FirePackage_UserGuide_V3.2.0_en

Data SheetCisco Firepower NGFWThe Cisco Firepower ® NGFW (next-generation firewall) is the industry’s first fully integrated, threat-focused next-gen firewall with unified management. It uniquely provides advanced threat protection before, during, and after attacks.Performance HighlightsTable 1 summarizes the performance highlights of the Cisco Firepower 4100 Series NGFW, 9300 Series Security Appliances, and select Cisco ASA 5500-X appliances.Table 1.Appliance Performance Highlights1 HTTP sessions with an average packet size of 1024 bytes 21024 bytes TCP firewall performanceNote: NGFW performance varies depending on network and traffic characteristics. Consult your Cisco representative for detailed sizing guidance. Performance is subject to change with new software releases.Cisco Firepower 2100 Series:The industry’s first midrange NGFWs delivering sustainable performance when threat inspection is enabledCisco Firepower 4100 Series:The industry’s first 1RU NGFWs with 40-GbpsinterfacesCisco Firepower 9300:Ultra-high-performance NGFW, expandable asyour needs growCisco ASA 5500-X Series:Models for branch offices, industrial applications, and the Internet edgeFirepower NGFWv:The NGFW for virtual and cloud environmentsPlatform Image SupportThe Cisco Firepower NGFW includes Application Visibility and Control (AVC), optional Next-Gen IPS (NGIPS), Cisco ® Advanced Malware Protection (AMP) for Networks, and URL Filtering. The Cisco Firepower 2100 Series, 4100 Series, and 9300 appliances use the Cisco Firepower Threat Defense software image. Alternatively, Cisco Firepower 2100 Series, 4100 Series, and 9300 appliances can support the Cisco Adaptive Security Appliance (ASA) software image.Management OptionsCisco Firepower NGFWs may be managed in a variety of ways depending on the way you work, your environment, and your needs.The Cisco Firepower Management Center (formerly FireSIGHT) provides centralized management of the Cisco Firepower NGFW, the Cisco Firepower NGIPS, and Cisco AMP for Networks. It also provides threat correlation fornetwork sensors and Advanced Malware Protection (AMP) for Endpoints.The Cisco Firepower Device Manager is available for local management of 2100 Series and select 5500-X Series devices running the Cisco Firepower Threat Defense software image.The Cisco Adaptive Security Device Manager is available for local management of the Cisco Firepower 2100 Series, 4100 Series, Cisco Firepower 9300 Series, and Cisco ASA 5500-X Series devices running the ASA software image.Cisco Defense Orchestrator cloud-based management is also available for consistent policy management across Cisco security devices running the ASA software image, enabling greater management efficiency for the distributed enterprise.Firepower DDoS MitigationAlso available on the Cisco Firepower 4100 Series and 9300 appliances is tightly integrated, comprehensive, behavioral DDoS mitigation for both network and application infrastructure protection. This DDoS mitigation is Radware’s Virtual DefensePro (vDP). It is available from and supported directly by Cisco.Cisco Firepower 2100 Series AppliancesThe Cisco Firepower 2100 Series is a family of four threat-focused NGFW security platforms that deliver business resiliency through superior threat defense. It offers exceptional sustained performance when advanced threat functions are enabled. These platforms uniquely incorporate an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously. The series’ firewall throughput range addresses use cases from the Internet edge to the data center.Cisco Firepower 4100 Series AppliancesThe Cisco Firepower 4100 Series is a family of four threat-focused NGFW security platforms. Their throughput range addresses data center use cases. They deliver superior threat defense, at faster speeds, with a smaller footprint.Cisco Firepower 9300 Security ApplianceThe Cisco Firepower 9300 is a scalable (beyond 1 Tbps when clustered), carrier-grade, modular platform designed for service providers, high-performance computing centers, large data centers, campuses, high-frequency trading environments, and other environments that require low (less than 5-microsecond offload) latency and exceptional throughput. Cisco Firepower 9300 supports flow-offloading, programmatic orchestration, and the management of security services with RESTful APIs. It is also available in Network Equipment Building Standards (NEBS)-compliant configurations.Cisco ASA 5500-FTD-X Series AppliancesThe Cisco ASA 5500-FTD-X Series is a family of eight threat-focused NGFW security platforms. Their throughput range addresses use cases from the small or branch office to the Internet edge. They deliver superior threat defense in a cost-effective footprint.Cisco Firepower NGFW Virtual (NGFWv) AppliancesCisco Firepower NGFWv is available on VMware, KVM, and the Amazon Web Services (AWS) and Microsoft Azure environments for virtual, public, private, and hybrid cloud environments. Organizations employing SDN can rapidly provision and orchestrate flexible network protection with Firepower NGFWv. As well, organizations using NFV can further lower costs utilizing Firepower NGFWv.Performance Specifications and Feature HighlightsTable 2 summarizes the capabilities of the Cisco Firepower NGFWv, Firepower 2100 Series, and 4100 Series and 9300 appliances as well as the Cisco ASA 5500-FTD-X appliances when running the Cisco Firepower Threat Defense image.Table 2.Performance Specifications and Feature Highlights for Physical and Virtual Appliances with the Cisco Firepower Threat Defense Image211021202130214041104120414041509300 1 249300 1 369300 1 449300 3 4455065506550655085516552555455555Throughput: FW + AVC1.2 Gbp s2.0 Gbps3 Gbps4.75 Gbps8.5 Gbps12 Gbps20 Gbps25 Gbps30 Gbps30 Gbps42 Gbps54 Gbps135 Gbps250 Mbps250 Mbps250 Mbps450 Mbps850 Mbps1100 Mbps1500 Mbps1750 MbpsThroughput: AVC + IPS1.1 Gbp