Follow these steps to enable or disable DTI interaction between Central Management System peers for Central Management System Peer Signature Sharing using the CLI.
Go to CLI configuration mode.
CMS1 > enable CMS1 # configure terminal
Generate a key file to enable DTI interaction between CM peers to share locally generated signatures with remote CM peers.
CMS1 (config) # cms peer <peer_hostname> interaction dti enableSave your changes.
CMS1 (config) # write memoryVerify the DTI interaction status with a Central Management System peer for Central Management System Peer Signature Sharing. The following example verifies that DTI interaction with CMS2 is enabled for Central Management System Peer Signature Sharing.
CMS1 (config) # show cms peer-service CMS peer-service enabled: yes ----------------------------------------------------------------------- CMS peer CMS2: Enabled: yes Hostname: CMS2 Address: 172.16.216.51 Auth-token checksum: 360a37cc532b9e2e75b674eb3b5fe2e0 Interactions with peer: Distributed CMS Correlation: Enabled: yes Status: OK @ 2016/01/27 19:07:26 Dynamic Threat Intelligence (DTI): Enabled: yes Proxy mode: No proxy Status: OK @ 2016/01/27 19:07:26 Update Peer: Enabled: yes Status: OK @ 2016/01/27 19:07:26 -----------------------------------------------------------------------
Go to CLI configuration mode.
CMS1 > enable CMS1 # configure terminal
Disable DTI interaction with a CM peer for CM Peer Signature Sharing.
CMS1 (config) # no cms peer <peer_hostname> interaction dti enableSave your changes.
CMS1 (config) # write memoryVerify the DTI interaction status with a CM peer for CM Peer Signature Sharing. The following example verifies that DTI interaction with CMS2 is disabled for CM Peer Signature Sharing.
CMS1 (config) # show cms peer-service CMS peer-service enabled: yes ----------------------------------------------------------------------- CMS peer CMS2: Enabled: yes Hostname: CMS2 Address: 172.16.216.51 Auth-token checksum: 360a37cc532b9e2e75b674eb3b5fe2e0 Interactions with peer: Distributed CMS Correlation: Enabled: yes Status: OK @ 2016/01/27 19:07:26 Dynamic Threat Intelligence (DTI): Enabled: no Proxy mode: No proxy Status: UNKNOWN @ N/A Update Peer: Enabled: yes Status: OK @ 2016/01/27 19:07:26 -----------------------------------------------------------------------