Tripwire IP360

The Tripwire integration tells you which hosts on your enterprise network is either undefended by Tripwire or unknown to Asset Manager. By comparing the comprehensive index of all your network devices against that subset of network devices managed by Tripwire, you can generate a list of network hosts not managed in the Tripwire IP360. What's pulled from Tripwire to Asset Manager is only what you request, not an exhaustive collection of all the device details and attributes that Tripwire manages. This enables Asset Manager to scan the network device attributes of value to you, and not all the rest.

How Does It Work?

  1. Asset Manager queries the Tripwire IP360 and retrieves its inventory of devices under management. This data feed is stored in the Asset Manager database in the tripwire_managed_hosts table. 
  2. Asset Manager correlates this inventory against its own authoritative index of IP address space.
  3. Asset Manager highlights the commonalities and differences in views:
    1. IPs Unmanaged by Tripwire: IP addresses are known by Asset Manager but are unmanaged by Tripwire
    2. IPs Unmanaged by Asset Manager: IP addresses Tripwire knows about but are unknown to Asset Manager (for example, if Asset Manager does not have access to a network or an off-network device, but Tripwire is still aware of the client agent)
    3. Tripwire and Asset Manager Managed IPs: IP addresses both Asset Manager and Tripwire know about.

Reviewing the Asset Manager dashboard data, you can view Device Details.

Configuring the Tripwire Feed

Configure the Tripwire feed as follows:

  1. Navigate to Settings > Integrations > Tripwire.
  2. Enable the threat feed by switching the toggle key to on (the toggle key will turn blue).
  3. Enter a Polling Interval (by Hour) to indicate the time that should elapse between fetching the latest feed data.
  4. Enter the IP address of your Tripwire in the Server Name field.
  5. Enter the Username and Password used for Tripwire.
  6. Select the Asset Mapping by Zone checkbox to enable pushing assets from Asset Manager to Tripwire in the "Scan Networks" widget.
    • You will then select an Asset Manager Zones from the list of available to enable for this feature. Click the Enabled checkbox for the zone to map to. 
  7. Click Save.