Procedure

1. On the Deep Discovery Inspector management console, go to Administration → Integrated Products/Services → Inline Products/Services and select Trend Micro TippingPoint Security Management System (SMS).
2. Provide the following information:
   • Server address

     Note The server address must be the IPv4 address or FQDN of the inline product.

   • User name: Existing authentication credential
   • Password: Existing authentication credential

   Valid Character Sets

   	User name	Password
   Minimum length	1 character	1 character
   Maximum length	15 characters	15 characters

3. (Optional) Click Test Connection.
4. Under Object Distribution, click Enabled.
5. To send object information from Deep Discovery Inspector to this inline product/service, configure the following criteria:
   • Object type:
     • C&C Callback Address
       • IPv4 address
       • Domain
       • URL

         Note Only supported by SMS 5.0 or higher.

     • Suspicious Object
       • IPv4 address
       • Domain
       • URL

         Note Only supported by SMS 5.0 or higher.

   • Risk level:
     • High only
     • High and medium
     • High, medium, and low
6. Click Save.
   The following tag categories are displayed in the TippingPoint SMS Reputation Database.

   Tag Category	Value
   Trend Micro Source	The host name of Deep Discovery Inspector
   Trend Micro Severity	Possible values: High Medium Low
   Trend Micro Publisher	The product name of Deep Discovery Inspector
   Trend Micro Detection Category	The detection type of the threat.

7. (Optional) To view distributed suspicious objects and C&C callback addresses in TippingPoint SMS, do the following:
   1. Verify that the following tag categories exist in the Tag Categories list of the TippingPoint SMS Client.
      • Trend Micro Severity
      • Trend Micro Source
      • Trend Micro Publisher
      • Trend Micro Detection Category
   2. On the Profile tab, go to Reputation Database → Search.
      
   3. On the Entry Criteria screen, type search parameters and then click Search.
   Suspicious objects and C&C callback addresses distributed by Deep Discovery Inspector are displayed.