Integration with Trend Micro Products Parent topic

TippingPoint Advanced Threat Protection Analyzer integrates with the Trend Micro products listed in the following tables.

Sandbox Analysis Parent topic

Products that can send samples to TippingPoint Advanced Threat Protection Analyzer Virtual Analyzer for sandbox analysis:
Note
Note
All samples display on the TippingPoint Advanced Threat Protection Analyzer management console, in the Submissions screen (Virtual Analyzer → Submissions). TippingPoint Advanced Threat Protection Analyzer administrators and investigators can also manually send samples from this screen.
Product/Supported Versions
Integration Requirements and Tasks
TippingPoint Advanced Threat Protection for Email 2.5 or later
On the management console of the integrating product, go to the appropriate screen (see the product documentation for details on which screen to access) and specify the following information:
  • API key. This is available on the TippingPoint Advanced Threat Protection Analyzer management console, in Help → About.
  • TippingPoint Advanced Threat Protection Analyzer IP address. If unsure of the IP address, check the URL used to access the TippingPoint Advanced Threat Protection Analyzer management console. The IP address is part of the URL.
  • TippingPoint Advanced Threat Protection Analyzer IPv4 or IPv6 virtual address. When using TippingPoint Advanced Threat Protection Analyzer in a high availability configuration, the virtual IP address is used to provide integrating products with a fixed IP address for configuration. This is available on the TippingPoint Advanced Threat Protection Analyzer management console, in Administration → System Settings → High Availability.
  • TippingPoint Advanced Threat Protection Analyzer SSL port 443. This is not configurable.
Important
Important
If the TippingPoint Advanced Threat Protection Analyzer API key changes after registering with the integrated product, remove TippingPoint Advanced Threat Protection Analyzer from the integrated product and add it again.
Note
Note
Some integrating products require additional configuration to integrate with TippingPoint Advanced Threat Protection Analyzer properly. See the product documentation for details.
(Optional) On the TippingPoint Advanced Threat Protection Analyzer management console, review and modify the weight values of integrated products to adjust Virtual Analyzer resource allocation. For details, see Submitters.
TippingPoint Advanced Threat Protection for Networks 3.7 or later
ScanMail for Microsoft Exchange 11.0 or later
ScanMail for IBM Domino 5.6 SP1 Patch 1 HF4666 or later
InterScan Messaging Security Virtual Appliance (IMSVA) 8.2 SP2 or later
InterScan Messaging Security Suite (IMSS) 7.5 or later
InterScan Web Security Virtual Appliance (IWSVA) 6.0 or later
InterScan Web Security Suite (IWSS) 6.5
Deep Edge 2.5 SP2 or later
EnforcerX 5.0
Trend Micro Endpoint Sensor 1.6

Suspicious Objects List Parent topic

Products that retrieve the suspicious objects list from TippingPoint Advanced Threat Protection Analyzer Virtual Analyzer:
Product/Supported Versions
Integration Requirements and Tasks
TippingPoint Advanced Threat Protection for Email 2.5 or later
On the management console of the integrating product, go to the appropriate screen (see the product documentation for information on which screen to access) and specify the following information:
  • API key. This is available on the TippingPoint Advanced Threat Protection Analyzer management console, in Help → About.
  • TippingPoint Advanced Threat Protection Analyzer IP address. If unsure of the IP address, check the URL used to access the TippingPoint Advanced Threat Protection Analyzer management console. The IP address is part of the URL.
  • TippingPoint Advanced Threat Protection Analyzer IPv4 or IPv6 virtual address. When using TippingPoint Advanced Threat Protection Analyzer in a high availability configuration, the virtual IP address is used to provide integrated products with a fixed IP address for configuration. This is available on the TippingPoint Advanced Threat Protection Analyzer management console, in Administration → System Settings → High Availability.
  • TippingPoint Advanced Threat Protection Analyzer SSL port 443. This is not configurable.
Note
Note
Some of the integrating products require additional configuration to integrate with TippingPoint Advanced Threat Protection Analyzer properly. See the product documentation for details.
TippingPoint Advanced Threat Protection for Networks 3.7 or later
Standalone Smart Protection Server with the latest patch 2.6 or later
OfficeScan Integrated Smart Protection Server 10.6 SP2 Patch 1 to OfficeScan Integrated Smart Protection Server 11 SP1
InterScan Web Security Virtual Appliance (IWSVA) 6.0 or later
InterScan Web Security Suite (IWSS) 6.5
Control Manager 6.0 SP3 Patch 1 HF3319 or later
On the management console of the integrating product, go to the appropriate screen (see the product documentation for information on which screen to access) and specify the following information:
  • TippingPoint Advanced Threat Protection Analyzer IPv4 or IPv6 address. If unsure of the IP address, check the URL used to access the TippingPoint Advanced Threat Protection Analyzer management console. The IP address is part of the URL.
  • TippingPoint Advanced Threat Protection Analyzer IPv4 or IPv6 virtual address. When using TippingPoint Advanced Threat Protection Analyzer in a high availability configuration, the virtual IP address is used to provide integrated products with a fixed IP address for configuration. This is available on the TippingPoint Advanced Threat Protection Analyzer management console, in Administration → System Settings → High Availability.
  • TippingPoint Advanced Threat Protection Analyzer SSL port 443. This is not configurable.
  • TippingPoint Advanced Threat Protection Analyzer user logon credentials. For details, see Accounts Tab.
Important
Important
If the TippingPoint Advanced Threat Protection Analyzer API key changes after registering with the integrated product, remove TippingPoint Advanced Threat Protection Analyzer from the integrated product and add it again.
Note
Note
Some integrating products require additional configuration to integrate with TippingPoint Advanced Threat Protection Analyzer properly. See the product documentation for details.

Exceptions Parent topic

Products that send exceptions to TippingPoint Advanced Threat Protection Analyzer Virtual Analyzer:
Product/Supported Versions
Integration Requirements and Tasks
Control Manager 6.0 SP3 Patch 1 HF3319 or later
On the management console of the integrating product, go to the appropriate screen (see the product documentation for information on which screen to access) and specify the following information:
  • TippingPoint Advanced Threat Protection Analyzer IPv4 or IPv6 address. If unsure of the IP address, check the URL used to access the TippingPoint Advanced Threat Protection Analyzer management console. The IP address is part of the URL.
  • TippingPoint Advanced Threat Protection Analyzer IPv4 or IPv6 virtual address. When using TippingPoint Advanced Threat Protection Analyzer in a high availability configuration, the virtual IP address is used to provide integrated products with a fixed IP address for configuration. This is available on the TippingPoint Advanced Threat Protection Analyzer management console, in Administration → System Settings → High Availability.
  • TippingPoint Advanced Threat Protection Analyzer SSL port 443. This is not configurable.
  • TippingPoint Advanced Threat Protection Analyzer user logon credentials. For details, see Accounts Tab.
Important
Important
If the TippingPoint Advanced Threat Protection Analyzer API key changes after registering with the integrated product, then TippingPoint Advanced Threat Protection Analyzer will need to be deleted from the integrated product and added again.
Note
Note
Some integrating products require additional configuration to integrate with TippingPoint Advanced Threat Protection Analyzer properly. See the product documentation for details.