Page tree
Skip to end of metadata
Go to start of metadata

The Tripwire integration tells you which hosts on your enterprise network are either undefended by Tripwire or unknown to FireMon Lumeta. By comparing Lumeta's comprehensive index of all your network devices against that subset of network devices managed by Tripwire, you can generate a list of network hosts that are not managed in the Tripwire IP360. What's pulled from Tripwire to Lumeta is only what you request, and not an exhaustive collection of all the device details and attributes that Tripwire manages. This enables Lumeta to scan the network device attributes of value to you, and not all the rest.

How Does It Work?

  1. Lumeta queries the Tripwire IP360 and retrieves its inventory of devices under management. This data feed is stored on Lumeta's database in the tripwire_managed_hosts table. 
  2. Lumeta correlates this inventory against its own authoritative index of IP address space.
  3. Lumeta highlights the commonalities and differences into views:
    1. IPs Unmanaged by Tripwire: IP addresses Lumeta knows about, but are unmanaged by Tripwire
    2. IPs Unmanaged by Lumeta: IP addresses Tripwire knows about, but are unknown to Lumeta (e.g., if Lumeta does not have access to a network or an off-network device, but Tripwire is still aware of the client agent)
    3. Tripwire and Lumeta Managed IPs: IP addresses both Lumeta and Tripwire know about.

In reviewing the data on the Lumeta dashboard, users can view Device Details.

Configuring the Tripwire Feed

Configure the Tripwire feed as follows:

  1. On Lumeta's main menu, browse to Settings > Integrations > Other Solutions > Tripwire.
  2. Enable the threat feed by toggling the slider to On.
  3. Input a Polling Interval to indicate the time that should elapse between fetching the latest feed data. Input 24 to poll daily, input 12 to poll twice a day, and so on. The minimum polling interval is 1 hour.
  4. Input the IP address of your Tripwire server.
  5. Input your customer Username and password.
  6. Click Submit.
    The feed of data from Tripwire IP360 to Lumeta is configured. If you see the messages "Configuration saved" and "Product configured properly," then all is well. 

  • No labels
Write a comment...