s2.0 Gbps3 Gbps4.75 Gbps8.5 Gbps10 Gbps15 Gbps20 Gbps24 Gbps24 Gbps34 Gbps53 Gbps133 Gbps125 Mbps125 Mbps125 Mbps250 Mbps450 Mbps650 Mbps1000 Mbps1250 MbpsMaximum concurrent sessions, with AVC 100,0001 millio n1.2 million2 millio n3.0 millio n9 millio n15 millio n25 millio n30 millio n30 millio n30 millio n30 millio n60 millio n20,00020,00020,000100,000250,000500,000750,0001,000,000Maximum new connections per second, with AVC 10,00012,00016,000 24,00040,00068,000120,000160,000200,000120,000160,000300,000900,0003,000 3,000 3,000 7,000 8,000 10,00015,00020,000IPSec VPN Throughput (1024B TCP w/Fastpath) - 750 Mbps1 Gbps1.5 Gbps3 Gbps6 Gbps10 Gbps13 Gbps14 Gbps13.5 Gbps16 Gbps17 Gbps51 Gbps100 Mbps100 Mbps100 Mbps175 Mbps250 Mbps300 Mbps400 Mbps700 MbpsMaximum VPN Peers - 1500 3500 7500 1000010000 15000 20000 20000 20000 20000 20000 60000 50 50 50 100 300 300 400 700Cisco Firepower Device Manager (local management) Yes (VM ware only)Yes Yes Yes Yes --------Yes Yes Yes Yes Yes Yes Yes YesCentralized m anagement Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense OrchestratorApplication Visibility and Control (AVC) Standard, supporting more than 4000 applications, as well as geolocations, users, and websitesAVC: OpenAppID support for custom, open source, application detectors StandardCisco Security Intelligence Standard, with IP, URL, and DNS threat intelligenceCisco Firepower NGIPS Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligenceCisco AMP for NetworksAvailable; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally availableNote: Throughput assumes HTTP sessions with an average packet size of 1024 bytes.Performance will vary depending on features activated, and network traffic protocol mix, packet size characteristics and hypervisor employed (NGFWv). Performance is subject to change with new software releases. Consult your Cisco representative for detailed sizing guidance.Table 3 summarizes the performance and capabilities of the Cisco Firepower 2100, 4100 Series and 9300 appliances when running the ASA image. For Cisco ASA 5500-X Series performance specifications with the ASA image, please visit the Cisco ASA with FirePOWER Services data sheet.Table 3. ASA Performance and Capabilities on Firepower Appliances2110 2120 2130 2140 4110 4120 4140 4150 9300 9300 9300 9300 Statefulinspectionfirewallthroughput(multiprotocol)21.5 Gbps 3 Gbps 5 Gbps 10 Gbps 15 Gbps 30 Gbps 40 Gbps 50 Gbps 50 Gbps 60 Gbps 60 Gbps 130 GbpsConcurrentfirewallconnections1 million 1.5 million2 million3 million 10 million 15 million 25 million 35 million 55 million 60 million 60 million 70 millionFirewalllatency (UDP64Bmicroseconds)- - - - 3.5 3.5 3.5 3.5 3.5 3.5 3.5 3.5Newconnectionsper second18000 28000 40000 75000 150,000 250,000 350,000 800,000 800,000 1.2 million 1.8 million 4 millionIPsec VPNthroughput(450B UDPL2L test)500 Mbps 700 Mbps 1 Gbps 2 Gbps 8 Gbps 10 Gbps 14 Gbps 15 Gbps 15 Gbps 18 Gbps 20 Gbps 60 Gbps3IPsec/CiscoAnyConnect/Apex site-to-site VPNpeers1500 3500 7500 10000 10,000 15,000 20,000 20,000 20,000 20,000 20,000 60,0003Maximumnumber ofVLANs400 600 750 1024 1024 1024 1024 1024 1024 1024 1024 1024Securitycontexts(included;maximum)2; 25 2; 25 2; 30 2; 40 10; 250 10; 250 10; 250 10; 250 10; 250 10; 250 10; 250 10; 250High availability Active/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyActive/active andactive/standbyClustering - - - - Up to 16appliances Up to 16appliancesUp to 16appliancesUp to 16appliancesUp to 5appliances with 3securitymoduleseachUp to 5appliances withthreesecuritymoduleseachUp to 5appliances withthreesecuritymoduleseachUp to 5appliances with 3securitymoduleseachScalability VPN Load Balancing VPN Load Balancing, Firewall ClusteringCentralized management Centralized Management (CSM) not currentlysupported for 2100 seriesCentralized configuration, logging, monitoring, and reporting are performed by the ManagementCenter or alternatively in the cloud with Cisco Defense OrchestratorAdaptiveSecurityDeviceManagerWeb-based, local management for small-scale deployments1 Throughput measured with User Datagram Protocol (UDP) traffic measured under ideal test conditions.2“Multiprotocol” refers to a traffic profile consisting primarily of TCP-based protocols and applications like HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS.3 In unclustered configuration.Table 4. Operating Requirements for Firepower NGFWv Virtual AppliancesHardware SpecificationsTables 5, 6, and 7 summarize the hardware specifications for the 2100 Series, 4100 Series, and 9300 Series, respectively. Table 8 summarizes regulatory standards compliance. For Cisco ASA 5500-X Series hardware specifications, please visit the Cisco ASA with FirePOWER Services data sheet.Table 5. Cisco Firepower 2100 Series Hardware Specifications1 Dual power supplies are hot-swappable.2 Fans operate in a 3+1 redundant configuration where the system will continue to function with only3 operational fans. The 3 remaining fans will run at full speed.3 FPR-2130 platform is designed to be NEBS ready. The availability of NEBS certification is pending.Table 6. Cisco Firepower 4100 Series Hardware Specifications1 Dual power supplies are hot-swappable.2 DC power option is expected on Cisco Firepower 4110 and 4120 in the second half of 2016.Table 7. Cisco Firepower 9300 Hardware Specifications* Minimum turn-on voltage is -44V DCTable 8. Cisco Firepower 4100 Series and Cisco Firepower 9300 NEBS, Regulatory, Safety, and EMC ComplianceCisco Trust Anchor TechnologiesCisco Trust Anchor Technologies provide a highly secure foundation for certain Cisco products. They enable hardware and software authenticity assurance for supply chain trust and strong mitigation against a man-in-the-middle compromise of software and firmware.Trust Anchor capabilities include:●Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and othersoftware are authentic and unmodified. As the system boots, the system’s software signatures are checked for integrity.