How To Manage A Network With An Ipc (Ipc) And Ipc V2 (Ipv) On An Ipa (Ipa) On A Network On An Hp Zl (Ips) And V2 On A Pc (

Transcription

1 Overview Models HP Network Immunity Manager v2 Software with 50-Device License HP Network Immunity Manager v2 100-Device License HP Network Immunity Manager v2 Software with Unlimited-Device License J9161A J9162A J9163A Key features Intrusion detection Intrusion response Security management Reporting Flexible deployment Product overview HP Network Immunity Manager is a plug-in for HP PCM Plus that detects and automatically responds to internal network threats such as virus attacks. Additionally, it provides central management of HP Threat Management Services (TMS) zl Modules. The software also leverages security and traffic-monitoring features built into HP networking switches such as sflow, Virus Throttle, and remote mirroring technologies, as well as performs network behavior anomaly detection (NBAD) to detect attacks. Optionally, it remotely mirrors suspect traffic to an IDS/IPS/UTM appliance such as the HP TMS zl Module. This security tool provides visibility into internal network threat activity to help increase network availability. Features and benefits Security Intrusion detection: Network visibility: monitors network traffic for threats using sflow data Detection methods: uses virus alerts, network behavior anomaly detection (NBAD), and security alerts Remote monitoring: mirrors traffic to third-party IDS/IPS/UTM devices for deep packet inspection Offender tracking: identifies the offender (IP, and MAC and DNS names) and displays their location Security heat map: provides a real-time view of security activity across the network Intrusion response: Internal threat protection: detects and mitigates attacks Location-based enforcement: enforces security based on time and location Threat mitigation responses on offenders: quarantine VLAN, bandwidth limiting, MAC lockout, port shutdown, or alert notifications Chain of actions: is a prioritized list of mitigation actions that triggers an alternative when one action fails Wireless support: blocks offending MAC addresses Security management: Policy management: manages mitigation policies based on event source, location, time, and action Security dashboard: provides a real-time view of security activities, mitigation actions, and offender details across a network White list (exempt list): a set of IP addresses, and MAC and DNS names that are exempt from mitigation actions Configuration cleanup: automatic rollback of response configurations from HP networking switches and wireless access points after the policy expires NEW Centralized management of HP TMS zl Modules: Firewall configuration: sets firewall policies across multiple TMS modules DA EMEA Version 5 November 29, 2011 Page 1

2 Overview IPS configuration: enables and disables IPS signatures across multiple TMS modules VPN configuration: configures IPsec, GRE over IPsec, and L2TP over IPsec Event logging, aggregation, and suppression: provides an overview of threat activity across the network Other TMS central management features: include high availability configuration, IPS signature updates, and firmware updates Reporting: Data mining: generates network-based, offender-based, and alert-based tabular reports; generates a variety of reports to inspect HP Threat Management Services zl Module activity and effectiveness Flexible deployment: Network detection: detects attacks and mitigates threats at the network edge using intrusion-response capabilities Passive intrusion detection: Network Immunity Manager identifies suspect traffic via NBAD analysis and mirrors to an offline IDS/IPS/UTM device for deep packet inspection of attacks Active intrusion prevention and response: receives alerts from inline IDS/IPS/UTM devices and mitigates threats using E-Network Immunity Manager's response capabilities Device support: HP networking: HP Threat Management Services zl Module SonicWALL: SonicWALL UTM PRO Series and E-Class appliances Fortinet: Fortinet UTM appliances Cisco: Cisco IPS 4200 Series Sensor TippingPoint: TippingPoint IPS appliances (excluding SMS and ZPHA models) DA EMEA Version 5 November 29, 2011 Page 2

3 Technical Specifications Services HP Network Immunity Manager HP Network Immunity Manager HP Network Immunity Manager v2 Software with 50-Device License (J9161A) v2 100-Device License (J9162A) v2 Software with Unlimited- Device License (J9163A) For system requirements, please refer to the HP PCM Plus specifications list. 3-Year, 9x5 SW phone support, software updates (UQ122E) 3-year, 24x7 SW phone support, software updates (UQ123E) 1-year, 24x7 software phone support, software updates (HS541E) For system requirements, please refer to the HP PCM Plus specifications list. 3-Year, 9x5 SW phone support, software updates (UQ124E) 3-year, 24x7 SW phone support, software updates (UQ125E) 1-year, 24x7 software phone support, software updates (HS542E) For system requirements, please refer to the HP PCM Plus specifications list. 3-Year, 9x5 SW phone support, software updates (UQ132E) 3-year, 24x7 SW phone support, software updates (UQ133E) 1-year, 24x7 software phone support, software updates (HS547E) Refer to the HP website at: for details on the service-level descriptions and product numbers. For details about services and response times in your area, please contact your local HP sales office. Refer to the HP website at: for details on the service-level descriptions and product numbers. For details about services and response times in your area, please contact your local HP sales office. Refer to the HP website at: for details on the service-level descriptions and product numbers. For details about services and response times in your area, please contact your local HP sales office. DA EMEA Version 5 November 29, 2011 Page 3

