Creating a client profile using the CLI

Perform the following steps to create a client profile:

Log into the NDR CLI using a terminal window or SSH client:
1. Using the SSH protocol, log into the appliance with management interface's IP address or hostname.
```
$ ssh npadmin@<NDR IP address>
```
2. Enter the password when prompted. The hostname > prompt is displayed after you have logged in.
Enter privileged mode on the NDR CLI.
```
npadmin@hostname> enable
```
Enter the npadmin password, when prompted. The password can be 5 to 24 characters long.
```
[sudo] password for npadmin: <password>
```
Enter configuration mode.
```
npadmin@hostname# configure system
```
The prompt changes to npadmin@hostname(config)# on the terminal indicating that configuration mode is enabled. You can now proceed with the client profile configuration task.
Type client-profile at the terminal and press Enter.
The Client Profile configuration options are displayed on the terminal.
Note
You can configure up to 20 client profiles on an appliance using its CLI.
To add a new client profile, type A in the Enter your choice field and press Enter. The Add new profile page is displayed with the configuration options.
Type 1 and press Enter to create a name for the client profile. Enter the name of the profile in the Enter profile name field and press Enter. The name given will now reflect in the Name section.
Type 2 and press Enter to setup filters related to L7 metadata that you want to be exported to the NDR by the sensors when the IA integration is enabled. Configure L7 metadata page is displayed on the terminal with the configuration options.
1. L7 metadata configuration is disabled by default. Type 1 and Press Enter to enable it. The Enabled field turns to True when it is enabled.
2. To enable or disable specific protocols, type 2 and press Enter. Enable/Disable event types configuration is displayed in 3 pages. All the protocols are disabled by default and shows N to reflect the disabled status. Type N and press Enter to go to the next page and P to go back to the previous page. The configuration options in all the 3 pages appear.
3. To enable a specific protocol, type the numeric value assigned to that protocol and press Enter. The status of the protocol changes to Y to reflect the enabled mode. For example, you need to type 6 and Press Enter to enable HTTP protocol. Repeat the same procedure for all the protocols you wish to enable as per your network requirement.
4. Type E and press Enter if you wish to enable all the protocols in a page. To save and return to the Configure l7 metadata page, type X and Press Enter. Or, type C and press Enter to abort the changes made and return to the Configure l7 metadata page. As per the configuration options enabled, the Configure L7 metadata page shows the Enabled status and Event types count.
5. To save and return to the Add new profile page, type X and press Enter.
On Add new profile page, type 3 and press Enter to enable alerts based on alert severity thresholds. Configure alerts page is displayed.
Filters specific to alert severity threshold is disabled by default. Type 1 and press Enter to enable the alert severity threshold configuration option. As a result, the Enabled status under the Configure alerts page changes to True.
You can now enable alerts as per the alert severity thresholds (Low, Medium, and High). When an alert severity threshold is set, it denotes that alerts of that level and above would be exported to NDR. The alert Severity Threshold is set to Low by default. If you want to change it, type 2 and press Enter. Configure alert severity threshold page is displayed. To enable an alert severity threshold level, type the corresponding numeric value assigned to the specific severity threshold, and press Enter. For example, if you want to view only high severity alerts on NDR after its integration, type 3 and press Enter.
Once the alert severity threshold level is configured, you are redirected back to the Configure alerts page which shows the Enabled status and the Severity Threshold.
Press X and press Enter to save the changes and return to the Add new profile page in the Client Profile configuration task.
Add new profile page is displayed, which shows the name of the Client Profile, L7 metadata configuration status and protocol count, and alert configuration status and severity threshold as configured,
Type X and press Enter to save the changes and finish the Client Profile configuration task. If you do not want to proceed with the Client Profile configuration changes, type C and press Enter. This will cancel all the configurations made and redirect you back to the Profile(s) page.