●Secure Boot: Secure Boot anchors the boot sequence chain of trust to immutable hardware, mitigatingthreats against a system’s foundational state and the software that is to be loaded, regardless of a user’s privilege level. It provides layered protection against the persistence of illicitly modified firmware.●Trust Anchor module: A tamper-resistant, strong-cryptographic, single-chip solution provides hardwareauthenticity assurance to uniquely identify the product so that its origin can be confirmed to Cisco, providing assurance that the product is genuine.Firepower DDoS MitigationFirepower DDoS Mitigation is provided by Radware Virtual DefensePro (vDP), available and supported directly from Cisco on the following Cisco Firepower 9300 and 4100 series appliances:Radware vDP is an award-winning, real-time, behavioral DDoS attack mitigation solution that protects organizations against multiple DDoS threats. Firepower DDoS mitigation defends your application infrastructure against network and application degredation and outage.DDoS Mitigation: Protection SetFirepower’s vDP DDoS mitigation consists of patent-protected, adaptive, behavioral-based real-time signature technology that detects and mitigates zero-day network and application DDoS attacks in real time. It eliminates the need for human intervention and does not block legitimate user traffic when under attack.The following attacks are detected and mitigated:●SYN flood attacks●Network DDoS attacks, including IP floods, ICMP floods, TCP floods, UDP floods, and IGMP floods●Application DDoS attacks, including HTTP floods and DNS query floods●Anomalous flood attacks, such as nonstandard and malformed packet attacksPerformanceThe performance figures in Table 9 apply to all Cisco Firepower 4100 series models.Table 9. Key DDoS Performance Metrics for Cisco Firepower 4100 SeriesThe performance figures in Table 10 are for Cisco Firepower 9300 with 1 to 3 Security Modules irrespective of Security Module type (SM-24, SM-36 or SM-44).Table 10. Key DDoS Performance Metrics for Cisco Firepower 9300 with 1, 2, or 3 Security Modules.Ordering InformationCisco Smart LicensingThe Cisco Firepower NGFW is sold with Cisco Smart Licensing. Cisco understands that purchasing, deploying, managing, and tracking software licenses is complex. As a result, we are introducing Cisco Smart Software Licensing, a standardized licensing platform that helps customers understand how Cisco software is used across their network, thereby reducing administrative overhead and operating expenses.With Smart Licensing, you have a complete view of software, licenses, and devices from one portal. Licenses are easily registered and activated and can be shifted between like hardware platforms. Additional information is available here: https:///web/ordering/smart-software-licensing/index.html. Related information, on Smart Licensing Smart Accounts, is available here: https:///web/ordering/smart-software-manager/smart-accounts.html.Cisco Smart Net Total Care Support: Move Quickly with Anytime Access to Cisco Expertise and ResourcesCisco Smart Net Total Care™ is an award-winning technical support service that gives your IT staff direct anytime access to Technical Assistance Center (TAC) engineers and resources. You receive the fast, expert response and the dedicated accountability you require to resolve critical network issues.Smart Net Total Care provides the following device-level support:●Global access 24 hours a day, 365 days a year to specialized engineers in the Cisco TAC●Anytime access to the extensive online knowledge base, resources, and tools●Hardware replacement options include 2-hour, 4-hour, Next-Business-Day (NDB) advance replacement, aswell as Return For Repair (RFR)●Ongoing operating system software updates, including both minor and major releases within your licensedfeature set●Proactive diagnostics and real-time alerts on select devices with Smart Call HomeIn addition, with the optional Cisco Smart Net Total Care Onsite Service, a field engineer installs replacement parts at your location and helps ensure that your network operates optimally. For more information on Smart Net Total Care please visit: https:///c/en/us/services/portfolio/product-technical-support/smart-net-total-care.html.Select Part NumbersTables 11, 12, and 13 provide details on part numbers for Cisco Firepower NGFW solutions. Please consult the Ordering Guide for additional configuration options and accessories.Table 11. Cisco Firepower 2100 Series: Select Product ComponentsTable 12. Cisco Firepower 4100 Series: Select Product ComponentsTable 13. Cisco Firepower 9300: Select Product Components*Note: Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for details.Warranty InformationFind warranty information on at the Product Warranties page.Cisco ServicesCisco offers a wide range of service programs to accelerate customer success. These innovative services programs are delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer satisfaction. Cisco Services help you protect your network investment, optimize network operations, and prepare your network for new applications to extend network intelligence and the power of your business. For more information about Cisco services for security, visit https:///go/services/security.Cisco CapitalFinancing to Help You Achieve Your ObjectivesCisco Capital® financing can help you acquire the technology you need to achieve your objectives and stay competitive. We can help you reduce CapEx. Accelerate your growth. Optimize your investment dollars and ROI. Cisco Capital financing gives you flexibility in acquiring hardware, software, services, and complementary third-party equipment. And there’s just one predictable payment. Cisco Capital is available in more than 100 countries. Learn more.More Information for Service ProvidersFor information about Cisco Firepower in service provider environments, please visit:●https:///c/en/us/solutions/enterprise-networks/service-provider-security-solutions/More Information about Firepower NGFWsFor further information about Cisco Firepower NGFWs, please visit:●https:///go/ngfwMore Information about Cisco Anyconnect●Cisco AnyConnect Secure Mobility Clienthttps:///go/anyconnect●Cisco AnyConnect Ordering Guidehttps:///c/dam/en/us/products/security/anyconnect-og.pdf。

