Trend MicroTM

Deep Discovery Inspector

6.7 Service Pack 1

Inline (LAN Bypass) Network
Interface Card Installation Guide
Breakthrough Protection Against APTs and Targeted Attacks

Trend Micro Incorporated reserves the right to make changes to thisdocument and to the product described herein without notice. Before
installing and using the product, review the readme files, release notes,
and/or the latest version of the applicable documentation, which areavailable from the Trend Micro website at:
http://docs.trendmicro.com
Trend Micro, the Trend Micro t-ball logo, Deep Discovery Inspector, ApexCentral, and Trend Micro Control Manager are trademarks or registeredtrademarks of Trend Micro Incorporated. All other product or company
names may be trademarks or registered trademarks of their owners.
Copyright © 2024. Trend Micro Incorporated. All rights reserved.
Document Part No.: APEM69901/240430
Release Date: May 2024
Protected by U.S. Patent No.: 8595840; 8925074; 7707635; 8505094

This documentation introduces the main features of the product and/or
provides installation instructions for a production environment. Readthrough the documentation before installing or using the product.
Detailed information about how to use specific features within the productmay be available at the Trend Micro Online Help Center and/or the Trend
Micro Knowledge Base.
Trend Micro always seeks to improve its documentation. If you havequestions, comments, or suggestions about this or any Trend Microdocument, please contact us at docs@trendmicro.com.
Evaluate this documentation on the following site:
https://www.trendmicro.com/download/documentation/rating.asp

Privacy and Personal Data Collection Disclosure
Certain features available in Trend Micro products collect and send feedbackregarding product usage and detection information to Trend Micro. Some ofthis data is considered personal in certain jurisdictions and under certain
regulations. If you do not want Trend Micro to collect personal data, youmust ensure that you disable the related features.
The following link outlines the types of data that Deep Discovery Inspector
collects and provides detailed instructions on how to disable the specificfeatures that feedback the information.
https://success.trendmicro.com/data-collection-disclosure
Data collected by Trend Micro is subject to the conditions stated in the Trend
Micro Privacy Notice:https://www.trendmicro.com/privacy

Table of Contents
Chapter 1: Before you begin
Items to prepare ................................................................. 1-2

Chapter 2: Installation
Install the inline (LAN bypass) network interface card .......... 2-2
Check the card status .......................................................... 2-7

Chapter 3: Frequently asked questions
What happens if Deep Discovery Inspector enters inline
appliance mode? ................................................................. 3-2
Which PCI-E slot should I use to install the inline (LAN bypass)
network interface card? ...................................................... 3-2
What happens if the inline (LAN bypass) network interface cardis removed or if the inline (LAN bypass) network interface card
stops working while Deep Discovery Inspector is in inline
appliance mode? ................................................................. 3-2i

Preface

Preface
Learn more about the following topics:• Documentation on page 2• Audience on page 3• Document Conventions on page 3

1

Deep Discovery Inspector Inline (LAN Bypass) Network Interface Card Installation Guide

Documentation
The documentation set for Deep Discovery Inspector includes the following:
Table 1. Product Documentation
Document2Description

Administrator's Guide

The Administrator's Guide contains detailed instructions on
how to configure and manage Deep Discovery Inspector,
and explanations on Deep Discovery Inspector concepts andfeatures.

AWS Deployment Guide

The AWS Deployment Guide contains information about
requirements and procedures for planning deployment,deploying, and troubleshooting Deep Discovery Inspector
deployment on AWS.

Inline (LAN bypass) Network
Interface Card Installation
Guide

The Inline (LAN bypass) Network Interface Card Installation
Guide contains information about requirements andprocedures for installing an additional bypass network
interface card on supported Deep Discovery Inspector
appliances.

Installation and Deployment
Guide

The Installation and Deployment Guide contains information
about requirements and procedures for planning deployment,installing Deep Discovery Inspector, and using thePreconfiguration Console to set initial configurations andperform system tasks.

Syslog Content Mapping
Guide

The Syslog Content Mapping Guide provides information aboutlog management standards and syntaxes for implementing
syslog events in Deep Discovery Inspector.

Quick Start Card

The Quick Start Card provides user-friendly instructions onconnecting Deep Discovery Inspector to your network and onperforming the initial configuration.

ReadmeThe Readme contains late-breaking product information thatis not found in the online or printed documentation. Topics
include a description of new features, known issues, andproduct release history.

Preface

Document
Online HelpDescription
Web-based documentation that is accessible from the Deep
Discovery Inspector management console.
The Online Help contains explanations of Deep Discovery
Inspector components and features, as well as procedures
needed to configure Deep Discovery Inspector.

