Installation guide

Trend Micro™ InterScan™ Web Security Virtual Appliance 6.5 Installation Guide
2-2
Identifying Your Server Placement
Before installing InterScan Web Security Virtual Appliance (IWSVA), you will need to
review the IWSVA deployment modes and decide how to install IWSVA into your
network environment to best meet your needs. This involves identifying where to place
the IWSVA server in the network and identifying the best deployment mode for your
network.
Today's enterprise network topologies typically fall into one of the following two
categories:
• Two firewalls with a Demilitarized Zone (DMZ)
• One firewall without a DMZ.
The ideal location for the IWSVA server depends upon the topology in use.
Two Firewalls with DMZ
Given today's security concerns, many organizations have implemented a topology
consisting of two firewalls (one external and one internal). These firewalls divide the
network into two main areas:
• The DMZ—The DMZ is located between the external and internal firewalls. Hosts
that reside in this area can accept connections from servers that are external to the
organization's network. The configuration of the external firewall allows packets
from external computers to reach only servers inside the DMZ.