Configuring the Central Management System appliance as a cache proxy using the CLI

Prev Next

Use the commands in this topic to configure the Central Management System appliance as a cache proxy that resides between the Central Management System appliance and the managed appliances.

To configure the Central Management System appliance as a cache proxy:
  1. Go to CLI configuration mode.

    cm-hostname > enable
    cm-hostname # configure terminal
  2. Specify that the custom DTI source address is available for the Central Management System appliance.

    cm-hostname (config) # fenet dti custom address available
  3. Specify the custom address that the managing Central Management System appliance will use as the download source for software updates.

    cm-hostname (config) # fenet dti source type CUSTOM address <address> port <port>

    where:

    • address is the IP address of the managing Central Management System appliance.

    • port is the source HTTPS port (443 by default).

  4. Specify the custom username and password that the managing Central Management System appliance will use to authenticate access for software downloads.

    cm-hostname (config) # fenet dti source type CUSTOM username <CMusername> password <CMpassword>
  5. Specify the custom DTI upload destination that the cache proxy will use for proxy software uploads.

    cm-hostname (config) # fenet dti upload destination type CUSTOM address <address> port <port>

    where:

    • address is the IP address of the managing Central Management System platform.

    • port is the source HTTPS port (443 by default).

  6. Specify the custom username and password to authenticate access for software uploads.

    cm-hostname (config) # fenet dti upload destination type CUSTOM username <CMusername> password <CMpassword>
  7. Specify the custom Malware Intelligence Lab (MIL) server destination that the managing Central Management System appliance will use for malware detection and callback intelligence.

    cm-hostname (config) # fenet dti mil service type CUSTOM address <address> port <port>

    where:

    • address is the IP address of the managing Central Management System platform.

    • port is the source HTTPS port (443 by default).

  8. Specify the custom username and password to authenticate access for malware detection and callback intelligence.

    cm-hostname (config) # fenet dti mil service type CUSTOM username <CMusername> password <CMpassword>
  9. Set the custom DTI download server to the managing Central Management System appliance for software updates.

    cm-hostname (config) # fenet dti source default CUSTOM
  10. Set the custom DTI upload destination to the managing Central Management System appliance for software uploads.

    cm-hostname (config) # fenet dti upload destination default CUSTOM
  11. Set the custom MIL server destination to the managing Central Management System appliance for malware detection and callback intelligence.

    cm-hostname (config) # fenet dti mil service default CUSTOM

    where:

    • address is the IP address of the managing Central Management System platform.

    • port is the source HTTPS port (443 by default).

  12. Save your changes.

    cm-hostname (config) # write memory
  13. Verify the configuration settings for the Central Management System appliance to run as a cache proxy. Enter the show fenet dti configuration command.

    cm-hostname (config) # show fenet dti configuration
    DTI CLIENT CONFIGURATIONS:
    ACTIVE SETTINGS:
    Mode               : proxy
    Download source    : CUSTOM (CMSuser@172.16.127.214)
    Upload destination : CUSTOM (CMSuser@172.16.127.214)
    Mil service        : CUSTOM (CMSuser@172.16.127.214)
    AVAILABLE OPTIONS:
    --------------------------------------------------------
    Download   User                   Address
    --------------------------------------------------------
    CDN        CMSuser              cloud.fireeye.com
    CMS        CMSuser              172.16.127.238
    CUSTOM     CMSuser              172.16.127.214
    DTI        CMSuser              staticcloud.fireeye.com
    --------------------------------------------------------
    Upload     User                   Address
    --------------------------------------------------------
    CMS        CMSuser              172.16.127.238
    CUSTOM     CMSuser              172.16.127.214
    DTI        CMSuser              up-staticcloud.fireeye.com
    --------------------------------------------------------
    MIL        User                   Address
    --------------------------------------------------------
    CMS        CMSuser                172.16.127.238
    CUSTOM     CMSuser                172.16.127.214
    DTI        CMSuser                mil-staticcloud.fireeye.com