background image

Cisco Web Security Appliance S195, S395, S695, and S695F Hardware
Installation Guide

First Published:

2019-07-08

Last Modified:

2021-07-19

Americas Headquarters

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Summary of Contents for S195

Page 1: ...d S695F Hardware Installation Guide First Published 2019 07 08 Last Modified 2021 07 19 Americas Headquarters Cisco Systems Inc 170 West Tasman Drive San Jose CA 95134 1706 USA http www cisco com Tel 408 526 4000 800 553 NETS 6387 Fax 408 527 0883 ...

Page 2: ... USAGE OR TRADE PRACTICE IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT SPECIAL CONSEQUENTIAL OR INCIDENTAL DAMAGES INCLUDING WITHOUT LIMITATION LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES Any Internet Protocol IP addresses and phone numbers use...

Page 3: ...s 19 Installation Preparation 27 C H A P T E R 2 Installation Warnings 27 Safety Recommendations 29 Maintain Safety with Electricity 29 Prevent ESD Damage 30 Site Environment 30 Site Considerations 31 Power Supply Considerations 31 Rack Configuration Considerations 31 Rack Mount the Chassis 33 C H A P T E R 3 Unpack and Inspect the Chassis 33 Rack Mount the Chassis 33 Cisco Web Security Appliance ...

Page 4: ...hut Down 37 Enable RPC 38 Reset the Chassis Remotely 39 Install Uninstall the Locking Faceplate 39 Remove and Replace a Drive 40 Remove and Replace a Power Supply 43 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide iv Contents ...

Page 5: ... page 19 Features The Cisco Web Security Appliances WSA S195 S395 S695 and S695F help organizations secure and control web traffic The WSA S195 S395 S695 and S695F support Cisco AsyncOS version 11 8 and later See Product ID Numbers on page 18 for a list of field replaceable product IDs PIDs associated with the WSA security appliances The following figures show the Cisco Web Security appliances Fig...

Page 6: ...Unit identification button On rear panel Power button Before January 2021 Two Intel Xeon 6126 After January 2021 Two Intel Xeon 6226 Before January 2021 One Intel Xeon 5118 After January 2021 One Intel Xeon 5218 Before January 2021 One Intel Xeon 4110 After January 2021 One Intel Xeon 4210 Processor 64 GB RAM 32 GB RAM 16 GB RAM Memory Before January 2021 Four 16 GB DDR4 2400 MHz DIMM After Januar...

Page 7: ...IA 561 Serial console port Two 1050 W AC Hot swappable and redundant as 1 1 Two 770 W AC Hot swappable and redundant as 1 1 One 770 W AC You can order a second power supply for redundancy as 1 1 AC power supply Do not mix power supply type or wattage between models Note Six fans for front to rear cooling Internal component only not field replaceable If one fan fails you must send your chassis for ...

Page 8: ... 1 Gb or 10 Gb SFP fiber optic transceivers with cables Supported on the S695F You cannot mix SFP transceiver types in the same chassis You can either have two 1 Gb or two 10 Gb SFPs in the same chassis Note 6 Useful Links document The steps in the Useful Links document send you to the documentation you need to install set up and configure your WSA appliance 5 Serial Number Locations The serial nu...

Page 9: ...ssis as shown in the following figure The cover latch on the top of the chassis cover is not supported There are no internal field replaceable parts in the WSA S195 S395 S695 and S695F Caution Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 5 Overview Serial Number Locations ...

Page 10: ... label 1 Front Panel The following figure shows the front panel features and disk drive configuration for the WSA S195 See Front Panel LEDs on page 9 for a description of the LEDs Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 6 Overview Front Panel ...

Page 11: ...status LED 6 Power supply status LED 5 Temperature status LED 8 Network link activity LED 7 Pullout asset card 9 The following figure shows the front panel features and disk drive configuration for the WSA S395 See Front Panel LEDs on page 9 for a description of the LEDs Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 7 Overview Front Panel ...

Page 12: ...tus LED 6 Power supply status LED 5 Temperature status LED 8 Network link activity LED 7 Pullout asset card 9 The following figure shows the front panel features and disk drive configuration for the WSA S695 and S695F See Front Panel LEDs on page 9 for a description of the LEDs Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 8 Overview Front Panel ...

