Configuring Private Cloud for URL and IP Reputation in Manager

To integrate with Private GTI Cloud for URL and IP Reputation, you need to configure Private Cloud Server settings to communicate with the Private GTI Cloud. By default, Trellix IPS is configured to communicate with the Trellix Global Threat Intelligence server.

Complete the following steps to configure the GTI Private Server for URL and IP Reputation:

1. Select Manager → <Admin Domain Name> → Integration → GTI and select Endpoint/URL Reputation.

   
   
   

2. In the GTI Cloud for Endpoint/URL Reputation Queries, select Private.
3. Enter the Private GTI Endpoint/URL Server Name or IP.
4. The Private GTI Cloud for URL and IP Reputation uses certificates to authenticate solutions that want to consume its services. Click Import Certificates to import the following certificate files:
   • Trellix IPS certificate
   • Private key for Trellix IPS certificate
   • Private GTI Cloud CA certificate

     
     
     

     The Import Server Certificate dialog box opens.

     Note

     The certificate files and the client private key should be in the .pem format.

     The Private GTI Cloud for URL and IP Reputation uses the Trellix IPS certificate and private key to authenticate Trellix IPS.

     The Trellix IPS uses the Private GTI Cloud CA certificate to authenticate Private GTI Cloud.

5. Click Browse.
6. Select the .zip file that contains the files.
7. Click Import.
   Once the import is complete, the Manager validates the files. If the validation is successful, the Private GTI Cloud Server Certificate Status will be displayed as
8. Click Save.
   The Manager pushes the Private GTI Cloud for URL and IP Reputation configurations to the Sensors connected to the Manager.