Trend Micro Network VirusWall Enforcer 1200 User manual

Network VirusWallTM Enforcer 1200
TREND MICROTM
Getting Started Guide
Item Code: NVEM22854/60915
TREND MICRO INCORPORATED
10101 North De Anza Blvd. Cupertino, CA., 95124, USA
Tel:[phone] 228-5651 Fax:[phone] [e-mail]

Trend Micro Incorporated reserves the right to make changes to this document and to
the products described herein without notice. Before installing and using the
software, please review the readme files, release notes, and the latest version of the
applicable user documentation, which are available from the Trend Micro Web site
at:
http://www.trendmicro.com/download
Trend Micro, the Trend Micro t-ball logo, VirusWall, Trend Micro Control Manager,
Trend Micro Damage Cleanup Services, Trend Micro Outbreak Prevention Services,
and TVCS are trademarks or registered trademarks of Trend Micro, Incorporated.
All other product or company names may be trademarks or registered trademarks of
their owners.
Copyright© 2003-2007 Trend Micro Incorporated. All rights reserved.
Document Part No. NVEM1267/60313
Release Date: January 2007
Protected by U.S. Patent No. 5,623,600 and pending patents.

The user documentation for Trend Micro Network Virus Wall 1200 is intended to
introduce the main features of the software and installation instructions for your
production environment. You should read through it prior to installing or using the
software.
Detailed information about how to use specific features within the software are
available in the online help file and the online Knowledge Base at Trend Micro’s
Web site.
Trend Micro is always seeking to improve its documentation. Your feedback is
always welcome. Please evaluate this documentation on the following site:
http://www.trendmicro.com/download/documentation/rating.asp

i
Contents
Preface
Network VirusWall Enforcer 1200 Documentation .......................... P-2
About This Getting Started Guide ..................................................... P-3
Audience ............................................................................................ P-4
Document Conventions...................................................................... P-4
Chapter 1: Getting Started
Package Contents ............................................................................... 1-2
Network VirusWall Enforcer 1200 Front Panel ............................ 1-4
LED Indicators ............................................................................ 1-4
Port Indicators ............................................................................. 1-5
Network VirusWall Enforcer 1200 Back Panel ............................. 1-6
Dimensions and Weight ................................................................. 1-7
Power Requirements and Environmental Specifications ............... 1-7
Chapter 2: Introducing Trend Micro™ Network VirusWall™
Enforcer 1200
Network VirusWall Enforcer 1200 .................................................... 2-2
Introducing Network VirusWall Enforcer 1200-specific Terms ....... 2-3
Trend Micro Network VirusWall Enforcer 1200 Web Console ........ 2-4
Understanding Network VirusWall Enforcer Ports ........................... 2-5
Deployment Overview ....................................................................... 2-5

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
ii
Chapter 3: Deploying Network VirusWall™ Enforcer 1200
Planning for Deployment ...................................................................3-2
Deployment Overview ...................................................................3-2
Phase 1: Plan the Deployment .....................................................3-3
Phase 2: Perform Preconfiguration .............................................3-3
Phase 3: Manage Network VirusWall Enforcer 1200 Devices ...3-3
Deployment Notes ..........................................................................3-4
Identifying What to Protect ................................................................3-5
Remote Access Endpoints ..............................................................3-5
Guest Endpoints .............................................................................3-9
Key Network Segments/Important Network Assets ......................3-9
Dual-switch VLAN Environment ................................................3-11
Single-switch VLAN Environment ..............................................3-14
Planning for Network Traffic ...........................................................3-15
Determining the Number of Devices to Deploy ..........................3-15
Conducting a Pilot Deployment .......................................................3-16
Choosing a Pilot Site ....................................................................3-16
Creating a Contingency Plan ........................................................3-16
Deploying and Evaluating your Pilot ...........................................3-16
Redefining Your Deployment Strategy ............................................3-17
Deploying Network VirusWall Enforcer 1200 .................................3-17
A Basic Deployment Scenario .....................................................3-18
Failopen Deployment .......................................................................3-18
Chapter 4: Preparing for Preconfiguration
Preparing for Preconfiguration ...........................................................4-2
Network VirusWall Enforcer 1200 Initial Tasks ................................4-2
Chapter 5: Preconfiguring Network VirusWall Enforcer 1200
Understanding Preconfiguration .........................................................5-2
Choosing the Preconfiguration Method ..............................................5-3
Using the Preconfiguration Console ..............................................5-3
Using the LCD Module ..................................................................5-3
Performing Preconfiguration Using the Preconfiguration Console ....5-5
Preparing the Preconfiguration Console ........................................5-6
Logging on the Preconfiguration Console .....................................5-7
Configuring Device Settings ........................................................5-11

