FEI-012

CHAPTER 1: The EX 3500

The FireEye EX 3500 protects your network from spearphishing attacks that bypass traditional anti-spam technologies. It analyzes every attachment using a signature-less, Multi-Vector Virtual Execution engine that can identify zero-day attacks by detonating attachments in an environment that mimics operating systems, applications, and browsers in their exhaustive list of versions, configurations, and plug-ins.

The EX 3500 provides layers of dynamic malware analysis to protect your network from malicious images, PDFs, and ZIP/RAR/TNEF archives.

© 2019 FireEye

5

EX Series Hardware Administration Guide

CHAPTER 1: The EX 3500

The Front View

• Bezel Release: Slide the release tab to the right to remove the bezel from the appliance to access the chassis.

LEDs

The front panel has LEDs that provide critical information about parts of the appliance. The following table describes each LED.

The Front View

Chassis

• Disk Drive Carrier: Each carrier can house a hot-swappable disk drive.

Buttons

The chassis has one reset button, one power button, and one UID button.

• Unit Identifier Button: Pressing this button illuminates an LED on both the front and rear of the chassis for easy system location. The LEDs remain on until the button is pressed a second time.

• Reset Button: Use the reset button to restart the appliance.

• Power Button: Use the power button to turn the appliance on or off. Turning off the power with this button removes the main power but keeps the standby power supplied to the appliance. Therefore, unplug the appliance before servicing.

© 2019 FireEye

7

EX Series Hardware Administration GuideCHAPTER 1: The EX 3500

The Rear View

Power Port

• Power: Connect your power source to this port to provide power to the appliance. The appliance comes with one redundant power supply unit for use if the primary unit fails.

I/O Ports

• Video: Connect a monitor to this port to view the appliance's command-line interface.

• USB 2.0: These ports are USB 2.0 compliant.

• USB 3.0: These ports are USB 3.0 compliant.

• Serial Console: Connect to this port to manage the appliance from your terminal.

Management Ports

• ether (RJ45): Connect your LAN to this port to enable remote access to the CLI and Web UI. The RJ45 connector is a 10/100/1000BASE-T port.

• IPMI: Connect for access to out-of-band management functions, including power control, console redirection, and appliance health status. The connector is a 100BASE-T port.

The Rear View

Monitoring Ports

Each interface pair is physically and logically segregated from other interface pairs, preventing communication between the different network segments.

• pether (RJ45): Connect the switch port you want to monitor to this port. The RJ45 connectors are 10/100/1000BASE-T ports.

© 2019 FireEye 9

EX Series Hardware Administration Guide

CHAPTER 1: The EX 3500

CHAPTER 2: Deployment

You can deploy the EX 3500 in your network in one of the following ways:

• Message Transfer Agent Deployment below

• Bcc: Deployment on page 13

• SPAN/TAP Deployment on page 14

Message Transfer Agent Deployment

When the EX 3500 is in Message Transfer Agent deployment, it serves as an MTA inline with the email traffic flow and can be configured to Block Analysis Mode or Monitor Analysis Mode. In Block Analysis Mode (the default), the EX 3500 will prevent malicious emails from passing through to the mail server. In Monitor Analysis Mode, all email is passed through to the mail server and only copies of the email are analyzed.

The diagram below illustrates the MTA deployment of an EX 3500 in a typical network environment.

[IMAGE PLACEHOLDER: Diagram illustrating the MTA deployment of an EX 3500 in a typical network environment.]

© 2019 FireEye 11

EX Series Hardware Administration Guide

CHAPTER 2: Deployment

Prerequisites

Before connecting the EX 3500 to your network, ensure that your network devices provide 10/100/1000BASE-T Ethernet output.

Cabling

Connect two cables to the EX 3500 appliance’s management ports as follows:

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your MTA or anti-spam device. This connection allows the appliance access to the up- and downstream of traffic.

12

© 2019 FireEye

Bcc: Deployment

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

Bcc: Deployment

When the EX 3500 is in Bcc: mode, it receives a copy of all emails from a Message Transfer Agent (MTA) or anti-spam device for analysis. If the results of the analysis are positive for malicious attachments or URLs, a notification will be sent to a determined list of “admin CC:” or “Bcc:” email alias members.

