Cisco Cisco AMP Threat Grid 5500 Appliance Installation Guide
Cisco AMP Threat Grid Appliance Administrator's Guide
SSL CERTIFICATES AND THREAT GRID APPLIANCES
SSL CERTIFICATES AND THREAT GRID APPLIANCES
34
STEPS
Threat Grid Appliance (“TGA”)
FireAMP Private Cloud
4.1
Configure DNS (if needed):
The Clean interface is used for the FireAMP
integration. But by default, DNS uses the
Dirty interface. If the FireAMP Private Cloud
hostname cannot be resolved over the Dirty
interface, then a separate DNS server that
uses the Clean interface can be configured
in OpAdmin.
integration. But by default, DNS uses the
Dirty interface. If the FireAMP Private Cloud
hostname cannot be resolved over the Dirty
interface, then a separate DNS server that
uses the Clean interface can be configured
in OpAdmin.
In OpAdmin, select Configuration >
Network, and complete the fields for DNS
on the Dirty and Clean networks, and click
Save.
Network, and complete the fields for DNS
on the Dirty and Clean networks, and click
Save.
4.2
CA Certificate Management:
The next step is to download or copy/paste
the FireAMP Private Cloud SSL certificate to
the Threat Grid Appliance so it can trust the
integrating device:
the FireAMP Private Cloud SSL certificate to
the Threat Grid Appliance so it can trust the
integrating device:
1.
In OpAdmin, select Configuration
> CA Certificates. You can select
an SSL certificate to import from
the FireAMP Private Cloud Host, or
import from the clipboard.
> CA Certificates. You can select
an SSL certificate to import from
the FireAMP Private Cloud Host, or
import from the clipboard.
2.
Select the certificate to import and
click Import from Host. The
Retrieve certificates from server
dialog opens. Enter the Host and
Port for the FireAMP Appliance
Disposition Service, and click
Retrieve.
click Import from Host. The
Retrieve certificates from server
dialog opens. Enter the Host and
Port for the FireAMP Appliance
Disposition Service, and click
Retrieve.
3.
The certificate is retrieved.
4.
Click Import.
(OR click Import from Clipboard. Paste the
PEM from the clipboard, and click Add
Certificate.)
PEM from the clipboard, and click Add
Certificate.)