Contents
iii
Setting the Interface Speed and Duplex Mode ............................ 5-14
Logging off the Preconfiguration Console .................................. 5-15
Performing Preconfiguration Using the LCD Module ..................... 5-16
Connecting to the Network .............................................................. 5-18
Chapter 6: Configuring Network VirusWall Enforcer 1200
Configuring PEAgent Settings for Manual Deployment ................... 6-2
Updating Components Manually ....................................................... 6-7
Chapter 7: Troubleshooting Preconfiguration
Device Issues ...................................................................................... 7-2
Contacting Technical Support ............................................................ 7-3
Index

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
iv

P-1
Preface
Preface
Welcome to the Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started
Guide. This book contains basic information about the tasks you need to perform to
deploy the device. It is intended for novice and advanced users of Network VirusWall
who want to plan, deploy, and preconfigure Network VirusWall Enforcer 1200.
This preface discusses the following topics:
•Network VirusWall Enforcer 1200 Documentation on page 2
•About This Getting Started Guide on page 3
•Audience on page 4
•Document Conventions on page 4

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
P-2
Network VirusWall Enforcer 1200
Documentation
The Network VirusWall Enforcer 1200 documentation consists of the following:
• Online Help—Web-based documentation that is accessible from the device Web
console
The Online Help contains explanations about device components and features.
• Upgrade Guide (UG)—PDF documentation that is accessible from the Solutions
CD for Network VirusWall Enforcer 1200 or downloadable from the Trend
Micro Web site.
The UG contains explanations about upgrading from previous Network
VirusWall 1200 versions to Network VirusWall Enforcer 1200.
• Getting Started Guide (GSG)—PDF documentation that is accessible from the
Solutions CD for Network VirusWall Enforcer 1200 or downloadable from the
Trend Micro Web site
This GSG contains instructions on deploying the device, a task that includes
planning, testing, and preconfiguration. See About This Getting Started Guide for
chapters available in this book.
If you are planning a large-scale deployment or have a complex network
architecture and need more details about product architecture, refer to the
Network VirusWall Enforcer 1200 Administrator’s Guide.
• Administrator’s Guide (AG)—PDF documentation that is accessible from the
Solutions CD for Network VirusWall Enforcer 1200 or downloadable from the
Trend Micro Web site
The AG contains explanation of device architecture and instructions on how to
configure and administer the device using the applicable management tools.
Topics include Frequently Asked Questions (FAQs), Troubleshooting, and
Glossary chapters.
Tip: Trend Micro recommends checking the corresponding link from the Update Center
(http://www.trendmicro.com/download) for updates to the device
documentation and program file.

Preface
P-3
About This Getting Started Guide
The Network VirusWall Enforcer 1200 Getting Started Guide discusses the following
topics:
•Introducing Trend Micro™ Network VirusWall™ Enforcer 1200—an overview
of the device and its components
•Getting Started—details of the actual device and its specifications, including
instructions for mounting and powering on the device
•Deploying Network VirusWall™ Enforcer 1200—recommendations to help you
plan for the deployment of one or more devices
•Preconfiguring Network VirusWall Enforcer 1200—step-by-step instructions on
how to install Trend Micro Control Manager and the necessary patches, including
considerations and procedures on how to perform preconfiguration
•Troubleshooting Preconfiguration—troubleshooting tips for issues encountered
during preconfiguration

