Views:

Follow the steps to connect DDI to Trend Vision One through DDD

  1. Prepare DDI and DDD On-Premises to integrate with Trend Micro Vision One.

    Use supported products version to integrate with Trend Micro Vision One investigation platform:

    • DDI 5.7 SP3 or above
    • DDD 5.2 Patch 1 or above

    For DDD 5.2, Install it in consolidated mode with Install base version.

  2. Make sure both DDI and DDD has valid Activation Code.
     
    DDI Activation Code could be used for DDD as well.
     
  3. Provision Deep Discover Director-Network Analytics as a Service (DDDNASaaS) from DDD.

    1. On the DDD web console, go to Administration > Licenses, then enter XDR Addon Activation Code.

      DDNASaaS provision will be auto started and the following message will appear on the DDD web console.

      Provisioning for Deep Discovery Director - Network Analytics as a Service is in progress...

      DDD web console

    2. After the provision is completed, following message will be observed.

      Deep Discovery Director - Network Analytics as a Service is ready. Go to Administration > Network Analytics > Connected Sources to configure connected data sources.

      DDD web console

  4. Register DDI to DDD.
    1. On the DDD web console, go to Help, copy the API key.
    2. On the DDI web console, go to Administration > Integrated Products/Services > Deep Discovery Director, select On-premises version for Server type, enter the DDD server address, DDD API key, and click Register.

      Register DDI to DDD

  5. Move DDI to the Managed folder.

    On DDD web console, go to Appliances > Directory, move DDI to managed or other customized folder.

    move DDI

  6. Bind DDI to send network flow (activity data) to DDDNASaaS via DDD web console.

    1. On the DDD web console, go to Administration > Network Analytics then click on the Connected Sources tab.

      click Configure

    2. Select the DDI instance which you want to bind (default is Disabled). Click Configure to enable and bind selected DDI instance with DDDNASaaS.

      toggle Enable

    3. You will see the status is enabled.

      Enabled Status

  7. Onboard DDD to Trend Micro Vision One investigation platform.
    1. Log on to the Trend Micro Vision One console. Go to Network Security Operations > Network Inventory.

      NetInv

      ConnectedNetInv

    2. The Startup page appears. Select on-premises Deep Discovery Director option then click Get Started.
       
      If your license entitlement is the form of Trend Micro Vision One credit, the page will not exist. Your DDD on-premises version won’t be able to connect Trend Micro Vision One
       

      Connectonprem

    3. On the Connect Deep Discovery Director window, select 5.2 Patch 1 and above on Deep Discovery Director versions field drop down list, and specify DDD IP address, Click Go.

      ConnectDDD

    4. You will be redirected to DDD Web console, and confirmation message appear, click Continue.

      Register

    5. In Administration > Trend Micro Vision One page, and you can see the registration has been completed successfully.

      Status

  8. Go back to the Trend Micro Vision One Console, you may see that the Connect Deep Discovery Director window is kept open, click Cancel once then reload the page. DDI is now registered.

    DDIregistered