4 Accessories accessories Modules HP Threat Management Services zl Module with 1-year IDS/IPS subscription HP Threat Management Services zl Module Appliance HP Threat Management Services 1-year IPS subscription HP Threat Management Services 2-year IDS/IPS subscription HP Threat Management Services 3-year IDS/IPS subscription HP PCM+ Agent with ONE Services zl Module J9156A J9155A J9157A J9158A J9159A J9496A DA EMEA Version 5 November 29, 2011 Page 4

5 NOTE: Details are not available for all accessories. The following specifications were available at the time of publication. HP Threat Management Physical characteristics Services zl Module with 1- year IPS Subscription Service (J9156A) Environment Electrical characteristics Services Dimensions Weight Operating temperature Operating relative humidity temperature relative humidity Altitude 9.75(d) x 8.13(w) x 1.75(h) in. (24.77 x x 4.45 cm) 3.25 lb. (1.47 kg) 32 F to 50 F (0 C to 10 C) 15% to 122 F (50 C), noncondensing 14 F to 149 F (-10 C to 65 C) 15% to 149 F (65 C), noncondensing up to 10,000 ft. (3 km) Maximum heat dissipation 272 BTU/hr ( kj/hr) Maximum power rating 80 W Maximum power rating and maximum heat dissipation are the worst-case theoretical maximum numbers provided for planning the infrastructure with fully loaded PoE (if equipped), 100% traffic, all ports plugged in, and all modules populated. Chassis operating temperature specifications of the E5400 zl/e8212 zl switch when services module is installed: 40 C when any services module is installed in the right side of the chassis 50 C when all services modules are installed in the left side of the chassis Up to 4 services modules can be installed in an E5400 zl/e8212 zl chassis simultaneously. Up to 3 services modules are supported (all installed in the left half of the chassis) in the E5406 zl chassis if a 50 C temperature specification is desired. When the services module is installed, the maximum relative humidity for the switch drops from 95% to 90%. 3-year, 4-hour onsite, 13x5 coverage for hardware (UQ589E) 3-year, 4-hour onsite, 24x7 coverage for hardware (UQ590E) 3-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 SW phone support and SW updates (UQ591E) 3-Year, 9x5 SW phone support, software updates (UQ592E) 3-year, 24x7 SW phone support, software updates (UQ593E) 1-year, post-warranty, parts only, global next-day advance exchange (UQ594PE) 1-year, post-warranty, 4-hour onsite, 13x5 coverage for hardware (HR994E) 1-year, post-warranty, 4-hour onsite, 13x5 coverage for hardware (UQ595PE) 1-year, post-warranty, 4-hour onsite, 24x7 coverage for hardware (UQ596PE) 1-year, post-warranty, 4-hour onsite, 24x7 coverage for hardware (HR995E) software phone support (HR996E) DA EMEA Version 5 November 29, 2011 Page 5

6 software phone support (UQ597PE) 3 Yr 6 hr Call-to-Repair Onsite (UW374E) 4 Yr 6 hr Call-to-Repair Onsite (UW375E) 5 Yr 6 hr Call-to-Repair Onsite (UW376E) 1-year, 6 hour Call-To-Repair Onsite for hardware (HR998E) 1-year, 24x7 software phone support, software updates (HR997E) 1-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS786E) 1-year, 24x7 software phone support, software updates + 4 hour hardware exchange (HS787E) 3-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS788E) 3-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS789E) 4-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS790E) 4-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS791E) 5-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS792E) 5-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS793E) Refer to the HP website at: for details on the service-level descriptions and product numbers. For details about services and response times in your area, please contact your local HP sales office. HP Threat Management Services zl Module (J9155A) Physical characteristics Environment Electrical characteristics Dimensions Weight Operating temperature Operating relative humidity temperature relative humidity Altitude 9.75(d) x 8.13(w) x 1.75(h) in. (24.77 x x 4.45 cm) 3.25 lb. (1.47 kg) 32 F to 122 F (0 C to 50 C); important: see note for 50 C temperature specification rules 15% to 122 F (50 C), noncondensing 14 F to 149 F (-10 C to 65 C) 15% to 149 F (65 C), noncondensing up to 10,000 ft. (3 km) Maximum heat dissipation 272 BTU/hr (287 kj/hr) Maximum power rating 80 W DA EMEA Version 5 November 29, 2011 Page 6

