Views:

Trend Vision One enables transfer of suspicious object data and retrieval of threat intelligence data from the MISP threat sharing platform through a Service Gateway.

Note
Note
To enable the direct transfer of suspicious object data and retrieval of MISP threat intelligence data, see MISP integration (via direct connection).

Procedure

  1. On the Trend Vision One console, go to Workflow and Automation → Third-Party Integration → MISP.
  2. Turn on the toggle to enable the MISP connection.
  3. Select Send data to MISP.
  4. Configure settings to allow Trend Vision One to send suspicious object data to MISP.
  5. Select Retrieve data from MISP.
  6. Configure settings to allow Trend Vision One to retrieve threat intelligence data from MISP.
  7. Under Service Gateway Connection, configure the connection between the Service Gateway and the integration.
    The Service Gateway Connection panel appears.
  8. Select a Service Gateway from the drop-down list.
    Tip
    Tip
    If there are no Service Gateways available, go to Workflow and Automation → Third-Party Integration → Service Gateway Management to manage your virtual appliances.
  9. Click Connect.
  10. Click Save.