TM InterScan Gateway Security Appliance M-Series Deployment Guide
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files, release notes (if any), and the latest version of the Getting Started Guide, which are available from Trend Micro's Web site at: http://www.trendmicro.
The Trend Micro InterScan Gateway Security Appliance M-Series Deployment Guide is intended to provide detailed information about deploying the hardware device in your network. Read it before using the hardware. Additional information about how to use specific features within the software is available in the online help file, in the Trend Micro InterScan Gateway Security Appliance M-Series Administrator’s Guide, and the online Knowledge Base at the Trend Micro Web site.
Contents Contents About This Manual Audience .............................................................................................. iv About This Deployment Guide ............................................................ iv Document Conventions ..........................................................................v Chapter 1: Introducing InterScan Gateway Security Appliance Trend Micro InterScan Gateway Security Appliance ........................ 1-2 Package Contents ......................
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Chapter 3: Advanced Deployment Options Overview ............................................................................................3-2 Deployment Topologies .....................................................................3-4 Deploying in a Single Network Segment .......................................3-4 Deploying in a Network with Multiple Segments ..........................3-5 Advanced Deployment Scenarios .......
Contents Chapter 4: Preconfiguring InterScan Gateway Security Appliance — continued Connecting to the Network .............................................................. 4-19 Testing for Device Connectivity ...................................................... 4-19 Obtaining the Activation Code ........................................................ 4-20 Configuring InterScan Gateway Security Appliance ....................... 4-21 Testing the Appliance Connectivity ...................................
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide List of Figures Chapter 1. Introducing InterScan Gateway Security Appliance Figure 1-1. InterScan Gateway Security Appliance package contents ............................1-3 Figure 1-2. Front Pane......................................................................................................1-6 Figure 1-3. LCM module features....................................................................................1-7 Figure 1-4.
Contents Chapter 3. Advanced Deployment Options — continued Figure 3-5. Solution: Static route settings tell the appliance where to forward traffic from clients deployed, even though they are in a different network segment ....................................................................................................... 3-7 Figure 3-6. You can set static routes from the Web console (Administration > IP Address Settings, Static Routes tab).......................................................
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide List of Tables About This Manual Table 1. Conventions used in the Trend Micro InterScan Gateway Security Appliance M-Series documentation ............................................................................... v Chapter 1. Introducing InterScan Gateway Security Appliance Table 1-1. The appliance package contents and descriptions .........................................1-4 Table 1-2. Front panel elements .................
Contents vii
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide viii
Introduction About This Manual Welcome to the Trend Micro InterScan Gateway Security Appliance M-Series Deployment Guide. This book contains information about the tasks involved in mounting and deploying the Trend Micro InterScan Gateway Security Appliance. Use it in conjunction with the Trend Micro InterScan Gateway Security Appliance M-Series Administrator’s Guide, which contains guidance on administering the appliance.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Audience This book is intended for network administrators who are preparing to mount and deploy the InterScan Gateway Security Appliance. The manual assumes a working knowledge of security systems and devices, as well as network administration.
About This Manual Document Conventions To help you locate and interpret information easily, this guide uses the following conventions: TABLE 1.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide xii
Chapter 1 Introducing InterScan Gateway Security Appliance This chapter introduces InterScan™ Gateway Security Appliance and provides a description of its components.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Trend Micro InterScan Gateway Security Appliance Trend Micro™ InterScan™ Gateway Security Appliance delivers the most complete all-in-one protection from viruses, spyware, spam and other threats at the Internet gateway. The leading gateway antivirus vendor, Trend Micro, provides this easy-to-deploy, worry-free appliance to block malware, stop inappropriate content or email, and filter harmful URLs.
Introducing InterScan Gateway Security Appliance Package Contents Use the package contents checklist that came with the appliance to verify that the box contains the complete set of components. Figure 1-1 displays the contents of the shipping box. FIGURE 1-1.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide TABLE 1-1.
Introducing InterScan Gateway Security Appliance The Appliance Hardware The Front Panel The front panel of the InterScan Gateway Security Appliance contains two (2) thumb screws and a removable bezel for holding it in a fixed position in a rack cabinet. Use these screws only in conjunction with the rail mounting kit. (See Trend Micro InterScan Gateway Security Appliance M-Series Getting Started Guide for details on mounting the device.) These screws alone will not support the weight of the device.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide TABLE 1-2.
