Network Security Platform v6.0 Page 4
700-2360F00
Release Notes
Like in earlier releases, you require an add-on license to enable NAC on M-series Sensors. Earlier, you could import
the add-on license under Manager > Licenses tab. In this release, you can import/assign the license using the
Device List > Add-On Licenses page.
With this release, the Manager will not raise any fault on Sensor license expiry.
Refer to the Release Notes of the Manager version that you are installing or upgrading to for the latest information on
licensing changes.
For details on configuring add-on licenses, see Device Configuration Guide.
Support for Active Fail-Open Bypass Kits
With this release of 6.0, Network Security Platform supports the following Active Fail-Open Bypass Switches:
10/100/1000 Copper
10/100/1000 Copper with SNMP Monitoring
1 Gigabit Optical – single and multi mode
10 Gigabit Optical – single and multi mode
When an Active Fail-Open Bypass Kit is configured and the Sensor is operating, the switch is “On” and routes all traffic
directly through the Sensor. When the Sensor fails, the switch automatically shifts to a bypass state: in-line traffic
continues to flow through the network link, but is no longer routed through the Sensor. Once the Sensor resumes normal
operation, the switch returns to the “On” state, again enabling in-line monitoring.
During normal Sensor in-line fail-open operation, the Active Fail-Open Kit sends a heartbeat signal (1 every second) to
the monitoring port pair. If the Active Fail-Open Kit does not receive 3 heart beat signals within its programmed interval,
the Active Fail-Open Kit removes the Sensor’s monitoring port pair from the data path, and moves the Sensor into the
bypass mode, providing continuous data flow.
When the Bypass Switch loses power, traffic continues to flow through the network link, but is no longer routed through
the Bypass Switch. This allows network devices to be removed and replaced without network downtime. Once power is
restored to the Bypass Switch, network traffic is seamlessly diverted to the monitoring device, allowing it to resume its
critical functions.
Note the following:
The Active Fail-Open Bypass kits can be configured for the following Sensor models: M-2750, M-3050, M-4050, M-
6050, and M-8000.
10 Gigabit Active Fail-Open Bypass kits are supported only in 6.0.7.x version. Network Security Platform is yet to
support 10 Gigabit Active Fail-Open Kits in the 5.1 version.
With auto-negotiation mode on all speeds enabled, that is, if the first network switch is using a 10/100 Ethernet port
and speed is auto and the second network switch is using a 10/100/1000 Ethernet port and speed is at auto, the
maximum negotiable speed is 100Mbps. Therefore, configure the Sensor port pair to 100 Mbps auto-full and the
Bypass Switch to remain at its default setting.
Half duplex configuration is not supported on the Active Fail-Open Bypass Switch.
The Active Fail-Open Bypass Kit with SNMP monitoring provides the additional feature of raising SNMP faults to track
events such as bypass state changes, threshold utilization, port link status changes, and power supply state changes.
For more details, see:
10/100/1000 Copper Active Fail-Open Bypass Kit Quick Start Guide
10/100/1000 Copper Active Fail-Open Bypass Kit with SNMP Quick Start Guide
1 Gigabit Optical Active Fail-Open Bypass Kit Quick Start Guide
10 Gigabit Optical Active Fail-Open Bypass Kit Quick Start Guide
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales