Configuring the CMS as a cache proxy using the CLI

Prev Next

Use the commands in this topic to configure the Central Management System as a cache proxy that resides between the managing Central Management System and the appliances.

To configure the Central Management System as a cache proxy:
  1. Enable the CLI configuration mode.

    cm-hostname > enable
    cm-hostname # configure terminal
  2. Specify that the custom DTI source address is available for the Central Management System:

    cm-hostname (config) # fenet dti custom address available
  3. Specify the custom address that the managing Central Management System will use as the download source for software updates:

    cm-hostname (config) # fenet dti source type CUSTOM address address port port

    where:

    • address is the IP address of the managing Central Management System.

    • port is the source HTTPS port (433 by default).

  4. Specify the custom user name and password that the managing Central Management System will use to authenticate access for software downloads.

    cm-hostname (config) # fenet dti source type CUSTOM username CMS username password CMS password
  5. Specify the custom DTI upload destination that the cache proxy will use for proxy software uploads.

    cm-hostname (config) # fenet dti upload destination type CUSTOM address address port port

    where:

    • address is the IP address of the managing Central Management System.

    • port is the source HTTPS port (433 by default).

  6. Specify the custom user name and password to authenticate access for software uploads.

    cm-hostname (config) # fenet dti upload destination type CUSTOM username CMS username password CMS password
  7. Specify the custom Malware Intelligence Lab (MIL) server destination that the managing Central Management System will use for malware detection and callback intelligence.

    cm-hostname (config) # fenet dti mil service type CUSTOM address address port port

    where:

    • address is the IP address of the managing Central Management System.

    • port is the source HTTPS port (433 by default).

  8. Specify the custom user name and password to authenticate access for malware detection and callback intelligence.

    cm-hostname (config) # fenet dti mil service type CUSTOM username CMS username password CMS password
  9. Set the custom DTI download server to the managing Central Management System for software updates.

    cm-hostname (config) # fenet dti source default CUSTOM
  10. Set the custom DTI upload destination to the managing Central Management System for software uploads.

    cm-hostname (config) # fenet dti upload destination default CUSTOM
  11. Set the custom MIL server destination to the managing Central Management System for malware detection and callback intelligence.

    cm-hostname (config) # fenet dti mil service default CUSTOM
  12. Save your changes.

    cm-hostname (config) # write memory
  13. Verify the configuration settings for the Central Management System to run as a cache proxy. Enter the show fenet dti configuration command.

    cm-hostname (config) # show fenet dti configuration
    DTI CLIENT CONFIGURATIONS:
    ACTIVE SETTINGS:
    Mode               : proxy
    Download source    : CUSTOM (CMSuser@172.16.127.214)
    Upload destination : CUSTOM (CMSuser@172.16.127.214)
    Mil service        : CUSTOM (CMSuser@172.16.127.214)
    AVAILABLE OPTIONS:
    --------------------------------------------------------
    Download   User                   Address
    --------------------------------------------------------
    CDN        CMSuser              cloud.fireeye.com
    CMS        CMSuser              172.16.127.238
    CUSTOM     CMSuser              172.16.127.214
    DTI        CMSuser              staticcloud.fireeye.com
    --------------------------------------------------------
    Upload     User                   Address
    --------------------------------------------------------
    CMS        CMSuser              172.16.127.238
    CUSTOM     CMSuser              172.16.127.214
    DTI        CMSuser              up-staticcloud.fireeye.com
    --------------------------------------------------------
    MIL        User                   Address
    --------------------------------------------------------
    CMS        CMSuser                172.16.127.238
    CUSTOM     CMSuser                172.16.127.214
    DTI        CMSuser                mil-staticcloud.fireeye.com