Trend Micro viruswall enforcer 1500i User manual

Trend Micro Incorporated reserves the right to make changes to this document and to
the products described herein without notice. Before installing and using the product,
please review the readme files, release notes, and the latest version of the applicable user
documentation, which are available from the Trend Micro website at:
docs.trendmicro.com
Trend Micro, the Trend Micro t-ball logo, ActiveUpdate, OfficeScan, Control Manager,
and Network VirusWall are trademarks or registered trademarks of Trend Micro,
Incorporated. All other product or company names may be trademarks or registered
trademarks of their owners.
Copyright © 2003-2013. Trend Micro Incorporated. All rights reserved.
Document part no. NVEM05897/130315
Release date: April 2013
Product name: Trend Micro™ Network VirusWall™ Enforcer 1500i
Software version: 3.5
Protected by US patent no. 5,623,600

The user documentation for Network VirusWall Enforcer is intended to introduce the
main features of the product and installation instructions for your production
environment. Read through it prior to installing or using the product.
Detailed information about how to use specific features within the product are available
in the Online Help and the Knowledge Base at the Trend Micro website.
Trend Micro is always seeking to improve its documentation. Your feedback is always
welcome. Please evaluate this documentation on the following site:
http://www.trendmicro.com/download/documentation/rating.asp

iii
Contents
Preface
About this Installment and Deployment Guide .........................................viii
Content Overview .......................................................................................viii
Document Set .....................................................................................................ix
Documentation and Software Updates .....................................................ix
Audience ...............................................................................................................x
Device and Software Version .......................................................................x
Document Conventions .....................................................................................x
Chapter 1: Introducing Network VirusWall Enforcer
Network VirusWall Enforcer Overview ..................................................... 1-2
Key Concepts .................................................................................................. 1-3
Technical and Environmental Specifications ............................................. 1-4
Chapter 2: Getting Started
Package Contents ............................................................................................ 2-2
Front Panel ...................................................................................................... 2-4
Installing the Bezel ..................................................................................... 2-7
Back Panel ........................................................................................................ 2-9
Device Ports .................................................................................................. 2-12
Port Functions .......................................................................................... 2-12
Data Port Adapter .................................................................................... 2-14

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
iv
Network Port Indicators .........................................................................2-14
Indicators on Onboard Ports ............................................................2-14
Indicators on the Copper Expansion Cards ....................................2-15
Installing the Device .....................................................................................2-15
Chapter 3: Deploying Network VirusWall Enforcer
Planning for Deployment ...............................................................................3-2
Deployment Overview ..............................................................................3-2
Phase 1: Plan the Deployment ............................................................3-2
Phase 2: Perform Preconfiguration ....................................................3-3
Phase 3: Manage Devices .....................................................................3-3
Deployment Notes .....................................................................................3-3
Identifying What to Protect ...........................................................................3-4
Remote Access Endpoints ........................................................................3-5
Guest Endpoints ........................................................................................3-8
Key Segments and Critical Assets ............................................................3-9
Dual-Switch VLAN Environment .........................................................3-10
Single-Switch VLAN Environment .......................................................3-12
Networks with IPv6 Addresses ..............................................................3-13
IPv6 Limitations ..................................................................................3-13
Pure IPv6 Environments ....................................................................3-14
Dual-Stack and Mixed Environments ..............................................3-14
Planning for Network Traffic ......................................................................3-15
Determining the Number of Devices to Deploy ................................3-15
Fault Tolerance ..............................................................................................3-15
Failopen .....................................................................................................3-16
Failopen Considerations .....................................................................3-16
Conducting a Pilot Deployment .................................................................3-17
Choosing a Pilot Site ................................................................................3-17
Creating a Contingency Plan ...................................................................3-18
Deploying and Evaluating your Pilot ....................................................3-18
Redefining Your Deployment Strategy ......................................................3-18
Basic Deployment Scenario .........................................................................3-18

Contents
v
Chapter 4: Preconfiguring Network VirusWall Enforcer
Before Preconfiguration ................................................................................. 4-2
Verifying Network Support ...................................................................... 4-2
Preparing for Preconfiguration ................................................................ 4-2
Understanding Preconfiguration .................................................................. 4-3
The Preconfiguration Console ...................................................................... 4-3
Performing Preconfiguration ........................................................................ 4-3
Logging on the Preconfiguration Console ............................................. 4-4
Configuring Device Settings ..................................................................... 4-6
Enabling Ports and Selecting Port Functions ........................................ 4-7
Setting the Interface Speed and Duplex Mode ..................................... 4-9
Connecting to the Network ........................................................................ 4-10
Configuring Network VirusWall Enforcer ............................................... 4-10
Chapter 5: Troubleshooting and Technical Support
Device Issues ................................................................................................... 5-2
Getting Technical Support ............................................................................ 5-3
Before Contacting Technical Support .................................................... 5-3
Contacting Technical Support ................................................................. 5-3
Index

