Online Help Center Home
Privacy and Personal Data Collection Disclosure
- Pre-release Disclaimer
- Pre-release Sub-feature Disclaimer
Trend Vision One Data Privacy, Security, and Compliance
What's New
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- Release Notes
Introduction
- Trend Vision One
- Checking the Trend Vision One Service Status
  - SERVICE LEVEL OBJECTIVES FOR TREND VISION ONE (herein this “SLO”)
Getting Started
- Getting Started with Trend Vision One
- Getting Started with Vulnerability Assessment
Risk Insights
- Executive Dashboard
- Attack Surface Discovery
- Operations Dashboard
Dashboards and Reports
- Security Dashboard
  - Customizing the Security Dashboard
  - Protocol Groups in the Scanned Traffic Summary Widget
- Reports
XDR Threat Investigation
- Detection Model Management
- Workbench
  - Alert View
  - Incident View
    - Incident Details
      - Alerts (Incident View)
      - Incident-based Execution Profile
    - Assigning Incidents
- Search App
- Observed Attack Techniques
- Targeted Attack Detection
- Forensics
- Managed Services
- Companion
Threat Intelligence
- Campaign Intelligence
  - Threat Information Screen
- Intelligence Reports
- Suspicious Object Management
  - Suspicious Object List
  - Exception List
    - Adding Exceptions
- Sandbox Analysis
- Third-Party Intelligence
  - TAXII Feeds
    - Configuring a TAXII Feed
  - MISP Feeds
Workflow and Automation
- Security Playbooks
- Response Management
- Third-Party Integration
- API Automation Center
- Service Gateway Management
Zero Trust Secure Access
- Getting Started with Zero Trust Secure Access
- Secure Access Overview
- Secure Access Rules
- Secure Access Resources
- Secure Access History
- Secure Access Configuration
- Troubleshooting Zero Trust Secure Access
Assessment
- Cyber Risk Assessment
Endpoint Security Operations
- Endpoint Inventory 2.0
- Endpoint Inventory
  - Getting Started with XDR for Endpoints
  - Managing the Endpoint List in Endpoint Inventory 1.0
    - Endpoint List Settings in Endpoint Inventory 1.0
- Endpoint Policies
- Trend Cloud One - Endpoint & Workload Security
Endpoint Security Operations (for Standard Endpoint and Server & Workload Protection)
- Getting Started with Trend Vision One Endpoint Security
- Endpoint Inventory
- Standard Endpoint Protection
- Server & Workload Protection
Cloud Security Operations
- Trend Vision One Container Security
- XDR for Containers
  - Getting Started with XDR for Containers
Network Security Operations
- Network Inventory
- Network Intrusion Prevention
Email Security Operations
- Email Account Inventory
  - Email Sensor Management
Mobile Security Operations
- Getting Started with Mobile Security
- Using Mobile Security in Conjunction with MDM Solutions or Azure AD
- Using Mobile Device Director
Service Management
- Product Connector
  - Connecting a Product
  - Required Settings on Supported Products
- Product Instance
- Cloud Accounts
Administration
- User Accounts, Roles, and Single Sign-On (Legacy)
- User Accounts, Identity Providers, and User Roles (July 2023 update)
- Notifications
- Audit Logs
  - User Logs
    - User Log Data
  - System Logs
    - System Log Data
- Console Settings
- License Information
- Credit Usage
- Support Settings
  - Enabling Hypersensitive Mode
Getting Help and Troubleshooting
- Help and Support
  - Creating a Support Case
- Self-Diagnosis

Deploying the Private Access Connector on VMware ESXi

Connect your VMware ESXi applications with Zero Trust Secure Access Private Access and prevent unauthorized intrusions.

Private Access Connectors connect your internal applications with Zero Trust Secure Access Private Access, which allows you to control access to sensitive corporate resources. To ensure high availability (HA) and facilitate load-balancing on high traffic apps, install and group together at least 2 connectors in each environment. Before attempting to deploy the Private Access Connector, ensure that your environment meets the minimum system requirements.

In the Trend Vision One console, go to Zero Trust Secure Access > Secure Access Configuration > Private Access Configuration.
For customers that need to create a new connector group, click Add Private Access Connector Group.
1. Provide a unique name and description for the group.
2. Click Save.
Locate your Connector group name in the list and click the New connector () icon.
The Private Access Connector Virtual Appliance panel appears.
Select VMware ESXi from the Platform list.
Click Download Disk Image to download the OVA file.
Verify that the file name and extension are: TrendMicroVisionOne-PrivateAccessConnector.ova
Copy the Registration token for later use.
Important:
The Registration token is only valid for 7 days. If the token expires, you must start again.
In your VMware environment, create the virtual machine.
Important:
The steps contained in these instructions were valid as of July 2022 for the vSphere Client.
1. Sign in to the web vSphere Client, click ACTIONS, and then click Deploy OVF Template....
  The Deploy OVF Template screen appears.
2. Under Select an OVF template, click Local file, select the OVA file downloaded from the Trend Vision One console, and then click NEXT.
3. Under Select a name and folder, specify a unique name and target location for the Private Access Connector virtual appliance, and then click NEXT.
4. Under Select a computer resource, select a destination computer resource and click NEXT.
5. Under Review details, verify the template details and click NEXT.
6. Under Select storage, select the disk location and click NEXT.
7. Under Select networks, select a destination network and click NEXT.
8. Under Ready to complete, review and confirm the settings and click FINISH.
  Note:
  The process may take around two minutes to complete.
Click the green Power On button on the top to power on the virtual machine, and then click the console button to open the virtual machine console.
Sign in to the Private Access Connector virtual appliance with the default credentials.
User name: admin

Password: saseztna
Enter the Command Line Interface (CLI), run the following command, and then press the Enter key to change your password:
passwd

The default password is saseztna. Your new password cannot be the same as the default password.

The admin user and privileged mode share the same password.
Type enable and then press the Enter key to enter privileged mode. Provide the updated password when asked.
The command prompt changes from > to #.
Use the CLI to configure the required network settings.
After the Private Access Connector is installed, the default IP assignment method for your Ethernet interface is DHCP.

To view the interface information, run the following command:

ifconfig

If your organization does not use a DHCP server, manually configure the static IP address, static route, and DNS server for your interface. For more information on available commands, see Private Access Connector CLI Commands.
(Optional) Run the following command to change the time zone of the Private Access Connector:
configure timezone <timezone>

The default time zone is America/Los_Angeles.
Check whether the Private Access Connector can connect to the NTP server 0.pool.ntp.org.
The Connector requires connectivity to an NTP server to synchronize its clock. By default, Trend Vision One uses the public NTP server 0.pool.ntp.org. You can also configure the Connector to connect to another public NTP server or a local NTP server within your organization.

Run the following command to configure the NTP server: configure ntp server <address>

Note:
To use public NTP servers, make sure that your firewall configuration allows outbound UDP traffic on port 123.
Run the following command to register the Private Access Connector virtual appliance to Trend Vision One:
register <registration_token>

You can obtain the token from the same screen you downloaded the virtual appliance on Trend Vision One.
Note:
- If your environment uses a local Network Time Protocol (NTP) server, make sure the NTP server synchronizes with the local time for successful registration.
- Trend Micro recommends using an SSH client to easily copy and paste the registration token.
Use the CLI to configure other settings, if required.
For more information on available commands, see Private Access Connector CLI Commands.

After successful deployment, the Private Access Connector virtual appliance appears under the corresponding connector group on the Private Access Connectors tab.