Integrating with Nozomi Guardian using CLI

Prev Next

Nozomi Guardian Integrates with Network Detection and Response NDR to receive alerts and visualize OT and IoT assets.

  1. Log into the NDR CLI using a terminal window or SSH client:

    1. Using the NDR SSH protocol, log into the appliance with management interface's IP address or hostname.

      $ ssh npadmin@<NDR IP address>
    2. Enter the password when prompted. The hostname > prompt is displayed after you have logged in.

  2. Enter privileged mode on the NDR CLI.

    npadmin@hostname> enable
  3. Enter the npadmin password, when prompted. The password can be 5 to 24 characters long.

    [sudo] password for npadmin: <password>
  4. Enter configuration mode.

    npadmin@hostname# configure system

    The prompt changes to npadmin@hostname(config)# on the terminal indicating that configuration mode is enabled.

  5. Type nozomi at the terminal and press Enter.

    Nazomi_AddServer.png

  6. Type A and then press Enter to add a new nozomi server.

    Nozomi_server_details.png

  7. In the Add Server page, provide the details of the nozomi server.

    1. Type 1 and press Enter. Specify a name for the integration.

    2. Type 2 and press Enter. Specify a description for the integration.

    3. Type 3 and press Enter to toggle the server status to Enable. By default the server status is disabled.

    4. Type 4 and press Enter. Specify the URL of the Nozomi server.

    5. Type 5 and press Enter. Specify api key name for authentication.

    6. Type 6 and press Enter. Specify api key token for authenticating with NDR.

    7. Type 7 and press Enter. Specify the frequency at which Nozomi Server has to be polled to collect the latest asset data.

    8. Type 8 and press Enter. Specify the frequency at which Nozomi Server has to be polled to collect the latest alerts data.

    9. Type 9 and press Enter to enable/disable alerts and asset details polling from Nozomi server.

    10. Type S and press Enter to save the configuration. The Nozomi server is added displaying its configuration details.

  8. Type T and press Enter to verify the server connection.

  9. To edit the server:

    Nozomi_2.jpg

    1. Type the number next to the sever you want to edit and then press Enter.

    2. Type E and press Enter to edit the server configuration details.

    3. Perform all steps from step 7 to change the server details.

    4. Type S and press Enter to save the configuration and exit.

  10. To delete the server:

    1. Type the number next to the sever you want to delete and then press Enter.

    2. Type D and press Enter to delete the server.

    3. Type 1 to confirm on deleting the server.

  11. Type X and press Enter to exit the configuration.