Intrusion Defense Firewall 1.2 User's Guide - Trend Micro? Online ...

Configure Server Plug-in-Client Plugin
Communications
Who Initiates Communication
At the default setting (Bi-directional), the Client Plug-in will initiate the heartbeat but will still listen on
the Client Plug-in port for Server Plug-in connections and the Server Plug-in is free to contact the Client
Plug-in in order to perform operations as required. Server Plug-in Initiated means that the Server Plugin
will initiate all communications. Communication will occur when the Server Plug-in performs scheduled
updates, performs heartbeat operations (below), and when you choose the Activate/Reactivate or
Update Now options from the Server Plug-in interface. If you are isolating the Computer from
communications initiated by remote sources, you can choose to have the Client Plug-in itself periodically
check for updates and control heartbeat operations. If this is the case, select Client Plug-in Initiated.
The following information is collected by the Server Plug-in during a heartbeat: the status of the
drivers (on- or off-line), the Client Plug-in's status (including clock time), Client Plug-in logs since the
last heartbeat, data to update counters, and a fingerprint of the Client Plug-in's security configuration
(used to determine if it is up to date). You can change how often heartbeats occur (whether Client
Plug-in or Server Plug-in initiated), and how many missed heartbeats can elapse before an alert is
triggered.
This setting (like many other settings) can be configured at three levels: on all Computers by setting a
system-wide default, only on Computers to which a particular Security Profile has been assigned, and on
individual Computers.
On the system as a whole.
1. Go to the Server Plug-in's System > System Settings screen and click the Computers tab.
2. Select "Server Plug-in Initiated", "Client Plug-in Initiated", or "Bi-Directional" from the drop-down
list in the Client Plug-in Communication panel.
Only on Computers to which a particular Security Profile has
been assigned.
1. Open the Security Profiles Properties screen of the Security Profile whose communications
settings you want to configure.
2. Go to System > System Settings and go to the Computer tab.
3. In the "Direction of IDF Server Plug-in to Client Plug-in communication:" drop-down menu, select
one of the three options ("Server Plug-in Initiated", "Client Plug-in Initiated", or "Bi-directional"),
or choose "Inherited". If you select "Inherited", the Security Profile will inherit the setting was
specified on the Server Plug-in's System > System Settings screen. Selecting one of the other
options will override the global selection.
4. Click Save to apply the changes.
Only on a Specific Computer.
1. Open the Computer Details screen of the Computer whose communications settings you want
to configure.
2. Go to System > System Settings and go to the Computer tab.
© Copyright 2010 Trend Micro Inc. www.trendmicro.com
All rights reserved. - 78 -