3. Deployment Method

1) Port Configuration

You may review the port information of the device via port configuration, including the quantity and the operation status of ports. The main purpose is to make corresponding configuration based on whether the port is enabled. If a certain port is enabled and there is traffic entering the port, auditing will be performed on this part of the data. After deactivation, the data of this port will not be audited.

2) Management Port Configuration

The configuration of the management port is for various network information of the management port, including IP, subnet mask, gateway, DNS, etc. Network testing can detect whether IP is available and whether the gateway can be connected to, helping users determine whether to modify the management port information.

3) Deployment Method

The default deployment method is Agent diversion, which is more commonly used in cloud auditing environments or scenarios where port mirroring has not been done.

4) Agent Diversion

By installing an agent on the system of the audited object, the required traffic can be diverted into the audit device to implement auditing operations. In addition, agents can be configured and diverted on multiple audited objects simultaneously. You can view the specific user manual for the use of the agent.

Note: The agent listening port needs to be opened between the server and the device, and the two can communicate with each other over the network. By default, the device is port 9999 and has opened this port.