7 Services Maximum power rating and maximum heat dissipation are the worst-case theoretical maximum numbers provided for planning the infrastructure with fully loaded PoE (if equipped), 100% traffic, all ports plugged in, and all modules populated. Following are chassis operating temperature specifications of the 5400zl/8212zl switch when services modules are installed: 40 C when any services module is installed in the right side of the chassis 50 C when all services modules are installed in the left side of the chassis Up to four services modules can be installed in a 5400zl/8212zl chassis simultaneously. Up to three services modules are supported (all installed in the left half of the chassis) in the 5406zl chassis if a 50 C temperature specification is desired. When the services module is installed, the maximum relative humidity for the switch drops from 95% to 90%. 3-year, 4-hour onsite, 13x5 coverage for hardware (UQ589E) 3-year, 4-hour onsite, 24x7 coverage for hardware (UQ590E) 3-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 SW phone support and SW updates (UQ591E) 3-Year, 9x5 SW phone support, software updates (UQ592E) 3-year, 24x7 SW phone support, software updates (UQ593E) 1-year, post-warranty, parts only, global next-day advance exchange (UQ594PE) 1-year, post-warranty, 4-hour onsite, 13x5 coverage for hardware (HR994E) 1-year, post-warranty, 4-hour onsite, 13x5 coverage for hardware (UQ595PE) 1-year, post-warranty, 4-hour onsite, 24x7 coverage for hardware (UQ596PE) 1-year, post-warranty, 4-hour onsite, 24x7 coverage for hardware (HR995E) software phone support (HR996E) software phone support (UQ597PE) 3 Yr 6 hr Call-to-Repair Onsite (UW374E) 4 Yr 6 hr Call-to-Repair Onsite (UW375E) 5 Yr 6 hr Call-to-Repair Onsite (UW376E) 1-year, 6 hour Call-To-Repair Onsite for hardware (HR998E) 1-year, 24x7 software phone support, software updates (HR997E) 1-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS786E) 1-year, 24x7 software phone support, software updates + 4 hour hardware exchange (HS787E) 3-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS788E) 3-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS789E) 4-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS790E) DA EMEA Version 5 November 29, 2011 Page 7

8 4-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS791E) 5-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS792E) 5-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS793E) Refer to the HP website at: for details on the service-level descriptions and product numbers. For details about services and response times in your area, please contact your local HP sales office. HP PCM+ Agent with ONE Services zl Module (J9496A) Physical characteristics Environment Electrical characteristics Services Dimensions Weight Operating temperature Operating relative humidity temperature relative humidity Altitude 9.75(d) x 8.13(w) x 1.75(h) in. (24.77 x x 4.45 cm) 3.25 lb. (1.47 kg) 32 F to 122 F (0 C to 50 C); Important: See note for 50 C temperature specification rules. 15% to 122 F (50 C), noncondensing 14 F to 149 F (-10 C to 65 C) 15% to 149 F (65 C), noncondensing up to 10,000 ft. (3 km) Maximum heat dissipation 272 BTU/hr (287 kj/hr) Maximum power rating 80 W Maximum power rating and maximum heat dissipation are the worst-case theoretical maximum numbers provided for planning the infrastructure with fully loaded PoE (if equipped), 100% traffic, all ports plugged in, and all modules populated. Chassis operating temperature specifications of the HP E5400 zl and E8212 zl Switches when the services module is installed: 40 C when any services module is installed in the right side of the chassis 50 C when all services modules are installed in the left side of the chassis Up to four services modules can be installed in an E5400 zl or E8212 zl chassis simultaneously. Up to three modules are supported (all installed in the left half of the chassis) in the E5406 zl chassis if a 50 C temperature specification is desired. When the services module is installed, the maximum relative humidity for the switch drops from 95% to 90%. 3-year, 4-hour onsite, 13x5 coverage for hardware (UU099E) 3-year, 4-hour onsite, 24x7 coverage for hardware (UU100E) 3-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 SW phone support and SW updates (UU101E) 3-Year, 9x5 SW phone support, software updates (UU102E) 3-year, 24x7 SW phone support, software updates (UU103E) DA EMEA Version 5 November 29, 2011 Page 8

9 1-year, post-warranty, 4-hour onsite, 13x5 coverage for hardware (HS526E) 1-year, post-warranty, 4-hour onsite, 24x7 coverage for hardware (HS527E) software phone support (HS528E) 3 Yr 6 hr Call-to-Repair Onsite (UX035E) 4 Yr 6 hr Call-to-Repair Onsite (UX036E) 5 Yr 6 hr Call-to-Repair Onsite (UX037E) 1-year, 6 hour Call-To-Repair Onsite for hardware (HS530E) 1-year, 24x7 software phone support, software updates (HS529E) 1-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS794E) 1-year, 24x7 software phone support, software updates + 4 hour hardware exchange (HS795E) 3-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS796E) 3-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS797E) 4-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS798E) 4-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS799E) 5-year, 24x7 software phone support, software updates + Next Business Day Hardware Exchange (HS800E) 5-year, 24x7 software phone support, software updates + 4 hour Hardware Exchange (HS801E) Refer to the HP website at: for details on the service-level descriptions and product numbers. For details about services and response times in your area, please contact your local HP sales office. To learn more, visit: Copyright Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. DA EMEA Version 5 November 29, 2011 Page 9