Introducing InterScan Gateway Security Appliance TABLE 1-3.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide AC power receptacle Serial connection Fan vent FIGURE 1-4. Power switch MGT port UID indicator USB ports EXT port INT port Back panel The following table describes each back panel element. TABLE 1-4.
Introducing InterScan Gateway Security Appliance LED 2 FIGURE 1-5.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide The following table describes the status of the port indicators when the device is operating normally. TABLE 1-5.
Chapter 2 Mounting and Basic Deployment Before beginning to configure an InterScan Gateway Security Appliance, plan how to integrate it into your network. Determine which topology it will support and the type of operation mode it will use. This chapter explains how to plan for the deployment of the appliance based on supported operation modes. It also provides deployment scenarios to facilitate understanding of the various ways that the appliance can help protect the network.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Deployment Overview Follow the three stages of deployment to successfully install an InterScan appliance. Stage 1. MOUNT the appliance Decide how best to mount the appliance 1 Consider environmental factors 2 Mount the device (See page 2-4) Stage 2. PRECONFIGURE the appliance 1 Perform initial preconfiguration tasks 2 Perform preconfiguration 3 Connect the device to your network (See page 4-2) Stage 3.
Mounting and Basic Deployment Stage 2. Preconfiguring the Appliance Perform the following preconfiguration tasks: 1. Preparing for Preconfiguration on page 4-2 2. Choose a Preconfiguration Method on page 4-5 3. Connecting to the Network on page 4-17 Stage 3. Managing the Appliance Manage the appliance from the Web console by performing the following tasks: 1. Configure basic settings, including scan options, Network Outbreak Monitor, exception lists, and component updates 2.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Mounting an InterScan Gateway Security Appliance Review Device Environmental Specifications When deciding on a location for the device, consider the following: • Device dimensions and weight, see Appendix: Dimensions and Weight page A-2 • Environmental considerations, see Appendix: Power Requirements and Environment page A-3 Decide on the Type of Mounting The appliance can be mounted on a rack or on any stable, flat surface.
Mounting and Basic Deployment Recommended Tools Trend Micro recommends using the following tools to mount the appliance: • #2 Phillips-head screwdriver • Standard adjustable wrench or standard slip-joint pliers Four-Post Rack Mounting You can mount the appliance in a 19-inch standard cabinet rack. Note: Ensure that the rack cabinet side panel is longer than 25 inches (635mm). To mount the appliance in a four-post rack cabinet: WARNING! Do not install rack kit components designed for another system.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Rack Kit TABLE 2-1. Quantity 2 slide sets (1 slide and 1 rail per set) InterScan appliance rack kit contents Item Slide and rail sets Description Secure the device (fixed mount) or use to secure and allow the device to slide in and out of a four-post rack (sliding mount) Note: The rail is assembled with the slide when the appliance is shipped.
Mounting and Basic Deployment Slide (back-side view) Rail (front-side view) Cage screw Cage nut FIGURE 2-2.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Preparing and Attaching the Slide Rails to the Appliance This task involves separating the rail from the slide set and attaching it to the side of the device. To prepare and attach the slide rails to the device: 1. Holding the rail and slide set horizontally, with the back of the slide set facing you, detach the rail from the slide by pulling the rail lock to the right.
Mounting and Basic Deployment Rail locking device Slide - back-side Rail - front-side FIGURE 2-4. Note: 2. Rail lock device The rail lock is a white plastic sliding lever. The rail lock will be located on the left side of the rail, facing you. Attach a rail to the device side panel by placing the backside of the rail against the side of the device. Mounting post Mounting slot FIGURE 2-5.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide There is a lip at one end of the rail. Make sure the end of the rail containing the lip is towards the front of the device. Mounting slot Rail (front-side view) Lip - front of rail Mounting post FIGURE 2-6. Image of the mounting post and slot On each side of the device are two metal mounting posts.
