Verify that you have all information needed for a successful installation.
Trellix DLP Network Prevent considerations for installation
Determine | Consideration |
|---|
Security | Use out-of-band management on a network that ePO - On-prem can access to isolate management and network traffic. LAN 1 traffic must not be accessible from outside your organization. Connect any baseboard management controller (BMC) interface to a dedicated secure management network. Logon account — The appliance has a local administrator account for logging on to the appliance console. Change the default administrator password to make the account secure. Control who can access the physical or virtual appliance console.
Use the encrypted channel for your ICAP traffic. Disable all unused services.
|
Network information | Network interfaces must be assigned with static IP addresses, rather than dynamically assigned IP addresses. Evidence server must be on the same LAN as the appliance. In a cluster environment, the virtual IP address must be in the same subnet as the appliance IP address. The cluster ID and the virtual IP address must be different from that of any other Trellix DLP Network Monitor or Trellix DLP Network Prevent cluster, regardless of the management platform.
|
Remote Management Module (RMM) | (Hardware appliances only) If you intend to use the RMM for appliance management, use a secure or closed network to connect to the RMM. |
(Optional) Capture storage disk | (Trellix DLP 8800, Trellix DLP 7700, and Trellix DLP 6600 hardware appliances only) A separate Trellix DLP Capture Storage Array, which holds up to 24 TB of captured data. (Virtual appliances only) Storage disk space of at least 2 TB when you are installing the software.
|
(Optional) Fiber SFP SR/LR NIC | (Trellix DLP 8800) fiber SFP NIC to connect using fiber optic cable. |