Intrusion Defense Firewall 1.2 User's Guide - Trend Micro? Online ...

Setting the Firewall to Inline Mode
The Client Plug-in's network engine can operate Inline or in Tap Mode. When operating Inline, the live
packet stream passes through the network engine. Stateful tables are maintained, Firewall Rules are
applied and traffic normalization is carried out so that DPI Rules can be applied to payload content. When
operating in Tap Mode, the live packet stream is cloned and diverted from the main stream. In Tap Mode,
the live packet stream is not modified; all operations are carried out on the cloned stream.
For now, we will configure our Security Profile to direct the engine to operate Inline. To set the Firewall
engine to Inline Mode:
1. Still in the My New Laptop Security Profile Details screen, go to System > System Settings
and click on the Firewall and DPI tab.
2. Set the Network Engine Mode to "Inline". (By default, the setting should already be set to
"Inherited (Inline)" since the global default mode (configured in the main IDF Server Plug-in
system settings) is "Inline" and a new Security Profile inherits global settings.)
3. Click Save at the bottom right of the screen.
Assigning Firewall Rules with Location Awareness
Click Firewall in the navigation pane, de-select the Inherit checkbox and select On beneath it.
© Copyright 2010 Trend Micro Inc. www.trendmicro.com
All rights reserved. - 112 -