Integrating AX appliance with NDR Console for malware analysis

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:

$ ssh npadmin@10.1.0.1

or

$ ssh npadmin@exampleFQDN

Enter privileged mode:

npadmin@ia> enable

Enter the npadmin password. The password can be 5 to 24 characters long.

[sudo] password for npadmin: <password>

Enter configuration mode:

npadmin@ia# configure system

Enter the file analysis menu:

npadmin@ia# fileanalysis

Select A and enter the AX's IP address or the FQDN.

Note

When using FQDNs for any configuration setting, you must first configure a valid DNS server. See Chapter 4: Network Configuration for more details.

Select U and enter the IA's api_analyst username.

Select P and enter the password for the api_analyst username.

Select L to change the amount of files to send at one time to the AX. The default is 5. The range is 1-10.

Select X to exit.