RG-Wall防火墙命令行手册(V1.0)（内部资料，严禁复制）福建星网锐捷网络有限公司版权所有侵权必究锐捷网络产品部测试中心第1页，共197页目录RG-Wall防火墙命令行手册 (1)1.导言 (8)1.1.本书适用对象 (8)1.2.手册章节组织 (8)1.3.登录命令行页面 (9)1.4.命令行概述 (10)1.5.相关参考手册 (13)2.2系统配置 (14)2.1.系统时钟systime (14)2.2.系统启动和运行时间runtime (15)2.3.超时退出时间timeout (15)2.4.时钟服务器timesrv (16)2.5.升级许可sysupdate (17)2.6.系统配置syscfg (18)2.7.报警邮箱mngmailbox (20)2.8.日志服务器logsrv (21)2.9.域名服务器dns (22)3.管理配置 (23)3.1.管理方式mngmode (23)锐捷网络产品部测试中心第2页，共197页3.2.管理主机mnghost (24)3.3.系统主机名dns (24)3.4.管理员帐号mngacct (25)3.5.管理员口令mngpass (27)3.6.管理员证书mngcert (27)3.7.集中管理mngglobal (29)3.8.初始配置向导fastsetup (32)4.网络配置 (34)4.1.网络接口sysif (34)4.2.接口IP地址sysip (37)4.3.策略路由route (38)4.4.ADSL拨号adsl (41)4.5.DHCP配置 (43)4.5.1.DHCP服务器dhcpserver (43)4.5.2.DHCP客户端dhcpclient (47)4.5.3.DHCP中继dhcprelay (47)5.VPN配置 (49)VPN 命令概述 (49)5.1.VPN基本配置 (50)5.1.1.设置基本参数 (50)5.1.2.显示基本参数 (51)5.1.3.设置DHCP over IPSec信息 (51)5.1.4.显示DHCP over IPSec信息 (52)锐捷网络产品部测试中心第3页，共197页5.1.5.VPN模块启动、停止 (52)5.2.VPN客户端分组 (53)5.2.1.添加VPN客户端分组 (53)5.2.2.设置VPN客户端分组 (54)5.2.3.删除VPN分组 (55)5.3.远程VPN配置 (56)5.3.1.添加远程VPN (56)5.3.2.设置远程VPN (63)5.3.3.显示远程VPN网关 (68)5.3.4.删除网关 (69)5.3.5.网关生效 (69)5.3.6.网关失效 (70)5.4.隧道配置 (70)5.4.1.添加隧道 (70)5.4.2.设置隧道 (72)5.4.3.显示隧道 (73)5.4.4.删除隧道 (73)5.4.5.隧道生效 (74)5.4.6.隧道失效 (74)5.5.VPN设备 (75)5.5.1.添加虚设备 (75)5.5.2.编辑虚设备 (75)5.5.3.删除虚设备 (76)5.5.4.显示虚设备 (76)5.6.证书管理 (76)锐捷网络产品部测试中心第4页，共197页5.6.1.显示证书 (77)5.6.2.删除证书 (77)5.7.PPTP/L2TP配置 (78)5.7.1.服务器配置pptpserver (78)5.7.2.拨号用户pptpuser (79)6.对象定义 (82)6.1.地址defaddr (82)6.2.地址组defaddrgrp (83)6.3.服务器地址defsrvaddr (84)6.4.NAT地址池defaddrpool (85)6.5.服务defsvc (87)6.6.服务组defsvcgrp (90)6.7.代理defproxy (92)6.8.邮件过滤defmail (95)6.9.时间deftime (97)6.10.时间组deftimegrp (99)6.11.保护主机hostprotect (100)6.12.保护服务svcprotect (103)6.13.限制主机hostlimit (106)6.14.限制服务svclimit (108)6.15.带宽策略bandwidth (111)6.16.URL列表defurl (112)6.17.病毒过滤 (113)7.安全策略 (115)锐捷网络产品部测试中心第5页，共197页7.1.安全规则policy (115)7.2.地址绑定ipmac (128)7.3.P2P限制 (130)7.4.IDS产品联动ids (134)7.5.抗攻击anti (137)7.6.入侵防护ips (140)8.高可用性 (142)8.1.HA基本配置 (142)8.2.路由模式HA (144)8.2.1.VRRP实例vrrp (144)8.2.2.VRRP关联vrrpbunch (145)8.3.桥模式HA (148)8.3.1.桥配置 (148)9.用户认证 (151)9.1.用户认证服务器authsrv (151)9.2.用户defuser (152)9.3.用户组defusergrp (154)10.系统监控 (159)10.1.网络监控netmonitor (159)10.2.系统信息sysinfo (164)10.3.看日志log (165)10.4.ipsec隧道监控 (166)10.5.在线用户defuser (167)锐捷网络产品部测试中心第6页，共197页10.6.查看ARP表arp (167)10.7.IP探测ping (168)10.8.域名查询dnssearch (168)10.9.路由探测traceroute (168)11.其它 (170)11.1.接收文件rcvfile (170)11.2.显示分页disppage (170)11.3.设置提示符prompt (170)11.4.退出命令行界面quit (171)12.使用技巧 (172)13.命令索引 (173)锐捷网络产品部测试中心第7页，共197页1. 导言1.1. 本书适用对象本手册是RG Wall防火墙管理员手册中的一本，主要介绍如何通过终端的命令行（Command Line Interface，以下简称CLI）方式对RG Wall防火墙进行配置管理。

######################################################################DELL(TM) OPENMANAGE(TM) SERVER UPDATE UTILITY 2.0.0 README######################################################################This readme provides information for Dell OpenManage ServerUpdate Utility version 2.0.0.Release Date: December 2009This file also contains updated information for your "Dell OpenManageServer Update Utility User's Guide" and any other technicaldocumentation that is included with Server Update Utility (SUU).See the Dell Support website located at "" for moreinformation and to download the latest version of SUU.Note: For information on Dell Update Packages (DUP), see the DUPReadme files present on the SUU DVD.This file contains the following sections:* Criticality* Compatibility/Minimum Requirements* Release Highlights* Installation* User Notes* Known Issues###################################################################### CRITICALITY######################################################################3 - OptionalIt is recommended that you review the update procedure to determine ifit applies to your system. The update contains changes that may impactonly certain configurations, or provides new features that may/may notapply to your environment.###################################################################### COMPATIBILITY/MINIMUM REQUIREMENTS######################################################################This section provides information about the minimum requirements forSUU 2.0.0.====================================================================== SUPPORTED OPERATING SYSTEMS====================================================================== The following operating systems are supported by SUU 2.0.0:Microsoft Windows Operating Systems* Microsoft Windows Server(TM) 2003 R2 Web, Standard and EnterpriseEditions with SP2 (32-bit x86)* Microsoft(R) Windows(R) Server 2003 R2 Standard, Enterprise, and Datacenterx64 Editions with SP2* Microsoft Windows Small Business Server 2003 Standard and PremiumEditions with SP2* Microsoft Windows Server 2008 Core Web, Standard, and EnterpriseEditions (32-bit x86) with SP2* Microsoft Windows Server 2008 Core Standard, Enterprise, and DatacenterEditions (x64) with SP2* Microsoft Windows Essential Business Server 2008 Standard and PremiumEditions* Microsoft Windows Small Business Server 2008 Standard and PremiumEditions* Microsoft Windows Storage Server 2008 R2 Express, Workgroup, Standard,and Enterprise Editions* Microsoft Windows Unified Data Storage Server 2008 Workgroup, Standard,and Enterprise Editions* Microsoft Windows Server 2003 Compute Cluster Edition and MicrosoftWindows Server 2008 HPC Edition* Microsoft Windows Server™ 2008 R2 Standard, Enterprise, and Datacenter EditionsLinux Operating Systems* SUSE(R) Linux Enterprise Server 11* SUSE Linux Enterprise Server 10 SP3* Red Hat(R) Enterprise Linux(R) 5 server (Update 3) (x86_32)* Red Hat Enterprise Linux 5 server (Update 3) (x86_64)* Red Hat Enterprise Linux 4.8 server (x86_32)* Red Hat Enterprise Linux 4.8 server (x86_64)Virtualization Operating Systems* VMware(R) ESX Version 4.0 U1* VMware ESX Version 3.5 Update 5* Microsoft Hyper-V Server 2008 R2See the 'Dell Systems Software Support Matrix' for the latest list ofsupported Dell PowerEdge(TM) systems and operating systems. The 'Dell SystemsSoftware Support Matrix' is available on the Dell Support website at"/manuals."