Trend Micro Gatelock X200 User Manual

Trend Micro, Incorporated™ reserves the right to make changes to
this document and to the products described herein without notice.
Before installing and using the product, please review the readme
files, release notes, and the latest version of the User’s Guide, which
are available from Trend Micro's Web site at:

http://www.antivirus.com/download/documentation.

Gatel ock ™ an d Trend L abs ™ ar e reg i st er ed t rademarks o f Trend
Micro, Incorporated and are registered in certain jurisdictions.

All other brand and product names are trademarks or registered
trademarks of their respective companies or organizations.

Copyright © 2001, Trend Micro, Incorporated. All rights reserved.
No part of this publication may be reproduced, photocopied, stor ed in
a retrieval system, or transmitted without the express prior written
consent of Trend Micro, Incorporated.

Document Part No.: GLEM20885/11024
Release Date:October 2001
Patent Nos.: 5,889,943; 5,951,698; and 5,623,600

This manual, Trend Micro GateLock User’s Guide, is intended to
introduce the main features of the hardware and install it into your
production environment. You should read through it prior to
installing or using the hardware.

Detailed information about how to use GateLock’s specific features
is available in the online help file and online Solution Bank at Trend
Micro’s We b site.

At Trend Micro, we are always seeking to improve our
documentation. If you have questions, comments, or suggestions
about this or any Trend Micro document, please contact us at
[e-mail]. Your feedback is always welcome. You can
also evaluate this documentation on the following site:
http://www.antivirus.com/download/documentation/rating.asp

.

Contents

Chapt er 1: Introd uci n g GateL oc k ™

Chap t e r Overvi e w .............. ...... ...... ...... ...... ..... ...... ...... .....1-1

What is G ateLock? .......... ...... ...... ...... ...... ..... ...... .......... ...1-1

Security ............................................................................1-2

Sharing Capability ...........................................................1-2

Ease of Use ......................................................................1-2

Summary of Trend Micro GateLock Features .................1-3

Contents of Package ........................................................1-4

Layout of GateLock’s Back Panel .......... ......................... 1-4

Power Input ................................................................1-5

Reset/Self-Test Button ...............................................1-5

Intern e t Po r t ........................................... ....................1-6

Contents

Hub- P C Switch ............ ...... ...... ...... ...... ..... ...... ...... .....1- 6

PC/Hub Port ...............................................................1-6

Indicator Lights on GateLock’s Front Panel ...................1-7

Power .........................................................................1-7

Antivirus ....................................................................1-8

Anti-Hacker ...............................................................1-8

PC/HUB ........ ...... ........ ...... ........ ...... ......... ...... ........ ....1- 8

Intern et ...... ...... ........ ...... ........ ...... ........ ....... ........ ...... ..1-9

Chapter 2: Installing GateLock

Chap t e r Overvi e w .............. ...... ...... ...... ...... ..... ...... ...... .....2-1

Before Installing GateLock .............................................2-1

Activating TCP/IP .....................................................2-2

Configuring your DHCP settings ..............................2-3

Insta l l i n g Y o u r GateLo ck ...... ...... ...... ...... ......... ...... ...... ...2-7

Requirements .............................................................2-7

i

Trend Micro™ GateLock ™ User’s Guide

Chapt er 3: Confi gur in g Gat eL ock

Chapter Overview ...........................................................3-1

Configuration Console Layout ........................................3-1

Openin g th e Co n figura t ion Co n sole .. ............... ...............3-2

Quick S e t u p ............ ...... ...... ...... ...... ...... ...... ......... ...... ......3-3

Specifying how GateLock obtain its IP address .......3-3

ISP Requ i rement s .. ................................ ....................3- 7

Email Notification Options .......................................3-8

Connection ....................................................................3-10

Connect i o n Settings .. .................... ..........................3- 1 0

On-Demand Connection ..........................................3-11

ISP Requ i rement s .. ................................ ..................3-12

Security .........................................................................3-14

Antivirus Options ....................................................3-14

Antiv irus Log s .......... ...... ...... ...... ...... ...... ..... ...... ......3-18

Anti-Hacke r O p t io n s ............ ...... ...... ...... ..... ...... ......3-18

Anti-Hacker Logs ....................................................3-20

Update ...........................................................................3-21

Product Update ........................................................3-21

Updat e H i st o ry .............. ....................................... ...3-22

Settin gs ...... .......... ........ .......... ........ .......... ......... .......... ... 3-2 2

Email Notification ...................................................3-23

Passw o rd P ro t e ction .......... ......................................3- 2 3

Time Zone ...............................................................3-24

Advanced .......................................................................3-25

IP Port Forwardi n g ...... .................... ........................3-2 5

Netwo r k Traffic Co n trol ............ ...... ...... ..... ...... ......3-29

Support Information ......................................................3-32

Onlin e Re g i strati o n ........ ...... ...... ...... ...... ...... ..... ...... ......3-33

The Button Bar ..............................................................3-35

ii

Chapter 4: Troubleshooting and Technical Support

Chap t e r Overvi e w .............. ...... ...... ...... ...... ..... ...... ...... .....4-1

Troubleshooting ...............................................................4-1

Ethernet Cables ..........................................................4-1

Connection Timed Out ..............................................4-2

Using PI N G ...... .......................... ...............................4 - 2

Performing A Self-Test On GateLock .......................4-4

Trend Micro Contact Info and Online Resources ........ ....4- 5

Contacting Technical Support ...................................4-5

Registering GateLock ................................................4-7

Testi n g In stall a t io n .......... ...... ...... ...... ..... ...... ...... .. .....4- 7

Virus Information Center ...........................................4-8

SolutionBank Knowledge Base .................................4-8

TrendLabs™ ............................................................4-10

Sending Your Infected Files to Trend Micro ...........4-11

Contents

Appendix

Viewing your MAC address ...........................................A-1

On a Windows 95/98 machine: ................................A-1

On a Windows NT/2000 machine: ...........................A-2

Setting the Proxy Server in Your Browser .....................A-2

Disabling the Proxy Server .............................................A-2

On Inte rn e t Ex p l o rer ............ ...... ...... ..... ...... ............ ..A-2

On Netscape ..............................................................A-2

Enabling the Proxy Server with an Exception ................A-3

On Inte rn e t Ex p l o rer ............ ...... ...... ..... ...... ............ ..A-3

On Netscape ..............................................................A-3

Insta l l ing GateL o c k with a router ...................................A - 3

Alternat iv e Procedu re ........ ...... ...... ...... ..... ...... ...... ....A-4

Frequently Asked Questions ...........................................A-6

Techn ical Specific a t i o n s ...... ...... ...... ...... ..... ...... .. ...... ....A-10

Environmental Data ......................................................A-11

Glossary ........................................................................A-12

Index

iii

Trend Micro™ GateLock ™ User’s Guide

iv

Chapter 1

Introducing GateLock™

Chapter Overview

This chapter:

• Introduce s the main features and advantages of using GateLock

• Lists and illustrate s the items included in the GateL ock package

• Explains the usage of GateLock’s indicator lights and por ts

What is GateLock?

Trend Micro GateLock is an all-in-one, plug-and-play Internet security appliance
designed for home and small office/home of fice (SOHO) networks that use a
broadband connection. GateLock protects you from hackers with its powerful
firewall features and scans your incoming and outgoing mail using Trend Micro’s
market-tested antivirus technology.

Your GateLock also serves as a router for your SOHO network that allows multiple
computers to share a single broadband connection to simultaneously access the
Internet.

1-1

Trend Micro™ GateLock ™ User’s Guide

Security

GateLock protects your PC and home network from hackers by blocking
unauthorized external connections and cloaking your IP address, making your
computer and home network "invisible" to other people on the Internet. With its
powerful firewall features, it monitors network traffic and detects and blocks
intrusion attempts. GateLock keeps records of detected hacker attempts and can also
be configured to send email notifications about these attempts.

Asid e fr o m anti-hacker fea t u r es, Gate Lo c k is al s o p ac k ed w i th Trend M ic r o ’s
powerful antivirus technology. It can scan your incoming Post Office Protocol 3
(POP3) and outgoing Simple Mail Transfer Protocol (SMTP) mail messages and
Webmail attach ments for viruses. To ensure that your antiv irus protection is always
up-to-date, you can configure GateLock to automatically download updates for its
antivirus components from Trend Micro’s update server. GateLock automatically
records details of up to 30 of the most recently detected viruses and component
updates.

Sharing Capability

Your GateLock also functions as a router that makes it very easy for you to set up
your home network. It allows up to 32 users in your home or SOHO network to
simultaneously access the Int ernet using a single broadband connec tion. No driver or
software is needed to share your broadband connection as long as the Trans mi ssion
Control Protocol/Internet Protocol (TCP/IP) is installed. TCP/IP is a suite of
communication protocol s used to connect hosts on the Internet.

GateLock can also function as a Dynamic Host Configuration Protocol (DHCP)
server that automatical ly assigns IP addresses to your devices so that you do not have
to choose and manually specify IP addresses.

Ease of Use

GateLock is a plug-and-play device that require s minimal setup. With your preferred
Web browser (Microsoft

4.5 or higher), you ca n configure GateLock in a matter of minutes.
To make it even easier , a Qui ck Setup wizard is included to lead you through the

initia l configurati on s teps. For advanced users who need to perform extra tasks like

®

Internet Explorer 5.0 or higher, or Netscape® Navigator

1-2

Introducing GateLock™

mapping IP addresses or port numbers for their servers and customizing firewall
rules, Gatelock’s intuit ive conf iguration console enables quick configurat ion. Even if
you have no knowledge about networking, you can take advantage of the
convenience, protection, and speed afforded by GateLock withi n mi nutes.

Summary of Trend Micro GateLock Features

• Provides antivirus protection without requiring software installation. Scans POP3
and SMTP mail message s and Webmail attachments for viruses

• Supports aut omatic and manual updates of antivirus components, keeping you
constantly protecte d agai nst virus attac ks on the Internet.

• Provides robust anti-hacker protection and cus tom izable intrusion detection and
network traffic contro l rules

• Sends email notifications for suspected hacker attacks and available GateLock
software updates

• Allows multi ple PCs (up to 32 computers) to access the Internet through a single
xDSL or cable modem lin e (Net work Address Tra nslation) with only one
purchased IP addr es s, by connecting GateL ock to a hub. Works with any Ethe rnet
connection

• Acts as a DHCP server on the LAN that dyna mi ca lly assigns IP addresses to your
PCs, making it much easier to set up your home network

• Serv es as a DHCP cl ient o n th e WAN that automatically receives ea ch IP add ress
assigned by your ISP, if your ISP dynamical ly assigns IP addresses to you

• Hides your PC’s IP address from potential intruders, making it harder for hackers
to attack your PC.

1-3

Trend Micro™ GateLock ™ User’s Guide

Content s of Package

Illustrated below are the items included in your GateLock package.

FIGURE 1-1. Contents of the GateLock Package

• GateLock unit

• Power cord (connect s GateLock to a power source)

• CAT5 UTP Ethernet cable (connects f r om lo cal GateLock port to Et hernet port on
PC, or Uplink port on hub/switch)

• Trend Micro GateLock Quick Installation Guide

•This Trend Micro GateLock User’s Guide

Layout of GateLock’s Back Panel

Figure 1-2 shows the back panel of your GateLock unit. This is where you make all
physical connections to GateLock: the power adapter, the network cable from your
PC or hub and the network cable to your xDSL/cable modem. The HUB-PC dip
switch and the Reset/Self-Test button are also found here.

1-4

FIGURE 1-2. Back Panel of your GateLock unit

From left to right, the five items on the back panel are:

• PWR (Power Input)

• Reset/Self-Test Button

• Internet Port

• Hub-PC Switch

• PC/Hub Port

Introducing GateLock™

• FG (Frame Ground)

Power Input

The power input port is identified as PWR on the back of the GateLock router. This
is where you connect the AC power cord included in the GateLock package. (Output:
5 volt direct current, 3 amperes.)

Reset/Self-Test Button

When you press Reset, GateLock’s configu rati on values wil l be restore d t o its defaul t
values. To prevent accidental activation, the Reset button is slightly recessed within
the rear G ateLock pa n el. To reach the Reset button, simply insert the tip of a pen or
similar object into the opening and push in lightly.

When you press Self-Test, GateLock checks itself for hardware problems. For
instructions on how to perform a self-test on GateLock, refer to Performing A

Self-Test On GateLock starting on page 4-4.

Note: If you forget your GateLock configuration console password, you can restore

GateLock’s default settings by pressing the Reset button. The default configuration
console password is blank.

1-5

Trend Micro™ GateLock ™ User’s Guide

Internet Port

This is where you connect your cable or xDSL modem. Connect one end of the UTP
Ethernet cross-over cable (provided by your ISP) to GateLock’s Internet port, and
the other end to your cable or xDSL modem.

Hub-PC Switch

The Hub-PC switch is a dip switch that toggles between “PC mode” and “Hub
mode.” If you will be using GateLock with one PC, move the switch to the PC side.
If you will be using Gatelock with a hub which is connected to multiple PCs, move
the switch to the HUB side.

However , if you will be using GateLock with a router, you should move the switch to
the PC side. A hub is different from a router. A hub is commonly used to connect
segments of a LAN whereas a router is used to connect a number of LANs. See

Installing GateLock with a router starting on page A-3 for detailed instructions on

how to set up your GateLock with a router.

PC/Hub Port

Included in your GateLock pa ckage is a CAT5 UTP Ethernet cable. Connect one end
of this cable to GateLock’s PC/Hub port, and connect the other end to the Ethernet
port on the PC or Hub.

1-6

Introducing GateLock™

Indicator Lights on GateLock’s Front Panel

Shown below is the front panel of your GateLock. This is where GateLock’s
indicator lights or LEDs are locate d.

FIGURE 1-3. Front Panel of your GateLock unit

The five LEDs on the front panel are:

•Power

• Antivirus

• Anti-Hacker

•PC/Hub

•Internet

Power

When GateLock is connected to a power source, the Power LED will be illuminated.
The Power LED will be off when electricity is not reaching the unit.

Note: To connect Gatelock to a power source, plug the power adapter (included in your

GateLock package) into the PWR port on GateLock’s back panel.

1-7

Trend Micro™ GateLock ™ User’s Guide

Antivirus

If GateLock’s Antivirus protection is enabled, the Antivirus LED will be green. By
default, the Antivirus function is enabled and is set to Clean an infected file upon
detection, or to Delete if the file cannot be cleaned. See Antivirus Options on page
3-14 to learn how to change this setting.

Whe n Ga t eL o ck d etects a v ir u s, the Antivirus LED turns red. You can click the
Antivirus Logs hyperlink on the sidebar to view deta ils about the detecte d virus. The
Antivirus LED will turn green again after you view the Antivirus Logs.

If GateLock’s Antivirus LED is off, it means GateLock’s Antivirus protection is
disabled.

Anti-Hacker

If GateLock’s Anti-Hacker protection level is set to High or Medium, the
Anti-Hacker LED will be green. By default, the Anti-Hacke r protection level is set
to High, which means GateLock will block unsolicited inbound traffic according to
GateLock’s internal pre-defined rules and make your PC or network invisible from
outside. See Anti-Hacke r Options on page 3-18 to learn how to change this setting.

When GateLock detects a suspected hacker attack, the Anti-Hacker LED turns red.
You can clic k the Anti-Hacker Logs hyperli nk on the sidebar to view details about
the suspected hacker attack. The Anti-Hacker LED will turn green again after you
view the Anti-Hacker Logs.

If GateLock’s Anti-Hacker LED is off, it means GateLock’s Anti-Hacker security
level is set to Low .

Note: To see all of G at eL o c k’s def au l t se ttings, a s well as the pr o ce d ur e to a lter the va lu e s to

your own specifications, please refer to Chapter 3.

PC/HUB

If the PC/HUB LED is green or orange (depending whe ther your net work connect ion
speed is 100Mbps or 10Mbps, respectively), this indicates that a network cable is
plugged into the PC/HUB port. If it is off, it indicates that the network cable is
unplugged from the PC/HUB port.

If the PC/HUB LED is blinking, this means there is traffic being sent between your
PC and GateLock on the PC/HUB line.

1-8

Introducing GateLock™

Internet

If the Internet LED is green or orange (dependi ng whether your network connect ion
speed is 100Mbps or 10Mbps, respectively), this indicates that a network cable is
plugged into the Internet port. If it is off, it indicates that the network cable is
unplugged from the Internet port.

If the Internet LED is blinking, this means there is traffic being sent between
GateLock and the Internet on the Internet line.

You are now ready for Chapter 2 which explains how to set up your GateLock.

1-9

Trend Micro™ GateLock ™ User’s Guide

1-10

Chapter 2

Installing GateLock

Chapter Overview

This chapter:

• Discusses how to activate TCP/IP on your PC and configure your DHCP sett ings
to ensure that you can connect to the Internet after you install your GateLock

• Explains how to set up and connect your GateLock to your P C or hub.

Note: If you are using GateLock with a router, see Installing GateLock with a router

starting on page A-3. You may have to follow a different procedure to be able to
connect to the Internet.

Before Installing Gate Lo ck

Before you set up and connect your GateLock to your PC or hub, there are two things
that you have to check:

1. Is TCP/IP install ed on your PC?

2. Does your PC obtain its IP address automa tically vi a DHCP?

If your answer is Yes to both questions, you may go directly to Installing Your

GateLock on page 2-7. If your answer is No to one or both, follow the succeeding

instructions to make sure you can connect to the Internet after you install GateLock.

2-1

Trend Micro™ GateLock ™ User’s Guide

Activating TCP/IP

Before you can use a PC for Internet access, you must activate its TCP/IP software.
This must be done for each computer you wish to use in conjunction with GateLock.

To activate TCP/IP:

1. Click the Start menu.

2. Click Settings > Control Panel.

3. Double-cl ick the Network icon in the Control Panel window. The Network

window appears.

FIGURE 2-1. Select TCP/IP in the Configuration Tab

4. Display the Configuration tab of the Network window, then click on the

appropria te selection for the bindi ng of TCP/IP and your Ethernet adapter . (You
may have more than one TCP/I P sel ection availabl e.)

5. Click Add. The Select Network Component Type window appears.

FIGURE 2-2. Select Protocol in the Select Network Type Component Window

2-2

Installing GateLock

6. Select Protocol and t hen click Add. Or, s imply double-click Protocol. The Select

Network Protocol window opens.

7. Select Micros oft in the Manufacturers list on the left side of the window. Then

select TCP/IP from the Net work P r otocols list on the right side of the window.
See Figure 2-3.

FIGURE 2-3. Select Microsoft and TCP/IP in Select Network Protocol

8. Click OK. You are now ready to set your PC’s TCP/IP properties.

Configuring your DHCP settings

After ensuring that every PC you wish to use in conjunction with GateLock has
TCP/IP running as its active network protocol, you need to configure your DHCP
settings, in addition to checking other settings.

DHCP, which stands for Dynamic Host Configuration Protocol, automatically
allocates IP addresses to PCs on your home or office network.

Do the following:

1. Click the S tart menu.

2. Click Settings > Control Panel.

3. Double-click the Network icon in th e Control Panel window.

4. In the Conf igurati on t ab of the Network wi ndow, select the TCP/IP co mponent of

your Network Interface Card (NIC) from the list.

2-3

Trend Micro™ GateLock ™ User’s Guide

FIGURE 2-4. Select TCP/IP in the Configuration Tab

5. Click Properties. The TCP/ IP Properties window appears.

FIGURE 2-5. Select Obtain an IP address automatically

6. Make sur e the Obtain an IP address au tomatically b u t ton is se lected. This will

ensure that your PC will get its IP address from GateLock via DHCP (Dynamic
Host Configu r ation Protocol ) after you complete the connection and installation
instructions explained in Installing Your GateLock st arting on page 2-7.

2-4

Installing GateLock

Note: We recommend that you allow GateLock to automatically assign an IP address

to your PC, instead of using a static IP address. However, if you are publishing
a service on the Internet and prefer to assign a static IP address to your server,
the IP address you should use must be between 192.168.253.2 to 192.168.253.99
or 192.168.253.132 to 192.168.253.254 and the subnet mask 255.255.255.0.

7. Click the WINS Configuration tab in the TCP/IP Properties window, and select

Disable WINS Reso lution.

FIGURE 2-6. Select Disable WINS Resolution

8. Click the Gateway tab in the TCP/I P Proper ties window, and make sure there are

no gateways installed. If ther e are, highlight every install ed gateway and click
Remove until all installed Gateways are removed, as shown in Figure 2-7.

2-5

Trend Micro™ GateLock ™ User’s Guide

FIGURE 2-7. Make sure that there are no gateways installed

9. Click the DNS Configuration tab and make sure the Disable DNS button is

selected.

FIGURE 2-8. Select Disable DNS

10. Click OK, whic h will close the TCP/IP Pro perties window, and at th e sam e tim e

will save all of the TCP/IP settings you specifie d. You will be returned to the
Network window.

2-6

Installing GateLock

11. Clic k OK in the Ne twork window to cl ose it . You will then be prompte d to r estar t

the PC. At this tim e, turn off the computer and follow the co n n ection and
installation instructions explained in the next se ction called Installing Your
GateLock.

Installing Your GateLock

Requirements

• You must have a broadband connec tion install ed in your home. The broadband
connection may be via an xDSL (ADSL, SDSL, IDSL, or VDSL) modem or cable
modem.

• If you are usin g Gate Lock to connect mult iple PCs to the Internet, you will need a
hub. The hub is not in cluded in the GateLock package. You can purchase it at most
computer stores. For information on how to c onnect multipl e PCs to a hub, refer to

If you are connecting multiple PCs to the Internet: on page 2-8 and to the user

manual included with your hub. If you are using a router instead of a hub, refer to

Installing GateLoc k with a r out er on page A-3 for detailed installation instructions.

FIGURE 2-9. Broadband Connection of one Computer to the ISP Without Gate-

Lock

2-7

Trend Micro™ GateLock ™ User’s Guide

Step 1: Connect the Cables

If you are connecting a single PC to the Internet:

FIGURE 2-10. Connecting One PC to the Internet with GateLock

1. Plug one end of the red network cable included in your GateLock package to
your PC’s LAN/Etherne t ca rd port and plug the other end into the PC/HUB port
on GateLock’s back panel.

2. Connect GateLock to your xDSL or cable modem using your old network cable:
a. Plug one end of the network cable into the Internet port on GateLock’s rear

panel.

b. Plug the other end of the network cable into your xDSL or cable modem’s

network port.

c. Move the HUB-PC dip switch on GateLock’s rear panel to the PC side.

3. Connect the power adapter included in your GateLock package to the PWR port

on the back panel and plug the other end into a power socke t.

If you are connecting multiple PCs to the Internet:

FIGURE 2-11. Connecting Multiple PCs to the Internet with GateLock

2-8

Installing GateLock

1. For each PC, plug one end of your original network cable into your PC’s

LAN/Ethernet port and plug the other end into one of the ports of your hub.

2. Take the red net w ork ca ble included in your GateL ock package:
a. Plug one end of the red cable into the PC/HUB port on the back panel of

GateLock.

b. Connect the hub to your GateLock:

• If your hub has a network port labeled “Uplink,” plug the other end of the

red network cable into the “Uplink” port of the hub. Move the HUB-PC
dip switch on Gate Lock’s back panel to the PC side.

