Cisco Secure Malware Analytics M7 Hardware Installation Guide

Features

The Cisco Secure Malware Analytics M7 appliance provides safe and highly secure on-premises advanced malware analysis with deep threat analytics and content. Secure Malware Analytics M7 appliances provide the complete threat grid malware analysis platform.

Many organizations that handle sensitive data, such as banks, health services, and so forth must follow various regulatory rules and guidelines that do not allow certain types of files, such as malware artifacts, to be sent outside of the network for malware analysis. By maintaining a Cisco Secure Malware Analytics Appliance appliance on-premise, organizations are able to send suspicious documents and files to it to be analyzed without leaving the network.

The Secure Malware Analytics M7 appliance supports Secure Malware Analytics Version 3.5.129 and later, and appliance version 2.19 and later.

See Product ID Numbers for a list of the field-replaceable product IDs (PIDs) associated with the Secure Malware Analytics M7 appliance. You can remove and replace drives and power supplies. For all other internal component failures, you must send your chassis for return material authorization (RMA).

The following table lists the features of the Secure Malware Analytics M7.

Table 1. Secure Malware Analytics M7
Feature	Description
Form factor	1 RU
Rack mount	Standard 19-inch (48.3 cm) 4-post EIA rack
Airflow	Front to rear Cold aisle to hot aisle
Pullout asset card	Displays the serial number
Grounding hole	Two threaded holes for dual-hole grounding lug Use is optional; the supported AC power supplies have internal grounding, so no additional chassis grounding is required.
Unit identification button	Yes
Power button	On front panel
Processor	Two Intel I6548N 2.8GHz/250W 32C/60MB DDR5 5200MT/s
Memory	16 x 64GB DDR-5600 RDIMM 2Rx4 (16Gb) Internal component only; not field-replaceable
Management ports	1 Gb built-in
Network ports	Two Intel X710-T2L 10Gb 10GBASE-T Two Intel X710-DA2 10Gb SFP+
USB ports	Two Version 3.0 Type A
VGA port	One 3-row 15-pin DB-15 connector Enabled by default
SFP ports	Two fixed SFP+ ports
Supported SFP+	SFP-10G-LR (10 Gb) SFP-10G-SR (10 Gb)
Serial console port	RJ45 serial port running RS-232 (RS-232D TIA-561)
System power	Two 1200 W AC Titanium Power Supply for C-series Rack Servers Hot-swappable and redundant as 1+1
Power consumption	2626 BTU/hr
Fans	Six fans for front-to-rear cooling Internal component only; not field-replaceable
Storage	Two 1.6TB 2.5in Enterprise Performance 12G SAS Kioxia G2 SSDs in slots 1 and 2, RAID-1 hot-swappable Six 3.8TB 2.5 inch Enterprise Value 12G SAS Kioxia SSD in slots 3 through 8, RAID-5 hot-swappable

Package Contents

The following figure shows the package contents for the Secure Malware Analytics M7. Note that the contents are subject to change and your exact contents might contain additional or fewer items.


1	Chassis	2	Cisco 1-RU rail kit (Cisco part number 800-43376-02)
3	Cisco Secure Malware Analytics M7 This document contains URLs that point to the product overview, hardware installation guide, regulatory compliance and safety information guide, warranty, and licensing pages, and a QR code that points to the management center Doc Portal.	4	Two 10-Gb transceivers with cables

Serial Number Location

The serial number (SN) for the Secure Malware Analytics M7 is printed on the pullout asset card located on the front panel as shown in the following figure.

Figure 2. Serial Number on Pullout Asset Card

The serial number is also on the label on the cover of the chassis as shown in the following figure.

Caution

The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts in the Secure Malware Analytics M7.

Figure 3. Serial Number Location on Cover


1	Serial number label	2	Cover latch Not supported

Front Panel

The following figure shows the front panel features and disk-drive configuration for the Secure Malware Analytics M7. See Front Panel LEDs for a description of the LEDs.


1	Drive bays Supports two SATA SSDs in slots 1 and 2 Supports six SAS HDDs in slots 3 through 8	2	Power button/power status LED
3	Unit identification button/LED	4	System status LED
5	Power supply status LED	6	Fan status LED
7	Network link activity LED	8	Temperature status LED
9	Pullout asset card	10	Keyboard, video, and mouse (KVM) port

Front Panel LEDs

The following figure shows the front panel LEDs and describes their states.


