Trend Micro VirusWall 2500, Руководство администратора

Страница: 32 / 236

Trend Micro™ Network VirusWall™ Enforcer 2500 Administrator’s Guide
1
-
18
See the following pages to:
• Configure Network VirusWall Enforcer 2500 Policy Enforcement setting, page
2-3
• View Network VirusWall Enforcer 2500 log information, page 4-3
IP Address Settings
Configure the Management IP Address, Bridge IP Address, and Static Routes to
minimize transfer of data through an external router.
Management IP Address
Configure the device IP address. This is the IP address you use to access the Web
console to manage the device.
Bridge IP Address
Configure bridge IP addresses to allow packets to pass directly back to the device
from endpoints. This list supports up to 64 entries.
An Example of When a Bridge IP Address is Necessary
In an environment where the Network VirusWall Enforcer 2500 Management IP
address and the endpoint IP addresses are in the same network segment, configuring
Bridge IP addresses is not necessary. See
Figure 1-5 for an example. In Figure 1-5 ,
Endpoint 1 and the Management IP address belong to the same network segment. So,
the Policy Enforcement Agent assessment completes as expected.
However, if the Management IP address and the endpoint IP addresses do not belong
to the same network segment, policy enforcement assessment enters an infinite loop.
For example, in
Figure 1-5 , Endpoint 2 and the Management IP address belong to
different network segments so the assessment enters an infinite loop.