Support Portal

The Support Portal is an online database of problem-solving
and troubleshooting information. It provides the latest
information about known product issues. To access theSupport Portal, go to the following website:
https://success.trendmicro.com

View and download product documentation from the Trend Micro Online
Help Center:
https://docs.trendmicro.com/en-us/home.aspx

Audience
The Deep Discovery Inspector documentation is written for IT
administrators and security analysts. The documentation assumes that thereader has an in-depth knowledge of networking and information security,
including the following topics:• Network topologies• Database management• Antivirus and content security protection
The documentation does not assume the reader has any knowledge ofsandbox environments or threat event correlation.

Document Conventions
The documentation uses the following conventions:3

Deep Discovery Inspector Inline (LAN Bypass) Network Interface Card Installation Guide

Table 2. Document Conventions
Convention

Description

UPPER CASE

Acronyms, abbreviations, and names of certain commands
and keys on the keyboard

Bold

Menus and menu commands, command buttons, tabs, andoptions

Italics

References to other documents

Monospace

Sample command lines, program code, web URLs, file names,and program output

Navigation > Path

The navigation path to reach a particular screen
For example, File > Save means, click File and then click
Save on the interface

NoteTip

Important

WARNING!

4Configuration notes

Recommendations or suggestions

Information regarding required or default configuration
settings and product limitations

Critical actions and configuration options

Chapter 1

Before you begin

1-1

Deep Discovery Inspector Inline (LAN Bypass) Network Interface Card Installation Guide

Items to prepare•Important
Installing a network interface card in Deep Discovery Inspector 530/1300
requires removing the COM port permanently.
If you need the COM port to pre-configure Deep Discovery Inspector,
Trend Micro recommends using Dell's iDRAC instead.

Deep Discovery Inspector appliance running Deep Discovery Inspector
6.7 SP1
Supported models:
• 520
• 530
• 1200• 1300• 4200• 9200• 4300• 9300• Inline (LAN bypass) network interface card
Select the appropriate card according to the network throughput.
Supported cards:• Dual Port 1GbE Copper Bypass Card for TLS Inspection• Dual Port 10GbE Fiber-SR Bypass Card for TLS Inspection

1-2

Chapter 2

Installation2-1

Deep Discovery Inspector Inline (LAN Bypass) Network Interface Card Installation Guide

Install the inline (LAN bypass) network interface
cardProcedure
1.

Turn off Deep Discovery Inspector.
a.

Go to Administration > System Maintenance > Power Off / Restart.

b.

Select Power off and click Ok.

2.

Disconnect the power cord from the appliance.

3.

Install the card in the appliance.
a.

Remove the server's top cover.

b.

If you have Deep Discovery Inspector 530/1300, remove the COM
port from the appliance.
1. Hold the card riser from the sides marked with blue (1), thenlift the card riser.
2. Disconnect the COM port connector from the motherboard (2).

2-2Installationc.

Open the card retention latch and remove the slot cover of an empty
PCIe slot

2-3Deep Discovery Inspector Inline (LAN Bypass) Network Interface Card Installation Guide

2-4

d.

Align the card with the server's PCIe slot, push the card in firmly
until the card connects.

e.

Close the card retention latch.

Installationf.

Secure the card holder to the server chassis.

2-5Deep Discovery Inspector Inline (LAN Bypass) Network Interface Card Installation Guide

4.

2-6

Close up the server.

InstallationCheck the card status
After installing, check the card status on the Deep Discovery Inspector
management console.
Procedure
1.

After installing, check the card status on the Deep Discovery Inspector
management console.

2.

In the management console, go to Administration > System Settings >Network Interface.

3.

Check the card status.
If the inline (LAN bypass) network interface card is installed correctly,
the Inline Interfaces section appears.

2-7Chapter 3

Frequently asked questions

3-1

Deep Discovery Inspector Inline (LAN Bypass) Network Interface Card Installation Guide

What happens if Deep Discovery Inspector enters
inline appliance mode?
Deep Discovery Inspector does not support inline and out-of-band
deployment at the same time.
Enabling inline appliance mode stops network traffic monitoring frommirror ports, and only traffic flowing through inline ports is inspected.
Important
Deep Discovery Inspector does not block traffic.

Which PCI-E slot should I use to install the inline(LAN bypass) network interface card?
You can use any empty PCIe slot to install an inline (LAN bypass) network
interface card.
Important
Moving installed cards to different slots before installing an inline (LANbypass) network interface card results in unexpected configuration changes.

What happens if the inline (LAN bypass) network
interface card is removed or if the inline (LANbypass) network interface card stops working
while Deep Discovery Inspector is in inline
appliance mode?
Deep Discovery Inspector automatically switches to offline mode, and stops
inspecting TLS traffic.
Deep Discovery Inspector records all the events associated to this change inthe system logs.

3-2

Item Code: APEM69901/240430