Trend Micro txOne networks EdgeIPS IPS-102-BP-TM User manual

EdgeIPS
Quick Setup Guide
TM
EdgeIPS is a Transparent Security Box fitted with dual
Ethernet LAN ports. Users can efficiently adapt the
palm-sized EdgeIPS into a flexible solution for the
challenges of Ethernet communications.
Secured by
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M
the Package
Opening and Inspecting
Verify that the EdgeIPS package
contains the following items:
1
EdgeIPS Appliance Console Cable
(USB-Type-C)
Terminal Block DIN Rail mount kit
(assembled to EdgeIPS)
Documents
Secured by
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M
EdgeIPS Front Panel EdgeIPS Back Panel
Examining the EdgeIPS1
2
Secured by
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M

Requirement Details
- Connect to port 1 to access web console management.
- Connect swtiches or filed devices to port2.
Default web console access information:
https://192.168.127.254
Ethernet Cables
Default IP Address of
Web Console
The computer must have one of the following browsers installed:
- Microsoft Edge (version 15 or above)
- Firefox (version 53 or above)
- Safari (version 10.1 or above)
- Google Chrome (version 63 or above)
Laptop with Ethernet
Port (RJ-45 Type)
User name: admin
Password: txone
In inline mode, EdgeIPS is installed directly in the path of traffic.
Inline mode
In offline mode, EdgeIPS connects to a mirror port of network switch and mirrors
traffic to itself.
Offline mode
EdgeIPS
OT Defense
Console
SCADA
Engineering
Workstation
HMI
PLC
Port1
Port2
OT Network
Inline Mode
EdgeIPS
OT Defense
Console
SCADA
Engineering
Workstation
HMI
PLC
Port1
Port2
OT Network
Offline Mode
Mirror
Deployment Checklist1
3
Deployment Scenario and System Operation Mode1
4
Securedby
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M
Securedby
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M
-1 -

LED Indicators1
5
The function of each LED is described in the table below
Reset type Description
Press and hold the reset button for 2 to 10 seconds. The MANAGED
LED will begin to blink on a 1-second pattern, which means the
system is rebooting.
Press and hold the reset button for more than 10 seconds. The
MANAGED LED will begin to blink every half-second, which means
the system is resetting itself to factory defaults.
Reboot System
Restore Factory
Default Settings
Reset to Factory Default Settings1
6
The reset button for the EdgeIPS is located on the front panel.
Secured by
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M
Secured by
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M
Amber
Power 1 is OFF
Off
Power 1 is ON
PWR1
Amber
Power 2 is OFF
Off
Power 2 is ON
PWR2
Green
OT Defense console sync is disabled
Off
OT Defense Console Sync (ODC) is enabled and ODC is connected
MANAGED
Green
IPS and IDS disabled
Off
IPS and IDS enabled
IPS/IDS
Green
Hardware or system fault
Red
LED will be turned on when USB is plugged in
USB/F
Amber
Hardware bypass mode disabled
Off
Hardware bypass mode enabled
BYPASS
USB data transmission
Blinking
-2 -

Installing the EdgeIPS - DIN Rail Mounting1
7
The aluminum DIN Rail attachment plate should already be fixed to the back panel of the
EdgeIPS when you take it out of the box. If you need to reattach the DIN Rail attachment plate
to the EdgeIPS, make sure the stiff metal spring is oriented towards the top, as shown in the
following pictures.
DIN-Rail Kit
Step1.
Push Down
Step2.
Push Forward
DIN-Rail Kit
1x DIN-Rail Kit
-3 -