====================================================================== SUPPORTED WEB BROWSERS====================================================================== SUU 2.0.0 supports the following Web browsers:* Internet Explorer 8.0, Internet Explorer 7.0,Internet Explorer 6.0 with SP2, and Mozilla(R)Firefox(R) 3.0 for Windows 2003 Professional* Internet Explorer 8.0, Internet Explorer 7.0,Mozilla Firefox 3.0 for Windows® 7 Professional Edition* Internet Explorer 6.0 with SP2* Internet Explorer 7.0* Internet Explorer 8.0* Mozilla Firefox 3.0 and Mozilla Firefox 2.0 for :- SUSE Linux Enterprise Server 10 SP3- SUSE Linux Enterprise Server 11* Mozilla Firefox 3.0- Red Hat Enterprise Linux Version 4.8- Red Hat Enterprise Linux Version 5.3====================================================================== SUPPORTED SYSTEMS====================================================================== SUU 2.0.0 supports the following PowerEdge systems runningthe Windows operating systems listed in the "Supported OperatingSystems" section:PE T410, PE R410, PE T710, PE T310, PE R610, PE R710, PE T610, PE M610,PE M710,PE T110, PE R210, PE R510PE T100, PE 105, PE M600, PE R805, PE R900, PE T605, PE M605, PE R905v,PE T300, PE R300, PE R200,PE M805, PE 905,NX 1950, NX 3000,PE 1950, PE 2900, PE 2950, PE 1955, PE 1900, PE 840, PE 860, PE 6950,PE 2970,PE 1800, PE 1850, PE 2800, PE 2850, PE 1855, PE 800, PE 6800, PE 6850,PE 830, PE 850PE SC1425, PE SC1435SUU 2.0.0 supports the following PowerEdge systems running the supportedRed Hat Enterprise Linux and SUSE Linux operating systems:PE T410, PE R410, PE T710, PE T310, PE R610, PE R710, PE T610, PE M610,PE M710,PE T110, PE R210, PE R510PE M710,PE T110, PE R210, PE R510PE T100, PE 105, PE M600, PE R805, PE R900, PE T605, PE M605, PE R905v,PE T300, PE R300, PE R200,PE M805, PE 905,PE1950, PE2900, PE2950, PE1955, PE1900, PE840, PE860, PE6950, PE2970,PE 1800, PE 1850, PE 2800, PE 2850, PE 1855, PE 800, PE 6800, PE 6850,PE 830, PE 850PE SC1425, PE SC1435SUU 2.0.0 supports the following Dell PowerVault(TM) systems runningon the Windows operating system:PV500, PV 600, PV/NF/DP 100, DL2000SUU 2.0.0 supports the following Dell PowerVault systems runningon the Linux operating system:PV500, PV600, PV/NF/DP 100, DL2000Note: Other systems and operating systems may be supported in thisrelease. See the 'Dell Systems Software Support Matrix' for thelatest list of supported PowerEdge systems and operatingsystems. The 'Dell Systems Software Support Matrix' is availableon the Dell Support website at "/manuals."Note: Running SUU 2.0.0 on an unsupported system may produce unexpectedresults.###################################################################### RELEASE HIGHLIGHTS######################################################################Added support to the following systems:PE T110, PE R210, PE R510, PE T310Note: For a detailed table of supported Dell systems and operatingsystems, see the 'Dell Systems Software Support Matrix' availableon the Dell Support website at "/manuals."###################################################################### INSTALLATION###################################################################### SUU is a stand-alone application that runs directly from a DVD. Formore information on installing SUU, see the "Dell OpenManageServer Update Utility User's Guide."Note: Only users with administrator (Microsoft Windows) or root (Linux) privileges can perform updates with SUU.###################################################################### USER NOTES###################################################################### This section provides information to help enhance your experience withSUU in specific implementations and environments.* If you launch SUU from a command shell and then press <Ctrl><c>, theSUU procedure, as well as any running updates, will terminate.(137862)* When you launch SUU, the utility inventories the targeted system.Depending on the system configuration, this process may take severalminutes to complete. (138439)* The figures and examples in the "Dell OpenManage Server UpdateUtility User's Guide" are used as examples only and may not beidentical to the SUU GUI. (137294, 136624)* When you verify the SUU return codes, use the operating system-specific commands to view the exit codes. (137296)For example:Microsoft Windows: echo %ERRORLEVEL%Red Hat Enterprise Linux: echo $?###################################################################### KNOWN ISSUES###################################################################### This section provides information about known issues with this releaseof SUU.* If you have multiple PowerEdge Expandable RAID Controller (PERC)cards installed on a system, you may be required to run the SUUupdate procedure several times to update the firmware on all theinstalled cards.