DXL broker and TIE server

[Dwee]

hi all,

i just finished upgrade epo 5.9.1 to 5.10 (finally), and the next plan is activate mvsion account then integrate the EDR to my 5.10 on-prem epo, we have activated the account, what is the next step ?

- checkin mvsion edr extension?, or any other extension ?

-Deploy TIE ova ? which one ? i can't find the ova with bundled TIE + DXL

you can check my topology plans in the attachment, is it TIE and DXL broker server in one server ?

thanks

Dwee

[bbarnes]

Hello Dwee, 

TIE Server is not a requirement of EDR, however you can use the TIE OVA to install the DXL broker and TIE (The TIE OVA serves as the combo image you are looking for). Alternatively you can install a broker only OVA from the DXL download area that does not include TIE.

Depending on which way you decide to go, ensure you check in all appropriate extensions into ePO first for TIE/DXL. Then you can deploy the relevant OVA and start the process.

I would recommend completing the DXL installation next and ensuring ePO connectivity to the DXL broker. At that point you can move forward with checking in the EDR extensions and configuring the CloudBridge to connect to your Mvision account. 

Thanks

Brian

[Dwee]

thanks for your reply,

i'm a bit confused here, so we doesn't need TIE ? cmiiw (i got this step from the mvision edr support team),

- Check in the McAfee EDR extensions

- Whitelist the provided URLs and ports on the firewall or Proxy that you have in place

- Deploy the DXL broker server 

[bbarnes]

Dwee,

TIE server can be deployed along with the solution. If you are also running ENS it can add quite a bit of control over the files in your environment. Any of the TIE server OVA's can be used, they all have an option to deploy a DXL broker on them as well. Just ensure you have checked in all DXL\TIE extensions before you start the build process for the VM. 

Thanks

Brian

[Dwee]

Brian,

so i assumed TIE and DXL broker on the same server ? (that's what i assumed when i saw the design/topology from mcafee tech from my country)

uploaded

KR

Dwee

[bbarnes]

Hello Dwee, 

Yes, TIE server and the DXL broker can both be installed on the same server. Provided you are using the TIE server image. It will ask during the setup process if you want to install the broker service on the appliance.

Thanks

Brian

[Dwee]

Hello Brian,

thanks again for your info, question, on which TIE image version does broker included ? is it on every version of TIE ?

thanks

[bbarnes]

Hello Dwee,

Any version of the OVA will include the option to add the broker services to it. I obviously would recommend the latest 3.0.1.119.

Thanks

Brian

[Dwee]

Hi Brian,

so i just checkin the edr extension, what do i do next? install TIE ova (with broker services also), or any suggestion ?

[bbarnes · Accepted solution]

Hello Dwee, 

It sounds like you are trying to setup multiple products at the same time. I would focus on this order for the products:

-DXL

-TIE

-EDR

Installation guides for the products can be found at https://docs.mcafee.com/