Installation checklist

Use out-of-band management on a network that ePO - SaaS can access to isolate management and network traffic.

When clustering is enabled, LAN 1 traffic must not be accessible from outside your organization. You do not have to connect LAN 1 if you are not using clustering.

Connect any baseboard management controller (BMC) interface to a dedicated secure management network.

Control who can access the physical or virtual appliance console.

Logon account — The appliance has a local administrator account for logging on to the virtual machine shell. Change the default administrator password to make the account secure.

Determine the most appropriate place in your network to attach the Trellix DLP Network Monitor – SaaS appliance Capture port 1. For example, consider using a SPAN port or a network tap.

Network interfaces must be assigned with static IP addresses, rather than dynamically assigned IP addresses.

In a cluster environment, the virtual IP address must be in the same subnet as the appliance LAN 1 IP addresses.

The cluster ID and the virtual IP address must be different from that of any other or Trellix DLP Network Monitor – SaaS cluster, regardless of the management platform.