Considerations

Review this section and its sub-sections before deploying the vIPS solution.

Trellix IPS Manager server instance requirements

External Controller instance requirements

Note

In the event of a large deployment with more than 200 vIPS Probes, Trellix recommends you to deploy an External Controller.

Trellix IPS Sensor instance requirements

Trellix vIPS Probe Operating System compatibility

Trellix vIPS Probe Operating System for inbound SSL decryption support

The following are the operating systems that are supported for inbound SSL decryption known-key method:

• 64-bit Red Hat Enterprise Linux 7
• 64-bit CentOS 7
• 64-bit SUSE Linux Enterprise Server 12 and 15
• 64-bit Ubuntu Server 16.04 LTS
• Amazon Linux 2
• Oracle Linux 7.4, 7.5, 7.6, 7.7, and 7.8
• Debian 9
• Windows Server 2019 R2 (Server with a GUI) English operating system
• Windows Server 2016 Datacenter Edition (Server with a GUI) English operating system
• Windows Server 2012 R2 (Server with a GUI) English operating system
• Windows 10 English operating system

For Windows operating system with OpenSSL version 1.1.1, complete the steps below to enable inbound SSL decryption:

1. Go to the folder where Apache is installed and execute the openssl version -v command to verify the OpenSSL version.
2. If the OpenSSL version is 1.1.1 and above, perform the steps as given below:
   1. On your Windows machine, click Start → Run.
   2. Type regedit in the Open textbox. Click OK.
   3. Locate and then click the following subkey in the registry:

      HKLM\System\CurrentControlSet\Control\SecurityProviders\Schannel

   4. Go to Edit → New → DWORD.
   5. Enter DisableServerExtendedMasterSecret: REG_DWORD as the name of the DWORD for the machine receiving the request. Click Enter.
   6. Enter DisableClientExtendedMasterSecret as the name of the DWORD for the machine initiating the request. Click Enter.
   7. Right-click the DWORD entry, and then click Modify.
   8. Type any non-zero value like 1 in the Value data box to disable the TLS extension.

   Note

   You do not have to restart the system after you make changes to the DisableClientExtendedMasterSecret registry settings.

Trellix IPS Manager client requirements

The following table lists the 10.1 Manager/Central Manager client requirements when using Windows 10:

Note

If you wish to install packet capture tool in your Client machines, Trellix recommends you to stop the vIPS Probe and then install the tool.