You can deploy a virtual NDR Console appliance in Amazon EC2, a VMware ESXi host, and on a KVM (Kernel-based Virtual Machine) server. DTI is used to download licenses for virtual NDR Console appliances. Virtual NDR Console virtualization software must expose the SSE3 instruction set to the Guest OS.
Communication with the NDR Console Dynamic Threat Intelligence (DTI) network (cloud) and integration with the DTI Update Portal are supported for the virtual NDR Console appliance only. The licensing service follows the existing Trellix licensing structure. The NDR Console DTI network (cloud) enables subscriber platforms to perform automatic license updates.
A log trap message displays the notification details about expired licenses and licenses that are about to expire within seven days.
The following license endpoints are available:
Configure activation code: Request
PUT https://<IA_IP_address>:<port_number>/config/v1/dtigw/activationGET https://<IA_IP_address>:<port_number>/config/v1/licensesAdd or update licenses: Request
POST https://<IA_IP_address>:<port_number>/config/v1/licensesDELETE https://<IA_IP_address>:<port_number>/config/v1/licenses/<key>GET https://<IA_IP_address>:<port_number>/config/v1/licenses/_status/<feature>License summary details: Request
GET https://<IA_IP_address>:<port_number>/config/v1/licenses/_summaryLicense summary details for a feature: Request
GET https://<IA_IP_address>:<port_number>/config/v1/licenses/_summary/<feature>