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
vi

vii
Preface
Preface
Welcome to the Trend Micro™ Network VirusWall™ Enforcer Installment and
Deployment Guide. This book contains basic information about the tasks you need to
perform to deploy the device. It is intended for novice and advanced users of who want
to plan, deploy, and preconfigure Network VirusWall Enforcer.
This preface discusses the following topics:
•About this Installment and Deployment Guide on page viii
•Document Set on page ix
•Audience on page x
•Document Conventions on page x

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
viii
About this Installment and Deployment Guide
This document contains detailed information about getting started with Network
VirusWall Enforcer. It provides an overview of the device and how to install it. It also
covers initial configuration and deployment to help you prepare the device for use in
protecting your network.
Content Overview
The Installment and Deployment Guide provides the following information.
TABLE P-1. Document contents
Introducing Network
VirusWall Enforcer on
page 1-1
An overview of the device, its components, and its
technical specifications
Getting Started on page
2-1
Details of the actual device and its specifications,
including instructions for mounting and powering on
the device
Deploying Network
VirusWall Enforcer on
page 3-1
Recommendations to help you plan for the deploy-
ment of one or more devices
Preconfiguring Network
VirusWall Enforcer on
page 4-1
Considerations and procedures on how to perform
initial configuration (or preconfiguration)
Troubleshooting and Tech-
nical Support on page
5-1
Troubleshooting tips for issues encountered during
preconfiguration

Preface
ix
Document Set
The following documents are provided with your product.
Documentation and Software Updates
For the latest documentation and software updates, visit the Trend Micro Download
Center at:
http://downloadcenter.trendmicro.com/
TABLE P-2. Product documentation
DOCUMENT FORMAT LOCATION COVERAGE
Installation and
Deployment
Guide
PDF •USB flash drive
•Trend Micro
Download
Center
Guides you through device
installation, deployment,
and initial configuration
Administra-
tor’s Guide
PDF •USB flash drive
•Trend Micro
Download
Center
Explains features and
guides your through man-
aging policies, administra-
tive tasks, and
troubleshooting
Quick Start
Guide
PDF
and
print
•USB flash drive
•Trend Micro
Download
Center
•Product package
Provides an overview of
the device and initial tasks
Online Help Web
pages
•Web console Explains options on the
web console and relevant
tasks
Readme Text •USB flash drive
•Trend Micro
Download
Center
Provides late-breaking
news and software build
information

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
x
Audience
This Installment and Deployment Guide is targeted at network administrators who will
deploy the device. Network VirusWall Enforcer documentation assumes that readers
have networking knowledge and understand antivirus and content security concepts.
Device and Software Version
This Installment and Deployment Guide is released for administrators that are using the
following device and software version.
Document Conventions
Network VirusWall Enforcer documentation uses the following conventions.
TABLE P-3. Target device and software
PRODUCT
INFORMATION TARGET
Device Network VirusWall Enforcer 1500i
Hardware series R210 Series
Software version 3.5
TABLE P-4. Conventions used in the documentation
CONVENTION DESCRIPTION
ALL CAPITALS Acronyms, abbreviations, and names of certain
commands and keys on the keyboard
Bold References to user interface items, including
menus, buttons, tabs, and other labels
Italics References to other documentation

Preface
xi
Monospace Actual text, typed commands, file names, and pro-
gram output
Note:
Important information
Tip:
Recommendations
WARNING!
Critical information
TABLE P-4. Conventions used in the documentation (Continued)
CONVENTION DESCRIPTION

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
xii

1-1
Chapter 1
Introducing Network VirusWall
Enforcer
This chapter introduces Trend Micro™ Network VirusWall™ Enforcer and provides an
overview of important concepts and features.
This chapter discusses the following topics:
•Network VirusWall Enforcer Overview on page 1-2
•Key Concepts on page 1-3
•Technical and Environmental Specifications on page 1-4

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
1-2
Network VirusWall Enforcer Overview
Network VirusWall Enforcer is an outbreak prevention appliance that allows
organizations to enforce security policies at the network layer. Network VirusWall
Enforcer scans network traffic to help ensure that it is free of fast-spreading network
viruses. It helps reduce the chance of severe security compromise by preventing ARP
spoofing attacks.
Network VirusWall Enforcer can identify infected computers and deliver cleanup
services to these endpoints. Because it works at the network layer, it can effectively
quarantine and isolate actual and potential infection sources. It can address infected
endpoints, endpoints with software vulnerabilities or those without adequate malware
protection, and endpoints that violate network usage policies.
Network VirusWall Enforcer helps organizations take precise action on security policy
violations to proactively detect, contain, and even eliminate malware outbreaks. With
Network VirusWall Enforcer in the network, organizations can significantly reduce
network downtime due to rapidly spreading malware and reduce the cost of dealing with
the malware at individual endpoints.
Figure 1-1 depicts a how Network VirusWall Enforcer can be deployed to protect a
network.
FIGURE 1-1. Basic Deployment
Web
Console
Protected Segment
Switch
Network VirusWall Enforcer
Router

