Configuring Network Settings Parent topic

Perform initial network configurations with the Command Line Interface (CLI). Use the management console to make changes to the network interface settings and to select the TippingPoint Advanced Threat Protection for Email operation mode.

Procedure

  1. Go to AdministrationSystem SettingsNetwork.
  2. Specify the network settings.
    Option
    Description
    IP Address and Subnet Mask / Prefix Length
    Specify the network interface IP settings for the management network, custom network, and mail network.
    • Management network: The management network handles the management console, SSH connections, and Trend Micro updates. Mail traffic can pass through the management network and by default it is the only network that routes mail. Use only the management port (eth0).
    • Custom network: The custom network handles sandbox analysis. This network should be an isolated network without a proxy or connection restrictions so that malicious samples do not affect other networks. To enable Virtual Analyzer file and URL analysis, specify network settings for at least one network interface other than the management port. Use any available network interface (eth1, eth2, or eth3) that is not configured for the mail network.
    • Mail network: The mail network handles mail routing and monitoring. Use a network interface that is not configured for the custom network.
      • (Optional) For BCC or MTA mode, use any available network interface (eth1, eth2, or eth3).
      • For SPAN/TAP mode, use the eth2 or eth3 network interface.
    Host Name / Gateway / DNS
    Specify the general network settings that affect all interfaces, including the host name, gateway, and DNS settings.
    Note
    Note
    If Virtual Analyzer will connect to the Internet, specify at least one DNS server that is accessible from the Virtual Analyzer network.
    Operation Mode (Optional)
    Select the operation mode based on your deployment. MTA mode is the default.
    For more information, see Operation Modes.
    Note
    Note
    BCC mode and SPAN/TAP mode are not available when the notification SMTP server is configured as internal Postfix.
  3. Click Save.
  4. If you select SPAN/TAP mode, you must add at least one monitoring rule.
    For details, see Adding a Monitoring Rule.