Intrusion Defense Firewall 1.2 User's Guide - Trend Micro? Online ...

Protecting a Mobile Laptop Computer
In this guide, we will use the Server Plug-in to protect a mobile laptop. This will involve the following
steps:
1. Activate the Client Plug-in on the laptop computer.
2. Create a new Security Profile for a Windows laptop
a. Create a new Security Profile
b. Assign Firewall and Stateful Configuration Rules with Location Awareness Conditions
c. Assign Deep Packet Inspection (DPI) Rules
3. Apply Security Profiles to the Computer
4. Monitor Activity using the Server Plug-in
We will assume that you have already installed the Server Plug-in on the Computer from which you intend
to manage the IDF Client Plug-ins throughout your network. We will also assume that you have installed
(but not activated) IDF Client Plug-ins on the mobile laptops you wish to protect. If you have not
done so, consult the installation instructions for the steps to get to this stage.
Activate the Client Plug-in on a Computer
Client Plug-ins need to be activated by the Server Plug-in before rules can be assigned to them. The
activation process includes the exchange of unique "fingerprints" between the Client Plug-in and the
Server Plug-in. This ensures that only this IDF Server Plug-in (or one of its nodes) can send instructions to
the Client Plug-in.
To manually activate a Client Plug-in on a Computer, right-click one or more selected Computers and
select Actions > Activate/Reactivate Client Plug-in(s).
Create a Security Profile
Now that the Client Plug-in is activated, we can assign some rules to protect the Computer. Although you
can assign rules directly to a Computer, it‟s more useful to create a Security Profile which contains these
rules and which can then be assigned to multiple Computers.
Creating the Security Profile will involve the following steps:
1. Creating and naming the new Security Profile
2. Defining Multiple Interface Types
3. Setting the Firewall to Inline Mode
4. Assigning Firewall Rules with Location Awareness
5. Assigning Deep Packet Inspection (DPI) Rules
6. Assigning the Security Profile to the Computer
Creating and Naming the New Security Profile
To create a new Security Profile:
1. Click Security Profiles in the Server Plug-in‟s navigation pane, and then click "New" to display
the New Security Profile wizard.
2. Name the new Security Profile "My New Laptop Security Profile". Click Next.
3. The next screen asks if you would like to base the Security Profile on an existing Computer‟s
current configuration. If you were to select "Yes", you would be asked to pick an existing
© Copyright 2010 Trend Micro Inc. www.trendmicro.com
All rights reserved. - 110 -