The diagram below illustrates the Bcc: deployment of an EX 3500 in a typical network environment.

For information about configuring the EX 3500 for Bcc: mode, see the EX Series System Administration Guide for your release.

© 2019 FireEye

13

EX Series Hardware Administration GuideCHAPTER 2: Deployment

Prerequisites

Before connecting the EX 3500 to your network, ensure that your network devices provide 10/100/1000BASE-T Ethernet output.

Cabling

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your MTA or anti-spam device. This connection allows the appliance access to the up- and downstream of traffic.

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

SPAN/TAP Deployment

When the EX 3500 is in SPAN/TAP deployment, it is connected to a network switch capable of mirroring traffic. The EX 3500 extracts email from the traffic for analysis.

The diagram below illustrates the SPAN/TAP deployment of an EX 3500 in a typical network environment.

Prerequisites

Before connecting the EX 3500 to your network, ensure that your network devices provide 10/100/1000BASE-T Ethernet output.

Connect two cables to the EX 3500 appliance’s management ports as follows:

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your switch. This connection allows the appliance access to the up- and downstream of traffic.

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

Cabling

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your switch. This connection allows the appliance access to the up- and downstream of traffic.

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

EX Series Hardware Administration GuideBefore You Begin

CHAPTER 3: Installation

This chapter provides information about the site requirements of your installation location.

Before You Begin

Follow the steps in this section before you install the appliance.

Before Opening the Box

• Review the Packing Slip contained in the plastic slip attached to the top of the box. Ensure the shipment contains the correct appliance.

• Ensure the serial number listed on the Packing Slip matches the one specified on the sticker located on one side of the box.

• If there appears to be damage to the box, file a damage claim with the carrier who delivered it.

Unpacking the Appliance

Carefully remove the appliance from the box in an area away from heat, electrical noise, and electromagnetic fields.

Ensure your box contains:

• The correct appliance model

• An accessory kit

• Online Documents Portal Referral

• A rail kit

Installation Site Guidelines

Follow these guidelines when you select an installation site:

© 2019 FireEye17

EX Series Hardware Administration GuideCHAPTER 3: Installation

• Leave enough clearance in front of the rack for its door to open completely without obstruction.

• Avoid environments that produce heat, electrical noise, and electromagnetic fields.

• Only install the appliance in a restricted access location such as a service closet or dedicated equipment room.

• Make sure the location is properly ventilated.

• Make sure there is sufficient space for air flow.

Rack Precautions

FireEye recommends that you mount the appliance in a standard 19-inch rack. The vertical hole spacing on the rack rails must meet standard ANSI/EIA-310-C requirements.

Consider the following before installing your appliance in the rack:

• Ensure the leveling jacks on the bottom of the rack are fully extended to the floor with the full weight of the rack resting on them.

• In a single-rack installation, stabilizers should be attached to the rack.

• In a multiple-rack installation, the racks should be coupled together to increase their stability.

• Always make sure the rack is stable before extending a component from the rack.

• Only extend one component from the rack at a time—extending two or more simultaneously may cause the rack to become unstable.

• Ensure your rack meets the safety requirements of UL 60950-1.

STABILITY HAZARD: The rack may tip over causing serious personal injury. To prevent injury:

• Before extending the rack to the installation position, read the installation instructions.

• Do not put any load on the slide-rail mounted equipment when the rails are extended in the installation position.

• Do not leave the slide-rail mounted equipment with the rails extended in the installation position.

Server Precautions

Server Precautions

FireEye recommends reviewing the electrical and general safety precautions that came with each component you intend to install in the rack.

Review the following before installing the appliance in the rack:

• Determine the placement of each component in the rack.

• Ensure there is a minimum clearance of six inches behind the chassis to allow for easy cable management.

• Install the heaviest component at the bottom of the rack first, then move up.

• Allow hot-swappable power supply units, disk drives, and transceivers to cool before handling them.

• Use a regulating uninterruptible power supply to protect your components from voltage spikes, power surges, and failure during a power outage.