Mounting and Basic Deployment Mounting post Mounting slot FIGURE 2-7. Mounting post inserted into mounting slot 3. Use one (1) slide screw to secure the rail to the device. 4. Repeat steps 1 through 3 for the other side. Installing the Slide Sets This task involves installation of the assembled slide sets to a four-post rack. To install the slide sets: 1. Remove the rack doors if the rack doors are still covering the rack slots where you want to mount the appliance. Tip: 2.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Figure 2-8. is an image of a slide set that has been lined up with the cage nuts and partially attached with one of the cage screws. Cage screw used to attach the slide Cage nuts Slide set mounting hole FIGURE 2-8. Tip: 2-12 Slide set partially attached to the post of 4-post cabinet An InterScan Gateway Security Appliance device occupies 1 RU (1.70in or 4.32cm, three rack holes) of vertical space in the rack. 3.
Mounting and Basic Deployment Figure 2-9. is an image of a slide set and a close-up of the slide nut and screw that can be loosened to adjust the length of the slide set. Slide adjustment nuts Slide adjustment screws FIGURE 2-9. Slide adjustment screw and nut for adjusting slide length 6. Repeat steps 2 to 4 to secure the remaining slide set on the other side of the rack. 7. Ensure that the slide sets are installed at the same level on each side of the rack.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Mounting the Appliance on the Rack This task involves installing the device on the four-post rack cabinet. Note: Because of the size and weight of the appliance, never attempt to mount the device on the rack by yourself. To mount the appliance on the rack: 2-14 1. Pull the two slides out of the rack until the release latches lock in a fully extended position. 2. Lift the device into position in front of the extended slides.
Mounting and Basic Deployment 4. Push the device, while holding the rail release open, into the rack until the front of the device is flush against the front rack posts. Rail release—allows the appliance to be slid out of cabinet Thumb screw —used to stabilize the device in a rack FIGURE 2-10. The appliance with rail attached 5. Twist the sun screws until tight to prevent the device from sliding in and out of the rack.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Basic Deployment As shown in figure 2-11, Basic deployment scenario - single segment network, on page 2-16, it is necessary to include a LAN switch, router, or hub after the appliance in the basic deployment scenario. Including a router or switch after the appliance is necessary because the appliance itself is not designed to work as a router or switch.
Mounting and Basic Deployment Multiple Segment Deployment The image below describes just one example of how the appliance can be used to protect a network with multiple segments. Internet The appliance Router Firewall Segments A, B, C FIGURE 2-12.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Deployment Notes Consider the following when planning for to deploy the InterScan appliance: • • Configure all network devices to ensure that all traffic to and from the protected network goes through the appliance. To protect an organization from network threats, position appliances at key places on your network. The appliance should be able to scan all network traffic to prevent, detect, or contain threats.
Chapter 3 Advanced Deployment Options This chapter addresses advanced deployment options. For instructions on mounting the physical device, see Mounting and Basic Deployment starting on page 2-1.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Overview This chapter provides guidance on deploying the InterScan Gateway Security Appliance in the most common network topology as well as in more advanced topologies. Note: InterScan Gateway Security Appliance is not a firewall or a router. Always deploy the appliance behind a firewall or security device that provides adequate NAT and firewall-type protection.
Advanced Deployment Options In a basic deployment of the appliance in the most common network topology, the appliance sits between the network servers and the firewall, as shown in figure 3-2: Internet Network switch or router Firewall InterScan Gateway Security Appliance LAN switch, router, or hub Mail server FTP server HTTP server Client computers in your network FIGURE 3-2.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Deployment Topologies This section discusses the following types of deployment topologies: • Single network segment • Multiple network segments Deploying in a Single Network Segment In figure 3-3 on page 3-4, the network devices all belong in one network segment. All devices, including clients have Class A IP addresses. The core switch is the clients' default gateway.
