Connected Threat Defense Product Integration

Main Products

Connected Threat Defense requires the following Trend Micro products:

  • Control Manager

  • Deep Discovery Inspector

  • OfficeScan

  • Smart Protection Server (standalone) or integrated with OfficeScan

Other Supported Products

The following Trend Micro products can also be integrated to Control Manager for Connected Threat Defense:

  • Deep Discovery Endpoint Sensor

  • Deep Discovery Analyzer



The role of each product in the Connected Threat Defense strategy is discussed in detail in Suspicious Object Management and Handling Process and IOC Management.

Install these products and register them to Control Manager. The following tables list the references and resources to help you install and register the products.

Important: Register Deep Discovery Inspector and/or Deep Discovery Analyzer before registering OfficeScan. If OfficeScan is registered first, it will not be able to obtain suspicious objects from the Deep Discovery products.

Control Manager

Minimum version

6.0 SP3

Installation

References:

  • Installation Guide for version 6.0 to install the product

  • Readme for the service pack to install the service pack

http://docs.trendmicro.com/en-us/enterprise/control-manager.aspx

Control Manager Information

Some managed products require the following Control Manager information:

  • Host name (preferably FQDN) or IP address: Required by Deep Discovery Inspector and OfficeScan for registration. Registration is performed on these products' console.

    Note: Registration for the other Connected Threat Defense products is performed on the Control Manager console.
  • API key: Required by Deep Discovery Inspector, OfficeScan, and Smart Protection Server for suspicious object synchronization

    Manually deploy the API key to Deep Discovery Inspector 3.8 or later, OfficeScan 11 SP1, and Smart Protection Server 3.0 Patch 1. To obtain the API key, open the Control Manager management console and go to Administration > Suspicious Objects > Distribution Settings.

    For later versions of OfficeScan and Smart Protection Server, the API key automatically deploys after Control Manager registration, as long as there is one Deep Discovery product already registered to Control Manager.

Deep Discovery Inspector

Minimum version

3.8

Installation and deployment

References:

  • Quick Start Card

  • Installation and Deployment Guide

http://docs.trendmicro.com/en-us/enterprise/deep-discovery-inspector.aspx

Registration and suspicious object synchronization

Complete the registration and enable suspicious object synchronization from the Deep Discovery Inspector management console.

You can conveniently launch the Deep Discovery Inspector management console from the Managed Servers screen in Control Manager.

Registration and synchronization instructions:

http://docs.trendmicro.com/all/ent/ddi/v3.8/en-us/ddi_3.8_olh/admin_int-prods-srvcs_tmcm_register.html

Deep Discovery Analyzer

Minimum version

5.1

Installation and deployment

References:

  • Quick Start Card

  • Installation and Upgrade Guide

http://docs.trendmicro.com/en-us/enterprise/deep-discovery-analyzer.aspx

Registration

Complete the registration from the Control Manager management console. Go to Administration > Managed Servers and select Deep Discovery Analyzer from the list of products.

OfficeScan

Minimum version

11 SP1

Installation

References:

  • Installation and Upgrade Guide for version 11 to install the server program

  • Readme for the service pack to install the service pack to the server

  • Online Help or Administrator's Guide for version 11 or later to install agents and use the integrated Smart Protection Server

http://docs.trendmicro.com/en-us/enterprise/officescan.aspx

Registration and suspicious object synchronization

Before registering OfficeScan, be sure that you have registered at least one Deep Discovery product to Control Manager.

Complete the registration and enable suspicious object synchronization from the OfficeScan server web console.

You can conveniently launch the OfficeScan server web console from the Managed Servers screen in Control Manager.

Smart Protection Server (Standalone)

Minimum version

3.0 Patch 1

Installation

References:

  • Installation and Upgrade Guide for version 3.0 to install the product

  • Readme for the patch to install the patch

http://docs.trendmicro.com/en-us/enterprise/smart-protection-server.aspx

Suspicious object synchronization

Synchronization instructions (Smart Protection Server 3.0 Patch 1 only):

http://docs.trendmicro.com/all/ent/sps/v3.0p1/en-us/sps_3.0p1_olh/using_smart_prot_ccca_configure.html

Note: Only Smart Protection Server versions later than 3.0 Patch 1 support registration with Control Manager. After the registration is complete, Smart Protection Server automatically synchronizes suspicious objects with Control Manager.

Deep Discovery Endpoint Sensor

Minimum version

1.5 (Preview Release)

Installation

Reference:

Installation Guide (for server and agent installation instructions)

http://docs.trendmicro.com/en-us/enterprise/deep-discovery-endpoint-sensor.aspx

Registration

Complete the registration from the Control Manager management console. Go to Administration > Managed Servers and select Deep Discovery Endpoint Sensor from the list of products.