Introducing Network VirusWall Enforcer
1-3
Key Concepts
Before proceeding to the succeeding sections of this document, take note of the
following concepts.
TABLE 1-1. Key Concepts in this Document
CONCEPT DESCRIPTION
Management port Dedicated for management purposes. You can specify
only one management port.
Mirror port Sends all traffic passing the device to a computer to
capture all data. The data can then be used for debug-
ging purposes. You can specify one mirror port. Using
this port type can impact performance.
Regular ports Carries analyzed traffic to and from segments. You can
specify multiple regular ports.
Regular ports are also referred to as "bridge" ports.
Failopen A fault-tolerance solution also known as "LAN bypass"
that allows the Network VirusWall Enforcer device to
continue to pass traffic even if a software or hardware
failure occurs within the device.
Preconfiguration
console
The console used to preconfigure a Network VirusWall
Enforcer device.
The preconfiguration process involves port configura-
tion and setup of the management IP address to enable
access to the web console.
Web console The browser-based administrative console for defining
policies and managing the device.

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
1-4
Technical and Environmental Specifications
The following table lists the technical specifications of Network VirusWall Enforcer:
TABLE 1-2. Technical specifications
SPECIFICATION DETAILS
Base unit Dell™ PowerEdge™ R210 Rack Mount Server
Processor Intel Celeron™ processor G1101 (2.26GHz 2MB
cache 1066MHz) x 1
Memory 1GB Memory (1x1GB), 1066MHz, Single Rank
UDIMMs
Onboard NIC Two RJ-45 10/100/1000 Mbps Ethernet
Network adapter
(expansion slot)
Silicom™ PEG2BPi-SD-RoHS (Dual Port Copper
Gigabit Ethernet PCI Express Bypass Server
Adapter)
Serial port 9-pin, DTE, 16550-compatible
eSATA One 7-pin connector
USB 4 (2 in front and 2 in back) 4-pin, USB 2.0-compliant
Video 15-pin VGA
Wattage 250W
Voltage 100–240VAC, 50/60Hz, 4-2 A
Heat dissipation 2446.5BTU/hr maximum
Maximum inrush cur-
rent
Under typical line conditions and over the entire
device ambient operating range, the inrush current
may reach 55A per power supply for 10ms or less

Introducing Network VirusWall Enforcer
1-5
The following table lists the environmental specifications of Network VirusWall
Enforcer:
TABLE 1-3. Environmental specifications
SPECIFICATION DETAILS
Temperature
(operating)
10° to 35°C (50° to 95°F) with a maximum temperature
gradation of 10°C per hour
For altitudes above 2950 feet, the maximum operating
temperature is de-rated 1°F/550ft.
Temperature
(storage)
-40° to 65°C (-40° to 149°F) with a maximum temperature
gradation of 20°C per hour
Relative humidity
(operating)
20% to 80% (non-condensing) with a maximum humidity
gradation of 10% per hour
Relative humidity
(storage)
5% to 95% (non-condensing) with a maximum humidity
gradation of 10% per hour
Maximum vibra-
tion (operating)
0.26Gms from 5–350Hz for 5 minutes in operational orien-
tations
Maximum vibra-
tion (storage)
1.54Gms from 10–250Hz for 10 minutes in all orientations
Maximum shock
(operating)
One shock pulse in the positive z axis (one pulse on each
side of the system) of 31G for 2.6ms in the operational ori-
entation
Maximum shock
(storage)
Six consecutively executed shock pulses in the positive
and negative x, y, and z axes (one pulse on each side of
the system) of 71G for up to 2ms
Six consecutively executed shock pulses in the positive
and negative x, y, and z axes (one pulse on each side of
the system) of 32G faired square wave pulse with velocity
change at 270 inches/second (686 centimeters/second)

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
1-6
Altitude (operat-
ing)
-16 to 3048 m (-50 to 10,000 ft)
For altitudes above 2950ft, the maximum operating tem-
perature is derated 1ºF/550ft.
Altitude (storage) -16 to 10,600 m (-50 to 35,000 ft)
Airborne contami-
nants
G2 or lower as defined by ISA-S71.04-1985
TABLE 1-3. Environmental specifications (Continued)
SPECIFICATION DETAILS

2-1
Chapter 2
Getting Started
This chapter guides you through setting up and powering on a Trend Micro™ Network
VirusWall™ Enforcer device.
This chapter discusses the following topics:
•Package Contents on page 2-2
•Front Panel on page 2-4
•Back Panel on page 2-9
•Device Ports on page 2-12
•Installing the Device on page 2-15