Advanced Deployment Options If the appliance is deployed between a router and core switch within the same network segment, the appliance can directly connect to the router or clients. If a client issues a request to a server, the appliance receives the client’s outgoing connection through TCP handshake. Because all devices are in the same segment, there are no problems relaying packets between network devices. The appliance passes the request to the router, which forwards it to the intended server.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide 219.219.2.19 192.168.1.254 Server 1 Core Internet switch/default gateway of the appliance 2 Default gateway of clients Legend FIGURE 3-4. Router1 192.168.1.100 192.168.1.1 InterScan Appliance Core switch 2 Problem: Without knowing the static IP routes, the appliance does not know where to forward traffic. Therefore, the appliance forwards traffic to its default gateway, which is the router.
Advanced Deployment Options 219.219.2.19 192.168.1.254 Server Internet Router1 192.168.1.100 InterScan Appliance 192.168.1.1 10.2.211.136 Core switch2 Client 1 Core switch/default gateway of the appliance 2 Default gateway of clients Legend FIGURE 3-5.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide FIGURE 3-6. You can set static routes from the Web console (Administration > IP Address Settings, Static Routes tab) Refer to Deployment Recommendations on page 3-17 for tips to help minimize issues in a multi-segment environment.
Advanced Deployment Options Advanced Deployment Scenarios In addition to the basic deployment scenario, administrators can deploy InterScan Gateway Security Appliance: • In two transparent proxy modes: • Transparent proxy mode • Fully transparent proxy mode • In a DMZ environment • In conjunction with a load-balancing device • In a single-segment environment • In a multi segment environment Note: InterScan Gateway Security Appliance cannot be deployed in a tagged VLAN topology, because the ap
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide The appliance supports two transparent proxy modes (“operation modes”): • • Transparent proxy mode Fully transparent proxy mode The major difference between transparent and fully transparent proxy modes is the “actual transparency” of the appliance with the destination server. The appliance creates an independent connection to the destination server.
Advanced Deployment Options When a client initiates a request, the request passes through the switch that is the default gateway for clients in this segment. The appliance accepts the request through the INT port, which redirects traffic to the corresponding proxy handler. After the proxy handler processes the request, the appliance delivers the packet to the destination server through the router (the default gateway of the appliance).
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Figure 3-8 below illustrates how the appliance processes traffic in fully transparent proxy mode. Source IP: 10.2.211.136 Source IP: 10.2.211.136 EXT port INT port Source IP: 10.2.211.136 proxy handlers 10.2.2.23 Server Internet Router (Default gateway of InterScan appliance) Switch Operation mode: Fully transparent proxy 10.2.211.136 Client FIGURE 3-8.
Advanced Deployment Options Because a DMZ is a network area (a subnetwork) that sits between an organization's internal network and an external network, two appliances are necessary to protect both areas. See figure 3-9 for an illustration of a deployment with two appliances deployed as mentioned above. In the illustration, the company LAN is the area with a gray border and the DMZ is the area with a red border.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Failover Deployment If deploying two InterScan appliances, you can deploy them in such a way that if the connection to one appliance is broken, the second appliance takes over the load of the first appliance. The basic steps for setting up a failover deployment are: 1. Deploy two appliances in your network (see Failover Deployment Scenario on page 3-15 2.
Advanced Deployment Options Failover Deployment Scenario To achieve such a function, deploy two InterScan appliances between two load-balancing devices, as shown in figure 3-10. Internet Network switch or router Firewall Layer 4 network switch (load balancer) #1 InterScan appliance A InterScan appliance B Layer 4 network switch (load balancer) #2 LAN switch, router, or hub Mail server FTP server HTTP server Client computers in your network FIGURE 3-10.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide WARNING! In order for this kind of “failover” to work, LAN bypass must be disabled and Link state failover must be enabled. They are both disabled by default. LAN Bypass and Link State Failover Settings In the Preconfiguration console, LAN bypass must be disabled and Link state failover must be enabled in order for a load-balancing “failover” deployment to work.
Advanced Deployment Options Deployment Recommendations Figure 3-11 below shows the recommended deployment setup for the appliance. Client Switch Proxy server Router Internet FIGURE 3-11.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Deployment Issues This release has the following limitations: • VLAN is not supported in either transparent or fully transparent proxy mode. Some network devices use VLAN to separate network layers. This use causes modified VLAN tags. The appliance cannot recognize VLAN tags. If deployed in a VLAN environment, the appliance is unable to scan any of the four protocols, and the Web console is inaccessible.
