TREND MICROTM

Deep Discovery Inspector 4300/9300
internal and external traffic and passes the information to Deep Discovery Inspector.
Deep Discovery Inspector uses this information to monitor known and potential
threats.You can connect switches with a mirror port to any of the ports except themanagement port. Deep Discovery Inspector uses these ports as listening ports and will
not interrupt traffic handled by the switches.

Deep Discovery Inspector is a third-generation threat management solution that delivers
advanced persistent threat (APT) and targeted attack visibility, insight, and control.
Deep Discovery Inspector provides IT administrators with critical security information,alerts, and reports.

1Opening and Inspecting the Carton

Trend Micro recommends using a custom network for sample analysis. Custom networks
ideally are connected to the Internet but may be configured with their own network
settings. The appliance provides the option to configure proxies for custom networks, aswell as providing support for proxy authentication.

Verify that the Deep Discovery Inspector carton contains the following items:

The networks must be independent of each other so that malicious samples in thecustom network do not affect hosts in the management network.

Rack rails

To plan your network deployment environment, see the Deployment section in theInstallation and Deployment Guide.

4Document
Power cords

2 Examining the Deep Discovery Inspector Appliance
4

Front Panel

1

Details

Requirement

Deep Discovery Inspector appliance2Deployment Checklist

3

5

Activation CodeObtain from Trend Micro

Monitor and VGA cable

Connects to the VGA port of the applianceUSB keyboard

Connects to the USB port of the appliance

USB mouse

Connects to the USB port of the appliance

Ethernet cablesInternet-enabled computer

67Back Panel

1015IP addresses

One cable connects the management port of the appliance to themanagement network.
One or more cables connect a switch mirror port with any port of theappliance except the management port to monitor traffic.
(Optional) One cable connects a custom network that is reserved for
an internal Virtual Analyzer with any port of the appliance except themanagement port.

A computer that has at least one of the following web browsers installed:Google™ Chrome™



Microsoft™ Edge™



Mozilla™ FireFox™

One static IP address in the management network

(Optional) One additional IP address for an internal Virtual Analyzer,
if connected to a custom network with Internet connectivity

5 Setting Up the Hardware
89121113

1. Mount the Deep Discovery Inspector appliance in a standard 19-inch 4-post
rack, or on a free-standing object, such as a sturdy desk.
Note: When mounting the appliance, leave at least two inches of clearance on all
sides for proper ventilation and cooling

14

Note: The layout of data ports might differ on the delivered appliance. For more information
see the Installation and Deployment Guide athttps://docs.trendmicro.com/en-us/documentation/deep-discovery-inspector/(1) Status LED indicators(2) Front ID button/indicator(3) Power-on button/indicator(4) Front USB connector(5) Front video connector(6) iDRAC Direct port (Micro-ABUSB)(7) Hard drives (4)(8) Management port
(9) iDRAC port

(11) 10/25 Gbps data ports (4)(12) Rear USB connectors (2)(10) 1 Gbps data ports (5)cator(13) Rear video connector(14) Power supply connectors(15) Rear ID button/status indi-Note: Dual AC power slots provide protection in case one of the AC power slots fails.

3

Recommended Network Environment
Deep Discovery Inspector is deployed out-of-band. This means that Deep
Discovery Inspector does not interrupt network traffic. A switch monitors both

2. Connect the appliance to a power source.
3. Connect the monitor to the VGA port at the back of the appliance.
4. Connect the keyboard and mouse to the USB ports at the back of the appliance.
5. Connect the management port to your network.
6. Power on the appliance.

6 Performing Initial Configuration: Preconfiguration Console

Perform the initial preconfiguration from the Preconfiguration Console with a VGAport.
For details on how to access the Preconfiguration Console, see the Preconfiguration
chapter in the Installation and Deployment Guide.

1. On the Preconfiguration Console logon screen, type the following default
logon credentials:
User name: adminPassword: admin
2. On the Preconfiguration Console main menu, type 2 to select Device
Settings and press Enter.
3. On the Device Settings screen, configure IP address settings.
To set a dynamic IP address:
Use the space bar to toggle the IP address option to dynamic.
To set a static IP address:
A. In the Type field, use the space bar to toggle the IP address option to static.
B. Type the following network settings:
IP address (IPv4): the default is 192.168.252.1
Subnet mask: the default is 255.255.255.0
(Optional) Gateway: the default is 192.168.252.254
(Optional) DNS Server 1(Optional) DNS Server 2
Note: Deep Discovery Inspector 5.0 and above can be deployed in
IPv6 environments.
4. (Optional) Type a VLAN ID.
5. Navigate to Return to main menu and press Enter.
The initial configuration is complete and the management console is accessible.

7 Performing Initial Configuration: Management Console

1. Using a supported web browser, open the management console at:https://<Deep Discovery Inspector IP Address>
Note:  Set the Internet Security level to Medium. Enable ActiveX Binary and Script.
 Use the IP address that you specified during the initial configuration.
2. On the logon screen, type the following default credentials:
 User name: admin
 Password: admin
3. Click Log On.
4. Type a new password, and then retype it to confirm.
5. On Administration > System Settings > Time, set the system time.
6. On Administration > Licenses, activate Deep Discovery Inspector.
The Setup Guide screen appears.
7. To configure post-deployment settings, follow the steps in the Setup Guide.
For details on how to set up your threat protection, see the Get Started
chapter in the Administrator's Guide.
8. Connect one or more cables from the traffic source to any port of theappliance except the management port.

8 Contact Information
Website:
https://www.trendmicro.com/
List of worldwide offices and phone numbers:
https://www.trendmicro.com/en_us/contact.html© 2023 Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo are trademarks or registeredtrademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks orregistered trademarks of their owners. Information contained in this document is subject to change without notice.
Item Code: APEQ69879/231211