Trend Micro EdgeFire User manual

-1 -
The EdgeFire is a highly integrated industrial
multiport secure router with firewall / NAT /
VPN / IPS and managed Layer 2 switch
functions. It is designed for
Ethernet-based security applications
providing critical remote control or
monitoring networks, and it provides
an electronic security perimeter
for the protection of critical cyber
assets including
pump-and-treat systems in
water stations, DCS
systems in oil and gas
applications, and
PLC/SCADA
systems in factory
automation.
EdgeFire
Quick Setup Guide
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STAT E IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
SECURED BY
v+ v- NA
the Package
Opening and Inspecting
Verify that the EdgeFire package
contains the following items:
1
EdgeFire Appliance
Terminal Blocks x 2 Console Cable (RJ-45)
DIN rail kit
(Install on the device)
Rubber feet x 4 Documents
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STAT E IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire SECUREDBY
v+ v- NA
Examining the EdgeFire1
2
EdgeFire Front Panel EdgeFire Back Panel
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STAT E IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
SECURED BY
v+ v- NA
TM

-2 -
Requirement Details
Connect to the LAN port for web console management and WAN
port for external network.
Default access information:
https://192.168.127.254
•IP address must be configured for WAN or LAN usage.
Ethernet Cables
Default IP Address of
Web Console
The computer must have one of the following browsers installed:
- Microsoft Edge (version 15 or above)
- Firefox (version 53 or above)
- Safari (version 10.1 or above)
- Google Chrome (version 63 or above)
Laptop with Ethernet
Port (RJ-45 Type)
User name: admin
Password: txone
Deployment Scenario and Security Operation Mode1
3
EdgeFire is placed inline (in the direct communication between source and
destination device), where it actively analyzes traffic flow, records event logs and
takes automated actions to prevent malicious events.
Prevention Mode
EdgeFire is placed inline (in the direct communication between source and
destination device), where it actively analyzes traffic flow and only records event
logs without taking action when malicious events are detected.
Monitor Mode
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STATE IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire S
ECUREDBY
v+ v- NA
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STATE IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire S
ECUREDBY
v+ v- NA
EdgeFire EdgeFire
Production Zone1
OT Defense
Console
SCADA
Engineering
Workstation
PLC
Production Zone2
PLC
HMI
OT Network

-3 -
LED Indicators1
4
The function of each LED is described in the table below
Green
Power 1 is OFF
Off
Power 1 is ON
PWR1
Green
Power 2 is OFF
Off
Power 2 is ON
PWR2
Green
System failure
Off
The system is running
STATE
Red
System is running without fault
Off
System failure
FAULT
Green
OT Defense Console sync is disabled
Off
OT Defense Console sync is enabled and ODC is connected
MGMT
Green
High Availability disabled
Off
High Availability enabled
HA
Green
IPS or IDS disabled
Off
IPS or IDS enabled
IPS/IDS
Green
No VPN tunnel connected
Off
VPN tunnel established
VPN
Reset type Description
Press and hold the reset button for 2 to 10 seconds. The STATE LED
will begin to blink every second, which means the system is rebooting.
Press and hold the reset button for more than 10 seconds. The STATE
LED will begin to blink every half-second, which means the system is
resetting itself to default settings.
Reboot System
Restore Factory
Default Settings
Reset to Factory Default Settings1
5
The reset button for the EdgeFire is located on the front panel.
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STAT E IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
SECURED BY
v+ v- NA
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR1 PWR1
STATE IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
SECURED BY

-4 -
Installing the EdgeFire - DIN Rail Mounting1
6
The aluminum DIN rail attachment plate should already be fixed to the back panel of the
EdgeFire when you take it out of the box. If you need to reattach the DIN rail attachment plate
to the EdgeFire, make sure the stiff metal spring is oriented towards the back, as shown in the
following pictures.
1x Mount Hold
1x Mount Hold
1x DIN-Rail Kit
DIN-Rail Kit
Step1.
Push Down
Step2.
Push Forward