Chapter 4 Preconfiguring InterScan Gateway Security Appliance Preconfiguring InterScan™ Gateway Security Appliance requires the completion of the following tasks: • Preparing for Preconfiguration on page 4-2 • Preconfiguring the Appliance on page 4-2 • Choose a Preconfiguration Method on page 4-5 • Using the Preconfiguration Console to Set Device Settings on page 4-7 • Configuring InterScan Gateway Security Appliance Using the LCM Module on page 4-15 • Connecting to the Network on page 4-17 •
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Preparing for Preconfiguration Complete the following tasks before you preconfigure InterScan Gateway Security Appliance: • • • Determine the administrator account password for the appliance. Determine the host name for the appliance. Prepare a machine that has terminal communications software, such as HyperTerminal for Windows and a DB9 port.
Preconfiguring InterScan Gateway Security Appliance Your InterScan Gateway Security Appliance must have an IP address to operate in your network. WARNING! This appliance is a pass-through device. Therefore: 1. Do not place InterScan Gateway Security Appliance in front of the network gateway (the network firewall, for example). 2. Do not reconfigure the network firewall to use the IP address of InterScan Gateway Security Appliance as its default gateway address.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Connecting to the Network With a DHCP server, you can connect InterScan Gateway Security Appliance to your network right out of the box without having to undergo a preconfiguration process. Once connected, InterScan Gateway Security Appliance can handle various interface speeds and duplex mode network traffic. To connect the InterScan Gateway Security Appliance to your network: 1.
Preconfiguring InterScan Gateway Security Appliance Choose a Preconfiguration Method Preconfigure the appliance using one of the following methods: • Preconfiguration console (recommended) • LCM module The following table displays the differences between the LCM module and Preconfiguration Console. TABLE 4-1.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Settings Configurable from the Preconfiguration Console The Preconfiguration console is a terminal communications program that allows you to configure or view any preconfiguration setting.
Preconfiguring InterScan Gateway Security Appliance Using the Preconfiguration Console to Set Device Settings Preconfiguring the appliance using the preconfiguration console requires the completion of the following tasks: 1. Interfacing with the Preconfiguration Console on page 4-7 2. Logging On to the Preconfiguration Console on page 4-12 3. Configuring Device Settings on page 4-13 4. Setting the Interface Speed and Duplex Mode on page 4-14 5.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide 2. Open HyperTerminal (Start > Programs > Accessories > Communications > HyperTerminal). For best display results, set the terminal emulation to VT100J, as shown below. FIGURE 4-1.
Preconfiguring InterScan Gateway Security Appliance 3. Click File > New Connection. The Connection Description screen appears. Type a name for the connection profile and click OK. The Connect To screen appears: FIGURE 4-2. The HyperTerminal Connect To screen 4. In the Connect To screen, using the drop-down menu, choose the COM port that your local computer has available and that is connected to the appliance. 5. Click OK. The COM Properties screen appears.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide FIGURE 4-3. 6. Click OK. The COM Properties screen disappears and the screen is blank. 7. At the blank HyperTerminal screen, type the appliance Preconfiguration console password, or, if this is the first time you use the device, use the default password admin and press ENTER. The console accepts the password, displays the Login screen, and moves the cursor to the Login prompt.
Preconfiguring InterScan Gateway Security Appliance ************************************************** * * * IGSA 1.1.1085 en Pre-Configuration * * * ************************************************** Password: Log On FIGURE 4-4. 8. The appliance Preconfiguration console login screen Press ENTER again. The appliance Preconfiguration console Main Menu appears, as shown below.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Logging On to the Preconfiguration Console After preparing the terminal application, you are ready to use the preconfiguration console. To access the preconfiguration console: 1. Power on the appliance (approximately 1-2 minutes) by completing the following tasks: a. Connect the power cord to the DC power receptacle. b. Connect the power cord to an electrical outlet. c. Push the power switch to turn on the device.