Page 13: ...tification button LED 3 Temperature status LED 6 Fan status LED 5 Network link activity LED 8 Power supply status LED 7 Pullout asset card 9 Front Panel LEDs The following figure shows the front panel LEDs for the S195 S395 S695 and S695F and describes their states Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 9 Overview Front Panel LEDs ...

Page 14: ...ebuilding Amber flashing with 1 second interval Drive locate function activated in the software 1 Unit identification LED Off The unit identification function is not in use Blue flashing The unit identification function is activated 4 Power LED Off There is no AC power to the chassis Amber The chassis is in standby mode Green The chassis is in main power mode Power is supplied to all components 3 ...

Page 15: ... major fault with the system board Amber 3 flashes There is a major fault with the DIMMs Amber 4 flashes There is a major fault with the CPUs 5 Network link activity LED Off The Ethernet port link is idle Green One or more Ethernet ports are link active but there is no activity Green flashing One or more Ethernet ports are link active with activity 8 Fan status LED Green All fans are operating pro...

Page 16: ...g is required 10 770 W AC power supply PSU 2 The S195 ships with one power supply but you can order a second one for redundancy The S395 ships with two power supplies 9 Proxy port 2 P2 When P1 and P2 are both enabled you must connect P1 to the internal network and P2 to the internet You can connect P1 and P2 to an L4 switch WCCP router or network switch Note 12 Proxy port 1 P1 Connects to the netw...

Page 17: ...Ethernet tap one cable for all incoming and outgoing traffic 3 1050 W AC power supply PSU 2 6 1050 W AC power supply PSU 1 5 USB 3 0 Type A USB 1 8 Threaded holes for dual hole grounding lug Use is optional The supported AC power supplies have internal grounding so no additional chassis grounding is required 7 Management interface 1 MGMT 1 Restricted to management use only 10 USB 3 0 Type A USB 2 ...

Page 18: ...Note Copper SFPs are not supported Note 1 Proxy port 2 P2 When P1 and P2 are both enabled you must connect P1 to the internal network and P2 to the internet You can connect P1 and P2 to an L4 switch WCCP router or network switch Note 1 10 Gigabit Ethernet SFP support The GLX SX MMD 1 Gb and SFP 10G SR 10 Gb are the only SFP transceivers qualified by Cisco Use only Cisco qualified SFPs Note Copper ...

Page 19: ...ibes their states The S395 is the same except it has two power supplies The S695 and S695F have the same LEDs except that these models have more data interfaces the speed and status LED descriptions are the same Figure 13 S195 and S395 Rear Panel LEDs and Their States Interface link status Off No link is present Green Link is active Green flashing Traffic is present on the active link 2 Interface ...

Page 20: ...g table lists the specifications for the 770 W AC power supply Cisco part number 341 0591 04 used in the WSA S195 and S395 Table 2 770 W Power Supply Specifications Specification Description Nominal range 100 to 120 V AC 200 to 240 V AC Range 90 132 V AC 180 264 V AC AC input voltage range Nominal range 50 60 Hz Range 47 63 Hz AC input frequency 9 5 A peak at 100 V AC 4 5 A peak at 208 V AC Maximu...

Page 21: ...AC input frequency 12 5 A peak at 100 V AC 6 0 A peak at 208 V AC Maximum AC input current 1250 VA at 100 V AC Maximum input volt amperes 1050 W Maximum output power for each power supply 15 A subcycle duration Maximum inrush current 12 ms at 1050 W Maximum hold up time 12 V DC Power supply output voltage 12 V DC Power supply standby voltage Climate Savers Platinum Efficiency 80 Plus Platinum cert...

Page 22: ...ower level 40 dBa measure A weighted per ISO7779 LpAM Operation at 73 F 23 C Sound pressure level Product ID Numbers The following table lists the PIDs associated with WSA S195 S395 S695 and S695F The spare components are ones that you can order and replace yourself If any internal components fail you must get an RMA for the entire chassis including the SFPs and SFP cables Remove the drives and po...

Page 23: ...e power cord Standard power cords or jumper power cords are available for connection to the WSA The jumper power cords for use in racks are available as an optional alternative to the standard power cords If you do not order the optional power cord with the system you are responsible for selecting the appropriate power cord for the product Using a incompatible power cord with this product may resu...

