Configuring C&C Contact Alert Services

Trend Micro Command & Control (C&C) Contact Alert Services provides enhanced detection and alert capabilities to mitigate the damage caused by advanced persistent threats and targeted attacks. C&C Contact Alert Services are integrated with Web Reputation Services which determines the action taken on detected callback addresses based on the web reputation security level.

These are the options available on this screen.

Server: The server name or IP address of the Deep Discovery Advisor server, which provides the Virtual Analyzer C&C list.
API key: The API key of the Deep Discovery Advisor. The API key can be found in the About page of the Deep Discovery Advisor web console.
Test connection: Use this button to verify that the server name or IP address and API key of the Deep Discovery Advisor is correct.
Register: Use this button to register Smart Protection Server to Deep Discovery Advisor.
Unregister: Use this button to unregister Smart Protection Server from Deep Discovery Advisor.
Enable Virtual Analyzer C&C list: Enable this option to allow Smart Protection Server to use the custom C&C list analyzed by the Deep Discovery Advisor server.
Sync Now: Use this button to get an updated Virtual Analyzer C&C list from Deep Discovery Advisor.

Procedure

Type the server name or IP address of the Deep Discovery Advisor server.

Note

The server name supports FQDN formats and the IP address supports IPv4 format.

Type the API key.

Click Register to connect to the Deep Discovery Advisor server.

Note

Administrators can test the connection to the server before registering to the server.

Select Enable Virtual Analyzer C&C list to allow supported servers to use the custom C&C list analyzed by the local Deep Discovery Advisor server.

Note

The Enable Virtual Analyzer C&C list option is only available after establishing a successful connection to the Deep Discovery Advisor server.

Click Save.

$('#title').html($('meta[name=description]').attr('content'));