TREND MICROTM

Deep Discovery Inspector 530/1300
Deep Discovery Inspector is a third-generation threat management solution that delivers
advanced persistent threat (APT) and targeted attack visibility, insight, and control.
Deep Discovery Inspector provides IT administrators with critical security information,alerts, and reports.

1

You can connect switches with a mirror port to any of the ports except the management
port. Deep Discovery Inspector uses these ports as listening ports and will not interrupt
traffic handled by the switches.
Trend Micro recommends using a custom network for sample analysis. Custom networks
ideally are connected to the Internet but may be configured with their own network
settings. The appliance provides the option to configure proxies for custom networks, aswell as providing support for proxy authentication.

Opening and Inspecting the Carton
Verify that the Deep Discovery Inspector carton contains the following items:

User name: admin
Password: admin
2. On the Preconfiguration Console main menu, type 2 to select Device
Settings and press Enter.
3. On the Device Settings screen, configure IP address settings.
To set a dynamic IP address:
Use the space bar to toggle the IP address option to dynamic.
The networks must be independent of each other so that malicious samples in thecustom network do not affect hosts in the management network.

To set a static IP address:
A. In the Type field, use the space bar to toggle the IP address option to static.
B. Type the following network settings:
IP address (IPv4): the default is 192.168.252.1
Subnet mask: the default is 255.255.255.0
(Optional) Gateway: the default is 192.168.252.254
(Optional) DNS Server 1
(Optional) DNS Server 2

To plan your network deployment environment, see the Deployment section in theInstallation and Deployment Guide.

4Rack rails
Document and DVD

Deep Discovery Inspector appliancePower cords

Deployment Checklist
Activation CodeObtain from Trend MicroMonitor and VGA cable

Connects to the VGA port of the applianceUSB keyboard

Connects to the USB port of the appliance

USB mouse

Connects to the USB port of the appliance

Ethernet cables

2 Examining the Deep Discovery Inspector Appliance
Front PanelInternet-enabled computer

IP addresses

Back Panel

Details

Requirement

One cable connects the management port of the appliance to themanagement network.
One or more cables connect a switch mirror port with any port of theappliance except the management port to monitor traffic.
(Optional) One cable connects a custom network that is reserved for
an internal Virtual Analyzer with any port of the appliance except themanagement port.

A computer that has at least one of the following web browsers installed:(8) RS-232 serial connector(9) Management port
(10) iDRAC port
(11) Rear USB connectors (2)(12) Rear video connector(13) Power supply connectors (2)(14) 1 Gbps data ports (5)Note: Dual AC power slots provide protection in case one of the AC power slots fails.

3Recommended Network Environment
Deep Discovery Inspector is deployed out-of-band. This means that Deep Discovery
Inspector does not interrupt network traffic. A switch monitors both internal andexternal traffic and passes the information to Deep Discovery Inspector. Deep
Discovery Inspector uses this information to monitor known and potential threats.

The initial configuration is complete and the management console is accessible.

7 Performing Initial Configuration: Management Console
1. Using a supported web browser, open the management console at:https://<Deep Discovery Inspector IP Address>
Note:

Google™ Chrome™



Microsoft™ Edge™

Mozilla™ FireFox™



One static IP address in the management network

(Optional) One additional IP address for an internal Virtual Analyzer,
if connected to a custom network with Internet connectivity

1. Mount the Deep Discovery Inspector appliance in a standard 19-inch 4-post
rack, or on a free-standing object, such as a sturdy desk.

(1) Status LED indicators(2) Optical drive(3) Front video connector(4) Power-on indicator/button(5) USB connector(6) iDRAC Direct port (Micro-AB USB)
(7) Hard drives (2)4. (Optional) Type a VLAN ID.
5. Navigate to Return to main menu and press Enter.

5 Setting Up the Hardware
Note: The layout of data ports may differ on the delivered appliance. For more information
see the Installation and Deployment Guide athttps://docs.trendmicro.com/en-us/enterprise/deep-discovery-inspector.aspx.

Note: Deep Discovery Inspector 5.0 and above can be deployed in
IPv6 environments.

Note: When mounting the appliance, leave at least two inches of clearance on all sides
for proper ventilation and cooling.

2. Connect the appliance to a power source.
3. Connect the monitor to the VGA port at the back of the appliance.
4. Connect the keyboard and mouse to the USB ports at the back of the appliance.
5. Connect the management port to your network.
6. Power on the appliance.

6 Performing Initial Configuration: Preconfiguration Console
Perform the initial preconfiguration from the Preconfiguration Console with anyof the following:VGA port
Serial port
For details on how to access the Preconfiguration Console, see thePreconfiguration chapter in the Installation and Deployment Guide.
1. On the Preconfiguration Console logon screen, type the following default
logon credentials:

Set the Internet Security level to Medium. Enable ActiveX Binary and Script.
Use the IP address that you specified during the initial configuration.

2. On the logon screen, type the following default credentials:
 User name: admin
 Password: admin
3. Click Log On.
4. Type a new password, and then retype it to confirm.
5. On Administration > System Settings > Time, set the system time.
6. On Administration > Licenses, activate Deep Discovery Inspector.
The Setup Guide screen appears.
7. To configure post-deployment settings, follow the steps in the Setup Guide.
For details on how to set up your threat protection, see the Get Started
chapter in the Administrator's Guide.
8. Connect one or more cables from the traffic source to any port of theappliance except the management port.

8 Contact Information
Website:
https://www.trendmicro.com/
List of worldwide offices and phone numbers:
https://www.trendmicro.com/en_us/contact.html© 2023 Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo are trademarks or registeredtrademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks orregistered trademarks of their owners. Information contained in this document is subject to change without notice.
Item Code: APEQ69804/230726