• Keep all of the rack's doors and panels closed when you are not servicing the components.

Rack-Mounting Precautions

Consider the following safety precautions when you install the appliance in the rack:

• Make sure the appliance is grounded at all times to prevent damage from electrostatic discharge.

• Use an electrostatic wrist guard when handling the appliance.

• At least two technicians should be involved to install the appliance safely.

• FireEye recommends only individuals with rack-mounting experience should install the appliance.

• Install the appliance in an environment compatible with the manufacturer's maximum recommended ambient temperature (TMRA) for each component in your rack.

Power Requirements

The EX uses a 750 W power supply unit with an input rating of 100-240 VAC (±10%), 8-4.5 A at 50-60 Hz.

© 2019 FireEye

19

Ensure your power source has sufficient electrical overload protection. In North America, connect the rack to a power source with over-current protection that complies with UL 489. In Europe, the over-current protection must comply with IEC standards.

Ventilation Requirements

Ventilation and optimal location are essential to the proper operation of the EX Series appliance. Give the unit at least six inches of space around ventilation openings so that adequate ventilation is possible.

The EX Series appliance draws air through the front and expels it out the back. Note the direction of the air intake and exhaust of the other components in the rack to ensure safe ventilation of all components involved.

Cabling Requirements

The EX ships with the following cables:

• (2) 6 ft AC power cord, SVT, 60°C, 3x18AWG (0.824mm²)

• (1) 6 ft null modem DB9 female serial cable

You must provide any additional cables required to connect your system to the network and other devices. Do not exceed the maximum run length of the additional cables you provide.

Rack Installation

This section explains how to install your appliance in a standard 19-inch wide rack with the equipment provided. Because various rack units are available, the assembly procedure may differ slightly from the following instructions. Refer to the installation instructions that came with your rack.

Installing the Outer Rails on the Rack

1. Attach a short bracket to the front end of the right outer rail and a long bracket to the rear end of the right outer rail.

2. Adjust the length of the right outer rail to the size of the rack.

20   © 2019 FireEye

Attaching Cables to the Appliance

3. Attach the right outer rail to the right side of the rack using the screws provided.

4. Repeats steps 1-3 with the left outer rail.

Mounting the Appliance on the Rack

1. Align the rear of the inner rails installed on the appliance with the front channels of the outer rails installed on the rack.

2. Slide the appliance about halfway into the rack.

3. Press the rail-release notches down on both rails and slide the appliance fully into the rack.

4. (Optional) Further secure the appliance to the rack by inserting screws through the ears of the appliance and fastening them to the rack.

Attaching Cables to the Appliance

1. Connect the EX Series appliance to one or more network devices using the cables appropriate to the deployment of your choice.

2. Connect the power cable or cables to the power port or ports on the back of the appliance.

Turning On the Appliance

Power on the appliance by pressing the power button behind the bezel.

© 2019 FireEye 21

CHAPTER 4: Replacements

Return Process

If you believe you have a defective part or system, you must first contact FireEye Technical Support, who will validate the claim. If the part or system is defective, Technical Support will initiate a Return Materials Authorization (RMA) and guide you through the process. For more information, visit www.fireeye.com/legal.

Removing and Replacing a Disk Drive

Perform the following steps to remove and replace a disk drive:

1. Slide the bezel release tab to the right to unlatch it from the chassis.

2. Gently remove the bezel from the appliance to reveal the disk drives.

3. Locate the disk drive carrier that contains the failed disk drive.

4. Push the maroon button to release the latch handle.

5. Carefully pull the latch handle forward.

6. Pull the handle to slide the disk drive from its slot.

7. Slide the new drive into the empty slot. When the drive is fully inserted into the slot, push the latch handle in until it clicks.

Removing and Replacing a Power Supply Unit

Perform the following steps to remove and replace a power supply unit (PSU):

© 2019 FireEye

1. At the rear of the appliance, remove the power cable from the failed PSU.

2. Press the release lever toward the handle in a pinching gesture to unlatch the unit and, while continuing to squeeze, pull out the PSU.

3. Insert the replacement PSU in the slot and slide it in until it clicks into place.

EX Series Hardware Administration GuideAppendix 1: System Specifications

Appendices

Appendix 1: System Specifications

The table below provides the technical specifications for the FireEye EX 3500.

© 2019 FireEye25

EX Series Hardware Administration GuideAppendices

Appendix 2: Product Compliance Information

The following table lists the electromagnetic compatibility (EMC), low voltage directive (LVD), safety, and other regulatory standards met by the FireEye EX appliance.

*

*All current amendments

26

© 2019 FireEye

Technical Support

For technical support, contact FireEye through the Support portal:

https://csportal.fireeye.com

Documentation

Documentation for all FireEye products is available on the FireEye Documentation Portal (login required):

https://docs.fireeye.com/

EX SERIES

HARDWARE ADMINISTRATION GUIDE

EX 3500

FEI-012

EX SERIES / 2019

FireEye and the FireEye logo are registered trademarks of FireEye, Inc. in the United States and other countries. All other trademarks are the property of their respective owners.

FireEye assumes no responsibility for any inaccuracies in this document. FireEye reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

Copyright © 2019 FireEye, Inc. All rights reserved.

EX Series Hardware Administration Guide

Revision 2

FireEye Contact Information:

Website: www.fireeye.com

Technical Support: https://csportal.fireeye.com

Phone (US):

1.408.321.6300

1.877.FIREEYE

Contents

Contents

CHAPTER 1: The EX 3500 ............................................................ 5

The Front View ................................................................. 6

LEDs ........................................................................... 6

Chassis ........................................................................ 7

Buttons ........................................................................ 7

The Rear View ................................................................. 8

Power Port .................................................................... 8

I/O Ports ......................................................................... 8

Management Ports ............................................................ 8

Monitoring Ports ............................................................. 9

CHAPTER 2: Deployment .......................................................... 11

Message Transfer Agent Deployment ...................................... 11

Bcc: Deployment .............................................................. 13

SPAN/TAP Deployment ........................................................ 14

CHAPTER 3: Installation .......................................................... 17

Before You Begin .............................................................. 17

Installation Site Guidelines ............................................... 17

Rack Precautions .............................................................. 18

Server Precautions ........................................................... 19

Rack-Mounting Precautions .................................................. 19

Power Requirements .......................................................... 19

Ventilation Requirements ..................................................... 20

Cabling Requirements ........................................................ 20

Rack Installation .............................................................. 20

Installing the Outer Rails on the Rack ................................... 20

© 2019 FireEye 3

Contents

Mounting the Appliance on the Rack ..........................................................21

Attaching Cables to the Appliance ..........................................................21

Turning On the Appliance ..........................................................21

CHAPTER 4: Replacements ..........................................................23

Return Process ..........................................................23

Removing and Replacing a Disk Drive ..........................................................23

Removing and Replacing a Power Supply Unit ..........................................................23

Appendices ..........................................................25

Appendix 1: System Specifications ..........................................................25

Appendix 2: Product Compliance Information ..........................................................26

Technical Support ..........................................................27

Documentation ..........................................................27

EX Series Hardware Administration Guide

CHAPTER 1: The EX 3500

The FireEye EX 3500 protects your network from spearphishing attacks that bypass traditional anti-spam technologies. It analyzes every attachment using a signature-less, Multi-Vector Virtual Execution engine that can identify zero-day attacks by detonating attachments in an environment that mimics operating systems, applications, and browsers in their exhaustive list of versions, configurations, and plug-ins.

The EX 3500 provides layers of dynamic malware analysis to protect your network from malicious images, PDFs, and ZIP/RAR/TNEF archives.

© 2019 FireEye

5

EX Series Hardware Administration Guide

CHAPTER 1: The EX 3500

The Front View

• Bezel Release: Slide the release tab to the right to remove the bezel from the appliance to access the chassis.

LEDs

The front panel has LEDs that provide critical information about parts of the appliance. The following table describes each LED.

The Front View

Chassis

• Disk Drive Carrier: Each carrier can house a hot-swappable disk drive.

Buttons

The chassis has one reset button, one power button, and one UID button.

