The diagram below illustrates the SPAN/TAP deployment of an EX appliance in a typical
network environment.
IMPORTANT
For information about configuring the EX 8600 appliance for SPAN/TAP
mode, see the
Email Security System Administration Guide
for your release.
Prerequisites
Before connecting the EX appliance to your network, ensure that your network devices
provide 10/100/1000BASE-T Ethernet output.
Cabling
• ether1: Connect one end of an Ethernet cable to the EX appliance’s ether1 port,
and connect the other end to your LAN-facing switch. This port is the management
interface.
• pether3: Connect one end of an Ethernet cable to the EX appliance’s pether3 port,
and connect the other end to your switch. This connection allows the appliance
access to the upstream and downstream of traffic.
• (For optional URL Dynamic Analysis) pether2: Connect one end of an Ethernet
cable to the EX appliance’s pether2 port, and connect the other end to your Internet
facing firewall device.
This connection allows the appliance to retrieve objects referred to by suspicious
URLs for further analysis. FireEye recommends connecting to an isolated Internet
connection to prevent the exposure of the IP address and other information about
your main network.
EX Series
Deployment
Page 11
© 2022 FireEye Security Holdings US LLC
