Thursday, March 11, 2010

Prep for TDA POC

Threat Discovery Appliance (TDA) is part of Trend Micro Threat Management Services.

Find hidden malware before it steals data and damages your network...read more to know. :-)

Checklist(once identified where to deploy):
- at least 2 ports; management and data port (onboard NIC is for management port)
- IP address, subnet mask, default gateway and DNS configuration
- Product activation code for POC
- Time setting
- proxy information required for product activation and log/report generation
- Registered Services ; DNS, SMTP, FTP, PROXY
- list of network segments / VLANS

to access the web console;

https://tda_ipaddress

to check the port mirroring correctly configured / data successfully mirrored

Login to the web console then open another browser then go to the following URL;

https://tda_ipaddress/html/kmod_main.html
note: look for syn_conntrack more than 500

https://tda_ipaddress/html/rdqa.htm
note:look for ATOP to see the bandwidth should be in Mbps or Kbps

No comments: