Network Interface

Administration > Network Configuration > Network Interface

All modes need the relevant network interface settings configured. This was probably done in the Deployment Wizard when you first installed IWSVA. You can edit your network interface information on this page. Some modes require slightly different information than other modes. The following procedures call out where different settings apply for different modes.

Network interface settings include:

• Host Information

• Interface Status

• Data Interface Settings

• Management Interface Settings

• Miscellaneous Settings

Host Information

All modes require the host information to be entered. Use this procedure if you are not changing the following:

• Your deployment mode

• Your mode-specific settings

• Note: If you are changing your deployment mode or mode-specific settings, use the Deployment Wizard at Administration > Deployment Wizard. You can also change your Network Interface setting there.

To enter the host information:

1. Go to Administration > Network Configuration > Network Interface.

2. IF needed, edit the applicable Fully Qualified Domain name (FQDN) for the IWSVA host.

3. Note: A fully qualified hostname is required. Trend Micro recommends creating a DNS entry for the IWSVA server's hostname in their DNS server.

3. Continue to the section about the Interface Status.

Interface Status

IWSVA provides a graphical representation of the physical Ethernet ports on the IWSVA server to simplify the configuration of the network ports. The Interface Status graphic shows the status and function of the available interfaces.

Use the following table to interpret the status and function of the Ethernet ports used for configuration purposes in the Data Interface and Separate Management Interface sections.

Data Interface

The Data Interface supports end-user Internet traffic to and from the internal network. Use the following procedure to configure the IP settings for the data (bridge or proxy) interfaces.

• Warning: Do NOT configure the data interface and the management interface in the same network subnet. If they are in the same network segment, the IWSVA internal firewall will prevent proper forwarding of HTTP and FTP traffic.

Before starting this procedure, be sure you have:

• Selected your deployment mode in the Deployment Wizard

• Configured any mode-specific settings in the Deployment Wizard

• Configured the IWSVA host information (as shown above)

To configure the Data Interface settings:

1. Go to Administration > Network Configuration > Network Interface.

2. Note: If you need to change the deployment mode, use the Deployment Wizard.

2. Edit the host name for IWSVA as needed.

3. Edit the Data interface information as needed.

1. All modes except Transparent Bridge mode: Select the appropriate Ethernet port from the Ethernet Interface drop-down list for the data interface. The dynamic Interface Status graphic displays your selection.

2. Transparent Bridge Mode only: Select the appropriate Ethernet ports from the drop-down lists for the Internal and External interfaces. The Interface Status graphic displays your selection.

3. Select the IP address type from the drop-down list:

• Static IP address - to configure IP settings for the interface manually.

• Dynamic IP address (DHCP) - to have a DHCP server assign IP settings to the interface.

2. Note: The Ethernet Interface for the Transparent Bridge mode is predetermined.

4. Enter the IP address and Netmask.

5. Check the Enable Ping check box to check the connection. Select this option to respond to PING requests on the data interface. Disable this option if you do not want anyone to PING this interface. MORE>>

   Activating PING on an interface allows you to issue PING commands to check the network status of the IWSVA appliance. For example, if there is no reply from IWSVA after a PING request, the appliance may be down or there is a problem with network connection.

6. Transparent Bridge Mode only: Click the check box to enable the VLAN ID (1-4094).

7. Enable the Management Interface and Miscellaneous Settings if needed, then click Save.

Separate Management Interface

The separate management interface offers administrators an independent interface to log in to the IWSVA device, either through the Web console or through SSH.

Enabling and disabling the separate management interface is done by setting the values and enabling them through the Network Interface Settings page or the Deployment Wizard. For more information, see Management Interface.

Before starting this procedure, be sure you have:

• Selected your deployment mode in the Deployment Wizard

• Configured any mode-specific settings in the Deployment Wizard

• Configured the IWSVA host information

• Configured the Data Interface information

To setup the separate management interface:

1. Check the check box for the Enable Management Interface.

2. Select an Ethernet interface from the drop-down list.

3. Enter a static IP address for the management interface device.

4. Enter the netmask (subnet mask) for the management interface device.

5. Set the Miscellaneous Settings if needed, or click Save.

Miscellaneous Settings

The Miscellaneous Settings allow you to obtain the dynamic information from DHCP or enter static information for:

• Gateway IP address

• Primary DNS server IP address

• Secondary DNS server IP address

Before starting this procedure, be sure you have:

• Selected your deployment mode in the Deployment Wizard

• Configured any mode-specific settings in the Deployment Wizard

• Configured the IWSVA host information

• Configured data and management interface information

To configure the Miscellaneous settings:

1. Scroll to the Miscellaneous Setting section.

2. Do one of the following:

• Check the Obtain from DHCP check box to have IWSVA obtain the dynamic Gateway, Primary, and Secondary DNS information OR

• Type in the Gateway, Primary, and Secondary DNS information if it is static

4. Click Save.