Views:
  1. Go to Administration > Smart Protection > Smart Protection Sources.
  2. Click the Internal Agents tab.
  3. Select Use custom lists based on agent IP address.
  4. (Optional) Select Use the standard list when all servers on the custom lists are unavailable.
    Tip:

    Trend Micro recommends enabling this feature to ensure that agents can connect to a smart protection source if the custom sources become unavailable.

  5. Click Add.

    A new screen opens.

  6. In the IP Range section, specify an IPv4 or IPv6 address range, or both.
    Note:

    Agents with an IPv4 address can connect to pure IPv4 or dual-stack Smart Protection Servers. Agents with an IPv6 address can connect to pure IPv6 or dual-stack Smart Protection Servers. Agents with both IPv4 and IPv6 addresses can connect to any Smart Protection Server.

  7. In the Proxy Setting section, specify proxy settings agents will use to connect to the Smart Protection Servers.
    1. Select Use a proxy server for agent and Smart Protection Server communication.
    2. Specify the proxy server name or IPv4/IPv6 address, and port number.
    3. If the proxy server requires authentication, type the user name and password.
  8. In the Custom Smart Protection Server List, add the Smart Protection Servers.
    1. Specify the Smart Protection Server's host name or IPv4/IPv6 address. If you specify an IPv6 address, enclose it in parentheses.
      Note:

      Specify the host name if there are IPv4 and IPv6 agents connecting to the Smart Protection Server.

    2. Select File Reputation Services. Agents send scan queries using the HTTP or HTTPS protocol. HTTPS allows for a more secure connection while HTTP uses less bandwidth.

      1. If you want agents to use HTTP, type the server's listening port for HTTP requests. If you want agents to use HTTPS, select SSL and type the server's listening port for HTTPS requests.

      2. Click Test Connection to check if connection to the server can be established.

      Tip:
      The listening ports form part of the server address. To obtain the server address:
      • For the integrated server, open the Apex One web console and go to Administration > Smart Protection > Integrated Server.
      • For the standalone server, open the standalone server's console and go to the Summary screen.
    3. Select Web Reputation Services. Agents send web reputation queries using the HTTP protocol. HTTPS is not supported.

      1. Type the server's listening port for HTTP requests.

      2. Click Test Connection to check if connection to the server can be established.

    4. Click Add to the List.
    5. Add more servers by repeating the previous steps.
    6. Select Order or Random.

      • Order: Agents pick servers in the order in which they appear on the list. If you select Order, use the arrows under the Order column to move servers up and down the list.

      • Random: Agents pick servers randomly.

      Tip:

      Because the integrated Smart Protection Server and the Apex One server run on the same computer, the computer's performance may reduce significantly during peak traffic for the two servers. To reduce the traffic directed to the Apex One server computer, assign a standalone Smart Protection Server as the primary smart protection source and the integrated server as a backup source.

    7. Perform miscellaneous tasks in the screen.

      • To refresh the service status of servers, click Refresh.

      • To open the console of a Smart Protection Server, click Launch console.

        • For the integrated Smart Protection Server, the server's configuration screen displays.

        • For standalone Smart Protection Servers and the integrated Smart Protection Server of another Apex One server, the console logon screen displays.

      • To delete an entry, click Delete ().

  9. Click Save.

    The screen closes. The list you just added appears as an IP range link under the IP Range table.

  10. Repeat step 4 to step 8 to add more custom lists.
  11. Perform miscellaneous tasks in the screen.

    • To modify a list, click the IP range link and then modify the settings in the screen that opens.

    • To export the list to a .dat file, click Export and then click Save.

    • If you have exported a list from another server and want to import it to this screen, click Import and locate the .dat file. The list loads on the screen.

  12. Click Notify All Agents.
Parent topic: Smart Protection Source List