Trend Micro viruswall enforcer 1500i, Руководство по установке и развертыванию

Страница: 43 / 78

Trend Micro™ Network VirusWall™ Enforcer 1500i Installment and Deployment Guide
3-4
To protect an organization from network threats, position the device in a key place
on your network segment. The device should be able to scan all network traffic to
prevent, detect, or contain threats.
• Each of the interfaces supports the following port speed and duplex mode settings:
Note: Both the connected L2/L3 and Network VirusWall Enforcer devices should have
the same port speed and duplex mode. Otherwise, the Network VirusWall
Enforcer port will operate in half-duplex mode. To simplify configuration, you
can set Network VirusWall Enforcer to auto-select the optimum port speed and
duplex mode. Likewise, allow your switch to auto-select the port speed and
duplex mode.
• For IPv4 addresses, the device supports addresses belonging to any class (class A, B,
or C). For IPv6 addresses, it supports global unicast and link-local addresses.
Tip: Although each range is in a different class, you are not required to use any
particular range for your internal network. However, selecting a fixed range
greatly diminishes the chance of IP addressing conflicts.
• Policy enforcement and network virus scan support various actions for
noncompliant or infected endpoints.
Identifying What to Protect
Position Network VirusWall Enforcer between layer 2 (L2) or layer 3 (L3) devices. This
way, the device can apply its protection to packets coming in or out of your network.
• 10Mbps x
half-duplex
• 10Mbps x
full-duplex
• 100Mbps x
half-duplex
• 100Mbps x
full-duplex
• 1000Mbps x
full-duplex