Sending Virtual Analyzer Feedback List to HP TippingPoint

Control Manager 6.0 Service Pack 2 allows you to send the Virtual Analyzer feedback list to HP TippingPoint. The Virtual Analyzer feedback list only includes IP addresses and domain names analyzed by Deep Discovery Inspector. HP TippingPoint uses reputation filters to apply block, permit, or notify actions across an entire reputation group.

Note:

For more information about reputation filters, refer to your HP TippingPoint documentation.

  1. Navigate to Administration > Suspicious Objects > Distribution Settings. The Distribution Settings screen appears.
  2. In the HP TippingPoint Settings section, select Send reputation list to HP TippingPoint to enable this option.
  3. Provide the following information:
    • Server name: Service URL of your HP TippingPoint deployment
    • User name and password: Account with sufficient privileges to access the HP TippingPoint console
  4. Click Test Connection to confirm the connection.
  5. Select the severity that triggers Control Manager to send IP address/domain name information to HP TippingPoint.
    • High only: IP addresses and domain names with high severity

    • High and medium: IP addresses and domain names with high and medium severity

    • All: Includes IP addresses and domain names with high, medium, low, and informational severity

  6. Specify the column names that HP TippingPoint will display, along with the tag it will use to categorize the list. Control Manager sends the corresponding values for the following tags:
    Important:

    Add tag categories to the HP TippingPoint Reputation Database before submitting the reputation list. Otherwise, missing or misspelled tags in HP TippingPoint will cause a mismatch and prevent Control Manager from sending the suspicious objects list.

    • Severity: Tag name of the severity column

      Possible values: High, Medium, Low, or Informational

    • Product Name: Tag name of the reputation list source

      Possible value: Deep Discovery Inspector

    • Publisher Name: Column header of the software publisher

      Possible value: Control Manager

  7. Click Save.