Wiring the Redundant Power Inputs1
7
The Trend Micro EdgeIPS has two sets of power inputs – power input1 and power input2. The
top and side views of the terminal block connector are shown below.
Step1.
Open the terminal block’s wire locks by pushing the buttons
down.
Step2.
Insert a positive / negative DC wire into the V+/V- terminals
respectively.
Step3.
When the wire is properly seated, the wire lock will be
forced shut around it. Check whether the wire is properly
fixed.
Wiring the Redundant Power Inputs1
8
Connecting the Power1
9
Connect the 12 to 48 VDC power line to the terminal block, which is connected to the EdgeIPS
device. If the power is supplied properly, the “Power” LED will glow steadily. The power input
location and pin definition are shown in the following diagram.
Grounding the Unit1
10
Grounding and wire routing help limit the effects of noise due to electromagnetic interference
(EMI). Run the ground connection from the terminal block connector to the grounding surface
prior to connecting the power. Please note that this product is intended to be mounted on a
well-grounded mounting surface, such as a metal panel. The minimum cross-sectional area of
the conductor must be equal to the input wiring cable’s width/circumference.
Side View
Top View
V1+ V1-
PWR1 PWR2PWR2
V2+ V2-
-4 -

Wiring the Redundant Power Inputs1
7Software Configuration1 11
Before connecting the PC/Laptop to EdgeIPS, the PC's IP address should be set to
192.168.127.100. After that, connect the PC and EdgeIPS using an Ethernet cable. Open a
web browser on your PC and type “https://192.168.127.254” into the address bar. A pop-up
window will open to ask for user name and password. Please type the default username,
“admin”, and password, “txone”.
Now, the main screen will pop up so you can configure EdgeIPS.
Secured by
IPS-102-BP-TM
PWR1
PWR2
MANAGED
IPS/IDS
USB/F
BYPASS
RESET
USB
1000M
2
1
BYPASS
100M
/10M
-5 -

Setting the Management IP Address1
12
1. Go to [ Device ] > [ Device Setting ]
Task Action
Configure Management IP Address of the EdgeIPSDevice IP Address
Configure Netmask of the EdgeIPSNetmask
Confiture GatewayAddress of the EdgeIPSGateway
2. In the [Network Setting] plane, configure management IP address for EdgeIPS
Configure DNS setting of the EdgeIPSDNS
Configure Network VLAN-ID of the deviceNetwork VLAN-ID
Connecting to the Network1
13
EdgeIPS’s ports 1 and 2 make up a network segment.
Port 1 is a “mixed” port design, functioning both as the management console port and to
connect to a network node, so EdgeIPS’s Port 1 can be connected either to your network
switch/hub or to a laptop. Connecting this port to the network enables remote manage-
ment of the device.
EdgeIPS’s Port 2 links the IPS to the device or small production zone you are targeting for
protection.
1.
2.
-6 -

No Light The EdgeIPS appliance cannot communicate with a network.
RJ45
Checking the LED to Confirm Status1
14
The LED on each Ethernet port shows the deployment status.
Left LED0:(Green) GE LINK/ACT (off = no link, on = 1 Gbps link, blinking = activity)
Right LED1:(Green) 10/100Mbps LINK/ACT (off = no link, on = 10/100 Mbps link,
blinking = activity)
Appendix: Connecting to the Console Port
The EdgeIPS console port is a USB Type–C Port located on the front panel of the case. It is
designed for connection to serial console terminals for viewing messages during the boot
sequence or for debugging system boot issues. To connect the console cable, remove the
protective cover on the port.
Serial Console Port, Cable, & Pinouts
The initial configuration for the EdgeIPS using the command line interface (CLI) on a serial
terminal client will use the following default settings:
• Baud Rate: 115200 bps
• Character size: 8 bits
• Parity: None
• Stop Bits: 1
• Flow Control: None
USB Type C
-7 -

© 2021 Trend Micro Incorporated. All Rights Reserved. Trend Micro and the t-ball logo are trademarks or registered trademarks
of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their
owners. Information contained in this document is subject to change without notice.
Contact Information1
Website
https://www.trendmicro.com
List of worldwide offices and phone numbers
https://www.trendmicro.com/us/about-us/contact/index.html
Technical support page
https://success.trendmicro.com/
EULA
https://www.trendmicro.com/en_us/about/legal.html
EdgeIPS Datasheet/Application Note Landing Page
The power cord adapter should be connected to a socket outlet with an earthing connection.
The power cord and adapter must comply with Class II construction.
This product is intended to be supplied by a UL Listed Power Adapter or DC power source
marked ‘L.P.S’ or ‘Limited Power Source’, rated 12 to 48 VDC, 0.605 A (min.)
-8 -
P/N:1802001021031