In some instances, when customers integrate TMCM with DDI, the Suspicious Objects list in DDI may not appear in TMCM.
According to DDI 3.8's design, the DDI Suspicious Objects come from three sources:
- DDI internal sandbox
- DDI external sandbox
With the DDI internal sandbox, DDI will send the Suspicious Objects to TMCM regardless if DDI enables "Synchronize Suspicious Objects with Control Manager" or not. That is, TMCM can see the full Suspicious objects list that exist in DDI only.
With DDI external sandbox, if "Synchronize Suspicious Objects with Control Manager" is disabled, the source of DDI Suspicious Objects will be from the external sandbox (DDAN) or DDI will get Suspicious Objects from TMCM.
That is, DDI will only have one Suspicious Objects source which depends on "Synchronize Suspicious Objects with Control Manager" option. This may cause TMCM to not have the SO list. In this scenario, to ensure TMCM gets the Suspicious Objects list, you must add DDAN to TMCM.
To add DDAN to TMCM:
- Open the TMCM console.
- Go to Administration > Managed servers.
- Set server type to Deep Discovery Analyzer.
- Click Add and enter the details of your DDAN.
- Click Save.
- Do the same for other DDAN, if any.