Preconfiguring InterScan Gateway Security Appliance Preconfiguration Console Controls • To change fields, press the UP ARROW, DOWN ARROW, and TAB keys to jump from field to field. • To change field values, press the SPACEBAR to navigate through a list of predefined values. • To navigate between screens, press the ENTER key. Configuring Device Settings Immediately after logging on to the preconfiguration console for the first time, change the default password to a secure password.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Tip: Host names may be up to 63 alphanumeric characters (spaces not allowed). Trend Micro recommends a unique descriptive host name to represent and identify the InterScan Gateway Security Appliance device. WARNING! If there is a NAT device in your environment, Trend Micro recommends assigning a static IP address to InterScan appliance.
Preconfiguring InterScan Gateway Security Appliance Exiting the Preconfiguration Console Log off from the preconfiguration console after completing preconfiguration or modifying settings (for example, device settings) that require logging off for changes to take effect. To log off from the preconfiguration console: 1. On the Main Menu of the preconfiguration console, select Log off with saving or Log off without saving. A confirmation message appears. 2. Select OK to log off.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide To configure the appliance IP network settings through the LCM module: 1. Press Enter. The Main Menu appears. 2. Use the down arrow to select Configure. 3. Press Enter and a prompt displays asking if you want to change settings. Tip: 4. The LCM module times out in three (3) minutes if there is no activity initiated using the control panel. To continue, ensure that a asterisk (*) is next to Yes.
Preconfiguring InterScan Gateway Security Appliance Connecting to the Network Note: Be sure to preconfigure the appliance before attempting to connect to the network. To connect the appliance to your network: Note: After preconfiguration, switch off the device before connecting it to the network. 1. Connect one end of the Ethernet cable to the INT port and the other end to the segment of the network that the appliance will protect (the Protected Network). 2.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Obtaining the Activation Code The Trend Micro sales team or sales representative provides the Registration Key. Use the Registration Key to obtain a full version Activation Code. To obtain the Activation Code: 1. Go to the Trend Micro Online Registration Web site (https://olr.trendmicro.com/registration). The Online Registration page of the Trend Micro Web site opens. 2.
Preconfiguring InterScan Gateway Security Appliance Configuring InterScan Gateway Security Appliance After preconfiguring the appliance, you are ready to configure the device and commence network protection. Configure the device using the appliance Web console.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Activating the Appliance The Trend Micro sales team or sales representative provides the Registration Key. Use the Registration Key to obtain a full version Activation Code. To obtain the Activation Code: 4-20 1. Visit the Trend Micro Online Registration Web site. (https://olr.trendmicro.com/registration). The Online Registration page of the Trend Micro Web site opens. 2.
Preconfiguring InterScan Gateway Security Appliance After the registration is complete, Trend Micro emails you an Activation Code, which you can then use to activate InterScan Gateway Security Appliance.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide 4-22
Chapter 5 Troubleshooting and FAQs This chapter addresses troubleshooting issues that may arise during the InterScan™ Gateway Security Appliance preconfiguration process.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Troubleshooting Why Is the Summary Screen not Logging Any Events? Why Aren’t Any Logs Being Created? Cause—The appliance requires hard disk initialization and reformatting.
Troubleshooting and FAQs FIGURE 5-1. 7. Press any key. The appliance formats the hard disk and displays the following screen when the formatting is complete: FIGURE 5-2. 8. Preconfiguration console output screen when initializing a hard disk that is not formatted or is improperly installed (the second part of the re-initialization process) Preconfiguration console output screen when the appliance has finished formatting the hard disk Press any key. The appliance reboots.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide I Can See the Console Output on the HyperTerminal but Some Keystrokes Do Not Work Cause—The HyperTerminal settings are incorrect or need refreshing. Solution—Change the HyperTerminal emulation setting to something other than VT100J and then change it back. If the problem persists, you can close HyperTerminal and connect again.
Troubleshooting and FAQs The following table describes the different LAN bypass triggers and the associated LED indicator status. TABLE 5-1. LED indicator status Trigger LED 1 Status LED 2 Status Software problems or system rebooting Yellow OFF Power cord is plugged in but device is shutdown Yellow OFF Power cord unplugged OFF OFF LAN bypass is disabled by default. You can enable the feature through the InterScan Gateway Security Appliance Preconfiguration console.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Enabling or Disabling LAN Bypass and Link State Failover Accessing the Preconfiguration Console Follow the procedures below to access the appliance Preconfiguration console. To enable or disable LAN bypass and Link state failover: 1. Access the Preconfiguration console as described in Using the Preconfiguration Console to Set Device Settings on page 4-7. 2. Select option 3, Interface Settings.
