Views:
  • Trend Micro Vision One
  • Vision One Service Gateway Integrated to Vision One Server
  • Tipping Point Products
The diagram below shows the flow of Suspicious Objects (SO) from Vision One going to Tipping Point products, with the Service Gateway as its bridge.

Architecture

Click the image to enlarge.

  1. On the TippingPoint Security System, go to Service Gateway, then click Configure Integration Settings:

    TippingPoint Service Gateway

    Click the image to enlarge.

  2. Enable the Integration status, then enter the Service Gateway IP Address and the API Key. Test the connection first to verify, then click Save.

    Gateway Communication Settings

    Click the image to enlarge.

    A confirmation should appear right after the configuration:

    Integration State

    Click the image to enlarge.

  3. Wait for the synchronization to occur after connecting to Service Gateway (May take up to a few minutes).

    Sync Status

    Click the image to enlarge.

  4. Once done, the Reputation Database would be filled up with SO from Vision One (SO will be tagged as User-Provided on TP console)

    Reputation Database

    Click the image to enlarge.

  5. On the Vision One console, you may add a suspicious object (Or cross-check the synced objects if there is already existing SO entries), then verify it on the Tipping Point console after a few minutes of synchronization:

    Suspicious Objects

    Click the image to enlarge.

  6. Go back to the TP console then use the search entries under Reputation Database to see the SO entries:

    TippingPoing Reputation Database

    Click the image to enlarge.

  1. On the SMS console, go to Service Gateway settings and click Configure:

    Step 1

    Click the image to enlarge.

  2. Enable the Suspicious Object state and Event Sharing state to start the synchronization. Click save afterward.

    Step 1

    Click the image to enlarge.

  3. Vision One console search should have Tipping point entries like this after a few minutes of synchronization:

    Step 1

    Click the image to enlarge.