Configuring Distribution Settings

Configure distribution settings to enable Control Manager to consolidate and send Virtual Analyzer and user-defined suspicious objects (excluding exceptions) to certain managed products. These products synchronize and use all or some of these objects.

Control Manager can also send suspicious IP addresses and domains to TippingPoint.

  1. Go to Administration > Suspicious Objects > Distribution Settings.

    The Distribution Settings screen appears.

  2. To send suspicious objects to managed products:
    1. Click the Managed Products tab.
    2. Select the Send suspicious objects to managed products check box.
    3. Record the following information for use when configuring Control Manager as the Virtual Analyzer source in managed products:
      • Service URL: The service URL of Control Manager

      • API key: The code that identifies Control Manager to the managed product

    4. Click Save.
    5. Click Sync Now.
  3. To send suspicious objects to TippingPoint:
    1. Select the Send suspicious objects (IP addresses and domain names only) to TippingPoint check box.
      Note:

      Control Manager sends suspicious IP addresses and domain names analyzed by Deep Discovery Inspector and Deep Discovery Analyzer. TippingPoint uses reputation filters to apply block, permit, or notify actions across an entire reputation group. For more information about reputation filters, refer to your TippingPoint documentation.

    2. Specify the following:
      • Server name: Type the server URL and port number for your TippingPoint deployment.

      • User name: Type the user name of an account with sufficient privileges to access the TippingPoint console.

      • Password: Type the password for the account.

    3. (Optional) Click Test Connection to confirm the connection.
    4. Select the severity level that triggers Control Manager to send domain names or IP address information to TippingPoint.
      • High only: IP addresses and domain names with high severity

      • High and medium: IP addresses and domain names with high and medium severity

      • All: Includes IP addresses and domain names with high, medium, and low severity

  4. Click Save.
  5. Click Sync Now.