• If your HUB does not have a network port labeled “Uplink,” plug the
other end of the red netw ork ca ble into any port of the hub. Move the

HUB-PC dip switch on GateLock’s back panel to the HUB side.

3. Plug one end of the network cable for your modem into the Internet port on

GateLock’s back pane l and plug the othe r end into your xDSL or cabl e m odem’s
network port.

4. Connect the power adapter that comes with your GateLock to the PWR port on

the back panel and plug the other end into a power socket.

Step 2: Make Sure Your PC Can Talk to GateLock

For each PC that is directly connected to GateLock, or indirectly connected to
GateLock through a hub:

1. Restart your PC.

2. Open your Web browser (Internet Explor er 5.0 or higher, or Netscape Navigat or

4.5 or higher) on you r PC, and go to http://192.168.253.1. If you can see the
Welcom e screen of the GateLock configuration cons ole, your PC can
successfully recognize GateLock. Skip the succeeding steps and go directly to

Configuring GateLock starting on page 3-1.

3. If you cannot see the Welcome screen of GateLock’s configuration console:

• Verify that your PC is obtaining its IP address automatica lly via DHCP.
Detail ed instructions for this procedure ca n be found in a previous section
entitled Configuring your DHCP settings on page 2-3. Repeat Ste ps 1 and 2
after your configure your DHCP settings.

• If, after you have changed your PC’s DHCP settings, you still cannot see the
Welcom e screen of the GateLock configuration cons ole, check if your Web
browser’s proxy settings are correct. Detailed instructions for this procedure

2-9

Trend Micro™ GateLock ™ User’s Guide

can be found in the section of the Appendix entitled Setting the Proxy Server

in Your Browser on page A-2.

• Toggle the HUB-PC dip switch on GateLock’s rear pa nel and repeat Steps 1

and 2.

• For further assistance, contact your GateLock dealer.

If you see the Welcome screen of the configuration console, you are now ready for
Chapter 3 which explains how to configure your GateLock’s various functions.

2-10

Chapter 3

Configuring GateLock

Chapter Overview

This chapter:

• Discusses the G ateL ock config u ration tasks tha t you shoul d perfo rm

• Explains how to acces s the setup screens to configure GateLock

• Tells you how to upgrade GateLock

• Tells you how submit a question to Trend Micro technical support.
GateLock is rema r kably easy to set up with its intuit ive Web browser-based

configuration console. To facilitate configuration, GateLock’s configuration console
includes a Quick Setup wizard that makes changes after asking questions about your
environment. For those who have to perform advanced setup tasks or who want to
change GateLock’s settings, hyperlinks on the sidebar have been provided for easy
access and seamless configur ation.

Conf iguration Console Layout

The browser-ba sed GateLock configuration console ha s been designed for quick and
easy access to GateLock’s various functions and features. It has two parts:

• The sidebar, whic h contains links tha t open the main functional areas.

• The main frame, which displays the screens that you use to configure your
GateLock settings, including the antivi rus and anti-hacker set tings.

3-1

Trend Micro™ GateLock ™ User’s Guide

Opening the Configuration Console

After connecting GateLock to your PC or hub, the next step is to customize
GateLock’s settings. Do the following:

1. Open your Web browser. I n the address bar, enter the following IP address:

http://192.168.253.1

2. Press the <Enter> key. Your Web br owse r will display GateL ock’s Welcome

screen.

FIGURE 3-1. The Welcome Screen

3. Click Quick Setup on the sidebar. The Quick Setup screen loa ds.

There are 8 main hyperlinks on the sidebar. Clicking these hyperlinks will open
GateL o ck ’s main co n f ig u r at i on scr e en s . Wh a t th e s e 8 ma in sc reens are an d ho w
to use them to configure GateLock’s settings are discussed in the order of their
appearance on the sidebar.

3-2

Configuring GateLock

There is al so a HouseCall icon that you c an cl ick to use HouseCall, Trend
Micro’s powerful, online scanner, for an extra layer of antivirus protection. See

Using HouseCall on page 3-16 for more information about HouseCall.

FIGURE 3-2. The Sidebar

Quick Setup

The Quick Setup screen opens when you click Quick Setup on the sidebar. It allows
you to easily set up your GateLock by providing you step-by-step onscreen
instructions.

Specifying how GateLock obtain its IP address

Click one of the three opt ion buttons on this screen (PPPoE xDSL, Sta tic IP Address,
or Dynamic IP Address). A brief description follows each option to help you
determine which button to select. By default, Dynamic IP address is selected.

FIGURE 3-3. Quick Setup - Specify How GateLock Obtains Its IP Address

3-3

Trend Micro™ GateLock ™ User’s Guide

PPPoE xDSL

If your ISP uses PPPoE (Point-to-Point Protocol over Etherne t) to connect you to the
Internet, click the PPPoE xDSL button. Remember to remove any existing PPPoE
applications you have on your computer. Click Start at the bottom of the screen to
advance.

FIGURE 3-4. Quick Setup - PPPoE xDSL Screen

1. On the next screen, type Your user name and Password you us e to log on to your

ISP.

• Click Con nect a utomati ca lly when disc onnect ed if you want GateL ock to keep

you always connected to your ISP.

• Click Do not conn ect automatically if you want to manually connect to your

ISP whenever you are disconnected. This option is selected by default.

• Click Di sconnect if idle for __ minutes if you want GateLock to automatically

disconnec t your Interne t connecti on when it detects no Internet acti vit y for the
specified length of time. Using the drop-down menu, you can change the
maximum idle to 5 minutes, 10 minutes, 30 minutes, or 1 hour.

• Click Disable maximum idle ti me if you do n ot want GateLock to

automatically disconnect your Internet connection.

2. Click Next when finished to advance to the ISP Requirements page.

If you select PPPoE xDSL, GateLock’s Internet LED will be illuminated after it has
succes sfully connected to y o u r ISP.

3-4

FIGURE 3-5. Quick Setup - PPPoE xDSL Information Screen

Configuring GateLock

Note: Select PPPoE xDSL if your ISP has given you a user name and a password. You must

use G ate Lock ’s setup scr een s to spe cify t his info rmat io n to b e ab le t o suc cess ful ly
connect to the Internet.

WARNING! When using GateLock with PPPoE xDSL, always remember to disconnect your

Internet connection using On-Demand Connection on GateLock’s configuration
console. You will stay connected to the Internet even if you turn off your PC as
long as GateLock is on. You will only be automatically disconnected when the
maximum idle time you have specified is reached.

Static IP Address

If your ISP has assigned you a fixed IP address to connect you to the Internet, select
Static IP address then click Start at the bottom of the screen to advance.

1. Type the required information in the blank fields on the screen that appears a fter

you click S tart. See Figur e 3-6.

• IP address : Type the IP address assigned to you by your ISP.

• Subnet mask: Type the Subnet Mask address given to you by your ISP.

• Gateway: Type the IP address of the gateway device that allows contact

between GateLock and your ISP.

3-5

Trend Micro™ GateLock ™ User’s Guide

• Primary DNS: Your ISP will give you at least one DNS (Domain Name

System) address. You must type one here.

• Secondary DNS: It is common to have multiple DNS IP settings. If you have

another DNS address, you may type it here. This field is optional.

Note: Even if you selected Static IP Address, you should still select Obtain an IP address

automa ti cal ly in yo ur P C’s TCP /IP Pro per ties . Ga teL ock wi ll au toma tica ll y as sig n
each of your PC an IP address between 192.168.253.100 and 192.168.253.131. For
detailed instructions on how to set the TCP/IP Properties, see

Configuring your

DHCP settings starting on page 2-3.

FIGURE 3-6. Quick Setup - Static IP Address Screen

2. Click Next after you finish typing the require d information to advance to the ISP

Requirements page.

If you select Static IP address, GateLock’s Internet LED will immediately be
illuminated, indicating that you can connect to the Internet.

Note: Select Static IP Address if your ISP has assigned you a specific IP address. Your ISP

should have also provided information on how to set up your subnet mask, gateway,
primary DNS, and secondary DNS. You must use GateLock’s setup screens to specify
this i nfor mati on t o be ab le to suc ces sfu lly c on nect t o th e In tern et.

3-6

Configuring GateLock

Dynamic IP Address

Selecting Dynamic IP address means DHCP (Dynamic Host Configuration Protocol)
will be used to automatically assign an IP address to GateLock. You do not have to
manually assign a permanent IP address to your GateLock device. Simply click the
Start button at the bottom of the screen to advance to the ISP Requirements page.

Note: Select Dynamic IP Address if your ISP assigns you an IP address automatically using

DHCP. If this is the case, you do not have to do anything. The Internet light on
GateLock’s front will be illuminated, and you should immediately be able to connect
to the Internet. You can confirm this by connecting to http://www.antivirus.com with
your Web brow ser.

ISP Requirements

Depending on yo ur IS P, you may have to specify your Media Access Control (MAC)
address and a host name to successfully connect to the Internet. If you are not
required by your ISP to provide this i nformation, DO NOT specify any MAC address
or host name.

MAC Address

A MAC address is the unique hardware number of your PC's network card; every
network card is assigned a unique MAC address when it is manufactured.

By default, GateLock uses the MAC address of the PC you used to open the
configuration console and this inform ation is already in the MAC address field of
Quick Setup’s ISP Requirements page.

If your ISP requires you to provide a MAC address to be able to connect to the
Internet, simply select the Enable MAC address specification check box to use the
MAC address that GateLock has saved.

Host Name

If your ISP requires you to supply a host name for your PC when you connect to the
Internet, enter this information in Quick Setup’s ISP Requirements page.

Your host name informati on is supplied by your ISP and is normally included in your
ISP account information sheet. Contact your ISP if you cannot find your host name
information.

3-7

Trend Micro™ GateLock ™ User’s Guide

To specify a host name for GateLock, simply select the Enable host name
specification check box and enter the host name your ISP has given you in the Host
name field.

FIGURE 3-7. Quick Setup - ISP Requirements Screen

Click Apply when finished to advance to Email Notifi cation Options.

Email Notification Options

You can configure GateLock to send you email notifications about suspected hacker
attacks and available GateLock software updates.

Although this section is optional, we strongly recommend that you provide your
email address to stay informed about suspected hacker attacks on your computer or
network and new versions of the GateLock software to which you may upgrade.

FIGURE 3-8. Quick Setup - Email Notification Options Screen

3-8

Configuring GateLock

To receive email notifications:

1. Enter your email address in the field provided. This is where GateLock will send

the email not ifications .

2. Confirm your email address by retypi ng it in the Confirm your email address

field. You can simply select the email address you have entered, and then copy
and paste it in to the second emai l ad dress field.

3. Click the Hacke r Intrusion chec k box if you want to receive notifications about

suspected hacker attacks on your com puter or network. Click the sample email
hyper li n k to vi ew an examp le of th e ema il messag e that you w ill receiv e fro m
GateLock.

4. Click the Available Software Updates check box if you want to receive

information about new software versions of GateLock. Click the sample email
hyper li n k to vi ew an examp le of th e ema il messag e that you w ill receiv e fro m
GateLock.

Note: You must enable Intelligent Update on the P roduct Update pag e to receive

email notifications about GateLock software updates.

5. Click Next when fini shed. The Quick Setup information screen loads, displaying

the connection and email notification settings you have specified.

FIGURE 3-9. Quick Setup - Email Notification Options Information Screen

6. Click Finis h. The message "Updating syst em se ttings. Pl ease wait." appea r s.

After a few seconds, another screen loads, informing you that you have jus t

3-9

Trend Micro™ GateLock ™ User’s Guide

complete d Quick Setup. This screen also displays your security settings and
includes a reminder to register your Gate Lock online to activate your antivirus
and anti-hac ker protection.

FIGURE 3-10. Quick Setup Complete

WARNING! Even if you have alre ady com pleted Quick Setup, your GateLock’s anti-hack er

and antivirus features are not yet activated. You must register your GateLock
online to activate your antivirus and anti-hac ker prot ection. Click the Onl ine
Registra tion link on the sidebar to open the Online Registration page. See

Online Registration on page 3-33.

