Installing the Deep Security Relay

The DSR installer installs both Relay Server and Deep Security Agent functionality on Windows machines.

1. Double-click the installation file to run the installer package. Click Next to begin the installation.
2. Accept the license agreement and click Next to continue.
3. Select the features that you want to install. The Anti-Malware feature is an optional component.
4. Click Install to proceed with the installation.
5. Click Finish to complete the installation.

Trend Micro does not recommend installing the Deep Security Relay over Windows Remote Desktop because of the temporary loss of connectivity during the installation process. However, a command line switch when starting Remote Desktop will allow the installation program to continue on the server after the connection is lost.

• For Windows Server 2008, Windows Vista SP1 and later, or Windows XP SP3 or later, use: "mstsc.exe /admin"
• For earlier versions of Windows, use: "mstsc.exe /console"

Configuring the Deep Security Updates

Deep Security Manager (DSM) requires at least one (1) Deep Security Relay to pull down updates from the Trend Micro ActiveUpdate Server. Updates are required for all protection functionality except Firewall. DSM only gets update information from the Deep Security Relay. A typical configuration is for DSM to use a Deep Security Relay which is located on the same computer. If you choose not to install the co-located DSR, you need to install it on another computer.

The clock on a DSR machine must be synchronized with Deep Security Manager to within a period of 24 hours. If the DSR clock is behind the DSM clock, then an "Agent Activate" operation will fail because the certificate generated by DSM for DSR will not yet be valid.

If you encountered this condition, an "Agent Activate Failed" event will be recorded in the System Events:

A client error occurred in the Deep Security Manager to Deep Security Agent protocol: HTTP client error received: certificate is not yet valid.

Activating the Deep Security Relay

1. Log on to the DSM.
2. Go to the Computers section and add the computer where DSR is installed.
3. Activate the machine.
4. Check that the Relay Agent status is showing Managed (Online).
5. On the DSR computer, double click the Deep Security Notifier icon in the System Tray.
6. Check that the status is displaying correctly.

Configuring Updates via Relay

1. On the DSM, go to Administration > System Settings > Updates.
2. Click the View Relay Groups button.
3. On the Relay Groups window, click New and create a new relay group.
4. Select the newly-added Relay Agent computer in the Members section and then click OK.
5. Go to Administration > Updates. You should see the newly-added Relay as a member of the Relay Group in the Relays section.
6. In the Security Updates section, the list of components will all appear as "Not updated". Click Update Now.
7. The Component Update Wizard will appear. Click Finish.
    

   Updating the components on the Deep Security Relay may take a few minutes.
8. When the Component Update Wizard shows that the update has completed, click Finish.
9. Return to Administration > Updates. In the Security Updates section, the list of components will appear "100% Updated".
10. Go to the DSR machine and open the Deep Security Notifier. You will see that the components list has been updated.
     

    The Deep Security Agents and Appliances can be configured to either pull the updates from Deep Security Relays or directly from the Trend Micro ActiveUpdate Server.

Configuring Agent Updates via Relay

1. On the Computers screen, select a relay for an Agent/Appliance.
2. Right-click the Agent/Appliance and go to the Actions menu.
3. Select Assign Relay Group.