Troubleshooting and FAQs 8. Select option 8, Log Off with Saving and press ENTER. The system saves your settings and logs you off from the Preconfiguration console. Frequently Asked Questions Review these frequently asked questions for insight into issues that many users ask about. What Is the Purpose of the “ID” LED? The ID LED helps users identify a specific InterScan Gateway Security Appliance in a rack containing many devices. There are two ID LEDs.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Can I Ping InterScan Gateway Security Appliance? Yes, InterScan Gateway Security Appliance accepts ping packets. Why Is Traffic Not Passing Through the Device When the Power Is Off? It is possible that the DC OFF LAN Bypass setting in the BIOS is disabled. To enable DC OFF LAN Bypass, prepare a computer with terminal communications software such as HyperTerminal. Connect the computer to the device.
Troubleshooting and FAQs Contacting Technical Support Trend Micro has sales and corporate offices in many cities around the globe. For global contact information, visit the Trend Micro Worldwide site: www.trendmicro.com/en/about/contact/overview.htm Note: The information on this Web site is subject to change without notice. To contact Trend Micro Technical Support, visit the following URL: http://esupport.trendmicro.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide 5-10
Appendix Appendix A Specifications and Environment This appendix includes the following topics: • Hardware Specifications on page A-2 • Dimensions and Weight on page A-2 • Power Requirements and Environment on page A-3 A-1
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Hardware Specifications InterScan Gateway Security Appliance uses the following components: TABLE A-1. Hardware specifications Component Specification CPU LGA 775 Pentium 3.
Specifications and Environment Power Requirements and Environment The following power requirements and environmental specifications apply to InterScan Gateway Security Appliance:: TABLE A-1. Appliance power requirements and environmental specifications Element Specification AC input voltage 90 to 264VAC (100 to 240 nominal) AC input current (90VAC) 8.0A AC input current (180VAC) 4.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide A-4
Index Index A Activation Code obtaining 4-21 Appliance deployment 2-1 Attaching the Slide Rails 2-8 Auto-switching/sensing capability 5-7 B Back Panel description 1-8 Back panel 1-8 AC power receptacle 1-9 elements 1-9 fan vent 1-9 port indicator status 1-10 port indicators 1-9 power switch 1-9 UID LED and UID button 1-9 USB ports 1-9 Bezel front panel 1-5 BIOS DC OFF LAN Bypass Configuration 5-8 C Configuring Device Settings with LCD Module 4-17 with preconfiguration console 4-15 Connecting to the Netwo
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Device connectivity ping 4-21 testing 4-21 dimensions and weight A-2 Dimensions and weight A-2 DMZ environment, deploying in 3-13 Documentation feedback 1-2 E Ethernet cable 5-7 EXT port 4-4 F Factory default settings 5-7 Failopen Considerations (LAN Bypass) 4-2 FAQs Can I ping the appliance? 5-8 Can I use the USB ports to transfer files? 5-7 Is a crossover network cable needed? 5-7 RESET Pinhole 5-7 What is the purpose of the “
Index O R Obtaining Activation Code 4-21 Obtaining Registration Key 4-21 Obtaining the Activation Code 4-20 Operation modes fully transparent 3-12 transparent proxy 3-10 Rack Kit Contents 2-6 Reference Figures fig. C-02. The HyperTerminal Connect To screen 4-10 fig. C-03. HyperTerminal COM Properties screen 4-11 fig. C-04. The appliance Preconfiguration console login screen 4-12 fig. C-05.
Trend Micro™ InterScan™ Gateway Security Appliance M-Series Deployment Guide Topology most common network topology 3-2 typical network topology before deploying InterScan 3-2 Transparent proxy mode 3-10 Troubleshooting Figures I–4 fig. 14-01. Preconfiguration console output screen when initializing a hard disk that is not formatted or is improperly installed (the second part of the re-initialization process) 5-3 fig. 14-02.
