Integrating the Endpoint Security Server for hostname data

You can integrate multiple Endpoint Security servers to your NDR Series appliance through CLI or API. For integration steps using the API, see the NDR Series API Guide.

To integrate your HX and NDR appliances:

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter the HX configuration menu:
npadmin@ia (config)# hx-gw
You see the following menu:
Enter A to pair a new server to the NDR appliance:
Enter the IP address of the server you want to pair to the NDR.
Enter the port number of the NDR appliance. The default port value is 3000.
Enter the credentials for the Endpoint Security Server.
Disable SSL verification:
False
Note
Enabling SSL verification in a self-signed certificate HX prevents the HX from connecting to the NDR.
Press Enter. When pairing is complete, you return to the HX Configuration Menu.

Note
You can set up the NDR to receive alerts from Endpoint Security Server appliances by setting up the HTTP Listener. For more information see, Alert HTTP Listener.