- Make sure you configured exceptions on your firewall to allow DDI accessing several Trend Micro services. For the detail, refer to the DDI Online Help, find Service Addresses and Ports page under Appendices section on the each DDI version page.
Also, make sure necessary firewall exception to connect DDI to Trend Vision One. For the detail, refer to the Trend Vision One Online Help: Firewall exception requirements for Trend Vision One.
-
Decide how to connect DDI to Trend Vision One and configure Service Gateway if necessary.
There are two ways to connect it. One is to connect DDI to Trend Vision One directly, the other is to connect DDI to Trend Vision One through Service Gateway.
If you already use Service Gateway in Trend Vision One, connecting DDI through Service Gateway doesn’t require additional firewall exception for Trend Vision One. In this case, before connecting DDI to Trend Vision One using a Service Gateway as a proxy, make sure you have configured a Service Gateway with the following services enabled.
- Forward Proxy Service
- ActiveUpdate
- Smart Protection Services
- Suspicious Object List synchronizationFor more information about Service Gateway, see Trend Vision One Online Help: Deployment Guides and Managing Services in Service Gateway.
Note: Connection using Service Gateway is supported on DDI 6.7 or later version.
- Connect DDI To Trend Vision One.
- Logon to Trend Vision One console (https://signin.v1.trendmicro.com), go to NETWORK SECURITY OPERATIONS > Network Inventory, click Get Started.
Click the image to enlarge.
- Go to Deep Discovery Inspector Appliances tab, click Connect Appliance.
Click the image to enlarge.
- Appliance Connection Settings screen appears. Select Deployed Deep Discovery Inspector in Product field, select the version in Deep Discovery Inspector version field, select connection method, Direct connection or Connect using a Service Gateway as proxy.
Click the image to enlarge.
- In case you chose Direct connection as a connection method in the previous step, type the IP address or FQDN of DDI, and click Go.
Click the image to enlarge.
In case you chose Connect using a Service Gateway as a proxy as a connection method in the previous step, select Service Gateway, and type the IP address or FQDN of DDI and click Go.
Click the image to enlarge.
- You will be redirected to DDI console, login using your credential information. Registering Trend Vision One screen appears. Click Continue.
Click the image to enlarge.
- Several minutes later, registration would be completed. You can see Trend Vision One information in Administration > Integrated Products/Services > Trend Vision One.
Click the image to enlarge.
- Go back to the Trend Vision One console, close Appliance Connection Settings screen, reload the page. You will see DDI has been connected, then enable Network Sensor.
Click the image to enlarge.
- Enable Network Sensor Capability screen appears. Confirm the necessary credits, click Enable.
Click the image to enlarge.
- Several minutes later, Network Sensor would be enabled.
Click the image to enlarge.
DDI starts to send network activity data.
- Logon to Trend Vision One console (https://signin.v1.trendmicro.com), go to NETWORK SECURITY OPERATIONS > Network Inventory, click Get Started.