Edit Protector: Networking tab

Administrator Help | Forcepoint DLP | Version 8.5.x

Use the Networking tab to set protector networking properties:

Enter the IP address for the Default gateway, in the format 123.45.67.8.

The default gateway's IP address should be from the same subnet as eth0.

Select an Interface to which packets for this route will be sent.

To add a DNS server to the DNS servers list, enter its IP address and click Add.

(Optional) To add a suffix to the DNS suffixes list, enter the suffix and click Add. The domain suffix is used by the resolver to help resolve names that are not fully qualified.

Review the Connection mode.

In SPAN/Mirror Port, the protector can only monitor the traffic and cannot interfere with it. In this mode, the protector connects to a switch/TAP port that relays all traffic traversing the network to the protector for analysis.

The protector can use 3 types of network interfaces: Management, Monitoring, and Network.

To configure the protector's interfaces, click the name of the interface, then see Interface configuration in SPAN/Mirror Port mode.

Select Enable VLAN support if the monitored traffic contains VLAN tagging.

If you are using HTTP in monitoring mode, make the following selections:

Set Default Gateway to the outbound gateway.

Edit the network interface br0 as follows:

Set the Link Speed to one of the following: 10Mb/s, 100 Mb/s, 1000Mb/s, or Auto.

Set the Duplex Mode to one of the following: Half, Full, or Auto.

The name of the bridge is shown, but cannot be edited.

Interface configuration in SPAN/Mirror Port mode

To configure the protector's interfaces in SPAN/Mirror Port mode, complete the fields as shown in the table below. All other interfaces can be set as Monitoring interfaces.

The Management Port can also be used for ICAP (specifying an additional port is optional). The additional port can also be set when configured as MTA.

Select the Interface name.

Set the interface operation Mode to either Network or Monitoring.

Enter the Interface IP address.

If Monitoring mode is selected this is not displayed; there is no need for an IP address for eth1 in Monitoring mode.

Set the interface Status to Up or Down. The status is learned from the protector but can be forced manually via this option.

Enter the Subnet mask for the interface.

Set the Link speed to: 10Mb/s, 100 Mb/s, 1000Mb/s, or Automatic.

Set the Duplex mode to: Half, Full, or Automatic.