Views:

  1. On TrendAI Vision One™ Console, hover on to the gear icon and select Third-Party Integration. Select "Check Point Open Platform for Security".

    3rd-party integration

  2. Configure the Sharing Settings, then Add the Service Gateway to the list as its bridge.

    Add Service Gateway

  3. Select the Service Gateway available on the network, then add the Check Point details:
    • Check Point OPSEC Server Address
    • Port Used
    • OPSEC Application Name
    • SIC One-time password

    Service Gateway Details

  4. Click the Test Connection Button below, then Add Button afterward.

  1. On TrendAI Vision One™ Console, hover on to the gear icon and select Third-Party Integration. Select "Broadcom".

    Proxy SG integration

  2. Configure the Share Settings based on preference, then Add the Service Gateway to the list as its bridge.

    Configure Settings

  3. Select the Service Gateway available and configure the other details.

    Service Gateway

  4. Successful Integration would be like this.

    Confirm integration

  1. On TrendAI Vision One™ Console, hover on to the gear icon and select Third-Party Integration. Select Palo Alto Networks.

    Integrate Palo Alto Panorama

  2. Configure the Share Settings based on preference, then Add the Service Gateway to the list as its bridge.

    Add Palo Alto Panorama Service Gateway

  3. Select the Service Gateway available and configure the other details.

    Palo Alto Panorama Service Gateway info

     
    Some products encounter integration issues with HTTPS self-signed certificates, thus HTTP is available. (Ex. Malware Information Sharing Platform or MISP).
     
  4. Successful Integration would be like this.

    Confirm Palo Alto Panorama integration

  1. On TrendAI Vision One™ Console, hover on to the gear icon, click Third-Party Integration, and select "Fortinet".

    Integrate Palo Alto Panorama

  2. Configure the Share Settings based on preference, then Add the Service Gateway to the list as its bridge.

    Add Palo Alto Panorama Service Gateway

  3. Select the Service Gateway available and configure the other details.

    Palo Alto Panorama Service Gateway info

     
    Some products encounter integration issues with HTTPS self-signed certificates, thus HTTP is available. (Ex. Malware Information Sharing Platform or MISP).
     
  4. Copy the Service Gateway IP Address, URL, and Domain and save it on a text document for later use.

    Confirm Palo Alto Panorama integration

  5. In Fortigate Fabric Connector add a new threat feed (Fortiguard, IP Address or Domain Name). TrendAI Vision One™ does not support Malware Hash in plain text yet.

    Fortigate Connector

  6. Fill up the Connector settings based on the copied information from the TrendAI Vision One™ Console. Click Save afterward.

    Fortigate connector settings

  7. Successful Integration should create three new fabric connectors.

    Fortigate Connector list

  8. Verify if the information is being forwarded to Fortigate after a couple of minutes.

    Verify Fortigate Connector settings

  9. Setup the firewall policy to block the entries from going outside.

    Setup Fortigate Firewall

  1. On TrendAI Vision One™ Console, hover on to the gear icon and select Third-Party Integration. Select "MISP Project".

    PPlain text (freetext) feeds

  2. Configure the Share Settings based on preference, then Add the Service Gateway to the list as its bridge.

    Add Palo Alto Panorama Service Gateway

  3. Select the Service Gateway available and configure the other details.

    Palo Alto Panorama Service Gateway info

  4. Copy the Service Gateway IP Address, URL, and Domain and save it on a text document for later use.
    1. Add a custom Trend Micro tag.
    2. Name the Event TrendAI Vision One™ – Suspicious Objects.
    3. Submit and Publish.

    Edit Event

  5. Once done, it should now create the Event ID.

    Event ID added

  6. Add a MISP Feed using the following details:
    • Check: Enabled
    • Name: TrendAI Vision One™ UDSO URL
      • The Service Gateway publishes 3 URLs. Create 1 MISP Feed Per URL
      • http://192.168.1.77/pal/pal_so_ip.txt
      • http://192.168.1.77/pal/pal_so_domain.txt
      • http://192.168.1.77/pal/pal_so_url.txt
    • Provider: TrendAI Vision One™
    • Use the HTTP for the URLs

      Add HTTP URLs

      Target Event ID

  7. Repeat the Process for adding IP and Domains.
  8. Successful feed creation should show each Service Gateway URL. Fetch the feeds after.

    Feeds list

  1. On TrendAI Vision One™ Console, hover on to the gear icon and select Third-Party Integration. Select "Microsoft". Look for "TrendAI Vision One™ for Azure".

    Integrate Palo Alto Panorama

  2. Use the Endpoint Address of TrendAI Vision One™ and the generated Authentication Token for your TrendAI Vision One™ instance. Note that the Authentication Token has an expiration date (Hover on the tooltip to determine the exact expiration date):

    Add Palo Alto Panorama Service Gateway

Keywords: how to integrate 3rd-party services to TrendAI Vision One, how to integrate palo alto to TrendAI Vision One, how to add OPSEC to TrendAI Vision One, how to add proxy sg integration to TrendAI Vision One, how to integrate 3rd-party services to Trend Vision One, how to integrate palo alto to Trend Vision One, how to add OPSEC to Trend Vision One, how to add proxy sg integration to Trend Vision One,