* If your CERC ATA RAID controllers are configured with the H661firmware, SUU cannot update the firmware to the latest version.To update the firmware, use the "-force" option to manually applythe DUP with the latest firmware version. (134775)* When updating multiple, identical devices on the same system, SUUapplies the latest update to all instances of all devices. Forexample, if your system is configured with three controllersconfigured with firmware/driver versions 1.2, 1.3, and 1.4,and the repository version is 1.4, SUU applies version 1.4 to allinstances of all devices. (136620)* When you run SUU using the "-p" option, SUU reports the currentinstance log location ("suu -p") instead of the SUU instance loglocation ("suu -u") that is performing the update. (135925)* SUU uses DUPs to update various system components. During a Red Hat Enterprise Linux update, the DUPs create a "/var/lock/.spsetup"file using the Linux lockfile utility during the initial executionprocedure. Kernel panics or sudden reboots during DUP execution(reboots where TERM signals are not sent to running processes orwhere running processes do not have time to catch these signals)can generate a "/var/lock/.spsetup" lock file that cannot bedeleted. SUU reports the update as successful and prompts youto reboot the system. When you run SUU again on the same system,the comparison reports no change in device status. If thissituation occurs and no update is in progress, remove"/var/lock/.spsetup" before running another update on the system.(137287)* If a NIC teaming application is installed on the system, SUU updatesthe NIC base driver only if the driver is compatible with theteaming application. To verify driver compatibility, run DUP on thesystem to update the driver and read the generated messages.(138648)* Devices that are disabled in the operating system are notinventoried or updated by SUU. To update or inventory these devices,enable the devices in the operating system and then relaunch SUU.(142111)* Do not use the RAC virtual media to run SUU remotely on a system.This procedure breaks the virtual media connection, causing the SUUupdate procedure to fail. (144487)* SUU fails if it is run from a pathname that contains specialcharacters. For example, ",:,/,\,$, etc. It is recommended to usea directory name without any special characters for runningSUU. As an example, a case where you can get directory namewith special characters is:In the SUSE Linux Enterprise Server operating system, when aUSB DVD-ROM or USB disk is attached, it may by default, mountto a directory name that contains special characters. Forexample, /media/USB:1:2/ (42279)* If a RAC DUP package (RAC 4/P or RAC 4/i) is running and SUU isstarted, the RAC package may fail. To resolve this issue, run SUUonly after the RAC package has completed execution. (23184)* In Linux, if there is not enough space in the var partition or tmpfolder, SUU displays the following error message:"Not enough space available in the /var or /tmp folder. Please makesure you have at least x MB." The value ‘x’ is the minimum amountof space required to apply the selected updates.This value varies according to the selected updates. Ensure thatyou have sufficient space in the var partition or tmp folder andrestart SUU to start the system inventory. (66118).* In some cases where the latest Intel NIC driver (Intel(R) PROPCIE Gigabit Family of Adapters 9.5, base driver version 9.6.31.0)is installed as part of Dell Systems Build and Update Utility(SBUU) install, SUU may not be able to inventory the respectiveNIC. This may happen because SBUU would not have installed theumbrella software. In these cases, install the umbrella with theumbrella installer (available at or in the SERVICEdirectory on the Dell Systems Management Tools and DocumentationDVD) to get the Intel NIC inventoried by SUU (DF130363).##################################################################### THIRD PARTY DISCLAIMER#####################################################################The following disclaimer applies to the "TreeTable" control code inIT Assistant:Copyright 1997, 1998 Sun Microsystems, Inc. All Rights Reserved.Redistribution and use in source and binary forms, with orwithout modification, are permitted provided that the followingconditions are met:- Redistributions of source code must retain the above copyrightnotice, this list of conditions and the following disclaimer.- Redistribution in binary form must reproduce the abovecopyright notice, this list of conditions, and the followingdisclaimer in the documentation and/or other materialsprovided with the distribution.Neither the name of Sun Microsystems, Inc. or the names ofcontributors may be used to endorse or promote products derivedfrom this software without specific prior written permission.This software is provided "AS IS," without a warranty of anykind. ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS ANDWARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE HEREBY EXCLUDED. SUN AND ITS LICENSORS SHALL NOT BE LIABLE FOR ANYDAMAGES OR LIABILITIES SUFFERED BY LICENSEE AS A RESULT OF ORRELATING TO USE, MODIFICATION OR DISTRIBUTION OF THIS SOFTWARE ORITS DERIVATIVES. IN NO EVENT WILL SUN OR ITS LICENSORS BE LIABLEFOR ANY LOST REVENUE, PROFIT OR DATA, OR FOR DIRECT, INDIRECT,SPECIAL, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY, ARISING OUT OF THE USE OF OR INABILITY TO USE THIS SOFTWARE, EVEN IF SUN HASBEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.You acknowledge that this software is not designed, licensed orintended for use in the design, construction, operation ormaintenance of any nuclear facility.###################################################################### Information in this document is subject to change without notice.