Views:

Enable TippingPoint Network Sensor to provide greater detection capability and visibility into your network environment.

Enabling the Network Sensor on your TippingPoint TXE-Series Threat Protection System (TPS) provides greater visibility into your network environment and enables greater sharing of network telemetry with Trend Vision One detection and response apps such as Workbench and Send to Sandbox.
Note
Note
When you enable TippingPoint Network Sensor in conjunction with Send to Sandbox, files are sent for analysis in addition to URLs. An additional 2,000 credits per 500 Mbps of bandwidth is required.
TippingPoint Network Sensor has the following system requirements:
  • Network Security only supports Network Sensor on TippingPoint TXE-Series TPS devices, including 9200 TXE and 8600 TXE devices.
  • Network Sensor uses 50GB of user disk space on the TPS device.
  • The TPS device must be rebooted after Network Sensor is installed. This reboot does not cause any downtime for the device.
  • Enabling TippingPoint Network Sensor reduces the bandwidth capacity of TippingPoint devices as follows:
    • 8600 TXE devices reduced from 40 Gbps to 20 Gbps
    • 9200 TXE devices reduced from 100 Gbps to 60 Gbps
    • Network Sensor max capacity is 10 Gbps
  • TippingPoint Network Sensor requires configuring additional ports and firewall exceptions. For more information, see Ports and URLs used by TippingPoint.
Follow the steps below to enable Network Sensor on your TippingPoint TXE-Series TPS devices.

Procedure

  1. On the Trend Vision One console, go to Network Security → Network Inventory → TippingPoint.
  2. Locate the TippingPoint TXE device you want to use with Network Sensor and click the toggle to enable the feature.
    A confirmation window appears. If internet or firewall issues prevent your TippingPoint device from accessing required domains, continue to step 3 to configure a proxy server so that Trend Vision One can continue to receive network telemetry from your device. Otherwise, skip to step 4.
    Note
    Note
    The option to configure a proxy is available only when you enable TippingPoint Network Sensor.
  3. Click Configure to configure a proxy.
    1. Specify an address for your HTTP proxy. HTTPS and SOCKS proxies are not supported.
      You can enter an IPv4 address or, if your TPS device has a DNS server configured for resolving domain names, an FQDN.
    2. Specify the port number of your proxy server (1 - 65535).
    3. If your proxy requires authentication, select the Require authentication credentials checkbox and enter a username (required) and password (optional).
    4. Click Save.
  4. Click Enable to install Network Sensor on the TippingPoint device.
    Note
    Note
    The Network Administrator must reboot the device from the SMS console. This reboot does not cause any downtime for the device.
  5. Click the management console link to access the TippingPoint SMS console that is managing the TippingPoint TXE device you want to use.
  6. From the SMS console, navigate to Devices → All Devices and click on the TXE device where you enabled Network Sensor to reboot the device.
  7. After the device reboot is complete, refresh the Network Inventory page on the Trend Vision One console to view the updated device status.