1	Drive fault LED: Off—The drive is operating properly. Amber—Drive fault detected. Amber, flashing—The drive is rebuilding. Amber, flashing with 1-second interval—Drive locate function activated in the software.	2	Drive activity LED: Off—There is no drive in the drive tray (no access, no fault). Green—The drive is ready. Green, flashing—The drive is reading or writing data.
3	Power LED: Off—There is no AC power to the chassis. Amber—The chassis is in standby mode. Green—The chassis is in main power mode. Power is supplied to all components.	4	Unit identification LED: Off—The unit identification function is not in use. Blue, flashing—The unit identification function is activated.
5	System status LED: Green—The chassis is running in normal operating condition. Green, flashing—The chassis is performing system initialization and memory check. Amber—The chassis is in a degraded operational state (minor fault). Power supply redundancy is lost. CPUs are mismatched. At least one CPU is faulty. At least one DIMM is faulty. At least one drive in a RAID configuration failed. Amber, two flashes—There is a major fault with the system board. Amber, three flashes—There is a major fault with the DIMMs. Amber, four flashes—There is a major fault with the CPUs.	6	Power supply status LED: Green—All power supplies are operating normally. Amber—One or more power supplies are in a degraded operational state. Amber, flashing—One or more power supplies are in a critical fault state.
7	Fan status LED: Green—All fans are operating properly. Amber, flashing—One or more fans breached the unrecoverable threshold.	8	Network link activity LED: Off—The Ethernet port link is idle. Green—One or more Ethernet ports are link-active, but there is no activity. Green, flashing—One or more Ethernet ports are link-active with activity.
9	Temperature status LED: Green—The chassis is operating at normal temperature. Amber—One or more temperature sensors breached the critical threshold. Amber, flashing—One or more temperature sensors breached the unrecoverable threshold.		–-

Rear Panel

The following figure shows the rear panel of the Secure Malware Analytics M7.


1	Threaded holes for dual-hole grounding lug	2	SFP interface Used for cluster interconnect (Clust) 10-Gigabit Ethernet SFP+ support SFP-10G-SR and SFP-10G-LR are qualified for use on the Secure Malware Analytics M7.
3	Data interface (Clean) Supports 100/1000/10000 Mbps depending on link partner capability.	4	SFP management interface Used for administration and NFS server connectivity (Admin) 10-Gigabit Ethernet SFP+ support SFP-10G-SR and SFP-10G-LR are qualified for use on the Secure Malware Analytics M7.
5	Data interface (Dirty) Gigabit Ethernet 100/1000/10000 Mbps interface, RJ-45, LAN2	6	Unit identification button
7	USB 3.0 Type A (USB 1) You can connect a keyboard, and along with a monitor on the VGA port, you can access the console.	8	USB 3.0 Type A (USB 2) You can connect a keyboard, and along with a monitor on the VGA port, you can access the console.
9	CIMC interface	10	Serial console port (RJ-45 connector)
11	VGA video port (DB-15 connector)	12	1200-W AC power supply (PSU 1)
13	1200-W AC power supply (PSU 2)

Rear Panel LEDs

The following figure shows the rear panel LEDs and describes their states.


1	LED indicators: Amber—Link speed is 1 Gbps. Green—Link speed is 10 Gbps.	2	LED indicators: Amber—Link speed is 1 Gbps. Green—Link speed is 10 Gbps.
3	1-Gbps Ethernet dedicated management link: Off—Link speed is 10 Mbps. Amber—Link speed is 100 Gbps. Green—Link speed is 1 Gbps.	4	1-Gbps Ethernet dedicated management link: Off—No link is present. Amber—Link is active. Green, flashing—Traffic is present on the active link.
5	LED indicators: Off—no link. Green—10 Gbps. Green, flashing—transmitting or receiving data. Amber—5/2.5/1-Gbps, 100Mbps.	6	LED indicators: Off—no link. Green—10 Gbps. Green, flashing—transmitting or receiving data. Amber—5/2.5/1-Gbps, 100Mbps.

Power Supply

The following table lists the specifications for each 1200-W AC power supply (Cisco part number UCSC-PSU1-1050W) used in the Secure Malware Analytics M7.

Table 2. Power Supply Specifications
Description	Specification
Power consumption	1313 BTU/hr
AC input voltage range	Nominal range: 100 to 120 V AC, 200 to 240 V AC Range: 90–132 V AC, 180–264 V AC
AC input frequency	Nominal range: 50–60 Hz Range: 47–63 Hz
Maximum AC input current	9.5 A peak at 100-V AC 4.5 A peak at 208 V AC
Maximum input volt amperes	950 VA at 100 V AC
Maximum output power for each power supply	1200 W
Maximum inrush current	15 A (subcycle duration)
Maximum hold-up time	12 ms at 1050 W
Power supply output voltage	12 V DC
Power supply standby voltage	12 V DC
Efficiency rating	Climate Savers Platinum Efficiency (80 Plus Platinum certified)
Form factor	RSP2
Input connector	IEC320 C13

Hardware Specifications

The following table contains hardware specifications for the Secure Malware Analytics M7 security appliance.