(C) 2004-2009 Dell Inc. All rights reserved.Reproduction in any manner whatsoever without the written permissionof Dell is strictly forbidden.Trademarks used in this text: "Dell", "PowerEdge", "PowerVault", and"Dell OpenManage" are trademarks of Dell Inc.; "Microsoft","Windows", "Windows Server", and "Internet Explorer" are eithertrademarks or registered trademarks of Microsoft Corporation in theUnited States and/or other countries; "Red Hat" and "Red Hat EnterpriseLinux" are registered trademark of Red Hat Linux, Inc.; "SUSE" is aregistered trademark of Novell, Inc. in the United States and othercountries; "Intel" is a registered trademark of Intel Corporation.;"Mozilla" and "Firefox" are registered trademarks of Mozilla.Other trademarks and trade names may be used in this document to referto either the entities claiming the marks and names or their products.Dell Inc. disclaims any proprietary interest in trademarks and tradenames other than its own.The utilities provided with the Dell OpenManage Server Update Utilityare provided "as is". Dell disclaims any and all warranties, express,implied or statutory, with respect to the utilities, including, butnot limited to, the implied warranties of merchantability, fitness fora particular purpose, title and any warranty of non-infringement. Usethe Server Update Utility at your own risk. Dell shall not be liablefor any direct or indirect damages incurred in using the Server UpdateUtility. In no event shall Dell or its suppliers be responsible forany direct or indirect damages whatsoever (including, withoutlimitation, damages for loss of profits, loss of use, loss of data,business interruption, or other pecuniary loss, nor for punitive,incidental, consequential, or special damages of any kind, under anypart of this agreement, even if advised or aware of the possibility ofsuch damage).October 2009。

Installing the Boxer fan upgrade kitTo reduce projector noise and improve cooling install the fan upgrade kit.Affected productsThe following products are affected:•Boxer 4K30•Mirage 304KParts listThe following parts are required for the installation of the Boxer fan upgrade kit.•Boxer fan upgrade kit P/N: 003-005513-XX•Minimum software version V1.1.0Tools required for installationMake sure the following tools are available during the installation:•Long and stubby neck magnetic-tip ball drivers—2.5 mm, 3 mm, and 5 mm provided in projector toolbox•Needle nose wire cutter• 2.5 mm hex driver• 3 mm hex driverSafety precautionsTo prevent personal injury and to protect the device from damage, read and follow these safety precautions.Warning! Failure to comply with the following could result in death or serious injury.•SHOCK HAZARD! Disconnect the product from AC before moving, servicing, cleaning, removing components, or opening any enclosure.•EXPLOSION HAZARD! Allow sufficient time for the lamp to cool down before powering down the product, disconnecting it from AC, and opening the lamp door.•Always handle optics by their edges.•All procedures must be performed by Christie qualified technicians.•Use protective eye wear and gloves when cleaning and servicing the product. Follow workplace guidelines for using personal protective equipment when cleaning and servicing products.Notice. Failure to comply with the following may result in property damage.•SHOCK HAZARD! All harnessing must be properly routed and secured as originally installed, especially in high voltage areas.Turning the projector offWhen powering off in preparation for inspection or maintenance, always disconnect from AC.1.To turn the lamps off, press and hold the Power button until you hear a beep.When powering off the projector, allow the projector to complete its cool down cycle. Do not immediately unplug the projector if this can be avoided.2.To turn off power to the projector, disconnect from AC power.Removing the top coverThe top cover provides access to the light engine, HKBA board, and various other components. Estimated replacement time: 1 minute1.Loosen the six captive screws securing the top cover.2.Remove the top cover.3.To install the top cover, repeat these steps in reverse order.Removing the optics-side coverThe optics-side cover provides access to liquid cooling module, integrator focus module, zoom/focus module, NFC readers, and other components.Estimated replacement time: 1 minute1.Loosen the six captive screws securing the optics-side cover.2.Remove the optics-side cover.3.To install the optics-side cover, repeat these steps in reverse order. Removing the rear coverThe rear cover provides access to lamp and lamp driver modules.Estimated replacement time: 1 minute1.Loosen the six captive screws securing the rear cover.2.Remove the rear cover .3.To install the rear cover , repeat these steps in reverse order .Removing the integrator moduleThe integrator module is positioned between the two lamp cartridges and captures light from up to six lamps and combines it into a uniform rectangular light source for the light engine.Estimated replacement time: 16 minutesWarning! Failure to comply with the following could result in death or serious injury.•Always handle optics by their edges.LAMP BLOWER FAN PACKVERTICAL SUPPORT BRACKETREAR TOP SUPPORT BRACKETTOP LAMP DUCTLAMP CARTRIDGE BLAMP CARTRIDGE AOUTSIDE LAMP DUCT 1.Remove the top cover (on page 2).2.Remove the optics-side cover (on page 3).3.Remove the two screws securing the rear top support bracket.4.Remove the rear cover (on page 3)5.Loosen the two captive screws to release the lamp cartridges.6.Use the handles to pull out the lamp cartridges.7.To release the vertical support bracket, remove the four screws.8.To free the lamp blower fan pack, loosen the captive screw securing it.9.Slide the lamp blower fan pack towards the front of the projector to release the assemblyfrom the tabs.10.Disconnect the J73 (blue and white) and J74 (yellow and white) harnesses.11.Free the harnesses from the clips.12.Remove the lamp blower fan pack.13.Disconnect the J75 (pink and white) harness and route free from the harness clips.14.Disconnect the J72 NFCR (purple) harness (A side).15.To release the top lamp duct module, remove the three screws.16.To remove the outside lamp duct, loosen the three captive screws.17.Disconnect the J72 (purple) inline connection located at the electronics bracket.18.Slide the outside lamp duct assembly to the front of the projector and remove it.19.Remove the top lamp duct module.20.Disconnect the cartridge inline connector from the