Page 24: ...azil PWR 250V 10A BZ Cord set rating 10 A 250 V 2 Plug NBR 14136 1 Connector IEC 60320 C13 3 Figure 17 Cabinet Jumper CAB C13 C14 2M Cord set rating 10A 250V 2 Plug SS10A 1 Connector HS10S C 13 to C 14 3 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 20 Overview Power Cord Specifications ...

Page 25: ...igure 19 Cabinet Jumper CAB C13 CBN Cord set rating 10 A 250 V 2 Plug SS10A 1 Connector HS10S C 13 to C 14 3 Figure 20 China CAB 250V 10A CH Cord set rating 10 A 250 V 2 Plug GB2099 1 2008 1 Connector IEC 60320 C13 3 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 21 Overview Power Cord Specifications ...

Page 26: ...ure 22 India CAB 250V 10A ID Cord set rating 16 A 250 V 2 Plug IS 6538 1971 1 Connector IEC 60320 C13 3 Figure 23 Israel CAB 250V 10A IS Cord set rating 10 A 250 V 2 Plug SI 32 1 Connector IEC 60320 C13 3 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 22 Overview Power Cord Specifications ...

Page 27: ...e 25 Japan CAB JPN 3PIN Cord set rating 12 A 125 V 2 Plug JIS 8303 1 Connector IEC 60320 C13 3 Figure 26 Japan CAB C13 C14 2M JP Cord set rating 10 A 250 V 2 Plug EN 60320 2 2 E 1 Connector EN 60320 C13 to C14 3 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 23 Overview Power Cord Specifications ...

Page 28: ...h America CAB 9K12A NA Cord set rating 13 A 125 V 2 Plug NEMA5 15P 1 Connector IEC 60320 C15 3 Figure 29 North America CAB N5K6A NA Cord set rating 10 A 125 V 2 Plug NEMA6 15P 1 Connector IEC 60320 C13 3 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 24 Overview Power Cord Specifications ...

Page 29: ...gure 31 Switzerland CAB 9K10A SW Cord set rating 10 A 250 V 2 Plug SEV 1011 MP232 R 1 Connector IEC 60320 C15 3 Figure 32 Taiwan CAB ACTW Cord set rating 10 A 125 V 2 Plug EL 302 CNS10917 1 Connector IEC 60320 C13 3 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 25 Overview Power Cord Specifications ...

Page 30: ... Kingdom CAB 9K10A UK Cord set rating 10 A 250 V 2 Plug BS1363A SS145 1 Connector IEC 60320 C15 3 Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 26 Overview Power Cord Specifications ...

Page 31: ... chassis Take note of the following warnings Statement 1071 Warning Definition IMPORTANT SAFETY INSTRUCTIONS Before you work on any equipment be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents Read the installation instructions before using installing or connecting the system to the power source Use the statement number provi...

Page 32: ...ng or servicing the unit in the rack Warning Statement 1015 Battery Handling To reduce risk of fire explosion or leakage of flammable liquid or gas Replace the battery only with the same or equivalent type recommended by the manufacturer Do not dismantle crush puncture use sharp tool to remove short external contacts or dispose of in fire Do not use if battery is warped or swollen Do not store or ...

Page 33: ...ry such as earrings bracelets or chains that could get caught in the chassis Wear safety glasses if you are working under any conditions that might be hazardous to your eyes Do not perform any action that creates a potential hazard to people or makes the equipment unsafe Never attempt to lift an object that is too heavy for one person Maintain Safety with Electricity Before working on a chassis be...

Page 34: ...pment and impair electrical circuitry which can result in intermittent or complete failure of your equipment Always follow ESD prevention procedures when removing and replacing components Ensure that the chassis is electrically connected to an earth ground Wear an ESD preventive wrist strap ensuring that it makes good skin contact Connect the grounding clip to an unpainted surface of the chassis f...

Page 35: ...nstall a power conditioner if necessary to ensure proper voltages and power levels in the appliance input voltage Install proper grounding for the site to avoid damage from lightning and power surges The chassis does not have a user selectable operating range Refer to the label on the chassis for the correct appliance input power requirement Several styles of AC input power supply cords are availa...

Page 36: ...equipment at the bottom of the rack Baffles can help to isolate exhaust air from intake air which also helps to draw cooling air through the chassis The best placement of the baffles depends on the airflow patterns in the rack Experiment with different arrangements to position the baffles effectively Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 32 Installation ...