• Unit Identifier Button: Pressing this button illuminates an LED on both the front and rear of the chassis for easy system location. The LEDs remain on until the button is pressed a second time.

• Reset Button: Use the reset button to restart the appliance.

• Power Button: Use the power button to turn the appliance on or off. Turning off the power with this button removes the main power but keeps the standby power supplied to the appliance. Therefore, unplug the appliance before servicing.

© 2019 FireEye

7

EX Series Hardware Administration GuideCHAPTER 1: The EX 3500

The Rear View

Power Port

• Power: Connect your power source to this port to provide power to the appliance. The appliance comes with one redundant power supply unit for use if the primary unit fails.

I/O Ports

• Video: Connect a monitor to this port to view the appliance's command-line interface.

• USB 2.0: These ports are USB 2.0 compliant.

• USB 3.0: These ports are USB 3.0 compliant.

• Serial Console: Connect to this port to manage the appliance from your terminal.

Management Ports

• ether (RJ45): Connect your LAN to this port to enable remote access to the CLI and Web UI. The RJ45 connector is a 10/100/1000BASE-T port.

• IPMI: Connect for access to out-of-band management functions, including power control, console redirection, and appliance health status. The connector is a 100BASE-T port.

The Rear View

Monitoring Ports

Each interface pair is physically and logically segregated from other interface pairs, preventing communication between the different network segments.

• pether (RJ45): Connect the switch port you want to monitor to this port. The RJ45 connectors are 10/100/1000BASE-T ports.

© 2019 FireEye 9

EX Series Hardware Administration Guide

CHAPTER 1: The EX 3500

CHAPTER 2: Deployment

You can deploy the EX 3500 in your network in one of the following ways:

• Message Transfer Agent Deployment below

• Bcc: Deployment on page 13

• SPAN/TAP Deployment on page 14

Message Transfer Agent Deployment

When the EX 3500 is in Message Transfer Agent deployment, it serves as an MTA inline with the email traffic flow and can be configured to Block Analysis Mode or Monitor Analysis Mode. In Block Analysis Mode (the default), the EX 3500 will prevent malicious emails from passing through to the mail server. In Monitor Analysis Mode, all email is passed through to the mail server and only copies of the email are analyzed.

The diagram below illustrates the MTA deployment of an EX 3500 in a typical network environment.

[IMAGE PLACEHOLDER: Diagram illustrating the MTA deployment of an EX 3500 in a typical network environment.]

© 2019 FireEye 11

EX Series Hardware Administration Guide

CHAPTER 2: Deployment

Prerequisites

Before connecting the EX 3500 to your network, ensure that your network devices provide 10/100/1000BASE-T Ethernet output.

Cabling

Connect two cables to the EX 3500 appliance’s management ports as follows:

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your MTA or anti-spam device. This connection allows the appliance access to the up- and downstream of traffic.

12

© 2019 FireEye

Bcc: Deployment

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

Bcc: Deployment

When the EX 3500 is in Bcc: mode, it receives a copy of all emails from a Message Transfer Agent (MTA) or anti-spam device for analysis. If the results of the analysis are positive for malicious attachments or URLs, a notification will be sent to a determined list of “admin CC:” or “Bcc:” email alias members.

The diagram below illustrates the Bcc: deployment of an EX 3500 in a typical network environment.

For information about configuring the EX 3500 for Bcc: mode, see the EX Series System Administration Guide for your release.

© 2019 FireEye

13

EX Series Hardware Administration GuideCHAPTER 2: Deployment

Prerequisites

Before connecting the EX 3500 to your network, ensure that your network devices provide 10/100/1000BASE-T Ethernet output.

Cabling

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your MTA or anti-spam device. This connection allows the appliance access to the up- and downstream of traffic.

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

SPAN/TAP Deployment

When the EX 3500 is in SPAN/TAP deployment, it is connected to a network switch capable of mirroring traffic. The EX 3500 extracts email from the traffic for analysis.

The diagram below illustrates the SPAN/TAP deployment of an EX 3500 in a typical network environment.

