and review release notes:

https://www.juniper.net/customers/csc/software/

•

Search technical bulletins for relevant hardware and software notifications:

https://kb.juniper.net/InfoCenter/

Juniper Secure Analytics Hardware Guide

•

Join and participate in the Juniper Networks Community Forum:

https://www.juniper.net/company/communities/

•

Open a case online in the CSC Case Management tool: https://www.juniper.net/cm/

To verify service entitlement byproduct serial number, use our Serial Number Entitlement

(SNE) Tool: https://entitlementsearch.juniper.net/entitlementsearch/

Opening a Case with JTAC

You can open a case with JTAC on the Web or by telephone.

•

Use the Case Management tool in the CSC at https://www.juniper.net/cm/.

•

Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).

For international or direct-dial options in countries without toll-free numbers, see

https://www.juniper.net/support/requesting-support.html.

About the Documentation

Juniper Secure Analytics Hardware Guide

PART 1

Overview

•

Introduction on page 3

Juniper Secure Analytics Hardware Guide

CHAPTER 1

Introduction

•

JSA Appliance Models on page 3

•

JSA Appliance Hardware Features on page 4

JSA Appliance Models

Juniper Secure Analytics (JSA) appliances are designed to respond to the right threats

at the right time through effective analysis of networks, events, and audit log files. JSA

has the ability to identify environmental anomalies in the network, an attack path, and

the source of a threat. JSA provides network remediation for threat responses across all

security products.

The JSA appliances use twodrivers, Security Information Management (SIM) and Security

Event Management (SEM), for security analysis of external and internal threats. SIM

provides reporting and analysis of data from host systems, applications, and security

devices to support security policy compliance management, internal threat management,

and regulatory compliance initiatives. SEM improves security incident response capabilities

by processing data from security devices and network devices. It helps network

administrators to provide effective responses to external and internal threats.

Table 3 on page 3 lists the Juniper Secure Analytics (JSA) appliance models.

Table 3: JSA Appliance Models

Storage ConfigurationMemoryDevice TypeModel

Six 1-TB HDDs, RAID1032 GBLow memoryJSA3500

Six 900 GB HDDs, RAID1064 GBLow memoryJSA3800

Eight 1-TB HDDs, RAID1096 GBHigh memoryJSA5500

Eight 900 GB HDDs, RAID10128 GBHigh memoryJSA5800

28 drives of 900 GB HDDs,

RAID10

128 GBHigh memoryJSA7500

Table 3: JSA Appliance Models (continued)

Storage ConfigurationMemoryDevice TypeModel

Sixteen 2 TB HDDs, RAID6

For more information on

JSA7800, see JSA7800

Hardware Guide.

128 GBHigh memoryJSA7800

JSA Appliance Description•

• JSA Appliance Hardware Features on page 4

• Additional Hardware Requirements on page 37

JSA Appliance Hardware Features

The Juniper Secure Analytics (JSA) appliance provides the following features:

•

Monitor utility for power supply unit (PSU) and fans

•

Add setup logs automatically

•

Support high availability (HA)

•

Hot-swappable hard disk supporting RAID

•

Automatic RAID rebuild on HDD swap

•

Support hot-swappable dual-AC or dual-DC power supplies with a redundant

configuration in the chassis

• Browser Support on page 92

• General Safety Guidelines and Warnings on page 43

• Required Tools and Parts for Installing the JSA Appliance on page 89

Juniper Secure Analytics Hardware Guide

Leht laaditakse ...

Juniper JSA1500 Kasutusjuhend

See juhend sobib ka

Juniper JSA1500 Kasutusjuhend

teistes keeltes

Seotud paberid

Muud dokumendid