-5 -
Wiring the Redundant Power Inputs1
7
The Trend Micro EdgeFire has two sets of power inputs – power input 1 and power input 2.
The top and side views of the terminal block connector are shown below.
Step1.
Use a small flathead screwdriver to open the locks on the
terminal block.
Step2.
Insert a positive / negative DC wire into the V+/V- terminals
respectively.
Step3.
Check whether the wires are firmly seated in the terminal
block, then tighten the screws to secure the wires.
Wiring the Redundant Power Inputs1
7
Connecting the Power1
8
Connect the 12 to 48 VDC power line to the terminal block, which is connected to the EdgeFire
device. If the power is supplied properly, the “PWR1” or “PWR2” LED will glow steadily. The
power input location and pin definition are shown on the front panel.
Grounding the Unit1
9
Grounding and wire routing limits the effects of noise due to electromagnetic interference (EMI).
Run the ground connection from the terminal block connector to the grounding surface prior to
connecting the power. Please note that this product is intended to be mounted on a
well-grounded mounting surface such as a metal panel. The minimum cross-sectional area of
the conductor must be equal to the input wiring cable’s width/circumference.
V+ V- NA
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STAT E IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
SECURED BY
v+ v- NA
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR1 PWR1
STATE IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
S ECURED BY
v+ v- NA

-6 -
Wiring the Redundant Power Inputs1
7Software Configuration1 10
Before connecting the PC/Laptop to the EdgeFire, the PC's IP address should be set to
192.168.127.100. After that, connect the PC to the LAN port of the EdgeFire using an Ethernet
cable. Open a web browser on your PC and type “https://192.168.127.254” into the address
bar. A pop-up window will open to request user name and password. Please type the default
username, “admin”, and password, “txone”. Now, the main screen will pop up so you can
configure EdgeFire.

-7 -
Setting the Management IP Address1
11
1. Go to [ Network ] > [ Network Interface ]
Connecting to the Network1
12
Task Action
Configure Management IP Address of the EdgeFireIP Address
Configure Netmask of the EdgeFireSubnet Mask
Configure Network VLAN-ID of the deviceNetwork VLAN-ID
2. Click on a LAN interface, the [Edit Network Interface] screen will appear.
3. In the [Network interface] plane, configure the management IP address for the
EdgeFire
1. Connect the EdgeFire WAN1 port to a wide area network.
(ex: the internet or external network)
2. Connect the EdgeFire LAN1 port to a local area network.
(ex: a segment of your network)

-8 -
No Light The EdgeFire cannot communicate with the network.
RJ45
Checking the LED to Confirm Status1
13
The LED on the front panel shows the deployment status.
Only Left LED 10Mbps LINK/ACT (off = no link, on = 10 Mbps, blinking = activity)
Only Right LED 100Mbps LINK/ACT (off = no link, on = 100 Mbps, blinking = activity)
Both Left / Right LED GE LINK/ACT (Both LED ON = 1 Gbps link, blinking = activity)
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR2 PWR1
STAT E IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
SECURED BY
v+ v- NA
1 1
2 2
1
2
3
4
5
6
7
8
LAN
WAN
USB
CONSOLE
PWR1 PWR1
STATE IPS/IDS
FAULT VPN
MGMT HA
RST
PWR1
PWR2
IEF-1012-TM
EdgeFire
SECURED BY
RJ45
Appendix: Connecting to the Console Port
The EdgeFire console port is an RJ-45 port located on the front panel of the case. It is
designed for connection to serial console terminals, for viewing messages during the boot
sequence, or for debugging system boot issues. To connect the console cable, remove the
protective cover on the port.
Serial Console Port, Cable, & Pinouts
Initial configuration for the EdgeFire using the command line interface (CLI) on a serial terminal
client will use the following default settings:
• Baud Rate: 115200 bps
• Character size: 8 bits
• Parity: None
• Stop Bits: 1
• Flow Control: None

-9 -
© 2020 Trend Micro Incorporated. All Rights Reserved. Trend Micro and the t-ball logo are trademarks or registered trademarks
of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their
owners. Information contained in this document is subject to change without notice.
Contact Information1
Website
https://www.trendmicro.com
List of worldwide offices and phone numbers
https://www.trendmicro.com/us/about-us/contact/index.html
Technical support page
https://success.trendmicro.com/
EULA
https://www.trendmicro.com/en_us/about/legal.html
EdgeFire Datasheet/Application Note Landing Page
ATTENTION
There is a risk of explosion if
the battery is replaced with an
incorrect type of battery.
The means of power cord of adapter should be connected to a
socket-outlet with earthing connection.
The power for this product is intended to be supplied by a Listed
Power Supply, with output marked LPS or PS2, and rated to deliver
12 to 48 VDC at a Minimum of 2.3 A.