Prerequisites

Before connecting the EX 3500 to your network, ensure that your network devices provide 10/100/1000BASE-T Ethernet output.

Connect two cables to the EX 3500 appliance’s management ports as follows:

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your switch. This connection allows the appliance access to the up- and downstream of traffic.

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

Cabling

• ether1: Connect one end of an Ethernet cable to the EX 3500 appliance’s ether1 port, and connect the other end to your LAN-facing switch. This port is the management interface.

• pether3: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether3 port, and connect the other end to your switch. This connection allows the appliance access to the up- and downstream of traffic.

• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet cable to the EX 3500 appliance’s pether2 port, and connect the other end to your Internet-facing firewall device.

This connection allows the appliance to retrieve objects referred to by suspicious URLs for further analysis. FireEye recommends connecting to an isolated Internet connection to prevent the exposure of the IP address and other information about your main network.

EX Series Hardware Administration GuideBefore You Begin

CHAPTER 3: Installation

This chapter provides information about the site requirements of your installation location.

Before You Begin

Follow the steps in this section before you install the appliance.

Before Opening the Box

• Review the Packing Slip contained in the plastic slip attached to the top of the box. Ensure the shipment contains the correct appliance.

• Ensure the serial number listed on the Packing Slip matches the one specified on the sticker located on one side of the box.

• If there appears to be damage to the box, file a damage claim with the carrier who delivered it.

Unpacking the Appliance

Carefully remove the appliance from the box in an area away from heat, electrical noise, and electromagnetic fields.

Ensure your box contains:

• The correct appliance model

• An accessory kit

• Online Documents Portal Referral

• A rail kit

Installation Site Guidelines

Follow these guidelines when you select an installation site:

© 2019 FireEye17

EX Series Hardware Administration GuideCHAPTER 3: Installation

• Leave enough clearance in front of the rack for its door to open completely without obstruction.

• Avoid environments that produce heat, electrical noise, and electromagnetic fields.

• Only install the appliance in a restricted access location such as a service closet or dedicated equipment room.

• Make sure the location is properly ventilated.

• Make sure there is sufficient space for air flow.

Rack Precautions

FireEye recommends that you mount the appliance in a standard 19-inch rack. The vertical hole spacing on the rack rails must meet standard ANSI/EIA-310-C requirements.

Consider the following before installing your appliance in the rack:

• Ensure the leveling jacks on the bottom of the rack are fully extended to the floor with the full weight of the rack resting on them.

• In a single-rack installation, stabilizers should be attached to the rack.

• In a multiple-rack installation, the racks should be coupled together to increase their stability.

• Always make sure the rack is stable before extending a component from the rack.

• Only extend one component from the rack at a time—extending two or more simultaneously may cause the rack to become unstable.

• Ensure your rack meets the safety requirements of UL 60950-1.

STABILITY HAZARD: The rack may tip over causing serious personal injury. To prevent injury:

• Before extending the rack to the installation position, read the installation instructions.

• Do not put any load on the slide-rail mounted equipment when the rails are extended in the installation position.

• Do not leave the slide-rail mounted equipment with the rails extended in the installation position.

Server Precautions

Server Precautions

FireEye recommends reviewing the electrical and general safety precautions that came with each component you intend to install in the rack.

Review the following before installing the appliance in the rack:

• Determine the placement of each component in the rack.

• Ensure there is a minimum clearance of six inches behind the chassis to allow for easy cable management.

• Install the heaviest component at the bottom of the rack first, then move up.

• Allow hot-swappable power supply units, disk drives, and transceivers to cool before handling them.

• Use a regulating uninterruptible power supply to protect your components from voltage spikes, power surges, and failure during a power outage.

• Keep all of the rack's doors and panels closed when you are not servicing the components.

Rack-Mounting Precautions

Consider the following safety precautions when you install the appliance in the rack:

• Make sure the appliance is grounded at all times to prevent damage from electrostatic discharge.

• Use an electrostatic wrist guard when handling the appliance.

• At least two technicians should be involved to install the appliance safely.

• FireEye recommends only individuals with rack-mounting experience should install the appliance.