Page 37: ...the chassis from its cardboard container and save all packaging material Step 2 Compare the shipment to the equipment list provided by your customer service representative Verify that you have all items Step 3 Check for damage and report any discrepancies or damage to your customer service representative Have the following information ready Invoice number of shipper see the packing slip Model and ...

Page 38: ...l precautions to ensure that the system remains stable The following guidelines are provided to ensure your safety This unit should be mounted at the bottom of the rack if it is the only unit in the rack When mounting this unit in a partially filled rack load the rack from the bottom to the top with the heaviest component at the bottom of the rack If the rack is provided with stabilizing devices i...

Page 39: ... b Push the mounting pegs into the rack post holes from the outside front c Press the securing plate release button marked PUSH The spring loaded securing plate closes to lock the pegs in place d Attach the second slide rail assembly to the opposite side of the rack Make sure that the two slide rail assemblies are at the same height with each other and are level front to back e Pull the inner slid...

Page 40: ...ushed into the slide rails open a hinged slam latch lever on the front of the chassis and insert the screw through the hole that is under the lever The screw threads into the static part of the rail on the rack post and prevents the chassis from being pulled out Repeat for the opposite slam latch What to do next Install the cables according to your default software configuration as described in th...

Page 41: ...o completely remove power as directed in some maintenance procedures you must disconnect all power cords from all power supplies in the chassis Caution You can shut down the chassis using the front panel Power button or software management Step 1 Check the Power LED Amber The chassis is already in standby mode and you can safely remove power Green The chassis is in main power mode and you must shu...

Page 42: ...ve a third party tool that supports the Intelligent Platform Management Interface IPMI version 2 0 Step 1 Use SSH or the serial console port to access the CLI Step 2 Log in using an account with Administrator access Step 3 Enter the following commands remotepower setup Step 4 Follow the prompts to specify the following The dedicated IP address for the RPC port netmask and gateway The username and ...

Page 43: ...For example issue the following command from a UNIX computer with IPMI support ipmitool I lan H ip address U remoteresetuser P password chassis power reset Step 2 Wait at least 11 minutes for the chassis to reboot Install Uninstall the Locking Faceplate The locking faceplate Cisco part number 74 115098 01 for a 1 RU chassis and Cisco part number 74 115099 01 for a 2 RU chassis ships with the key y...

Page 44: ...tep 4 To uninstall the faceplate unlock the faceplate push the latch to the right and pull the faceplate out Remove and Replace a Drive The drives are hot swappable You do not have to shut down the chassis to remove or replace drives You cannot add more drives to the chassis You can only replace the drives in the slots that are supported for your model Safety Warnings Take note of the following wa...

Page 45: ... that suitable grounding is available Warning Statement 1030 Equipment Installation Only trained and qualified personnel should be allowed to install replace or service this equipment Warning Statement 1073 No User Serviceable Parts There are no serviceable parts inside To avoid risk of electric shock do not open Warning Statement 1074 Comply with Local and National Electrical Codes To reduce risk...

Page 46: ...ove the four drive tray screws that secure the drive to the tray and then lift the drive out of the tray Figure 39 Remove the Drive Tray Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 42 Maintenance and Upgrades Remove and Replace a Drive ...

Page 47: ...into a standby state For example if the power consumption can be satisfied by power supply 1 then power supply 2 is put into a standby state When you replace power supplies do not mix power supply types in the chassis Both power supplies must be the same wattage and Cisco PID Caution Power supply health monitoring notifies you if the power supply loses power or malfunctions so that redundancy is l...

Page 48: ...mply with Local and National Electrical Codes To reduce risk of electric shock or fire installation of the equipment must comply with local and national electrical codes Warning Step 1 Remove the power supply that you are replacing or the blank panel from an empty bay a Do one of the following actions If the chassis has one power supply shut down and remove power from the chassis See Power Button ...

Page 49: ...pply into the empty bay b Push the power supply into the bay until the release lever locks c Connect the power cord to the new power supply d If you shut down the chassis press the Power button to return it to main power mode Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 45 Maintenance and Upgrades Remove and Replace a Power Supply ...

Page 50: ...Cisco Web Security Appliance S195 S395 S695 and S695F Hardware Installation Guide 46 Maintenance and Upgrades Remove and Replace a Power Supply ...

Reviews: