Trend Micro™ Network VirusWall™ Enforcer 2500 Administrator’s Guide
1
-
20
The solution:
Add a Bridge IP address and bind the address to a bridge port using the Web console.
You can add Bridge IP addresses from Administration -> IP Address Settings |
Bridge IP Address(es).
What happens after you add the Bridge IP Address:
1.
Network VirusWall Enforcer receives Endpoint 2 traffic.
2.
Network VirusWall Enforcer (NVWE) sends the blocking page and deploys
Policy Enforcement Agent to Endpoint 2 through the bridge IP address. The path
of the traffic is: NVWE -> L2 Switch -> Endpoint 2.
3.
After performing an assessment, Policy Enforcement Agent sends the results to
Network VirusWall Enforcer through the bridge IP address.
4.
Network VirusWall Enforcer receives the results and updates the state of
Endpoint 2 successfully.
Static Routes
Configure static routes to allow packets to pass through the device to different
segments in your network. This list supports up to 50 entries.
An Example of When a Bridge IP Address and Static Route is
Necessary
You need to configure a Bridge IP address and Static Route if you have an
environment where: the Network VirusWall Enforcer (NVWE) 2500 Management IP
address and the endpoint IP addresses do not belong to the same network segment,
there is a router between the device and the endpoint, and the device and endpoint
belong to the same VLAN. See
An Example of When a Bridge IP Address is
on page 1-18 for an explanation of why a Bridge IP address is necessary.
:
•
Endpoint 1 and Router 1’s interface 1 belong to the same network segment.
•
Endpoint 2 and Router 1’s interface 2 belong to the same network segment.
•
All devices and endpoints belong to VLAN 3.