• Install the appliance in an environment compatible with the manufacturer's maximum recommended ambient temperature (TMRA) for each component in your rack.

Power Requirements

The EX uses a 750 W power supply unit with an input rating of 100-240 VAC (±10%), 8-4.5 A at 50-60 Hz.

© 2019 FireEye

19

Ensure your power source has sufficient electrical overload protection. In North America, connect the rack to a power source with over-current protection that complies with UL 489. In Europe, the over-current protection must comply with IEC standards.

Ventilation Requirements

Ventilation and optimal location are essential to the proper operation of the EX Series appliance. Give the unit at least six inches of space around ventilation openings so that adequate ventilation is possible.

The EX Series appliance draws air through the front and expels it out the back. Note the direction of the air intake and exhaust of the other components in the rack to ensure safe ventilation of all components involved.

Cabling Requirements

The EX ships with the following cables:

• (2) 6 ft AC power cord, SVT, 60°C, 3x18AWG (0.824mm²)

• (1) 6 ft null modem DB9 female serial cable

You must provide any additional cables required to connect your system to the network and other devices. Do not exceed the maximum run length of the additional cables you provide.

Rack Installation

This section explains how to install your appliance in a standard 19-inch wide rack with the equipment provided. Because various rack units are available, the assembly procedure may differ slightly from the following instructions. Refer to the installation instructions that came with your rack.

Installing the Outer Rails on the Rack

1. Attach a short bracket to the front end of the right outer rail and a long bracket to the rear end of the right outer rail.

2. Adjust the length of the right outer rail to the size of the rack.

20   © 2019 FireEye

Attaching Cables to the Appliance

3. Attach the right outer rail to the right side of the rack using the screws provided.

4. Repeats steps 1-3 with the left outer rail.

Mounting the Appliance on the Rack

1. Align the rear of the inner rails installed on the appliance with the front channels of the outer rails installed on the rack.

2. Slide the appliance about halfway into the rack.

3. Press the rail-release notches down on both rails and slide the appliance fully into the rack.

4. (Optional) Further secure the appliance to the rack by inserting screws through the ears of the appliance and fastening them to the rack.

Attaching Cables to the Appliance

1. Connect the EX Series appliance to one or more network devices using the cables appropriate to the deployment of your choice.

2. Connect the power cable or cables to the power port or ports on the back of the appliance.

Turning On the Appliance

Power on the appliance by pressing the power button behind the bezel.

© 2019 FireEye 21

CHAPTER 4: Replacements

Return Process

If you believe you have a defective part or system, you must first contact FireEye Technical Support, who will validate the claim. If the part or system is defective, Technical Support will initiate a Return Materials Authorization (RMA) and guide you through the process. For more information, visit www.fireeye.com/legal.

Removing and Replacing a Disk Drive

Perform the following steps to remove and replace a disk drive:

1. Slide the bezel release tab to the right to unlatch it from the chassis.

2. Gently remove the bezel from the appliance to reveal the disk drives.

3. Locate the disk drive carrier that contains the failed disk drive.

4. Push the maroon button to release the latch handle.

5. Carefully pull the latch handle forward.

6. Pull the handle to slide the disk drive from its slot.

7. Slide the new drive into the empty slot. When the drive is fully inserted into the slot, push the latch handle in until it clicks.

Removing and Replacing a Power Supply Unit

Perform the following steps to remove and replace a power supply unit (PSU):

© 2019 FireEye

1. At the rear of the appliance, remove the power cable from the failed PSU.

2. Press the release lever toward the handle in a pinching gesture to unlatch the unit and, while continuing to squeeze, pull out the PSU.

3. Insert the replacement PSU in the slot and slide it in until it clicks into place.

EX Series Hardware Administration GuideAppendix 1: System Specifications

Appendices

Appendix 1: System Specifications

The table below provides the technical specifications for the FireEye EX 3500.

© 2019 FireEye25

EX Series Hardware Administration GuideAppendices

Appendix 2: Product Compliance Information

The following table lists the electromagnetic compatibility (EMC), low voltage directive (LVD), safety, and other regulatory standards met by the FireEye EX appliance.

*

*All current amendments