Your virtual Network Security appliance on KVM may require additional virtual network configuration.
Important
For information about enabling Port Mirroring and SSL Decryption Mirroring, see Defining multiple queues for data ports.
Enabling IPv6 communication for data traffic
If you deployed using the Virtual Machine Manager UI and are using IPv6 traffic within the network, you must add parameters to the XML file associated with the installed virtual Network Security appliance. The parameters must be added in the NIC section for each data port.
Shut down the virtual Network Security appliance.
Edit its XML file using the
virsh editcommand, such asvirsh edit TrellixFireeye-NX-4500V.Note
Trellix-NX-4500V is the domain name given during the installation. See Installing a Network Security virtual appliance using the KVM UI.
Add the attribute
trustGuestRxFilters='yes'under the NIC sections for each of the data ports:<interface type='direct' trustGuestRxFilters='yes'>
Example
<interface type='direct' trustGuestRxFilters='yes'> <mac address='52:54:00:12:13:83'/> <source dev='enp5s0f0' mode='passthrough'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/> <interface type='direct' trustGuestRxFilters='yes'> <mac address='52:54:00:98:b7:91'/> <source dev='enp5s0f1' mode='passthrough'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/> </interface>