MSSP deployment tasks

Prev Next

This section describes the steps a Managed Service Security Provider (MSSP) must perform to deploy an IVX cluster in the MSSP premises and to allow sensors in MSSP customer premises to enroll with the cluster.

Note

This topic assumes that the appliances in the MSSP premises and in the customer premises are already configured and deployed.

Basic MSSP tasks

The basic MSSP premises tasks are described in the following table.

Task

Instructions

Add the Virtual Execution appliances to the Central Management appliance in the private cloud.

  1. Select Appliances > Nodes in the Central Management Web UI.

  2. Click Create New Node and complete the fields in the dialog box.

  3. Click Add.

For details, see Adding Nodes to a Central Management Appliance on page 73.

Create the IVX cluster.

  1. Select Appliances > Clusters in the Central Management Web UI.

  2. Click Create New Cluster and follow the instructions in the wizard.

For details, see Creating a Cluster on page 51.

Configure the Central Management appliance in the private cloud as the enrollment server.

Run the fenet dti enrollment service default LOCAL command in the private cloud Central Management CLI.

Basic sensor tasks

The basic sensor tasks are described in the following table.

Task

Instructions

Install a CLOUD_MVX license.

  1. Select Settings > Appliance Licenses in the sensor Web UI.

  2. Click Add License, enter the license key, and then click Add.

For details, see the System Administration Guide for the sensor.

Configure the enrollment service.

Standalone Sensor

Run the following command in the sensor CLI:

fenet dti enrollment service type DTI address <cluster CM address>

where cluster CM address is the IP address of the Central Management appliance that manages the IVX cluster.

Managed Sensor

Run the following three commands in the sensor CLI:

no fenet dti enrollment service override enable
fenet dti enrollment service type DTI address <cluster CM address>
fenet dti enfollment service default DTI

where cluster CM address is the IP address of the Central Management appliance that manages the IVX cluster.