Fidelis Network Series, Collector XA4, Collector Controller 10G Quick Start Manual

QUICK START GUIDE

Fidelis Network™
High Capacity Collector

Rev-I

Collector Controller Appliances
Based on HP DL360-G9 and DL380-G9

Platforms

www.fidelissecurity.com

QUICK START GUIDE

2

System

Account

Default Password

SSH / Appliance Console

fidelis

fidelispass

K2 GUI

admin

system

ILO

administrator

(printed on label, top of server)

Fidelis Network™ High Capacity Collector

1. System Overview

The Fidelis Collector is the security analytics database for Fidelis Network. The Fidelis Collector
receives network metadata from Fidelis Network sensors (e.g., Direct, Internal, Mail and Web
Sensors) and stores it for ongoing analysis. A Fidelis Collector cluster of appliances consist of one or
two Collector Controller(s) and typically three or more Collector XA database nodes.

Figure 1: Fidelis Network — Collector Controller 10G (Rev-I)

Figure 2: Fidelis Network — Collector XA4 Appliance (Rev-I)

2. Documentation & References

Fidelis Network product documentation, appliance specifications, and instructions can be found at

http://fidelisssecurity.com/customer-support/login or through the icon in the K2 GUI.

Appliance Default Passwords

Technical Support

For all technical support related to this product, check with your site administrator to determine
support contract details. For support of your product, contact your reseller. If you have a direct
support contract with Fidelis Cybersecurity, contact the Fidelis Cybersecurity support team at:

• Phone: [phone]

• Toll-free in the US: 1.800.652.4020 – Use the customer support option.

• Email: [e-mail]

• Web: http://www.fidelissecurity.com/customer-support/login

www.fidelissecurity.com ©Fidelis Cybersecurity

QUICK START GUIDE

3

Check

Fidelis Network Sensor – Appliance Requirements

Appropriate rack space, power, and cooling (Appendix B)

Rack tools, rails, and connectors

Keyboard and video monitor / KVM switch for temporary appliance setup

Power cables — two per appliance, appropriate for power source and region

Ethernet cables (cat5 and optical) for Admin, DB, SYNC and iLO ports (Section 3)

Network switches with enough physical ports (Section 4)

Optical transceivers for switches

Logical network information: IP addresses, hostnames (Section 5, Appendix A)

For Fidelis Network Software version 9.0.5 and later, the appliance system type (Appendix D)

Port Label

Physical Connection Type (default)

Cable Type

Admin

10GbE LC connector

Fiber SR Patch Cable, Multimode 850nM

DB Net

10GbE LC connector

Fiber SR Patch Cable, Multimode 850nM

ILO

GbE RJ45 (copper)

Cat 5/5e/6 patch cable

Fidelis Network™ High Capacity Collector

Collector Setup Checklist

3. Collector: Network Port and Cabling Requirements

Each appliance must be connected to the various networks with appropriate cables and in some
cases, transceivers. The tables below describe the physical connection and cable type associated
with each port on the appliance.

Collector Controller 10G Appliance

Figure 3: Network Port Assignments — Collector Controller 10G (Rev-I)

www.fidelissecurity.com ©Fidelis Cybersecurity

QUICK START GUIDE

4

Port Label

Physical Connection Type (default)

Cable Type

Admin

GbE RJ45 (copper)

Cat 5 patch cable

DB Net

10GbE SFP+ w/ LC Connector

Fiber SR Patch Cable, Multimode 850nM

SYNC net

10GbE SFP+ w/ LC Connector

Fiber SR Patch Cable, Multimode 850nM

ILO

GbE RJ45 (copper)

Cat 5 patch cable

Appliance

Switch Port Type

Qty.

Collector Controller 10G

10GbE Fiber SR, LC connector (may require SFP+ transceiver)

1

Collector XA4

GbE - Copper Cat5 RJ45 port

1

Fidelis Network™ High Capacity Collector

Collector XA4 Database Node

Figure 4: Network Port Assignments — Collector XA4 (Rev-I)

4. Collector Networking Environment

The Collector appliances use multiple networks for service and inter-node communication. Networks
may be deployed as three independent physical switches — or — multiple independent VLANs on
the same switch fabric. The ADMIN, DB, and SYNC switches or VLANs must be different broadcast
domains. (iLO and ADMIN networks may intersect)

Use the tables below to identify the count and type of switch ports necessary to support the number
of appliances for your deployment.

Admin Network

The Admin Network connects the Collector Controller to the Fidelis Network sensors and K2
systems. Also connects the Collector XA nodes to the K2.

www.fidelissecurity.com ©Fidelis Cybersecurity