To help provide effective detection and blocking at the perimeter, Deep Discovery Inspector (DDI) can distribute Virtual Analyzer suspicious objects to TippingPoint Security Management System (SMS).
This article will guide you through configuring DDI to share suspicious objects with TippingPoint SMS.
To share the suspicious objects with TippingPoint SMS, from the DDI management console, go to Administration > Integrated Products/Services > Inline Products/Services and select Trend Micro TippingPoint Security Management System (SMS) and provide the information needed.
To test the connection between DDI and SMS, click the Test Connection under Server Information.
If the test connection is successful, wait for next synchronization cycle (every 10 minutes) or click Distribute Now then check if the SMS can receive the related suspicious entries via Profile > Reputation Database > Search.
From the search result, take note that the suspicious objects are distributed by Trend Micro DDI.
If you receive test connection fail message, check for the following:
- Make sure the connection between DDI and SMS is allowed and that Port 443 is whitelisted to allow access to SMS if there are any firewall in between.
Check the version and hot fix of the SMS, if the user is using SMS 5.0 with a hot fix, there is a known issue found due to the spec change. However, the suspicious object distribution should still be sucessful.
The known issue was fixed in SMS version 5.0.1.
For more information, check the official document or refer to the DDI Online Help page.