Microweb PRO Series Dokumentacja Strona 1

InterScanTM Gateway Security Appliance M-Series Deployment Guide

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment GuideviList of TablesAbout This ManualTable 1. Conventions used in the Trend Mi

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment GuideI–2Deviceconnectivityping 4-21testing 4-21dimensions and weight A-2Dimensi

I–3IndexOObtaining Activation Code 4-21Obtaining Registration Key 4-21Obtaining the Activation Code 4-20Operation modesfully transparent 3-12transpare

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment GuideI–4Topologymost common network topology 3-2typical network topology before

Contentsvii

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guideviii

ix IntroductionAbout This ManualWelcome to the Trend Micro InterScan Gateway Se

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide xAudienceThis book is intended for network administrators who are prepari

About This ManualxiDocument ConventionsTo help you locate and interpret information easily, this guide uses the following conventions:TABLE 1. Conven

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide xii

1-1 Chapter 1Introducing InterScan Gateway Security ApplianceThis chapt

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide1-2Trend Micro InterScan Gateway Security ApplianceTrend Micro™ InterScan™

Introducing InterScan Gateway Security Appliance1-3Package ContentsUse the package contents checklist that came with the appliance to verify that the

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide1-4TABLE 1-1. The appliance package contents and descriptions Quantity I

Introducing InterScan Gateway Security Appliance1-5The Appliance HardwareThe Front PanelThe front panel of the InterScan Gateway Security Appliance co

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide1-6LCM ModuleThe LCD and control panel elements are collectively referred

Introducing InterScan Gateway Security Appliance1-7The Back PanelThe back panel of the appliance contains a power receptacle, power switch, USB ports,

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide1-8FIGURE 1-4. Back panelThe following table describes each back panel e

Introducing InterScan Gateway Security Appliance1-9FIGURE 1-5. Port indicatorsLED 2LED 1

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide1-10The following table describes the status of the port indicators when t

2-1 Chapter 2Mounting and Basic DeploymentBefore beginning to configure

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-2Deployment OverviewFollow the three stages of deployment to successfull

Mounting and Basic Deployment2-3Stage 2. Preconfiguring the AppliancePerform the following preconfiguration tasks: 1. Preparing for Preconfiguration o

Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing an

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-4Mounting an InterScan Gateway Security ApplianceReview Device Environme

Mounting and Basic Deployment2-5Recommended ToolsTrend Micro recommends using the following tools to mount the appliance:• #2 Phillips-head screwdrive

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-6Rack KitTABLE 2-1. InterScan appliance rack kit contentsQuantity Item

Mounting and Basic Deployment2-7FIGURE 2-2. InterScan appliance rack kit componentsSlide (back-side view)Rail (front-side view)Cage nutCage screw

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-8Preparing and Attaching the Slide Rails to the ApplianceThis task invol

Mounting and Basic Deployment2-9FIGURE 2-4. Rail lock deviceNote: The rail lock is a white plastic sliding lever. The rail lock will be located on t

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-10There is a lip at one end of the rail. Make sure the end of the rail c

Mounting and Basic Deployment2-11FIGURE 2-7. Mounting post inserted into mounting slot3. Use one (1) slide screw to secure the rail to the device.4.

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-12Figure 2-8. is an image of a slide set that has been lined up with the

Mounting and Basic Deployment2-13Figure 2-9. is an image of a slide set and a close-up of the slide nut and screw that can be loosened to adjust the l

The Trend Micro InterScan Gateway Security Appliance M-Series Deployment Guide is intended to provide detailed information about deploying the hardwar

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-14Mounting the Appliance on the RackThis task involves installing the de

Mounting and Basic Deployment2-154. Push the device, while holding the rail release open, into the rack until the front of the device is flush against

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-16Basic DeploymentAs shown in figure 2-11, Basic deployment scenario - s

Mounting and Basic Deployment2-17Multiple Segment DeploymentThe image below describes just one example of how the appliance can be used to pro-tect a

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide2-18Deployment NotesConsider the following when planning for to deploy the

3-1 Chapter 3Advanced Deployment Options This chapter addresses advance

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-2OverviewThis chapter provides guidance on deploying the InterScan Gatew

Advanced Deployment Options3-3In a basic deployment of the appliance in the most common network topology, the appliance sits between the network serve

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-4Deployment TopologiesThis section discusses the following types of depl

Advanced Deployment Options3-5If the appliance is deployed between a router and core switch within the same network segment, the appliance can directl

ContentsiContentsAbout This ManualAudience ... ivAbout This

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-6FIGURE 3-4. Problem: The appliance and clients deployed in different

Advanced Deployment Options3-7FIGURE 3-5. Solution: Static route settings tell the appliance where to forward traffic from clients deployed, even th

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-8FIGURE 3-6. You can set static routes from the Web console (Administr

Advanced Deployment Options3-9Advanced Deployment ScenariosIn addition to the basic deployment scenario, administrators can deploy InterScan Gateway S

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-10The appliance supports two transparent proxy modes (“operation modes”)

Advanced Deployment Options3-11When a client initiates a request, the request passes through the switch that is the default gateway for clients in thi

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-12Figure 3-8 below illustrates how the appliance processes traffic in fu

Advanced Deployment Options3-13Because a DMZ is a network area (a subnetwork) that sits between an organization's internal network and an externa

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-14Failover DeploymentIf deploying two InterScan appliances, you can depl

Advanced Deployment Options3-15Failover Deployment ScenarioTo achieve such a function, deploy two InterScan appliances between two load-bal-ancing dev

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment GuideiiChapter 3: Advanced Deployment OptionsOverview ...