lamp driver and P89 (white) from theHKBA and route free from the harness clips.21.Remove the two screws from the bottom of the integrator focus module to disengage it fromthe bottom of the projector.Use caution when handling the integrator module assembly. Touching the glass with barehands will impact the optics due to residue such as oil or dirt. The areas of the integratormodule where light enters the module from the lamps can become hot and touching theseareas could potentially cause damage to the lamps or the integrator module assembly.22.Remove the four screws from the front of the integrator focus module connecting it to thezoom and focus module.23.Slide the integrator module out the side of the projector.Installing the lamp harness connector backplates to the integrator front plateInstall the lamp harness connector backplates to the integrator front plate and if required, replace the integrator front plate and connector mounting brackets.If the integrator front plate does not have the contingency mounting holes, replace it (011-106558-XX) and the connector mounting brackets (011-105941-XX) from the Boxer Harness Connector kit. If the integrator front plate has existing contingency mounting holes, skip to step 9 to install the new connector backplates.1.Remove the integrator module (on page 4).2.Remove the four screws securing the front plate assembly to the integrator.3.Remove the five screws securing the connector brackets to the front plate.4.Remove the two harness connector brackets.5.To remove the integrator front plate, slide it towards the short end of the integrator.6.Remove off any ink from the new integrator front plate and connector brackets with a MethylHydrate solution and cloth prior to installing the new parts.Wear gloves to avoid skin contact and use in a well-ventilated area. Avoid flames and sparks when using this flammable liquid.7.Examine the new parts to ensure all the ink has been cleaned off.8.Replace the integrator front plate and harness connector brackets with the new ones providedin the upgrade kit that accommodate the harness connector backplates.9.Install the new integrator front plate.10.Install the two new harness connector brackets.11.Install the new connector backplates.12.Reinstall the integrator module.Replacing the rear electronics bracketThe rear electronics bracket holds the rear IR sensor board, lamp interlock, rear convenience light board (CLB), and status LED board (SLB)When replacing the rear electronics bracket, transfer all the printed circuit boards and harnesses to the new bracket.1.Disconnect the J1 SLB (multi-color) harness from the SLB.2.Disconnect the J71 (multi-color) harness connection on the housekeeping board (HKBA).3.To remove the rear electronics assembly, remove the four screws.4.Remove the two screws for the SLB.5.Remove the two screws from the lamp interlock.6.Remove one screw from the rear IR mounting bracket.7.Remove the two screws from the CLB holder.8.Remove all the PCBs with the harness from the old electronics bracket.9.Route the interlock switch and IR sensor through the rear electronics bracket.10.Install the lamp interlock to the new interlock mounting bracket with two screws.11.To transfer the remaining electronics to the new bracket, follow steps 4 to 8 in reverse order.12.Install the new rear electronics assembly with the four screws removed in step 3.13.Connect the J71 (multi-color) harness connection on the HKBA.14.Connect the J1 (multi-color) harness connection on the SLB.Replacing the lamp duct housing assemblyThe lamp duct housing assembly supports the lamp cartridges, NFC holders, and cooling fans for the lamps.When replacing the lamp duct housing assembly, transfer all NFC holders and harnesses, the linear guide track, the printed circuit boards, and harnesses to the new bracket.1.To remove the inside duct remove the seven screws.2.To release the harness clip located near the rear of the inside duct, pinch the tabs and pushthrough.3.Remove the three NFC holders and harnesses from the inside duct.4.Transfer the three inside NFC holders and harnesses to the new inside duct.5.Remove the three NFC holders, harnesses, and harness clips from the outside duct.6.Transfer the three NFC holders, harnesses, and harness clips to the new outside duct.7.Replace any damaged harness clips with the new ones provided in the kit.8.Connect new duct cooling harness J93 into HKBA.9.Route the new duct fan 28 to follow the bulb blower harness to the rear electronics assembly.10.Route the new duct fan 29 to follow the LCM harness to the area behind it.11.To mount the new support bracket for the bottom blower, remove the two existing screws.12.Install the new support bracket and fasten with the two screws.13.Position the new inside duct and reattach the cable management clips.14.To secure the inside duct, install the seven screws.15.Transfer the linear guide track from the old top duct to the new top duct.16.Transfer the top duct harness to the new top duct.17.To reinstall the integrator module follow the steps in reverse in the previous removing theintegrator module (on page 4) procedure.18.Install the new top duct assembly.19.Install the new outside duct assembly.20.Tighten the three captive screws and install the three screws for the top duct.21.Connect the outside NFC harness to the inline connector located on the rear electronicsbracket.22.Install the new top duct fan assembly and fasten with the two captive screws.23.Connect the top duct fan to the fan 28 connector.24.Route the NFC harness through the two purse clips on the rear electronics assembly.25.Connect the bottom duct fan to the fan 29 connector.26.Install the new bottom duct fan with the two captive screws.27.Reinstall the lamp blower fan pack.28.Reinstall the vertical support bracket.29.Reinstall both lamp cartridges.30.Reinstall the optics cover, rear cover, rear top support bracket, and top cover.。