• Trend Micro Vision One
• Vision One Service Gateway Integrated to Vision One Server
• Tipping Point Products

The diagram below shows the flow of Suspicious Objects (SO) from Vision One going to Tipping Point products, with the Service Gateway as its bridge.

^{Click the image to enlarge.}

1. On the TippingPoint Security System, go to Service Gateway, then click Configure Integration Settings:

   

   ^{Click the image to enlarge.}

2. Enable the Integration status, then enter the Service Gateway IP Address and the API Key. Test the connection first to verify, then click Save.

   

   ^{Click the image to enlarge.}

   A confirmation should appear right after the configuration:

   

   ^{Click the image to enlarge.}

3. Wait for the synchronization to occur after connecting to Service Gateway (May take up to a few minutes).

   

   ^{Click the image to enlarge.}

4. Once done, the Reputation Database would be filled up with SO from Vision One (SO will be tagged as User-Provided on TP console)

   

   ^{Click the image to enlarge.}

5. On the Vision One console, you may add a suspicious object (Or cross-check the synced objects if there is already existing SO entries), then verify it on the Tipping Point console after a few minutes of synchronization:

   

   ^{Click the image to enlarge.}

6. Go back to the TP console then use the search entries under Reputation Database to see the SO entries:

   

   ^{Click the image to enlarge.}

1. On the SMS console, go to Service Gateway settings and click Configure:

   

   ^{Click the image to enlarge.}

2. Enable the Suspicious Object state and Event Sharing state to start the synchronization. Click save afterward.

   

   ^{Click the image to enlarge.}

3. Vision One console search should have Tipping point entries like this after a few minutes of synchronization:

   

   ^{Click the image to enlarge.}