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-16WARNING! In order for this kind of “failover” to work, LAN bypass mus

Advanced Deployment Options3-17Deployment RecommendationsFigure 3-11 below shows the recommended deployment setup for the appliance.FIGURE 3-11. Rec

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide3-18Deployment IssuesThis release has the following limitations:• VLAN is

4-1 Chapter 4Preconfiguring InterScan Gateway Security AppliancePreconf

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-2Preparing for PreconfigurationComplete the following tasks before you p

Preconfiguring InterScan Gateway Security Appliance4-3Your InterScan Gateway Security Appliance must have an IP address to operate in your network. WA

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-4Connecting to the NetworkWith a DHCP server, you can connect InterScan

Preconfiguring InterScan Gateway Security Appliance4-5Choose a Preconfiguration MethodPreconfigure the appliance using one of the following methods:•

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-6Settings Configurable from the Preconfiguration ConsoleThe Preconfigura

Preconfiguring InterScan Gateway Security Appliance4-7Using the Preconfiguration Console to Set Device SettingsPreconfiguring the appliance using the

ContentsiiiChapter 4: Preconfiguring InterScan Gateway Security Appliance — continuedConnecting to the Network ...

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-82. Open HyperTerminal (Start > Programs > Accessories > Commun

Preconfiguring InterScan Gateway Security Appliance4-93. Click File > New Connection. The Connection Description screen appears. Type a name for th

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-10FIGURE 4-3. HyperTerminal COM Properties screen6. Click OK. The COM

Preconfiguring InterScan Gateway Security Appliance4-118. Press ENTER again. The appliance Preconfiguration console Main Menu appears, as shown below.

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-12Logging On to the Preconfiguration ConsoleAfter preparing the terminal

Preconfiguring InterScan Gateway Security Appliance4-13Preconfiguration Console Controls• To change fields, press the UP ARROW, DOWN ARROW, and TAB ke

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-14Tip: Host names may be up to 63 alphanumeric characters (spaces not a

Preconfiguring InterScan Gateway Security Appliance4-15Exiting the Preconfiguration ConsoleLog off from the preconfiguration console after completing

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-16To configure the appliance IP network settings through the LCM module:

Preconfiguring InterScan Gateway Security Appliance4-17Connecting to the NetworkNote: Be sure to preconfigure the appliance before attempting to conne

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment GuideivList of FiguresChapter 1. Introducing InterScan Gateway Security Applia

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-18Obtaining the Activation CodeThe Trend Micro sales team or sales repre

Preconfiguring InterScan Gateway Security Appliance4-19Configuring InterScan Gateway Security ApplianceAfter preconfiguring the appliance, you are rea

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-20Activating the ApplianceThe Trend Micro sales team or sales representa

Preconfiguring InterScan Gateway Security Appliance4-21After the registration is complete, Trend Micro emails you an Activation Code, which you can th

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide4-22

5-1 Chapter 5Troubleshooting and FAQsThis chapter addresses troubleshoo

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide5-2TroubleshootingWhy Is the Summary Screen not Logging Any Events? Why Ar

Troubleshooting and FAQs5-3FIGURE 5-1. Preconfiguration console output screen when initializing a hard disk that is not formatted or is improperly i

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide5-4I Can See the Console Output on the HyperTerminal but Some Keystrokes D

Troubleshooting and FAQs5-5The following table describes the different LAN bypass triggers and the associated LED indicator status.LAN bypass is disab

ContentsvChapter 3. Advanced Deployment Options — continuedFigure 3-5. Solution: Static route settings tell the appliance where to forward traffic f

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide5-6Enabling or Disabling LAN Bypass and Link State FailoverAccessing the P

Troubleshooting and FAQs5-78. Select option 8, Log Off with Saving and press ENTER. The system saves your settings and logs you off from the Preconfig

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide5-8Can I Ping InterScan Gateway Security Appliance?Yes, InterScan Gateway

Troubleshooting and FAQs5-9Contacting Technical SupportTrend Micro has sales and corporate offices in many cities around the globe. For global contact

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide5-10

A-1 Appendix Appendix A Specifications and EnvironmentThis appendix inc

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment GuideA-2Hardware SpecificationsInterScan Gateway Security Appliance uses the fo

Specifications and EnvironmentA-3Power Requirements and EnvironmentThe following power requirements and environmental specifications apply to InterSca

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment GuideA-4

I–1IndexIndexAActivation Codeobtaining 4-21Appliancedeployment 2-1Attaching the Slide Rails 2-8Auto-switching/sensing capability 5-7BBack Paneldescrip