Does the mobile filter need a port span?


This article applies to:

  • Mobile Client

Question:

Does the mobile filter need a port span?

Reply

Mobile filter setup configurations:
Does the mobile filter need a port span also?

No only one IP for lan 1 or lan two, plugged into a switch port.

Other things to consider:
If mobile is at the DMZ  give filter a public ip.
If mobile is internal, laptops will need to NAT from outside to internal mobile filter.


 source/target configurations  for mobile:
 Be sure that you have the appropriate mode selected for each R3000 in System / Mode / Operation Mode. Next, go to System / Synchronization / Setup and designate one R3000 as the "Source," and the other as the "Target." You can choose to synchronize the configuration files only, library additions and deletions only, or both. Please note that the standard R3000 assigns filtering profiles based on IP address/range, whereas the Mobile R3000 assigns profiles based on MAC address. The standard R3000 will ignore MAC address-based profiles received from the Mobile R3000, and the Mobile R3000 will ignore IP-based profiles obtained from the standard R3000.


Ports info:
Ports used for syncing are 26262 and 26268
communication between filters is https port 443 or 1443
Port 81 is block page for all filters

Distribute mobile Client as an image?
see article 294730

Explain how the mobile client works?
see article 288596


This article was previously published as:
8e6 KB 297167

Last Modified 10/16/2008.
https://support.trustwave.com/kb/KnowledgebaseArticle12584.aspx