Connected Threat Defense Product Integration

Main Products

Connected Threat Defense requires the following Trend Micro products:

Control Manager
Deep Discovery Inspector
OfficeScan
Smart Protection Server (standalone) or integrated with OfficeScan

Other Supported Products

The following Trend Micro products can also be integrated to Control Manager for Connected Threat Defense:

Deep Discovery Endpoint Sensor
Deep Discovery Analyzer

The role of each product in the Connected Threat Defense strategy is discussed in detail in Suspicious Object Management and Handling Process and IOC Management.

Install these products and register them to Control Manager. The following tables list the references and resources to help you install and register the products.

Important: Register Deep Discovery Inspector and/or Deep Discovery Analyzer before registering OfficeScan. If OfficeScan is registered first, it will not be able to obtain suspicious objects from the Deep Discovery products.

Control Manager
Minimum version	6.0 SP3
Installation	References: Installation Guide for version 6.0 to install the product Readme for the service pack to install the service pack http://docs.trendmicro.com/en-us/enterprise/control-manager.aspx
Control Manager Information	Some managed products require the following Control Manager information: Host name (preferably FQDN) or IP address: Required by Deep Discovery Inspector and OfficeScan for registration. Registration is performed on these products' console. Note: Registration for the other Connected Threat Defense products is performed on the Control Manager console. API key: Required by Deep Discovery Inspector, OfficeScan, and Smart Protection Server for suspicious object synchronization Manually deploy the API key to Deep Discovery Inspector 3.8 or later, OfficeScan 11 SP1, and Smart Protection Server 3.0 Patch 1. To obtain the API key, open the Control Manager management console and go to Administration > Suspicious Objects > Distribution Settings. For later versions of OfficeScan and Smart Protection Server, the API key automatically deploys after Control Manager registration, as long as there is one Deep Discovery product already registered to Control Manager.

Deep Discovery Inspector
Minimum version	3.8
Installation and deployment	References: Quick Start Card Installation and Deployment Guide http://docs.trendmicro.com/en-us/enterprise/deep-discovery-inspector.aspx
Registration and suspicious object synchronization	Complete the registration and enable suspicious object synchronization from the Deep Discovery Inspector management console. You can conveniently launch the Deep Discovery Inspector management console from the Managed Servers screen in Control Manager. Registration and synchronization instructions: http://docs.trendmicro.com/all/ent/ddi/v3.8/en-us/ddi_3.8_olh/admin_int-prods-srvcs_tmcm_register.html

Deep Discovery Analyzer
Minimum version	5.1
Installation and deployment	References: Quick Start Card Installation and Upgrade Guide http://docs.trendmicro.com/en-us/enterprise/deep-discovery-analyzer.aspx
Registration	Complete the registration from the Control Manager management console. Go to Administration > Managed Servers and select Deep Discovery Analyzer from the list of products.

OfficeScan
Minimum version	11 SP1
Installation	References: Installation and Upgrade Guide for version 11 to install the server program Readme for the service pack to install the service pack to the server Online Help or Administrator's Guide for version 11 or later to install agents and use the integrated Smart Protection Server http://docs.trendmicro.com/en-us/enterprise/officescan.aspx
Registration and suspicious object synchronization	Before registering OfficeScan, be sure that you have registered at least one Deep Discovery product to Control Manager. Complete the registration and enable suspicious object synchronization from the OfficeScan server web console. You can conveniently launch the OfficeScan server web console from the Managed Servers screen in Control Manager. Registration instructions: http://docs.trendmicro.com/en-us/enterprise/officescan-110-sp1-server/managing-the-product/osce-company_name-co/osce-registering-pro.aspx Synchronization instructions (OfficeScan 11 SP1 only): http://docs.trendmicro.com/en-us/enterprise/officescan-110-sp1-server/managing-the-product/suspicious-objects-c/configuring-suspicio.aspx Note: Later OfficeScan versions or non-English releases of OfficeScan 11 SP1 have been enhanced to automatically synchronize suspicious objects with Control Manager after registration.

Smart Protection Server (Standalone)
Minimum version	3.0 Patch 1
Installation	References: Installation and Upgrade Guide for version 3.0 to install the product Readme for the patch to install the patch http://docs.trendmicro.com/en-us/enterprise/smart-protection-server.aspx
Suspicious object synchronization	Synchronization instructions (Smart Protection Server 3.0 Patch 1 only): http://docs.trendmicro.com/all/ent/sps/v3.0p1/en-us/sps_3.0p1_olh/using_smart_prot_ccca_configure.html Note: Only Smart Protection Server versions later than 3.0 Patch 1 support registration with Control Manager. After the registration is complete, Smart Protection Server automatically synchronizes suspicious objects with Control Manager.

Deep Discovery Endpoint Sensor
Minimum version	1.5 (Preview Release)
Installation	Reference: Installation Guide (for server and agent installation instructions) http://docs.trendmicro.com/en-us/enterprise/deep-discovery-endpoint-sensor.aspx
Registration	Complete the registration from the Control Manager management console. Go to Administration > Managed Servers and select Deep Discovery Endpoint Sensor from the list of products.