Deep Edge 2.5 SP2 Quick Start Guide

Deep Edge 2.5 SP2 Quick Start Guide
Fold
Fold
TREND MICRO
TM
Rear panel
The back panel contains all the network interface ports. These ports are grouped into the
management interface ports and the data interface ports.
Deep Edge
TM
Routing Mode
In Routing mode, each Deep Edge unit is visible to the network to which it is
connected. All of its interfaces are on different subnets. Each interface connected to
a network must be configured with an IP address that is valid for that network.
You would typically use Routing mode when the Deep Edge unit is deployed as a
gateway between private and public networks. In the Routing mode configuration,
the unit functions as a firewall. Firewall policies control communications through the
Deep Edge unit. The Deep Edge unit scans traffic for malware using the default
policy until you create a custom policy.
Retention Clip
Video Connector
Use this Quick Start Guide to get Deep Edge up and running on your network. For more
information, see:
 Readme — Covers basic getting started instructions, new features, known issues, and
late‐breaking information.
 Deployment Guide — Describes installation, planning, deployment, and initial configuration.
 Administrator’s Guide — Contains a comprehensive overview of Deep Edge. It also provides
detailed configuration and management information.
 Online help — Explains product screens and discusses administrative tasks and relevant
concepts.
Eth 2
System ID
Connector
USB 2.0
Connectors
Data Ports
Trend Micro™ Deep Edge™ solution offers a new level of simplicity for deployment, configuration,
and management of a next‐generation firewall appliance.
Status Indicator
Note: To use routing mode, you must switch from the default bridge mode.
Eth 3
Eth 0
Serial Connector
iDRAC port
eSATA
Eth 1
Ethernet
Connectors
Power Supply Connector
Device ID Button
For the latest versions of Deep Edge documentation, visit Trend Micro’s Download Center at:
http://docs.trendmicro.com
3
Note: Trend Micro recommends reading the Deep Edge Deployment and Administrator’s
Guides before setting up the Deep Edge appliance.
1
Planning your traffic flow
Before configuring the Deep Edge appliance, plan how to integrate the unit into your
network. Your configuration plan depends on the operating mode you select: Inline
Mode (Routing Mode or Bridge Mode) or Monitoring Mode.
Your package should include the following items
Bridge Mode
In Bridge mode, the Deep Edge unit is invisible to the network. All of its interfaces are
on the same subnet. You only have to configure a management IP address so that you
can make configuration changes.
You would typically use Bridge mode on a private network behind an existing firewall or
behind a router. Position Deep Edge between layer 2 and layer 3 switches to scan all
packets entering and leaving that section of the network. In the default Bridge mode
configuration, the device functions as a firewall. The Deep Edge unit scans traffic for
malware using the default policy until you create a custom policy. Under the default
policy:
 Deep Edge scans and blocks malware on all traffic.
 Deep Edge also monitors and detects all types of violations in the network traffic.
Device with bezel
Rack Rail Box
Documentation
Reviewing the device ports
Monitoring Mode
Before connecting the Deep Edge unit:
1. Place the unit on a stable surface or rack.
2. Review the interfaces on the front and back panels of the Deep Edge device.
In Monitoring mode, Deep Edge is invisible to the network. Establish the settings for
your switch and mirror the traffic to the port that connects to the Deep Edge. Deep
Edge monitors your network traffic and only logs violation‐related information.
Network traffic is never blocked in this mode even if policies exist.
Front panel
The front panel provides a quick way to connect a keyboard and a VGA monitor to the device.
Diagnostic
VGA Port indicator
DVD drive
Trend Micro suggests Deep Edge be deployed at the core Internet switch in order to
see a copy of all Internet traffic leaving and entering your corporate network.
Hard drive
activity indicator
System ID panel
Device
ID button
1 of 6
2 of 6
3 of 6
Fold
Power Button
USB
connectors
In Monitoring Mode, network traffic does not pass directly through the Deep Edge
device. Traffic goes outside of Deep Edge, and Deep Edge runs independently
outside the network (logically) aided by the switches of the network which mirror the
specified traffic to interface(s) on which Deep Edge listens. Deep Edge monitors the
status of the traffic and presents the information to the Deep Edge admin.
Fold
2
Power Cords
Fold
Fold
2. Set your computer IP address to 192.168.252.2 and the netmask to
255.255.255.0.
3. Type the following URL in your browser: https://192.168.252.1:8443/ to access the
Deep Edge web console.
4. Log on to the web console using the default “admin” account.
User name: admin
Password: adminDeepEdge
5. Go to Network > Interfaces. Click eth0 in the Name column.
6. Edit this interface by changing the IP address to the one you selected to act as the
Deep Edge management IP address.
7. Click Apply.
8. Access new the URL for the Deep Edge web console that you just configured by
going to https://<IP address just configured>:8443/ in your browser.
Connecting for Monitoring Mode
Eth 2
Eth 3
Eth 0
Note: You may need to change your computer IP address to access Deep Edge
with new IP address.
To configure the DNS server IP address:
1. Log on to the web console as configured in the previous procedure.
2. Go to Network > DNS.
3. Configure the DNS IP address (primary and secondary if applicable).
4. Click Apply.
To configure the static route settings:
1. Go to Network > Routing > Static Routes.
2. Click Add New to create a default route.
3. Type the following values:
Network: 0.0.0.0/0
Next hop: Your default gateway IP address
4. Check the Enable this route checkbox.
5. Click Apply.
Use the information below to configure the Deep Edge unit in your environment.
IP Address
Description
Management IP address and netmask
Use an IP address in your subnet
DNS server IP address
Use your network DNS server IP address
Default gateway IP address
Use your network gateway IP address
5
Test your deployment and define your own policies
The default policy rules allow network traffic to pass. Try accessing the Internet from the
internal client to test the deployment.
You can define your own policies rules after successfully testing the deployment. Refer to
Deployment Guide for setup details or Administrator's Guide for the policy-creation
details.
Configuring the Device Settings
After updating components, use the Deployment Guide to deploy Deep Edge in your
network. You can create multiple policies directed at different types of endpoints and
traffic. You can check your defined policies for different IP address ranges, ports, and
users. If you have multiple policies, only the first policy that matches an endpoint will
apply to the endpoint.
Connecting the device to the network
How you connect the Deep Edge unit depends on the mode selected in section 3.
To connect Deep Edge to your network:
1. Connect one end of a network cable to a port in the data interface.
2. Connect the other end of the cable to a segment of your network.
To get a better understanding of component updates and policy enforcement, consult the
Administrator’s Guide.
Note: For information on selecting the right ports and High Availability modes, see the
Deployment Guide.
Connecting for Inline Mode (Bridge or Routing)
To set the Deep Edge management IP address and netmask:
1. Connect your laptop or computer to the Deep Edge eth0 port.
Eth 2
Eth 3
Eth 1
©2013 by Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo are trademarks
or registered trademarks of Trend Micro Incorporated. All other company and/or product names may
be trademarks or registered trademarks of their owners. Information contained in this document is
subject to change without notice.
Item Code: CTEK25839/130102
4 of 6
5 of 6
6 of 6
Fold
Eth 0
Fold
4
6
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising