Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The Tripwire integration tells you which hosts on your enterprise network are is either undefended by Tripwire or unknown to LumetaAsset Manager. By comparing Lumeta's the comprehensive index of all your network devices against that subset of network devices managed by Tripwire, you can generate a list of network hosts that are not managed managed in the Tripwire IP360. What's pulled from Tripwire to Lumeta Asset Manager is only what you request, and not an exhaustive collection of all the device details and attributes that Tripwire manages. This enables Lumeta Asset Manager to scan the network device attributes of value to you, and not all the rest.

Image RemovedImage Added

How Does It Work?

  1. Lumeta Asset Manager queries the Tripwire IP360 and retrieves its inventory of devices under management. This data feed is stored on Lumeta's in the Asset Manager database in the the tripwire_managed_hosts table. 
  2. Lumeta Asset Manager correlates this inventory against its own authoritative index of IP address space.
  3. Lumeta Asset Manager highlights the commonalities and differences into in views:
    1. IPs Unmanaged by Tripwire: IP addresses Lumeta knows about, IP addresses are known by Asset Manager but are unmanaged by Tripwire
    2. IPs Unmanaged by Lumeta: IP IP addresses Tripwire knows about , but are unknown to Lumeta (e.g.Asset Manager (for example, if Lumeta Asset Manager does not have access to a network or an off-network device, but Tripwire is still aware of the client agent)
    3. Tripwire and Lumeta Managed IPs: IP IP addresses both Lumeta Asset Manager and Tripwire know about.

In reviewing Reviewing the data on the Lumeta dashboard, users Asset Manager dashboard data, you can view Device Details.

Configuring the Tripwire Feed

Configure the Tripwire feed as follows:

  1. On Lumeta's main menu, browse to Navigate to Settings > Integrations > Other Solutions >  > Tripwire.
    Image Removed
  2. Enable the threat feed by toggling switching the slider to Ontoggle key to on (the toggle key will turn blue).
  3. Input Enter a Polling Interval (by Hour) to indicate the time that should elapse between fetching the latest feed data. Input 24 to poll daily, input 12 to poll twice a day, and so on. The minimum polling interval is 1 hour.Input
  4. Enter the IP address of your Tripwire serverin the Server Name field.
  5. Input your customer Enter the Username and password.Click Submit.
    The feed of data from Tripwire IP360 to Lumeta is configured. If you see the messages "Configuration saved" and "Product configured properly," then all is well.  Password used for Tripwire.
  6. Select the Asset Mapping by Zone checkbox to enable pushing assets from Asset Manager to Tripwire in the "Scan Networks" widget.
    • You will then select an Asset Manager Zones from the list of available to enable for this feature. Click the Enabled checkbox for the zone to map to. 
  7. Click Save.