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
P-4
Audience
The Network VirusWall Enforcer 1200 documentation assumes a basic knowledge of
security systems, including:
• Antivirus and content security protection
• Network concepts (such as IP address, netmask, topology, LAN settings)
• Various network topologies
• Network devices and their administration
• Network configuration (such as the use of VLAN, SNMP)
Document Conventions
To help you locate and interpret information easily, the documentation uses the
following conventions.
CONVENTION DESCRIPTION
ALL CAPITALS Acronyms, abbreviations, and names of certain com-
mands and keys on the keyboard
Bold Menus and menu commands, command buttons,
tabs, options, and tasks
Italics References to other documentation
Monospace Examples, sample command lines, program code,
Web URL, file name, and program output
Note: Configuration notes
Tip: Recommendations
WA R N I N G ! Reminders on actions or configurations that should be
avoided
TABLE 1. Conventions used in the documentation

1-1
Chapter 1
Getting Started
This chapter guides you through setting up and powering on a Network VirusWall™
Enforcer device.
This chapter contains the following topics:
•Package Contents on page 1-2
After completing the procedures in this chapter, proceed by:
•Conducting a Pilot Deployment on page 3-16
•Deploying Network VirusWall Enforcer 1200 on page 3-17
•Redefining Your Deployment Strategy on page 3-17
•Performing Preconfiguration Using the Preconfiguration Console on page 5-5

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
1-2
Package Contents
Figure 1-1 illustrates the package contents.
FIGURE 1-1. The package contents
Tip: Refer to Table 1-1 to check whether the package is complete. If any of the
items are missing, please contact Trend Micro support (See Contacting
Technical Support on page 7-3).
Ethernet Cable
(RJ-45 Crossover)
Power Cord
Network VirusWall 1200
Console Cable (RS-232) Rack Ears Document Set

Getting Started
1-3
Table 1-1 specifies each item:
QUANTITY ITEM DESCRIPTION
1 unit Network VirusWall
Enforcer 1200 The device.
1 piece Power cord Supplies power to the device (length is 79 in/200 cm).
1 piece Ethernet cable (RJ-45
crossover cable)
Connects a device to a computer used during Rescue
Mode (length is 39 in/100 cm).
1 piece Console cable (RS-232) Connects the device to the computer used during
preconfiguration (length is 79 in/200 cm).
1 set Rack Ears Mounts a Network VirusWall Enforcer 1200 to a standard
19 in rack cabinet.
1 CD Trend Micro Solutions CD
for Network VirusWall
Enforcer 1200
Contains patches, hot fix installers, tools, and
documentation.
The PDF documentation includes:
•Trend Micro Network VirusWall Enforcer 1200 Upgrade
Guide
•Trend Micro Network VirusWall Enforcer 1200Getting
Started Guide
•Trend Micro Network VirusWall Enforcer 1200
Administrator’s Guide
Note: Refer to Troubleshooting in the Administrator’s
Guide for instructions on how to use these tools.
2 books
1 sheet
Trend Micro Network
VirusWall Enforcer 1200
Upgrade Guide
Trend Network VirusWall
Enforcer 1200 Getting
Started Guide
Trend Micro Network
VirusWall Enforcer 1200
Safety Sheet
Printed Trend Micro Network VirusWall Enforcer 1200
Upgrade Guide, Trend Micro Network VirusWall Enforcer
1200 Getting Started Guide, and Safety Sheet.
TABLE 1-1. Network VirusWall Enforcer 1200 package contents

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
1-4
Network VirusWall Enforcer 1200 Front Panel
The front panel of Network VirusWall Enforcer 1200 contains a Liquid Crystal
Display (LCD), panel, ports, and LEDs.
FIGURE 1-2. Network VirusWall Enforcer 1200 front panel
The following table describes each front panel element:
TABLE 1-2. Front panel description
Note: The LCD and Control Panel elements are collectively referred to as the LCD
module (or LCM console).
LED Indicators
Network VirusWall Enforcer 1200 has three light-emitting diodes (LEDs) that
indicate the SYSTEM, POLICY, and OUTBREAK status.
ELEMENT DESCRIPTION
Liquid Crystal Display
(LCD) A 2.6 in x 0.6 in (65 mm x 16 mm) dot display LCD that is capable of
displaying messages in 2 rows of 16 characters each.
Panel 5-button control panel that provides LCD navigation.
RESET Button Resets the device.
Ports 1, 2 The Network VirusWall Enforcer 1200 documentation refers to each
port by its number (for example, port 1 or 2).
Management Port Connect to this port to access the Network VirusWall Enforcer
Preconfiguration console. This port can also be used as a mirror
port.
LCD module and panel
CONSOLE
Port 1 Port 2
Management/Mirror
port
LEDs
RESET