Table 3. Secure Malware Analytics M7 Hardware Specifications
Specifications	Model name
Dimensions (H x W x D)	1.7 x 16.89 x 29.8 in (4.32 x 43.0 x 75.6 cm)
Weight	35.3 lb (16.01 kg)
Temperature	Operating: 50 to 95°F (10 to 35°C) Maximum temperature is derated by 1°F/547 ft (1°C/300 m) of altitude above 3117 ft (950 m). Nonoperating: –40 to 149°F (–40 to 65°C) When the appliance is stored or transported.
Humidity	Operating: 8 to 90% noncondensing Nonoperating: 5 to 95% noncondensing
Altitude	Operating: 0 to 10,000 ft Nonoperating: 0 to 40,000 ft when the appliance is stored or transported
Sound power level	5.8 Bels (measure A-weighted per ISO7779 LWAd) Operation at 73°F (23°C)
Sound pressure level	43 dBa (measure A-weighted per ISO7779 LpAM) Operation at 73°F (23°C)

Product ID Numbers

The following table lists the field-replaceable PIDs associated with the Secure Malware Analytics M7. If any internal components fail, you must get a return material authorization (RMA) for the entire chassis including the SFPs and SFP cables. Remove the drives and power supplies before you send the chassis for RMA. See the Cisco Returns Portal for more information.

Table 4. Secure Malware Analytics M7 PIDs
PID	Description
TG-M7-PWR-AC-1200W	AC power supply
UCSC-PSU1-1200W=	Power supply (spare)
TG-M7-SD16TKA3XEPD	1.6TB 2.5in 12G SAS Kioxia G2SSD(3X)
TG-M7-SDB3T8SA1VD	3.8TB 2.5in 6G SATA 1X Samsung SSD
UCSC-RAILB-M7	Rail kit
UCSC-RAILB-M7=	Rail Kit (spare)

Power Cord Specifications

Each power supply has a separate power cord. Standard power cords or jumper power cords are available for connection to the Secure Malware Analytics M7. The jumper power cords for use in racks are available as an optional alternative to the standard power cords

If you do not order the optional power cord with the system, you are responsible for selecting the appropriate power cord for the product. Using a incompatible power cord with this product may result in electrical safety hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with the system.

Note

Only the approved power cords and jumper cords provided with the Secure Malware Analytics M7 are supported.

The following power cords and jumper cords are supported.


1	Plug: IRAM 2073	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C13		—


1	Plug: A.S. 3112-2000	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—


1	Plug: NBR 14136	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C13		—

Figure 11. Cabinet Jumper (CAB-C13-C14-2M)


1	Plug: SS10A	2	Cord set rating: 10A, 250V
3	Connector: HS10S, C-13 to C-14		—

Figure 12. Cabinet Jumper (CAB-C13-C14-AC)


1	Plug: SS10A	2	Cord set rating: 10 A, 250 V
3	Connector: HS10S, C-13 to C-14 (recessed receptacle)		—


1	Plug: SS10A	2	Cord set rating: 10 A, 250 V
3	Connector: HS10S, C-13 to C-14		—


1	Plug: GB2099.1/2008	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C13		—


1	Plug: CEE 7/7 (M2511)	2	Cord set rating: 10 A/16 A, 250 V
3	Connector: IEC 60320/C15 (VSCC 15)		—


1	Plug: IS 6538-1971	2	Cord set rating: 16 A, 250 V
3	Connector: IEC 60320-C13		—


1	Plug: SI-32	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320-C13		—


1	Plug: CEI 23-16/VII (I/3G)	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15 (EN 60320/C15M)		—


1	Plug: JIS 8303	2	Cord set rating: 12 A, 125 V
3	Connector: IEC 60320/C13		—


1	Plug: EN 60320-2-2/E	2	Cord set rating: 10 A, 250 V
3	Connector: EN 60320/C13 to C14		—


1	Plug: EL211 (KSC 8305)	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—


1	Plug: NEMA5-15P	2	Cord set rating: 13 A, 125 V
3	Connector: IEC 60320/C15		—


1	Plug: NEMA6-15P	2	Cord set rating: 10 A, 125 V
3	Connector: IEC 60320/C13		—

Figure 24. North America (CAB-AC-L620-C13)


1	Plug: NEMA L6-20 (molded twist lock)	2	Cord set rating: 13 A, 250 V
3	Connector: IEC 60320/C13		—


1	Plug: SEV 1011 (MP232-R)	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—


1	Plug: EL 302 (CNS10917)	2	Cord set rating: 10 A, 125 V
3	Connector: IEC 60320/C13		—

Figure 27. United Kingdom (CAB-9K10A-UK)


1	Plug: BS1363A/SS145	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—

Bias-Free Language

Book Title

Overview

Results

Chapter: Overview