Deep Discovery Inspector appliances | Trend Micro Service Central

Views:

Monitor and configure connected Deep Discovery Inspector appliances from Network Inventory.

The Deep Discovery Inspector Appliances inventory on the Network Inventory screen provides an overview of connected Deep Discovery Inspector appliances within your environment. Deep Discovery Inspector appliances provide Network Security with network activity data, allowing for analysis, reporting, and sharing of detected suspicious objects. You can take several actions to manage and configure your environment.

Action

Description

Connect a Deep Discovery Inspector appliance

Connect a Deep Discovery Inspector appliance or deploy an appliance to AWS

Click Connect Appliance to connect a deployed appliance or deploy an appliance to AWS.

Manage plans and Virtual Analyzer images

Manage appliance plans and configure to an SFTP source to manage Virtual Analyzer images

Click the Manage drop-down and select one of the following:

Appliance plans: Create or manage plans.
Virtual Analyzer image source: Configure an SFTP source and manage available images to deploy to the Deep Discovery Inspector appliance Virtual Analyzer.

View appliance details

View detailed information about the appliance including plans and Virtual Analyzer configuration

Click the appliance identifier to view the Appliance Details screen.

Access the Deep Discovery Inspector console

Access the appliance console to manage the console directly

Click Access under the Access console column to open the Deep Discovery Inspector console for the chosen appliance.

Important

You can only access appliances that are part of your corporate network or that you can reach directly. Connect to the network the appliance is deployed on before attempting to access.

Disconnect a Deep Discovery Inspector appliance

Disconnect an appliance

Click

garbage_can_icon=GUID-20230329141313.png

to disconnect a Deep Discovery Inspector appliance from Network Security.

Enable or disable Network Sensor

Manage whether to share network data with Workbench to generate Network Analytics reports

Select one or more appliances. Click Configure Network Sensor and select Enable Network Sensor to turn on Network Sensor. Select Disable Network Sensor to turn Network Sensor off.

Enable or disable Send to sandbox

Manage whether to send files to a virtual sandbox managed by Trend Vision One for analysis

Turn on send to sandbox to enable the Deep Discovery Inspector appliance to submit suspicious files and other objects to a virtual sandbox for analysis. You can view the results in the Sandbox Analysis app. You can select multiple appliances to configure more than one at a time.

For more information about integrating your Deep Discovery Inspector sandbox functions with Trend Vision One, see Sandbox options for connected Deep Discovery Inspector appliances.

Important

Send to sandbox only supports Deep Discovery Inspector appliance version 6.8 or later.

You cannot have any other sandbox solution configured on the appliance you want to enable Send to sandbox.

Configure your connection method or connect to a Service Gateway

Change how your Deep Discovery Inspector appliances connect to Network Security and whether to connect to a Service Gateway as a source for services such as ActiveUpdate

Select one or more appliances and click the Configure Connection Settings button.

For more information, see Configuring Deep Discovery Inspector connections.

Note

The Network Inventory screen and available actions may vary if you have connected your Deep Discovery Inspector appliances to Network Inventory using Deep Discovery Director. For more information, see Network Inventory with Deep Discovery Director.