Configuring TXOne EdgeOne

Procedure

1. If you do not have an existing Service Gateway deployed, deploy a Service Gateway virtual appliance and register the Service Gateway to Trend Vision One.
   1. Install or launch a Service Gateway virtual appliance on a supported platform.

      Note Connecting TXOne EdgeOne requires the forward proxy service on the Service Gateway. For detailed Service Gateway system requirements based on service deployment, see Service Gateway appliance system requirements.

   2. Use the CLI to configure the IPv4 address, endpoint name, NTP server, and DNS settings for the Service Gateway.
      For more information about available commands, see Service Gateway CLI Commands.
   3. Register the Service Gateway to Trend Vision One.
   4. Confirm the connection status on the Service Gateway Management screen of Service Gateway Management in the Trend Vision One console.
      Healthy appears in the Connection status column if connection to Trend Vision One succeeds.
   For detailed deployment instructions, see Deployment guides.

   Note You can also use an existing Service Gateway virtual appliance if it meets the system requirements and is configured with required settings for connection with TXOne EdgeOne.

2. Configure the Forward proxy service on the Service Gateway virtual appliance.
   1. In the Trend Vision One console, go to Workflow and Automation → Service Gateway Management.
   2. On the Service Gateway Management screen, click the Service Gateway name.
   3. Click Manage Services.
   4. In the Manage Services panel, click the install () icon to install and then enable the Forward proxy service.
   5. Configure your firewall exceptions for connection with Trend Vision One.

      Region	Required exceptions
      Australia	xlogr-ase2.xdr.trendmicro.com sgi-iot.au.xdr.trendmicro.com api.au.xdr.trendmicro.com au.services.trendmicro.com
      Europe	xlogr-ec1.xdr.trendmicro.com sgi-iot.eu.xdr.trendmicro.com api.eu.xdr.trendmicro.com eu.services.trendmicro.com
      India	xlogr-as1.xdr.trendmicro.com sgi-iot.in.xdr.trendmicro.com api.in.xdr.trendmicro.com in.services.trendmicro.com
      Japan	xlogr-ane1.xdr.trendmicro.com sgi-iot.xdr.trendmicro.co.jp api.xdr.trendmicro.co.jp jp.services.trendmicro.com
      Singapore	xlogr-ase1.xdr.trendmicro.com sgi-iot.sg.xdr.trendmicro.com api.sg.xdr.trendmicro.com sg.services.trendmicro.com
      United Sates	xlogr-ue1.xdr.trendmicro.com sgi-iot.xdr.trendmicro.com api.xdr.trendmicro.com us.services.trendmicro.com

3. Obtain the API key that you need to use to authenticate connections with TXOne EdgeOne through the forward proxy service.
   1. In the Trend Vision One console, go to Workflow and Automation → Service Gateway Management.
   2. On the Service Gateway Management screen, click Manage API Key, and record the API key in the API Key panel that appears.
4. Obtain the enrollment token that you need to use in the EdgeOne console to identify your Trend Vision One console.
   1. In the Trend Vision One console, go to Point Product Connection → Product Instance.
   2. Click Add Existing Product.
   3. On the Product Connection panel, select TXOne EdgeOne from the Instance type drop-down list.
   4. Click the Click to generate the enrollment token link.
   5. Record the enrollment token.
   6. Click Save.
      Pending appears in the Status column, which means that Trend Vision One is ready for connection with TXOne EdgeOne.

      The enrollment token expires if not used within 24 hours of generation. To regenerate a valid enrollment token, click Regenerate in the Status column.
5. Configure service integration settings to integrate your TXOne EdgeOne environment with Trend Vision One and send data to Trend Vision One.
   1. Sign in to your TXOne EdgeOne console.
   2. Go to Administration → Connection Settings, and click the Trend Micro Vision One Integration tab.
   3. Allow TXOne EdgeOne to send logs to Trend Vision One by turning on the Vision One Service toggle and configuring required settings.
   4. Specify the Service Gateway Address, Service Gateway API Key, and Product Connector Enrollment Token based on the information obtained in the previous steps.
   5. Click Test Connection.
      A message "Test connection succeeded" appears if connection to Trend Vision One succeeds.
   6. Select the interval at which TXOne EdgeOne sends logs to Trend Vision One.
   7. Click Save.
6. Go to the Trend Vision One console and confirm the connection status in the Product Instance screen.
   Connected appears in the Status column if your TXOne EdgeOne environment connects properly with Trend Vision One.

   To disconnect from Trend Vision One, click the options () icon and then Disconnect in the Trend Vision One console and follow the on-screen instructions.