Enabling or disabling Central Management System Peer Signature Sharing using the CLI

Prev Next

Follow these steps to enable or disable DTI interaction between Central Management System peers for Central Management System Peer Signature Sharing using the CLI.

To enable Central Management System Peer Signature Sharing:
  1. Go to CLI configuration mode.

    CMS1 > enable
    CMS1 # configure terminal
  2. Generate a key file to enable DTI interaction between CM peers to share locally generated signatures with remote CM peers.

    CMS1 (config) # cms peer <peer_hostname> interaction dti enable
  3. Save your changes.

    CMS1 (config) # write memory
  4. Verify the DTI interaction status with a Central Management System peer for Central Management System Peer Signature Sharing. The following example verifies that DTI interaction with CMS2 is enabled for Central Management System Peer Signature Sharing.

    CMS1 (config) # show cms peer-service
    CMS peer-service enabled:          yes
    -----------------------------------------------------------------------
    CMS peer CMS2:
       Enabled:                     yes
      Hostname:                    CMS2
       Address:                     172.16.216.51
       Auth-token checksum:         360a37cc532b9e2e75b674eb3b5fe2e0
       Interactions with peer:
          Distributed CMS Correlation:
             Enabled:                        yes
              Status:                         OK          @ 2016/01/27 19:07:26
          Dynamic Threat Intelligence (DTI):
             Enabled:                        yes
             Proxy mode:                     No proxy
             Status:                         OK          @ 2016/01/27 19:07:26
          Update Peer:
             Enabled:                        yes
             Status:                         OK          @ 2016/01/27 19:07:26
    -----------------------------------------------------------------------
To disable DTI interaction with a Central Management System peer for Central Management System peer signature sharing:
  1. Go to CLI configuration mode.

    CMS1 > enable
    CMS1 # configure terminal
  2. Disable DTI interaction with a CM peer for CM Peer Signature Sharing.

    CMS1 (config) # no cms peer <peer_hostname> interaction dti enable
  3. Save your changes.

    CMS1 (config) # write memory
  4. Verify the DTI interaction status with a CM peer for CM Peer Signature Sharing. The following example verifies that DTI interaction with CMS2 is disabled for CM Peer Signature Sharing.

    CMS1 (config) # show cms peer-service
    CMS peer-service enabled:          yes
    -----------------------------------------------------------------------
    CMS peer CMS2:
       Enabled:                     yes
       Hostname:                    CMS2
       Address:                     172.16.216.51
       Auth-token checksum:         360a37cc532b9e2e75b674eb3b5fe2e0
       Interactions with peer:
          Distributed CMS Correlation:
             Enabled:                        yes
             Status:                         OK          @ 2016/01/27 19:07:26
          Dynamic Threat Intelligence (DTI):
             Enabled:                        no
             Proxy mode:                     No proxy
             Status:                         UNKNOWN     @ N/A
          Update Peer:
             Enabled:                        yes
             Status:                         OK          @ 2016/01/27 19:07:26
    -----------------------------------------------------------------------