Intrusion Defense Firewall 1.2 User's Guide - Trend Micro? Online ...

8. The final step in the Firewall section is to enable Stateful inspection. Click Stateful
Configurations under Firewall in the navigation pane. Under Global (All Interfaces) select
Enable Stateful Inspection.
9. Click Save to finish.
Note that Location Awareness is also available for DPI Rules.
Assign Deep Packet Inspection (DPI) Rules
To assign Deep Packet Inspection (DPI) rules to the Security Profile:
1. Still in the "My New Laptop Security Profile" Details window, click Deep Packet Inspection in
the navigation pane. In the Deep Packet Inspection area, clear the Inherit check box, and
select On beneath it. DPI can be set to either Prevent or Detect mode when the Network Engine
is operating in Inline Mode (as opposed to Tap Mode). Detect Mode is useful if you are trying out
a new set of DPI Rules and do not want to risk dropping traffic before you are sure the new rules
are working properly. In Detect Mode, traffic that would normally be dropped will generate events
but will be allowed to pass. Set Deep Packet Inspection to On.
Note the Recommendations area. The IDF Client Plug-in can be instructed to run a
Recommendation Scan. (In the Server Plug-in‟s Computers list, right-click a Computer and select
Actions > Scan Computer(s) for Recommendations.) The Recommendation engine will scan the
Computer for applications and make DPI Rule recommendations based on what it finds. The results of
the Recommendation Scan can be viewed in the Computer‟s Details window by clicking Deep Packet
Inspection > DPI Rules and selecting "Show Recommended" from the Show drop-down list.
For now, leave the "Recommendations" option set to "Inherited (No)".
2. DPI Rules are organized by Application Type. Application Types are a useful way of grouping DPI
Rules; they have only three properties: communication direction, protocol, and ports. For our
new laptop Security Profile, we will assign the following Application Types:
o Mail Client Outlook
o Mail Client Windows
o Microsoft Office
o Web Client Common
o Web Client Internet Explorer
o Web Client Mozilla Firefox
© Copyright 2010 Trend Micro Inc. www.trendmicro.com
All rights reserved. - 117 -