Cisco Cisco Firepower Management Center 4000 Entwickleranleitung
6-13
FireSIGHT eStreamer Integration Guide
Chapter 6 Configuring eStreamer
Configuring the eStreamer Reference Client
Creating a Certificate for the Perl Reference Client
License:
Any
Before you can use the Perl reference client, you must create a certificate on the Defense Center or
managed device for the computer where you want to run the client. You then download the certificate
file to the client computer and use it to create a certificate (
managed device for the computer where you want to run the client. You then download the certificate
file to the client computer and use it to create a certificate (
server.crt
) and RSA key file (
server.key
).
To create a certificate for the Perl Reference Client:
Access:
Admin
Step 1
Select
Operations
>
Configuration
>
eStreamer
.
The eStreamer page appears.
Step 2
Click
Create Client
.
The Create Client page appears.
Step 3
In the
Hostname
field, enter the host name or IP address of the host running the eStreamer client.
Note
If you use a host name, the host input server must be able to resolve the host to an IP address. If you
have not configured DNS resolution, you should configure it first or use an IP address.
have not configured DNS resolution, you should configure it first or use an IP address.
Step 4
If you want to encrypt the certificate file, enter a password in the
Password
field.
Step 5
Click
Save
.
The eStreamer server allows the client computer to access port 8302 on the Defense Center and
creates an authentication certificate to use during client-server authentication. The eStreamer Client
page reappears, with the new client listed under
creates an authentication certificate to use during client-server authentication. The eStreamer Client
page reappears, with the new client listed under
eStreamer Clients
.
Step 6
Click the download icon (
) next to the certificate file.
Step 7
Save the certificate file to the directory used by your client computer for SSL authentication.
The client can now connect to the Defense Center.
Tip
To revoke access for a client, click the delete icon (
) next to the host you want to remove. Note that
you do not need to restart the host input service on the Defense Center; access is revoked immediately.
Running the eStreamer Perl Reference Client
The eStreamer Perl reference client scripts are designed for use on a 64-bit operating system with the
Linux kernel but should work on any POSIX-based 64-bit operating system, as long as the client machine
meets the prerequisites defined in
Linux kernel but should work on any POSIX-based 64-bit operating system, as long as the client machine
meets the prerequisites defined in
For more information, see the following sections:
•
•
•