Views:
Ensure the following before installing Deep Discovery Inspector.
Requirement
Description
Match port speeds
The destination port speed should be the same as the source port speed to ensure equal port mirroring. If the destination port is unable to handle the faster speed of the source port, the destination port may drop some data.
For Deep Discovery Inspector 530/1300, the speed of inline ports is downgraded if not matched.
For Deep Discovery Inspector 4200/9200, the inline ports are disabled if not matched.
Configure Virtual Analyzer data ports
When enabling an internal Virtual Analyzer, select one of the following network options and make sure the data ports are configured as follows:
  • No Network
    Virtual Analyzer does not exchange data with the Internet.
  • Custom Network
    Virtual Analyzer uses an additional specified data port to exchange data with the Internet.
  • Management Network
    Virtual Analyzer uses a management port to exchange data with the Internet.
For details, see Internal Virtual Analyzer in the Deep Discovery Inspector Administrator's Guide.
Monitor all data
Deep Discovery Inspector monitors all inbound and outbound network traffic.
Note
Note
For better performance when installing Deep Discovery Inspector, Trend Micro recommends using a plug-in NIC rather than an onboard NIC as a data port.
Note
Note
To ensure Deep Discovery Inspector captures traffic from both directions, configure the mirror port, and make sure that traffic in both directions is mirrored to the port.
Related information