Use the commands in this topic to configure dual-port communication and change the default DTI download source to "CDN." This is required for appliances that are not Trellix Helix-enabled but that are connected to a Trellix Helix-enabled cloud Central Management System appliance, as described in Appliance management.
Log into the non-Trellix Helix appliance CLI.
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Enable dual-port communication:
hostname (config) # fenet dti source type CMS address-type cms-auto
Verify the change:
hostname (config) # show fenet dti configuration
Save the change:
hostname (config) # write memory
Prevent the Central Management System appliance from changing this appliance's DTI source address, port, username, and password:
hostname (config) # no fenet dti source override enable
Specify "CDN" as the DTI download server for this appliance:
hostname (config) # fenet dti source default CDN
Validate your changes:
hostname (config) # show fenet dti configuration
Save your changes:
hostname (config) # write memory
Example
The following example changes the address type on the ex-08 appliance to "dual-port" and then changes the DTI source to "CDN."
ex-08 (config) # show fenet dti configuration DTI CLIENT CONFIGURATIONS: ACTIVE SETTINGS: Mode : online Download source : CMS (DTIUser@10.11.10.11 : singleport) - Managed by CMS Upload destination : CMS (DTIUser@10.11.10.11 : singleport) - Managed by CMS ... ex-08 (config) # fenet dti source type CMS address-type cms-auto ex-08 (config) # no fenet dti source override enable ex-08 (config) # fenet dti source default CDN ex-08 (config) # show fenet dti configuration DTI CLIENT CONFIGURATIONS: ACTIVE SETTINGS: Mode : online Download source : CDN (DTIUser@cloud.fireeye.com) - Managed by CMS Upload destination : CMS (DTIUser@10.11.10.11 : singleport) - Managed by CMS ...