Installation checklist

Use out-of-band management on a network that ePO - On-prem can access to isolate management and network traffic.

When clustering is enabled, LAN 1 traffic must not be accessible from outside your organization. You do not have to connect LAN 1 if you are not using clustering.

Connect any baseboard management controller (BMC) interface to a dedicated secure management network.

Control who can access the physical or virtual appliance console.

Logon account — The appliance has a local administrator account for logging on to the virtual machine shell. Change the default administrator password to make the account secure.

Determine the most appropriate place in your network to attach the Trellix DLP Network Monitor appliance Capture port 1. For example, consider using a SPAN port or a network tap.

Network interfaces must be assigned with static IP addresses, rather than dynamically assigned IP addresses.

Evidence server must be on the same LAN as the appliance.

In a cluster environment, the virtual IP address must be in the same subnet as the appliance LAN 1 IP addresses.

The cluster ID and the virtual IP address must be different from that of any other Trellix DLP Network Prevent or Trellix DLP Network Monitor cluster, regardless of the management platform.

(Trellix DLP 8800, Trellix DLP 7700, and Trellix DLP 6600 hardware appliances only) A separate Trellix DLP Capture Storage Array, which holds up to 24 TB of captured data.

(Virtual appliances only) Storage disk space of at least 2 TB when you are installing the software.