General settings

Windows based Manager

• Trellix recommends you use a dedicated server, hardened for security, and placed on its own subnet. This server should not be used for programs like instant messaging or other non-secure Internet functions.
• You must have Administrator/root privileges on your Windows server to properly install the Trellix IPS Manager software and an embedded database for Windows Manager during Manager installation.
• It is essential that you synchronize the time on the IPS Manager server with the current time. To keep time from drifting, use a timeserver. If the time is changed on the Manager server, the Manager will lose connectivity with all Trellix Intrusion Prevention System Sensors (Sensors) and the Trellix IPS Update Server because SSL is time-sensitive.
• If Manager Disaster Recovery (MDR) is configured, ensure that the time difference between the Primary and Secondary Managers is less than 60 seconds. (If the spread between the two exceeds more than two minutes, communication with the Sensors will be lost.)

  Tip

  For more information about setting up a time server on Windows Servers, see the following Microsoft KnowledgeBase article: http://support.microsoft.com/kb/816042/.

  Note

  Once you have set your server time and installed the Manager, do not change the time on the Manager server for any reason. Changing the time may result in errors that could lead to loss of data.

Linux based Manager

• It is essential that you synchronize the time on the Manager server with the current time. To keep time from drifting, use a timeserver. If the time is changed on the Manager server, the Manager will lose connectivity with all Trellix Intrusion Prevention System Sensors (Sensors) and the Trellix IPS Update Server because SSL is time-sensitive.
• If Manager Disaster Recovery (MDR) is configured, ensure that the time difference between the Primary and Secondary Managers is less than 60 seconds. (If the spread between the two exceeds more than two minutes, communication with the Sensors will be lost.)

  Tip

  For more information about setting up a time server on Linux based Manager, see the following Man page article: http://man7.org/linux/man-pages/man1/timedatectl.1.html.

  Note

  Once you have set your server time and installed the Manager, do not change the time on the Manager server for any reason. Changing the time may result in errors that could lead to loss of data.