Views:

Procedure

  1. Go to Administration → Integrated Products/Services → Inline Products/Services.
  2. Select Trend Micro TippingPoint Security Management System (SMS).
  3. Under Server Information, select a registration method.
    • API key (recommended)
    • Username / password
  4. Specify all the required information.
    Important
    Important
    • The server address must be the IPv4 address or FQDN of the inline product.
    • User names and passwords can have up to 15 characters.
    Tip
    Tip
    You can find your API key on the TippingPoint SMS console.
    tippingpoint-apikey.jpg
  5. (Optional) Click Test Connection.
  6. Under Object Distribution, click Enabled.
  7. (Optional) Specify a new object distribution frequency.
  8. Under Criteria, specify the type and risk level of the objects that Deep Discovery Inspector sends to Trend Micro TippingPoint Security Management System.
    Object Type
    Risk Level
    C&C Callback Address and Suspicious Object
    • IPv4 address
    • Domain
    • URL
      Important
      Important
      Only supported by Trend Micro TippingPoint Security Management System 5.0 or higher.
    • High only
    • High and medium
    • High, medium, and low
  9. Click Save.
    The following tag categories are displayed in the TippingPoint SMS Reputation Database.
    Tag Category
    Value
    Trend Micro Source
    The host name of Deep Discovery Inspector
    Trend Micro Severity
    Possible values:
    • High
    • Medium
    • Low
    Trend Micro Publisher
    The product name of Deep Discovery Inspector
    Trend Micro Detection Category
    The detection type of the threat.
  10. (Optional) View distributed suspicious objects and C&C callback addresses in TippingPoint SMS.
    1. Verify that the following tag categories exist in the Tag Categories list of the TippingPoint SMS Client.
      • Trend Micro Severity
      • Trend Micro Source
      • Trend Micro Publisher
      • Trend Micro Detection Category
    2. On the Profile tab, go to Reputation Database → Search.
      admin-intgr-prods-se_001.jpg
    3. On the Entry Criteria screen, type search parameters and then click Search.
    The TippingPoint SMS console displays suspicious objects and C&C callback addresses distributed by Deep Discovery Inspector