Tipping Point IDS/IPS

This document applies to Classic/Legacy Integrations. You may continue to use these integration configurations. While no active development is happening for these integrations, we continue to provide Classic/Legacy Integrations in the product. You do not have to move to MSI Integrations. If your support engineer or TSC recommends or you choose to move to MSI Integrations, you can take advantage of the latest features and functionality. For more information, see the MSI Integration documentation in the Integrations Overview.

This integration is remote capable.

Update TippingPoint

The Validation Platform requires an exclusive user account. Create an account that has, at minimum, Access SMS Web Services permissions.

API Calls

The following API Calls are used by the Validation Platform.

Purpose	Call
Query Alerts	`/dbAccess/tptDBServlet` with `GetData` method in the `ALERTS` table. Uses begin_time and end_time to timebox the query.
Update signatures	`/dbAccess/tptDBServlet` with `DataDictionary` method in the `SIGNATURE` table. This is retrieving signatures from TippingPoint to update our cache, not changing configuration on TippingPoint devices.

Update the Validation Platform

Prerequisites

Information to gather before you start:

Identify the IP address used to access TippingPoint SMS host.
Identify the port for TippingPoint SMS host communications (default is 443).
Identify whether the protocol is HTTP or HTTPS for connections to the TippingPoint SMS host port.
Identify or create credentials to access TippingPoint.

Tipping Point Credentials

Configuration

To add the Tipping Point integration

Go to Settings > Integrations.
Click Add Integration > TippingPoint.
Enter information for the Host, Port, Protocol, Username and Password or API Token.
Expand Advanced options and update the information if necessary.
Click Submit.
Click Update Signatures to download the TippingPoint signature set from the SMS server.

Tipping Point Integration

Set up Proxy Assignment

If all outbound connections go through a proxy, you may want to set up a proxy definition and assignment for your integration. For information on setting up your proxy rules, see Proxy Rules.

Verify connectivity

To verify connectivity to TippingPoint

Click Test to verify that:

The Director can communicate with TippingPoint using the port specified.
User credentials are working.