Setting Up a Child Device Parent topic

This section explains how to set up a child device and register it to the parent device.
Tip
Tip
Trend Micro recommends using an NTP server if you intend to set up child devices. Doing so ensures that the time and date of devices in the IMSVA group are synchronized. For more information, see Configuring NTP Settings.

Procedure

  1. Determine the Internal Communication Port IP address of the child device.
    WARNING
    WARNING
    Parent and child devices must use their Internal Communication Port to communicate with each other. If your parent device or your child devices have multiple network interface cards (NIC), add a host-route entry by Command Line Interface (CLI) following the instructions below.
    On the parent device in the CLI:
    configure network route add <IP address of child device’s Internal Communication Port>/32 <next hop> <Internal Communication Port of parent device>
    On the child device in the CLI:
    configure network route add <IP address of parent device’s Internal Communication Port >/32 <next hop> <Internal Communication Port of child device>
  2. After you set up a parent device, do the following:
    1. Make sure the parent device is operational.
    2. Log on to the management console. Make sure that you are logging on to the parent device management console.
    3. Go to Administration → IMSVA Configuration → Connections → Child IP.
    4. Under Add IP Address, add the IP address for the Internal Communication Port of the child device.
  3. On the child device, do the following:
    1. Log on to the management console of the child device. All IMSVA devices have the same management console logon credentials.
    2. In the Setup Wizard, configure the local system settings and then click Next>.
    3. On the Deployment Settings screen, select Child Device and specify the IP address, port, logon user name and password for the management console of the parent device.
      Note
      Note
      The logon user account that you specified must have full administration rights.
    4. Click Finish.
  4. On the parent device, do the following:
    1. Go to System Status.
    2. Verify that the child device appears under Managed Services and that a green check mark (icon_valid_s_cui.jpg) appears under Connection. You can start or stop Scanner Service, Policy Service, or EUQ Management Console.
  5. If you want to use EUQ on the child device, redistribute the data across the EUQ databases:
    1. On the parent device, navigate to Administration → End-User Quarantine.
    2. Select Redistribute all or Only redistribute to approved senders.
      Tip
      Tip
      Trend Micro recommends choosing Redistribute all.
    3. Click Redistribute.
      Note
      Note
      If you registered an EUQ-enabled child device to its parent device, add senders to the approved senders list, and then re-distribute EUQ data. Some of the newly added approved senders might not appear.
      Trend Micro recommends the following:
      • After redistributing EUQ, the administrator informs all end users to verify that the newly added approved senders are still available.
      • That the administrator notifies all end users not to add EUQ approved senders list when the administrator is adding a child device and redistributing EUQ.