Prerequisites
Before connecting the EX appliance to your network, ensure that your network devices
provide 10/100/1000BASE-T Ethernet output.
Cabling
• ether1: Connect one end of an Ethernet cable to the EX appliance’s ether1 port,
and connect the other end to your LAN-facing switch. This port is the management
interface.
• pether3: Connect one end of an Ethernet cable to the EX appliance’s pether3 port,
and connect the other end to your MTA or anti-spam device. This connection allows
the appliance access to the upstream and downstream of traffic.
• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet
cable to the EX appliance’s pether2 port, and connect the other end to your Internet
facing firewall device.
This connection allows the appliance to retrieve objects referred to by suspicious
URLs for further analysis. FireEye recommends connecting to an isolated Internet
connection to prevent the exposure of the IP address and other information about
your main network.
You can monitor more network segments by connecting additional MTA or anti-spam devices
to pether3-6.
SPAN/ TAP Deployment
When the EX 8600 appliance is in SPAN/TAP deployment, it is connected to a network switch
capable of mirroring traffic. The EX appliance extracts email from the traffic for analysis.
EX Series
Deployment
Page 10
© 2022 FireEye Security Holdings US LLC