After you complete Quick Setup and finish registering your GateLock online, you
may close the GateLock configuration console by closing your browser window, or
perform other configuration tasks by clicking the other links on the sidebar.

Connection

Clicking the Connection hyper link on the sidebar displays 3 menu items: Connection
Settings, On-Demand Connection and ISP Requirements.

Connection Settings

Connection Settings allows you to change your Quick Setup co nfiguration a bout how
GateLock obtains its IP address.

For example, assume that you were using a dynamic IP address to connect to the
Internet but later decided to change your ISP. Your new ISP has assig ned you a st atic
IP address. You must modify your GateLock’s connection settings to be able to
connect to the Internet.

3-10

Configuring GateLock

FIGURE 3-11. Connection Settings - Modifying Your Connection Settings

To modify your connection settings:

1. Click Connection > Connection Settings on the sidebar.

2. Specify how GateLock will obtain its IP addres s from the 3 options.

• Click Dyn am ic IP address if your ISP automatical ly assigns you an IP address.

• Click Static IP address if your IS P has assi gned you a fixed IP address and
type the require d information in the blank fields provided. See

Address

on page 3-5 for details.

• Click PPPoE xDSL if you us e PP Po E to co nnect your ISP. Type Your email
address and the Password you use to connect to the Internet. Indicate if you
want GateLock to automatically connect to your ISP if disconnected and if
you want it to a utomatic al ly dis connec t your Inter net connection when the re is
no activity for a spec ified length of time. S ee

PPPoE xDSL on page 3-4.

3. Click Apply.

On-Demand Connection

Static IP

On-Demand Connection is only for GateLock users with PPPoE xDSL. This allows
PPPoE xDSL users to check their Internet connection and to manually connect or
disconnect from the Internet.

3-11

Trend Micro™ GateLock ™ User’s Guide

To verify if you are connected to the Internet, click Connection > On-Demand
Connection on the sidebar. The On-Demand Connection page loads, displaying your
connection status and connection settings.

• If you are disconnected from the Internet and you want to connect, click
Connect Now at the bot tom of the page.

• If you are connected from the Int ernet and want to disconnect, click
Disconnect at the bottom of the page.

FIGURE 3-12. On-Demand Connection - Connection Settings Information

ISP Requirements

Use the ISP Requirements page if you need to change the MAC address or host name
information you have specified in Quick Setup. You can change the MAC address
that GateLock is using if you experience problems connecting to your ISP. See

Viewing your MAC address on page A-1 for instructions on how to obtain another

MAC ad d r es s f o r Ga teLock .

3-12

Configuring GateLock

FIGURE 3-13. ISP Requirements - Modifying Your MAC Address and Host Name

Information

To open the ISP Requirements screen:

1. Click Conne ction > ISP Requirements on the sidebar. The ISP Requi rements

page loads.

2. Modify the MAC addres s or host name information.

3. Click Apply to save your changes.

FIGURE 3-14. ISP Requirements - MAC Address and Host Name Information

Updated

3-13

Trend Micro™ GateLock ™ User’s Guide

Security

Clicking the Security hyperlink on the sidebar displays 4 menu items: Antivirus
Options, Antivirus Logs, Anti-Hacker Options , and Anti-Hacker Logs.

Antivirus Options

One of GateLock’s powerful features is antivirus protection. It scans POP3
(incoming) and SMTP (outgoing) mail messages and Webmail attachments for
viruses.

Antivirus Options allows you to change your GateLock’s antivirus protection
settings. You can disable GateLock’s antivirus protection or change the action
GateLock will take when a virus is detected in your incoming and outgoing email
messages. We recommend that you keep the antivirus protection enabled to secure
your computer and network environment.

To view or modify your antivirus settings, click Security > Antivirus Options on the
sidebar. The Antivirus Options screen, shown in Figure 3-15, loads.

FIGURE 3-15. Antivirus Options - Configurin g Your Antiv irus Pr otection

Webmail scanning

GateLock can scan Webmail attachments when you download them from the
Internet. However , unlike your POP3 and SMTP mail, We bmail attachments can
only be cleaned, or deleted if uncleanable; GateLock does not Pass infected files.

3-14

Configuring GateLock

Webmail scanni ng is enabled by default. If you wish to disable Webmail scanning,
clear the Webmail: Enable virus scanning of Webmail attachments check box. We
recommend that you keep Webmail scanning enabled.

When GateLock detects an infected Webmail attac hme nt, it loads a browser window
where you can choose the next action:

• If th e f i le can be cleaned, click Clean the atta ch ment. Then go back to your
Webmai l window and download the attachment again.

• If the file cannot be cleaned, click Cl ose th is window. GateLock will not allo w
the infected file to be downloaded, unless Webmail scanning is disabled.

POP3 and SMTP mail scanning

GateLock’s POP3 and SMTP mail scanning is enabled by default. If you wish to
disable this, clear the Enable virus scanning of incoming and outgoing mail check
box. However, we highly recommend that you keep GateLock’s POP3 and SMTP
mail scanning to keep your computing environment protec ted against viruses.

If you keep P O P3 and SMTP mail scanning enabled, you must specify the act ion that
GateLock will take when it detects a virus in your email messages.

1. Specify the action that y ou want GateLock to take if it finds a virus in your email

message.

• Click Cl ean if you want GateLock to try to remove the virus from the infe cted
file. T his i s se le cted by d efa ult . You must also se le ct an a lte rna tiv e act ion fr om
the drop-down menu, in ca se Gate Lock is unable to clean the file.

i. Select Delete if you want GateLock to delete th e entire file containing the

uncleanabl e virus.

ii. Select Pass if you want GateLock to do nothing to the infected or

malicious file.

WARNING! Passing an infected file t o your computer puts your system at risk and is

not recommended.

• Click Delete if you want to remove the infected or malicious file from your
computer. Some malicious files, for example those infected by Trojans or
worms, cannot be cleaned and must therefore be deleted.

• Click Pass if you want GateLock to record the details of the infected or
malicious file in the antivirus log but do nothing to it.

3-15

Trend Micro™ GateLock ™ User’s Guide

2. Click Apply to save your antivirus settings . Th e information screen s hown in

Figure 3-16 appears, displaying the settings you have just saved.

FIGURE 3-16. Antivirus Options Information Screen

Using HouseCall

HouseCall is Trend Micro's powerful, online virus scanner that brings the ease,
accessibility and effectiveness of a server-based antivirus application to home users
via the Internet.

Using HouseCall with GateLock guarantees superior protection against viruses.
While GateLock scans your SMTP and POP3 mail and Webmail attachments,
HouseCall can scan files on your local and network drives

.

To use HouseCall to detect and clean infected files on your PC:

1. Click the HouseCall ic on below the sidebar of Gate Lock' s config uration console .

The HouseCall page loads.

2. Select th e drives you want to scan by selecting the check box for the drive.

3. Click Scan.

3-16

Configuring GateLock

FIGURE 3-17. HouseCall - Selecting Drives to Scan

When HouseCall detects a virus on your P C, it displays the vi rus name and the name
of the infected file. Click on the virus name to learn more about the virus and the
harm it can do to your PC. Click Clean to remove the virus code from the file. If you
want HouseCall to automatically clean infected files when they are detected, select
the Auto Clean check box.

Certain viruses such as Trojans, scripts, overwriting viruses, and joke programs are
identified as "uncleanable." To rid your system of these viruses, you must delete
them.

Note: To use HouseCall, you must have Microsoft Internet Explorer 5.0 or above.

3-17

Trend Micro™ GateLock ™ User’s Guide

Antivirus Logs

GateLock keeps a record of the viruses that have been de tected in your incoming and
outgoing email messages. It can record up to 30 of the most recent viruses that were
detected.

To view the antivirus logs, click Security > Antivirus Logs.
The next screen displays recently detected viruses, including the date and time of

detection, the result of the action you have configured, the sender and the other
recipient(s), and the name of the infected file.

FIGURE 3-18. Antivirus Logs - Viewing Recently-Detected Viruses

Anti-Hacker Options

Another very important securit y fea ture of Ga teL ock is anti-hacker protection. It can
protect your computer from hacker attacks with its built-in firewall and intrusion
detection features.

GateLock uses “port blocking” to protect your computer agains t hacker attacks.
Think of a port as being similar to a door to your computer. Every service on the
Internet has a port associated with it, which hypothetically leaves a lot of “doors”
open. GateLock guards these "open doors" against hackers.

To view or modify your anti-hacker settings, click Security > Anti-Hacker Options
on the sidebar. The Anti-Hacker Options page loads.

GateLock offers 3 anti-hacker security levels to choose from.

1. Select your preferred security level:

• Click High if you want Gat eL ock to block hacker atta cks and log intrusion
attempts to your computer.

3-18

Configuring GateLock

At this security level, the entry points of your computer are invisible.
Therefor e your PC or LAN is invisible to users outs ide your network.

• Click Medi um i f you only want GateLock to block hacker attacks .
At this security level, the entry points of your computer are still invisible.

However , GateLock will not record suspected hacker att acks.

• Click Low if you want to use minimum anti-hacker features.
At this security level, the entry points of your computer are visible to users

outside your network. GateLo ck ca nnot block all hacker attacks and will not
record suspected hacker attacks.

Note: If you have trouble connecting to BBS and new sgroups, try sel ecting the Low

security level to make your computer or network visible. This will enable the
BSS or newgroup server to identify you as the source of the request.

FIGURE 3-19. Anti-Hacker Options - Specifying Your Anti-Hacker Security Level

2. Click Apply to save your settings . T he anti-hacker information scr een loads.

3-19

Trend Micro™ GateLock ™ User’s Guide

FIGURE 3-20. Anti-Hacker Options Information Screen

Anti-Hacker Logs

GateLock can also record suspected hacker intrusion attempts on your computer or
network. It can keep up 30 of the most recent suspected hacker attacks.

To view your anti-hacker logs, click Security > Anti-Hacker Logs.
The log loads, displaying the most recen t suspe cted hacker attacks t hat were d etected

by GateLock. The reco rd includes the date and time of the suspected hacker attack ,
the method used by the hacker , the IP address of the computer used by the hacker and
the number of attempts made.

FIGURE 3-21. Anti-Hacker Logs - Viewing Recent Suspected Hacker Attacks

Note: R esett ing GateL ock will delete al l Anti-Ha cker Logs.

3-20

Configuring GateLock

Update

Clicking the Update hyperli nk on the sidebar load s 2 more hyperlinks: Pro duct
Update and Update History.

Product Update

To maintain up-to-date antivirus and anti-hacker protection, you should regularly
update your GateLock software components. These components include the
GateLock software, virus pattern file, scan engine and firewall rule.You must be
connected to the Internet for GateLock to check for updates.

To check for available updates:

1. Click Update > Product Update. GateL ock will automatically conne ct to Trend

Micro’s Inte rnet update site and look for new GateLock components.
If updates are available, a pop-up dialog box will appear as the Product Update

screen opens wit h the message "New components are available for download."
Click Update Now to im mediately download the updates. The Anti virus and
Anti-Hacker LEDs will become red and blink as GateLock downloads the
updates from Trend Micro’s update server.

FIGURE 3-22. Product Update - Checking For Available GateLock Updates

3-21

Trend Micro™ GateLock ™ User’s Guide

2. If you want GateL ock to a utomati call y check for a nd downloa d avail able u pdates

whenever you ar e connected to the I nternet, clic k the Enable inte lligent upd ate
option and specify when GateLock will check for updates by se lecting a value
from the drop-down list.

3. Click Apply to save your setti ngs.

The Product Update screen also tells you if you have configured your GateLock to
receive email notifications whenever there are available updates.

Note: When attempting to download GateLock updates, make sure you can connect to the

Internet.

Update History

You can track how many times you have updated your GateLock components by
accessing its Update History screen.

To view your GateLock’s update history, click Update > Update History from the
sidebar. The Update History loads, displaying your most recent updat e date s,
including the versions of your GateLock software, scan engine, virus pattern and
firewall rule.

FIGURE 3-23. Update History - Viewing Recent Product Updates

Settings

Clicking the Settings hyperlink on the sidebar loads 3 more hyperlinks: Email
Notification, Pas sword Protec tion and Time Zone.

3-22

Configuring GateLock

Email Notification

Email Notification allows you to change your settings for receiving email messages
about detected hacker attacks or available software updates.

To open the email notification screen, click Settings > Email Notification on the
sidebar. The same window you used to configure your email notification settings in
Quick Setup loads.

You may disable email notification for Hacker Intrusion or Available Software
Updates to stop receiving email messages about suspected hacker attacks on your
computer or network and information about new GateLock components. However ,
we strongly recommend that you keep the email notifications enabled to stay
informed about hacker attacks and availa ble updates.

See Email Notification Options on pa ge 3-8 for detailed configuration instructions .

Password Protection

To control access to the GateLock configuration console, you can enable
password-protection. This will ensure that only you can change GateLock’s settings
thus allowing you to continually secure your computing or ne twork environment. By
default, the console’s password-protection is disabled.

To enable the GateLock console’s password-protection:

1. Click Settings > Password Protection on the sidebar.

2. Select the Password-protect GateLock’s configuration cons ole check box.

3. Type your Current password. If this is your first time to passwor d-protect the

configuration console , do not enter an ything in the Current password field (since
the config uration console’s default password is blank).

4. Type your New password. Your password must have between 6 to 10

alpha n um er i c ch a ra ct e rs and must no t incl u d e a s p ac e.

5. Confirm your new password by retyping it in the Re-enter new password fiel d.

6. Click Apply when finished. The Log off button, which you can click to leave

GateLock’s configu r ation console, will appear on the button bar.

3-23

Trend Micro™ GateLock ™ User’s Guide

FIGURE 3-24. Password Protection - Setting a Password

Note: Wh en pas swo rd- prot ect ion is en ab led, the con fig urat ion con sol e au tom ati call y lo gs

you off after 5 minutes of inactivity after logon. This is to further prevent anyone from
altering your GateLock’s settings if you ever forget to log off the configuration
console.

Time Zone

For GateLock to accurately recor d the date and time in its antivirus and anti-hacker
logs, you need t o s peci fy your correct time zone for your region. By defaul t, the time
zone is set to America/Los_Angeles. If you are not from this area, it is recommended
that you change your GateLock’ s time zone settings.

To specify your time zone:

1. Click Settings > Time Zone.

2. Select your time zo ne from the drop-down menu.

3. Click Apply.

3-24

Configuring GateLock

FIGURE 3-25. Time Zone - Specifying Your Time Zone

If you change your Time Zone settings, note that the time stamp on the existing logs
will not reflect the new time zone. They will reflect the time zone that you set when
the logs were created.

Note: GateLock uses a Network Time Protocol (NTP) public time server to record the date

and time in its various logs. If a virus or a suspected hacker attack is detected during a
time when GateLock cannot contact the NTP server, the date and time in the antivirus
or anti-hacker logs may not be displayed correctly.

Advanced

Clicking the Advanced hyperlink on the sidebar loads 2 hyperlinks that allow you
configure GateLock’s advanced options: IP Port Forwarding and Network Traffic
Control.

IP Port Forwarding

If you are connecting GateLock to your home network and you have servers (e.g.,
Web, FTP, email) that you want to publish outside your network, you need to
configure GateLock for this purpose. This configuration task is called IP port
forwarding.

IP port forwarding allows you to redirect service requests from outside sources to
your internal servers. With GateLock, you have total control over incoming network
traffic: you can allow, reject, or ignore connection requests to your servers.

To configure IP port forwarding for GateLock:

1. Select Advanced > IP Port Forwarding from the side bar . The IP Port Forwarding

screen loads.

3-25

Trend Micro™ GateLock ™ User’s Guide

2. By default, no connection reques t from external sources will be allowed to pass

through GateLock, thus your servers cannot be accessed from outside your
network. Click Add Service.

FIGURE 3-26. IP Port Forwarding - Adding a Service

Adding a service

The Add Service screen, shown in Figure 3-27, is where you assign a port for an
Internet service that you want to publish.

1. Choose the type of service that you want to add, eith er Com monly-used service

or User-spe cified service . Comm only-used service includes a drop-down lis t of
popular Internet services, such HTTP, FTP, Telne t, Netmeeting, and the port
numb er s th at are norm al ly as si g n e d to th em .

3-26

Configuring GateLock

FIGURE 3-27. IP Port Forwarding - Configuring Access to Your New Service

• If you select Commonly-used service:

a. Choose the service that you want add from the drop-down list.
b. Assign an IP address to the server that will host the Internet service you are

adding by completing the blank field for Service IP address. GateLock will
direct connection requests for this Internet servic e to this IP address.

c. If there are specific IP addresses that you want to prevent from accessing the

service you are publishing, add these IP addresses in the Deny Service List.
You can choose to Reject or Drop the connection request from these sources.

• To reje ct a request from a speci f ic source, type the IP address in t he blank
field under Reject Connection and click the

button. Wh en this IP
addres s att empts to conn ec t to your ser ver, it wi ll b e info rmed t hat it i s not
authoriz ed to connect.

3-27

Trend Micro™ GateLock ™ User’s Guide

• To ignore a request from a spec ific source, type the IP address in the
blank field under Drop Connection and click the
list. T his IP addr es s will not be able to connect t o your server a nd will not
receive any information.

• To remove an IP address from the Deny Service List, highlight the
address and click the

• If you select User-specified service:

a. Assign any port number between 1 to 65535 that is currently not in use in the

Port field.

b. Type a descripti on for this service (optiona l), e.g., File T ra nsfer (FTP), to help

you easily identify it.

c. Assign an IP address to the server that will host the Internet service you are

adding by completing the blank field for Service IP address. GateLock will
direct connection requests for this Internet service to this IP address.

button to add to the

button.

d. If there are specific Web addresses or IP addresses that you do not want to

access the service you are publishing, add these sources in the Deny Service
List. You can choose to Reject or Drop the connection request from these
sources.

• To reject a request from a specific source, type the Web address or IP
address in the blank field under Reject Connection and click the
button. When t his address attempts to connect to your server, it will be
informed that it is not authorized to connect.

• To ignore a request from a s pec ific source, type the Web address or IP
address in the blank field under Drop Connection and clic k the

button
to add to the li st . T his address will not be able to connect to your server
and will not recei ve any information.

• To remove a Web address or IP address from the Deny Service List,
highlight the address and cli ck the

button.

2. Click Apply when finished. The IP Port Forwarding screen opens, displaying

details of the service you have added. See Figure 3-28.

3. Click Apply Changes to save your changes.

3-28

Configuring GateLock

FIGURE 3-28. IP Port Forwarding - Viewing Internet Services Have Been Added

Deleting an existing service

To delete an exis ting service :

1. Click the corresponding icon f o r th e se r vi c e.

2. Click Apply Changes to save your changes.

Editing an existing service

To edit an existing service:

1. Click the corresponding icon. The Edit Service screen loads.

2. Modify the settings by changing the port number or the description for the

service. You may also add or delete Web or IP addresses to the Deny Service
List.

3. Click Save when finished.

4. Click Apply Changes to save your changes.

Network Traffic Control

In addition to giving you total control over incoming traffic, GateLock likewis e
allows you to control your network’s outgoing traffi c by customizi ng outgoin g traffic
rules. For example, you can prevent the computer used by your children on your
home network from accessing adult Web sites. To do this, you must configure
GateLock to drop or reject connection requests from your network to specific Web
sites or Internet destinations .

3-29

Trend Micro™ GateLock ™ User’s Guide

By default, all outgoing traf fic is allowed to pass through GateLock.

Adding an outgoing traffic rule

To customize GateLock’s outgoing traffic rules:

1. Select Advanced > Network Traf fic Control on the sidebar. The screen shown in

Figure 3-29 loads.

FIGURE 3-29. Network Traffic Control - Adding a Rule

2. Click Add Outgoing Rule to add an outgoing rule. The screen shown in Figure

3-31 loads.

3. Create a outgoing traffic rule.

• In Source, spec ify to which IP address or addresses the rule will be applied.
Since GateL ock a ssigns an IP ad dres s to every PC on your network beginning
with 192.168. 253.x, you only need to type the last digi t or set of digits of the
IP address. If you want to apply the rule to all PC s on your network, type the
wildcard character which is the asterisk (*) symbol.

• In Protocol, speci fy the type of prot ocol to whic h the rule wil l be appli ed. This
gives you more flexibility in implementing the r ule. For example, you app ly
the rule to all PCs on your network, thus 192.168.253.*, but you only want to
specific ally ap ply thi s to PCs th at use the Hype rtext Trans fer Prot ocol (HTTP)
which is used to conne ct to the Internet . You must thus select HTTP from the
drop-down lis t to apply the rule to ALL computers on your network that use
HTTP.

• In Destination address, type the IP address.

• In Destinati on port, ty pe the des tina tio n port number f or which the rule wil l be
applied. Typing the wildcar d characte r in this field will apply the r u le to all
ports of the destination address.

3-30

Configuring GateLock

• In Action, click the action that you want GateLock to take when connection
requests for the specified destination address are made by the specified
sources.

i. Choose Ignore to block the outgoing request without not ifying the user.
ii. Choose Reject to block the outgoing request and inform the user that

he/she is not authorized to connect to the dest ination.

4. Click Add when fin is hed. The Customize d Outgoing Tr affic Rules page loads,

displaying the rules you have created, as shown in Figure 3-31.

FIGURE 3-30. Network Traffic Control - Viewing Rules That Have Been Added

5. Set the P r iority for your rules by clicking the or button. The topmost rule in

the table supersedes all other rule s. This means that this part icula r rule will be
followed first before the other rules, including the default rule.

6. Click Apply Changes for your changes to take effect. We recommend tha t you

only click Apply Changes when you are done adding or modifying your rules.

To add another rule, click Add Outgoing Rule again.

Deleting an outgoing traffic rule

To delete an existi ng outgoing rule:

1. Click the corresponding icon.

2. Click Apply Changes to save your changes.

3-31

Trend Micro™ GateLock ™ User’s Guide

Editing an outgoing traffic rule

To edit an existing outgoing rule,

1. Click t he corre spondi ng icon. The Mod ify Outgoi ng T ra f fic Rule screen l oad s.

2. Edit the rule by ch anging the Protocol for the rule, the entr ies in Source and

Destination ports, or the specified Action.

3. Click Modify when finished.

4. Click Apply Changes to save your changes.

FIGURE 3-31. Network Traffic Control - Modifying a Rule

Support Information

If you have any questions concerning GateLock that are not answered by this Trend
Micro GateLock User’s Gu ide, you can subm it them to Trend Micro via email. In the
Support Information screen, click the [e-mail]
an email window similar to the one shown in Figure 3-33.

3-32

link. This will open

FIGURE 3-32. Support I nformation Screen

Configuring GateLock

FIGURE 3-33. Support Information - Sample Email Format

In this email window, type your question, comment, and/or a description of the
problem you are experiencing. Then click Send.

Online Registration

Your GateLock comes with one-year free software upgrades and maintenance
service. However , you must register your GateLock online before you can receive
these ben efits.

Use the Online Registration screen to register online. Your product information,
which includes your GateLock version and serial number, is displayed on the upper
part of the configuration screen.

3-33

Trend Micro™ GateLock ™ User’s Guide

FIGURE 3-34. Online Registration - Registration Form

To register your GateLock:

1. Click Online Registration on the sidebar to load the registration form, shown in

Figure 3-34.

2. Type your First name, Last name, Email address, and Telephone number in the

fields provided and select you r Country from the drop-down me nu. This is
required information. We recommend that you also complete the ot her optional
fields.

3. Click Finish to submit your registration form online.

FIGURE 3-35. Online Registration - Registration Successful

3-34

Configuring GateLock

4. The screen shown in Figure 3-35 appears after you click Submit. After a few

seconds, the "Online Regis tration succes sful" appears onscreen, indicating that
you have finished registering your GateLock.

Note: You must register your GateLock online to avail of software updates and service

maintenance.

The Button Bar

Near the top of the GateLock setup screen is a button bar, illustrated in Figure 3-36.,
which contains 5 buttons. This section briefly explains the usage of these buttons.

FIGURE 3-36. The Button Bar

Online Help

When you click the Online Help button, a new Web browser window opens. It
contains a link that allows you to access HTML-based help files about all of
GateLock’s main functi ons.

Support

When you click the Support button, a new Web browser window will open,
displaying Trend Micro’s “Technical Support” home page.

Security Info

When you click the Security Info button, a new Web browser window will open
displaying Trend Micro’s “Virus Information Center” home page at
http://www.antivirus.com/vinfo/
an abundance of useful information concerning known viruses as well as alerts
concerning the newest threats. Several free services are also available.

. This site is a very comprehensive reference offering

3-35

Trend Micro™ GateLock ™ User’s Guide

About

When you click the About button, the About screen displays, as shown below. It
displays copyright information and the version number of GateLock, as well as links
to Trend Micro’s Web site.

FIGURE 3-37. The About Screen

Log Off

Clicking the Log Off button closes the configuration console and loads the screen
shown in Figure 3-38. T o open the configu ration console again, click the Logon Page
button on this screen. The Welcome screen of the console will load again.

We recommend that you password-protect and log off the console every time you
finish configuring GateLock’s settings to control access.

FIGURE 3-38. The Logged Off Screen

3-36

Chapter 4

Troubleshooting and Technical
Support

Chapter Overview

This chapter:

• Provides troubleshooting tips for common problems

• Tells you how to perform a self-test on GateL ock

• Presents various on-line resources provided by Trend Micro, where you can
register your product, test it and find additional information

• Tells you how you can contact Trend Micro if you need to speak with a support
engineer

Troubleshooting

This section lists possible solutions to problems that might arise while installing,
configuring, or using GateLock.

Ethernet Cables

GateLock’s ports are wired s imilar to a network adapter’s port. First, check if al l
connected devices are powered on. Then verify if the cables are properly connected
as described in Chapter 2.

4-1

Trend Micro™ GateLock ™ User’s Guide

Connection Timed Out

If you get a “Proxy Reports: Connection Timed Out” error message when you type
an IP Address or a URL, check if your GateLock is:

1. Powered on

2. Connected to your PC or hub

3. Properly configured

If it is, check your Internet connection (cable and modem). GateLock is compatible
with any cable or xDSL modem that supports Ethernet.

Using PING

“PING” (Packet Internet Groper) is a program tha t can be use d to check if a computer
is active and available. You can specify the destination name of a computer when
using PING, or the actual IP address. “Destinat ion name” refers to the text equivalent
assigned to the actual numeric IP addresses. For example, “www.antivirus.com” is a
destination name and “216.33.2 2.211” is its equival ent IP address. You can type
either of the two in your Web browser’s address bar and your Web browser will take
you to the Trend Micro home page.

In addition, sometimes an Internet Service Provider will shorten the server address to
a single word to make it easier to remember or type. If your ISP has configured your
email and Web server addresses as arbitrar y sing le words, GateLock might have a
problem accessing the Interne t or sending and receiving mail because it ha s not been
configured to recognize the ISP’s shorter addresses. If you can’t get the actual IP
address from your ISP directly via a phone call, you can use PING to determine the
actual IP address of your ISP’s servers. You will then be able to use that actual
address with GateLock.

You can initiate PING directly at the DOS prompt, or you can initiate it through
Windows.

To initiate PING through Windows:

1. Click Start, then click Run.

2. Type ping fol lowed by the destination name or IP address in the Open field of

the Run window. For example, if yo ur IS P has given the name “email” to its mail
server, you can type:

ping email

4-2

Troubleshooti ng and Technical Suppor t

into th e Run window, then cl ick OK. The data will be displayed in a DOS
window. Write down the IP address given, for future reference.

To initiate PING directly at the DOS prompt:

1. Type the word command in the Open field of the Run window.

2. Click OK. A DOS window will open.

3. Type ping email at the DOS prompt. The data will appear in the same DOS

window. Write down the IP address given, for future reference. F igure 4-1 s hows
that the IP address for this ISP’s mail server is 203.69.216.43.

FIGURE 4-1. Using PING to Determine the IP Address for a Sample Mail Server

The example tells you the IP address of your ISP’s mail server. Now, to determine
the Web address of this IP address, precede it with ping -a at the DOS prompt.
Since the IP address returned in the example above is 203.69.216.43, you would type
ping -a 203.69.216.43 and then press <Enter>. The Web address will be
returned in the same DOS window (in this case, “sambaserver.”) This is shown in the
illustration below.

Write the Web address down for your future reference. This is the Web address that
is assigned to the IP address you pinged. Normally, it is better to configure GateLock
to recognize this Web address, because it is less likely to change than the IP address.

4-3

Trend Micro™ GateLock ™ User’s Guide

FIGURE 4-2. Using PING to Determine the Web Address of an IP Address

In GateLock, replace the “shortened” server address from the ISP with the actual
server address you just discovered using PING. After you have done this, GateLock
should have no problem accessing the Internet.

If you can successfully PING the IP address of a device’s local port, thi s indicates
that the device and the cable are working properly.

If you cannot successfully PING the IP address of your Internet Service Provider’s
gateway or DNS server, c hec k if your cable/xDSL modem is working properly and if
GateLock is correctly configured to connect to your ISP.

If you can successfully PING your ISP’s gateway but cannot PING a site on the
Internet, the problem is probably located within the ISP.

Performing A Self-Test On GateLock

Your GateLoc k is equipped with a self-test utility that can help you determine if it
has any hardware problems that might prevent you from optimally using it with your
PC or network of PCs. Symptoms of hardware problems can include your PC's
inability to connect to the Internet, etc.

Before performing a self-test on GateLock, do the following:

• Unplug GateLock from your PC or HUB.

• Take the red cable that came with the GateLock package. Plug one end of the cable
into the Internet port on GateLock’s rea r panel and the other end into the PC/HUB
port.

• Move the PC/ HUB dip switch to the PC side.

To start GateLock' self-test function, do the following:

4-4

Troubleshooti ng and Technical Suppor t

1. Unplug your Gate Loc k’s power cable from the PWR input port.

2. Press the Reset/ Sel f-Tes t button on GateLock’s back panel and plug in the power

cable while keeping the Reset/Self-Test button pressed. To reach the
Reset/Self-Test button, insert the tip of a pen or similar object through the small
opening and push in lightly. The Reset/Self-Test button m ust be pressed for at
least 5 seconds to trigger GateLock's self-test utility.

When Gat eL ock is powered on f o r self - te st, t he A nt iv iru s an d A nti -Hac ker LE Ds
simulta neously blink 3 times.

When GateLock’s self-tes t utility is tri ggered, the Antivirus and Anti-Hacker
LEDs blink interchangeably for a few seconds.

• If the 2 LEDs turn green aft er a few seconds of blinking, this indicates that
your GateLock has no ha rdware problems.

• If the 2 LEDs turn red after a few seconds of blinking, this indicates that your
GateLock has a hardware problem. Call your GateLock vendor or contact
Tre nd Micro's suppo rt center.

3. If you want to use GateLock after self-test is complete, rest ar t GateLock by

unplugging the power cable firs t and plugging it back. This will ensure that
GateL ock wil l fun c tion normally af te r th e s el f - te s t.

Trend Micro Contact Info and Online Resources

Contacting Technical Support

Tre nd Micro, Inc. pr ovides tec hnical support, virus pattern downloads , and program
updates for one year to all registered users, after which you must purchase renewal
maintenance. If you need help or just have a question, please feel free to contact us.
We also welcome your comments.

Trend Micro Incorporated provides worldwide support to all of our registered users.

• To view a list of the wo rldwide support offices, go to:

http://www.antivirus.com/support

• To get the latest documents of every Trend Micro products, please go to:

http://www.antivirus.com/download/documentation/

In the United States, Trend Micro representatives can be reached via phone, fax, or
email. Our Web and email addresses follow:

http://www.antivirus.com

4-5

Trend Micro™ GateLock ™ User’s Guide

[e-mail]

General US phone and fax numbers follow:

Toll free: [phone] (sales)
Voice: [phone] (main)
Fax: [phone]

Our US headquarters is located in the heart of Silicon Valley:

Trend Micro, Inc. 10101 N. De Anza Blvd., Cupertino, CA 95014

Please register your s oftware be fore contacti ng our of fices for s upport. Use a ny of the
four easy ways to register:

• Register online from the program

• Register th rough the Web at:

http://www.antivirus.com/forms/register.htm

• Fax the registration card to any Trend Micro office

• Mail the regi stration card to Trend Micro's US office

FIGURE 4-3. Trend Micro Technical Support Window.

4-6

Troubleshooti ng and Technical Suppor t

Registering GateLock

Registering GateLock with Trend Micro is important because it entitles you to the
following benefits:

• Software upda tes for one year

• Technical support for one year

• Importan t product informat ion
You can register via the Internet or by mail. To register over the Internet, use the

following URL:

http://www.antivirus.com/vinfo/

To register by regular postal mail, fill out and send the self-addres sed, stamped
Registration Card included with the product.

Note: You must register GateLock online to available of software updates.

Testing Installation

After you have installed and configured GateLock, you can check its antivirus
function and see how it handles viruses.

The European Institute of Computer Antivirus Research (EICAR), along with
antivirus vendors, has developed a test file that can be used in checking your
installation and configuration.

The file, named eicar.com, does not contain an actua l viru s. It will c ause no harm and
will not replicate. Rather, it is a speciall y cr eated file whose “signatu re” has been
included in the T r end Micro virus pattern file, and therefore can be detected by the
scan engine used by GateLock.

You can download this file from Trend Micro at:

http://www.antivirus.com/vinfo/testfiles/

Click eicar.com to start downloading the file. If GateLock is properly installed and
configured to detect viruses, it should be able to detect the “infected” file.

4-7

Trend Micro™ GateLock ™ User’s Guide

Virus Information Center

Comprehensive security information is available on the GateLock configuration
console when you click the Security Info button on the button bar. You can also visit
our free antivirus center at:

http://www.antivirus.com/vinfo/

Use the Virus Information Center to find out about:

• Which viruses and malicious mobile code are currently "in the wild," or active

• Computer virus hoaxes

• A list of compute r virus advisori es

• Virus weekly report

• Trend Micro’s Virus Encycl opedia, which inc ludes a comprehensive list of names
and symptoms for known virus es and malicious mobil e co de

• Virus Pr imer

• Glossary of terms

• Safe Comput ing Guide

FIGURE 4-4. Trend Micro Viru s Information Center.

SolutionBank Knowledge Base

The Trend Micro SolutionBank, maintained at the Trend Micro Web site, has the
most up-to-date answers to product questions users have. You may also use

4-8

Troubleshooti ng and Technical Suppor t

SolutionBank to submit a questi on if you cannot find the answer in the product
documentation.

SolutionBank is located at:

http://solutionbank.antivirus.com/solutions

FIGURE 4-5. Trend Micro SolutionBank.

The SolutionBank may be accessed using Internet Explorer, versions 4.0 or later , and
Netscape Navigator, vers ion 4.5 or later. Just s ign up by entering your email address,
name, phone number , and company.

The contents of SolutionBank are being continuously u pdated, and new solutions are
added daily. If you are unable to find an answer, however, you can describe the
problem in email and send it directly to a Trend Micro support engineer who will
investigate the issue and respond ASAP.

4-9

Trend Micro™ GateLock ™ User’s Guide

TrendLabs

™

TrendLabs™ is Trend Micro’s global complex of antivirus research and support
centers. It’ s located on three continents, with a staf f of more than 250 researchers and
engineers who operate around the clock to provide you, and every Trend Micro
customer, with service and support 24x7x365.

FIGURE 4-6. Global Antivirus Research and Support Center.

You can rely on the following post-sales service:

• Regular virus pattern updates for all known "zoo" and "in-the-wild" compute r
viruses and malicious codes

• Emergen cy virus outbreak suppo rt

• Free email ac cess to an tivir u s engin eers

• SolutionBank, Trend Micro’s online database of technical support issues

TrendLabs has achieved ISO 9002 quality assurance certification.

4-10

Troubleshooti ng and Technical Suppor t

Sending Your Infected Files to Trend Micro

If you have a file that is suspecte d to be infected with a viru s but the scan engine doe s
not detect it or cannot clean it, we encourage you to send the suspected file to
Tre ndLa bs at:

[e-mail]

Please include in the message text a brief description of the symptoms you are
experiencing. Our team of virus engineers will “dissect” the file and remove any
virus(es) it may contain. We will then return the cleaned file to you. Please visit the
following site for the information on "How to Submit Suspicious Files":

http://www.antivirus.com/vinfo/trendlabs/submit.htm

4-11

Trend Micro™ GateLock ™ User’s Guide

4-12

Appendix

This appendix:

• Provides instructions on how to view your PC’s MAC address

• Explains how to set up the proxy properties of your Web browser so that you can
successfully open GateLock’s browser-based configuration console

• Provides detailed instructions and illustrations about how to install GateLock with
a router

• Lists technical and environmental specifications

• Provides a glossary of terms used in this document.

Viewing your MAC address

You have to find out your computer's MAC address before entering it into the
GateLock console. Choose another PC that you are using with GateLock. Then, do
the following:

On a Windows 95/98 machine:

1. Click Start > Run. The Run dialog box opens.

2. Type winipc fg in the Open: field. The n click OK. The winipcfg program runs

and opens the IP Config box. L ook for the field labeled Adapter Address and
write down its corresponding value. This is your MAC address.

A-1

Trend Micro™ GateLock ™ User’s Guide

On a Windows NT/2000 machine:

1. Open the Windows command promp t window and type ipconfig /all. Press the

<Enter> key. The IPCONFIG information will be displayed in the command
prompt window.

2. Look for the Ethernet adapte r Local Area Connection section and writ e down the

value for Physical Address. This is your MAC addre ss.

Setting the Proxy Server in Y o ur Browser

Since the IP address of GateLock’s PC/HUB port (http://192.168.253.1) is a private
IP address, it is important that you set up your proxy server setting correctly. You can
either:

• Disable the proxy server setting

— OR —

• Use a proxy server, but make 192.168.253.1 an exception

Disa bling the Proxy Server

On Internet Explorer

1. Select Internet Options from the Tools Menu.

2. In the Connections tab, click LAN Settings.

3. Make sure the Use a Proxy Server check box is not selected.

4. Make sure the Bypass Proxy Server for Local Addresses check box is selected,

then clic k OK.

On Netscape

1. Select Preferences from the Edit Menu.

2. In the left frame, cl ick Advanced, then cl ick Proxies (under Adva nce d).

3. Select Dir ect Connection to Internet, then click OK.

A-2

Enabling the Proxy Server with an Exception

On Internet Explorer

1. Select Internet Options from the Tools Menu.

2. In the Connections tab, click LAN Settings.

3. Make sure the Use a Proxy Server check box is selected.

Note: If both Use a Proxy Server and Bypass Proxy Server for Local Addresses are

selected, the GateLock IP address (192.168.253.1) will be bypassed because it is
on the same LAN as the IP address from the ISP.

4. Click Advanced. The Proxy Settings window opens.

5. In the Exceptions field, type 192.168.253.1 (GateLoc k’s IP address), then

click OK.

Appendix

On Netscape

1. Select Preferences from the Edit Menu.

2. In the left frame, c lick Advanced, then click Proxies (under Advanced).

3. Select Manual Proxy Configuration.

4. In the Exceptions field, type 192.168.253.1 (GateLoc k’s IP address), then

click OK.

Installing GateLock with a router

If you are using a router with GateLock, you may have to follow a different
procedure. Set up your router as you would set up a hub. Do the following:

1. Open your router’s configuration console and verify that it s DHCP is disabled.

DHCP is disabled by default on most routers. If your router’s DHCP cannot be
disabled, follow the Alternative Procedure starting on page A-4.

2. Set up your GateLock and router with your PCs and xDSL/cable modem as

shown below.

A-3

Trend Micro™ GateLock ™ User’s Guide

FIGURE A- 1. Connecting GateLock to a router

• Plug one end of the network cable from your ISP to your xDSL/cable

modem’s network port. Plug the other end into GateLock's Internet port.

• Plug one end of th e red cable int o GateLock’s PC/HUB port. If your router has

an Uplink port, plug the other end of the red cable into this port and m ove the
HUB-PC dip switch to the PC side . If your router does not have an Uplink
port, plug the other end of the re d cable into one of the gene ric ports and move
the HUB- PC dip switch to the H U B side.

3. Connect your PCs to your router.

4. Plug your GateLock’s power adapter into a power source.

5. Plug your router’s power adapter into a power sou rce.

6. Verify that PC you will use to configure GateLock’s connection settings is using

DHCP. Then, restart this PC.

7. On the same PC, open your Web browser. Enter 192.168.253.1 in the address ba r

and configure your GateLock.

8. Verify that every PC connected to your router is us ing DHCP. For instructions on

how to configure your DHCP settings, see Confi guring your DHCP set tings
starting on page 2-3.

9. Restart every PC connecte d to your router.

Alternative Procedure

If DHCP cannot be disabled on your router , follow this procedure to install GateLock
with a router:

1. Connect th e router to GateLock.

• Plug one end of the network cable from your ISP to your xDSL/cable

modem’s network port and plug the other end into GateLock’s Internet port.

A-4

• Plug one end of the red c able i nto Gate Lock’s PC/ HUB port a nd plug th e ot her
end into your rout er Internet/WAN port. Then move GateLock’s HUB-PC dip
switch to the PC s id e.

2. Connect your PCs to your router.

3. Plug your GateLock’s power ad apter into a power source.

4. Plug your router’s power adapter into a power source.

5. Restart the PC that you will use to configure your router settings.

6. Configure you r router’s conne ction settings .

• Select Obtai n an IP addre ss automatically (DHCP) if you want your router to
automatically assign an IP address to each of your PCs.

• If you can only use static IP address, configure your router settings to:

LAN IP address: 192.168.1.1 (or the router’s default IP address)

Appendix

Subnet mask: 255.255.255.0
WAN IP address : 192.168.253.2
Subnet mask: 255.255.255.0
Gateway: 192.168.253.1
DNS server: 192.168.253.1

Note: If your router has a PPPoE option, do not enable it. Set your PPPoE settings

on GateLock’s configuration console.

• Save your router settings.

7. Restart ev ery P C connected to your rout er.

8. Open your Web browse r. Enter 192.168.25 3.1 in the address field to start

configuri ng your GateLock.

A-5

Trend Micro™ GateLock ™ User’s Guide

Frequently Aske d Questions

1. While I was retrieving my POP3 mail, I accidentally unplugged one of the
network cables on GateLock’s rear panel. My mail retrieval was aborted
and I couldn’t connect to the POP3 server when I tried to retrieve my mail
again. Why does this happen?

When you accidentally unplugged one of GateLock’ s network cable, you were
disco n nected from the POP3 server. The server wasn’t awa r e that you were
already dis connected, until connection time-out occurred. Because POP3 s ervers
allow only one account at a time to retrieve mail, you couldn’t immediately
connect to the server again because your previous mail retrieval was still being
processed. In cases like this , wai t for the connectio n tim e-out to occur before
trying to retrieve your POP3 ma il again. You may have to wait up to 15 minutes.

To avoid this inc onvenience, avoid unplugging GateLoc k’s network cables when
retrieving mail or connecting to servers.

2. I want to save a virus notification for an infected W ebmail attachment on
Netscape for reference. I tried right-clicking the attachment and using Save
As but it won’t work. What should I do?

You have to righ t-clic k the notific ation , cl ick Save As, and change the file format
to HTML. Simply rig ht-clicking the notification and clicking Save As will save
the notification in the infected attachment’s file format.

3. Can GateLock scan my Webmail attachments if I use MSN Explorer to read
my Webmail?

No, GateLock cannot scan Webmail attachments if you use MSN Explorer. This
is because MSN Explo rer us es a different protocol to read your Webmail. We
recommend using Internet Explorer.

4. How do I sav e a W e bmai l attac hment t hat’ s unc leanab le or bigge r than 2MB
on Internet Explorer? When Webmail scanning is enabled, I can’t save the
attachment by just ri gh t-clicking it and using Save As.

You can only save this type of attachment if you disable GateLock’s Webmail
scanning. Remember, however, that when Webmail scanning is disabled,
GateLock does not scan your attachments for viruses.

A-6

Appendix

5. Can I us e GateLock with download ma nagers like GetRight, Ne tAnts, etc.?

No, download managers like GetRight and NetAnts that all ow mul tiple,
simultaneous downloads are not supported by GateLock. GateLock only allows
you to download one file at a time via HTTP.

6. If I configure Outlook Express to retrieve my Hotmail messages, will
GateLock still be able to scan my Hotmail attachments?

No, GateLock wil l not be able to scan your Hotmail attachmen ts if you use
Outlook Express to read your Hotmail. You will not be notified that your
Hotmail attachments have not been scanned for vi ruses. This is because Outlook
Express uses a different port to ret rieve your Hotmail messages . To stay
protect ed against viruses, we recommend that you use your Web browser to open
your Hotmai l messages.

7. GateLock works well with ICQ messaging but not with ICQ File Trans fer.
How do I fix this?

Yo u must use IP Port Forwarding to make ICQ File Transfer work with
GateLock:

i. Open the GateLock confi guration console.
ii. Click Adva nce d > IP Por t Forwarding on the sidebar. The IP Port

Forwarding s creen l o ad s.

iii. Click User-specified user.

• In the Port(s ) fie ld, s pecify a port ra nge for ICQ P hone, e.g., 5 56-560 .
Make sure that these p o r t s are not cu rrently in use. Take note of the
port you specify here as you will also provide this information in
your ICQ Preferences.

• In the Protocol field, select TCP from the drop-down menu.

• In the Service IP addre ss, enter the IP address of the PC you want to
use for ICQ File Transfer.

• Click Apply.

When you have finished co nfiguring IP Port Forwar ding for File Transfer:

i. Open your ICQ Preference s.
ii. Click the User tab.
iii. Under Advanced Users, select the Not us ing Proxy option.

A-7

Trend Micro™ GateLock ™ User’s Guide

iv. Select the Use the following TCP listen port for incoming event option

and enter the port rang e you hav e ass igned for ICQ File T r ansf er in
GateLock’s IP Port Forwarding screen.

v. Click Apply. A confir mation dialog box appears.
vi. Click OK.

Your ICQ File Transfer should now work with GateLock.

8. When Webmail scanning is enabled, some Web pages are not displayed
properly . How do I fix this?

This is a com patibility issue. There are two ways to solve this pr oblem. You can
either disable the Use HTTP 1.1 check box in your Internet Explorer’ s Internet
Options or you can turn of f GateLock’s Webmail scanning. We recommend that
you first try dis abling Use HTTP 1.1. If this does not work, disable Webmail
scanning.

To disable HTTP 1.1:

i. Click Tools > Internet Options on your Internet Explorer’s menu bar. The

Internet Options window opens.

ii. Click the Advanced tab.
iii. Under HTTP 1.1 settings, clear the Use HTTP 1.1 check box.
iv. Click OK.

9. POP3, SMTP, and HTTP are normally assigned port 110, port 25, and port
80, respe ctively. If I assign oth er ports to these protocols, will GateLock still
be able to scan my incoming mail, outgoing mail, and Webmail attachments
for viruses?

No, GateLock wil l not be able to scan your incoming mail, outgoing mail, and
Webmail attachments for virus es if you assign other ports to these protocols .
Also, you will not be notified that your mail message or Webmail attachment has
not been scan ned.

10. What should I do if I get a "Page Not Found" error message when I try to
upgrade my GateLock components?

If you get a "Page Not Found" Web error message , sim ply refresh your browser
and try upgrading your GateLock components aga in.

11. Why do I get an "Unknown" error message on the GateLock configuration
console when I click Update > Product Update from the sidebar?

A-8

Appendix

You may be having problems with your Internet connect ion. Check if you can
connect to Trend Micro’s Web site at www.antivirus.com.

If your Internet connection has no problem but you get the "Unknown" error
message on the GateLock configuration console, the files on the Trend Mic r o
update server are probably being updated. Try clicking Update > Product Update
from the sidebar after around 30 minutes.

A-9

Trend Micro™ GateLock ™ User’s Guide

Technical Specifications

Protocols IP, NAT, ARP, CSMA/CD, ICMP, DHCP,

TCP/IP

Standards Supported IEEE 802.3 10BaseT, 802.3u 100BaseTX
Local (PC/HUB) Port 10/100BaseT, RJ-45 Ethernet
Uplink (Internet) Port 10/100BaseT Broadband
Cable Type 10BaseT — Category 3 or 5 UTP/STP

100BaseTX — Category 5 UTP/STP

Speed WAN Route r — 10/100Mbps (10BaseT Ethernet)

LAN Router — 10/100Mbps (10BaseT Fast Ethernet)

LED Indicators Power, Antivirus, An ti- Hacker, Internet, PC/HUB
Topology Star

A-10

Environmental Dat a

Physical Dimensions 268 x 184 x 77 millimeters
Net Weight 1.05 kilograms
Gross Weight 1.15 kilograms
Certifications FCC Class B, CE Mark C omm ercial
Operating Temperature 0 to 40 degrees Celsius (32 to 104 degrees F)
Operating Hu midi ty 10% to 80% non-condensing
St orage Temperatur e -20 to +70 degrees Celsius (-4 to 158 degrees F)
St orage Humidity Maximum 85% non-condensing

Appendix

A-11

Trend Micro™ GateLock ™ User’s Guide

Glossary

ADSL

Asymmetric Digital Subscriber Line. This is one popular type of broadband line. In
this manual, we use the ter m xDSL to denote all varieties of DSL, such as ADSL,
IDSL, SDSL, VDSL, G-lite, etc.

DHCP

Dynamic Host Configuration Protocol. DHCP is software that automatically assigns
IP addresses to clients who log into a TCP/IP network. (This type of IP address is
called a dynamic IP address.) This software usually runs on Routers, Servers, and
other network devices. By default, your GateLock router is set up to use DHCP so
that you do not have to manually assign permanent IP addresses to every device on
your network. We recommend that you not change this, so your PC will be
recognized as a DHCP server.

Ethernet Card

A plug-in circuit board in a PC that takes parallel data from the computer and
converts it into serial data. It then s ends the data via 10BASE-T cable on the LAN in
packet format. Also referred to as a Network Interface Card (NIC).

Gateway IP

The IP address of the gateway device that allows GateLock and a host to make
contact.

Hub

A device that enables two or more computers to use one cable modem/broadband
line. You would need to connect GateLock to the hub, and then you could connect up
to 32 computers to the hub.

IP Address

Each IP (Internet Protocol) address is unique a nd consists of 32 bits. Every devic e on
a network must have an IP address. An IP address consists of a network address
(which is assigned by a government agency), and a host address (which is assigned
by a company administator to each host computer). Although text characters are
often used to represent an IP address, the actual address consists of digits. For
exampl e, the IP addr ess for http://www.antivirus.com is 216.33.22.211.

• Dynamic — A dynamic IP address is one that is assi gned to a dev ice on a TCP/IP

network a utomatically by a DHCP server. The IP address would change ever y time

A-12

the device co nnects to the network, or when the modem is shut of f. Therefore, a
dynamic IP address does not necessarily change very often.

• Static — A static I P a dd ress is a permanently assigned addres s to a devi ce on a

TCP/IP network. For example, a printer would typically have a static IP address
becau se it is re p eatedly accessed by users. Sin ce the static IP address is a
“cons ta nt ” ad d r ess, it is mo re suscepti bl e to at tacks from hacker s. GateLo ck h el ps
to hide the IP addresses t o m ake it harder for hackers to access your PCs. To check
whether you have static DHCP IP addresses, consult your Internet Service
Provider.

NAT

Network Address Translation. GateLock uses NAT and TCP/IP port inspections.
NAT “converts” IP addresses on a local area network so that only one address is sent
out publicly on the Internet. This means that the actual IP addresses of multiple
computers connected to a private local area network is never made public on the
Internet. In addition to this protec tion, NAT provides another benefit to users of
GateLock. If you are using a cable/xDSL modem and have only one TCP/IP address
provided by an Internet Service Provider, you can have multiple other private
addresses behind the one address provided by the ISP.

Appendix

Subnet Mask

Also known as Network Mask. A subnet is actually a network subdivision. It
identifies t he specific network and host a ddress es, by dete rmining which part of an IP
(Internet Protocol) address constitutes the network portion, and which part identifies
the host portion. GateLock is furnished with a Subnet Mask of 255.255.255.0. The
first three numbers, with a value of “255”, indicate tha t the f irst three numbers are the
IP address of a network. The last digit should be between 1 and 254 and identifies a
host on that network. So, when subnetting is used, the IP address is divided into a
subnet number and a host number. Hosts, as well as gateways, use the Subnet Mask
to identify the bits used for the network and subnet number.

A-13

Trend Micro™ GateLock ™ User’s Guide

A-14

Index

A

About button (on Button Bar) 3-36
ADSL A-12
Advanced 3-25

IP Port Forwa r ding 3-25

Adding a service 3-26
Deleting a service 3-29
Editing a service 3-29

Network Traffic Control 3-29

Adding a rule 3-30
Deleting a rule 3-31
Editing a rule 3-32

Anti-Hacker

LED 1-8
Logs 3-20
Options 3-18
Port blocking 3-18

Antivirus

Act i on to ta k e on infec t e d f i les

3-15

Logs 3-18
Options 3-14
POP3 and SMTP mail scanning

3-15

Specifying action to take on virus-

es 3-15

Testing Gate Lock’s ant ivirus f unc-

tion 4-7
Using HouseCall 3-16
Webmail scanning 3-14

B

Button bar

About 3-36

Log off 3-36
Online Help 3-35
Security 3-35
Support 3-35

C

Configuration console

Layout 3-1
Opening 3-2

Connecting

GateLock to multiple PCs 2-9
GateLock to one PC 2-8

Connection 3-10

Connection Settings 3-10
ISP Requirements 3-12

On-Demand Connection 3-11
Contacting Technical Support 4-5
Contents of GateLo ck package 1-4

D

DHCP A-12
Dynamic IP address 3-7, A-13

E

eicar.com file for testing 4-7
Email Notificatio n Options 3-8
Etherne t cabl e 4-1
Etherne t car d A-12

G

GateLock

Anti-Hacker LED 1-8

Antivirus LED 1-8

Broadband requirement 2-7

Connecting

To hub 2-9
To multiple PCs 2-9
To one PC 2-8

I-1

Trend Micro™ GateLock ™ User’s Guide

Contents of package 1-4
Installing 2-7
Internet por t 1-6
IP Address 3-2, A-2
PC Hub switch 1-6, 2-8
PC/Hub Po rt 1-6

Connecting 2-8, 2-9

Power Input 1-5, 2-8, 2-9
Power LED 1-7
Private IP addre s s 2-9
Registering 4-7
Subnet Mask address A-13
Technica l spe ci ficat io n s A-10

Gateway IP address A-12
Global Antivirus R esearch and Support

Center 4-10

H

Help button (on Button Bar) 3-35
Hub device, connecting to A-12

I

Indicator lights (top panel) 1-7
Installing GateLock

Connecting the cable s 2-8
Requirements 2-7
Verifying the connec tion 2-9

Internet por t 1-6, 2-9
Internet Ser v ic e Prov i der

IP address via DHCP 3-7

IP Address

Defined A-12
Determining using PING 4-3
Dynamic A-13
Static A-13

IP Address of GateLock 2-9, 3-2, A-2

M

Maximum Idle Tim e field 3-4

N

NAT (Network Address Translation)

A-13

Networ k Int erf ace card A-12
Network Mask A-13
Network Traffic Control 3-29
Network window 2-2

O

Online documentation 3-35
Online Registrati on 3-33

P

PC Hub switch 1-6, 2-8
PC/Hub port 1-6

Connecting to multiple PCs 2-9
Connecting to one PC 2-8
Private IP address A-2

PING, using 4-2
Port

Internet 1-6, 2-8, 2-9
PC/Hub 1-6, 2-8, 2-9

Power Input 1-5, 2-8, 2-9
Port blocking 3-18
Power Input 1-5, 2-8, 2-9
Power LED 1-7
PPPoE X DSL 3-4
PPPoE x DSL screen 3-4
Private IP address of GateLock 2-9,

3-2

Proxy Server

Disabling using Interne t Explorer

A-2

Disabling using Netscape A-2

Enabling with an exception using

I-2

Internet E xplo rer A-3

Enabling with an except ion using

Netscape A-3

Q

Quick Setup

Email Notification Options 3-8
ISP Requirements 3-7

Host Name 3-7
MAC Address 3-7

Specifying how GateLock obtains

its IP address 3-3

R

Rear panel 1-4
Registering Gat eLock with Trend Mi-

cro 4-7
Requirements 2-7
Requirements for installing GateLock

2-7

S

Security

hyperlink 3-14

Security Info hyperlink 4-8
Select Network Component Type win-

dow 2-3
Select Network Protoc ol window 2-3
Server, Proxy (setting) A-2
Settings 3-22

Email Notification 3-23
Password Protection 3-23

Time Zone 3-24
SolutionBank Knowledge Base 4-8
Static IP Address 3-5
Static IP address A-13
Static IP Address scr een 3-6
Subnet Mask defined A-13

Support Info rm at ion 3-32

T

TCP/IP Properties window

DNS Configuration tab 2-6
Gateway tab 2-5
IP Address tab 2-4
WINS Configuration tab 2-5

Technical specifi cations of GateLock

A-10

Trend Micro

IP Address of home page A-12
Trend Micro SolutionBank 4-8, 4-9
Trend Micro Vi rus Inf ormation Center

4-8

TrendLabs 4-10
Troubleshooting tips

Etherne t cabl es 4-1

Using PING 4-2

U

Update 3-21

Product Update 3-21

Update History 3-22

V

Verifying the GateLock conne ction

2-9

Viewing your MAC address A-1
Virus Hospital 4-11
Virus Information Center 4-8
Virus Primer 4-8

W

Web address, dete rminin g using PING

4-3

I-3

Trend Micro™ GateLock ™ User’s Guide

I-4

Trend Micro, Incorporated

10101 N. De Anza Blvd., 2nd Floor

Cupertino, CA., 95014 USA

www.antivirus.com

For Sales:

Tel: [phone] (US and Canada)

Tel: [phone] (outside US and Canada)

Fax: [phone]

Item Code: GLEM20885/11024