Getting Started
1-5
FIGURE 1-3. SYSTEM, POLICY, and OUTBREAK LED indicators
The following table shows the possible behavior for each LED element:
Port Indicators
Network VirusWall Enforcer 1200 has two user-configurable copper-based Ethernet
ports. Each Ethernet port has an indicator that allows you to determine the port’s
current state. Figure 1-4 illustrates the indicators of a port.
LED STATE DESCRIPTION
SYSTEM Red– flashing Device is booting.
Red– steady Power-On Self-Test (POST) error.
Green– steady Network VirusWall Enforcer 1200 program file
(firmware) is ready.
POLICY Green– flashing Network Scan, or Policy Enforcement is enabled
Off (no color) No multiple policy scan.
OUTBREAK Green– steady Outbreak Prevention Services (OPS) is disabled
when Control Manager manages Network
VirusWall Enforcer 1200.
Red– flashing OPS is enabled.
TABLE 1-3. Network VirusWall Enforcer 1200 LED indicators

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
1-6
FIGURE 1-4. Port indicators 1 and 2
Table 1-4 lists the description for each port component.
Table 1-5 shows the possible states for each Network VirusWall Enforcer 1200 port
based on the speed and duplex mode settings.
Network VirusWall Enforcer 1200 Back Panel
The back panel of Network VirusWall Enforcer 1200 contains a power receptacle,
power switch, and fan vents.
INDICATOR
NUMBER NAME STATE DESCRIPTION
1 ACT / BYPASS
Status LED
No LED status LAN Bypass LED
2 10 Mbps / 100
Mbps
LINK Status LED
Green– steady 10 Mbps LED
100 Mbps LED
TABLE 1-4. Port indicator description
PORT STATE DESCRIPTION
Link Indicator 1– orange, flashing Network packet transmission/receiving
active.
Indicator 2– green, steady Port speed is 10 Mbps or 100 Mbps.
TABLE 1-5. Network VirusWall Enforcer 1200 port indicators
Ind. 1 Ind. 2

Getting Started
1-7
FIGURE 1-5. Network VirusWall Enforcer 1200 back panel
The following table describes each back panel element:
TABLE 1-6. Back panel description
Dimensions and Weight
The following specifications apply to Network VirusWall Enforcer 1200:
Power Requirements and Environmental Specifications
The following settings apply to Network VirusWall Enforcer 1200:
ELEMENT DESCRIPTION
AC Power
Receptacle
Connects to the power outlet and the device using the power
cord (included in the package, see Package Contents on page
1-2).
Power Switch Powers the device on and off.
Fan Vent (Intake) Intake cooling vent for the device.
Fan Vent (Exhaust) Exhaust cooling vent for the device.
ELEMENT SPECIFICATION
AC input voltage 90 to 264 VAC (115/230 nominal)
AC input current (90 VAC) 4.0 A
AC input current (180 VAC) 2.0 A
TABLE 1-7. Network VirusWall Enforcer 1200 power
requirements and environmental specifications
Power switch
Fan vent (intake)
AC power receptacle
Fan vent (exhaust)

Trend Micro™ Network VirusWall™ Enforcer 1200 Getting Started Guide
1-8
Frequency 47 to 63 Hz (50/60 nominal)
NORMAL OPERATING AMBIENT TEMPERATURE (AT SEA LEVEL)
Minimum (operating and idle) 41 °F (5 °C)
Maximum (operating, power supply on) 113 °F (45 °C)
Maximum (idle, AC power supply on,
main power supply off)
104 °F (40 °C)
Maximum rate of change 50 °F per hour (10 °C per hour)
STORAGE TEMPERATURE (AT SEA LEVEL)
Minimum -40 °F (-40 °C)
Maximum 158 °F (70 °C)
Maximum rate of change 68 °F per hour (20 °C per hour)
HUMIDITY
Maximum (operating) 80% non-condensing
Maximum (non-operating) 95% non-condensing
ELEMENT SPECIFICATION
TABLE 1-7. Network VirusWall Enforcer 1200 power
requirements and environmental specifications