I am working with TIE Server where it contains a Ready only Master (inside the network), Slave (inside the network) and a DXL Broker broker in the DMZ.
My questions is, what is the recommended configuration for the DXL Topology?
Should I create two hubs, example (internal Broker - add inside servers to it) and (external hub - add DMZ broker to it)? I am confused on how to configure this setting. Any help would be greatly appreciated.
we installed TIE/DXL environment with more than 25000 users, with hundrets or locations and integrating any DXL enabled McAfee product. Enclosed some infos from my experience.
If you have ATD in place just remember, only TIE Master or Slave appliances are uploading files to ATD for analysis.
How the HUBS are used. You can handle DXL brokers somlike Agent Handlers. Yes, an own DXL Hub provides load balancing and failover.
Configure your DXL Agent policy for your endpoints to assign the DXL brokers they should use.
thank you Troja for your respond.
The main concern i have is to determine how to configure "DXL Topology option within ePO under Menu -> Server Settings > DXL Topology.
At this time, I have created two entry (see screenshot below). External broker contains what is in the DMZ (which is the DXL Broker). and the internal broker contains what is INSIDE the nextwork (Master server and slave server). is this the right way to configure a basic setup?
The reason I ask is because when i set it up this way and i go to "Data Exchange Layer Fabric", i dont not see the entry for DXL Broker in the DMZ. I only see what is inside the network.
This is the DXL fabirc in my LAB:
You can see the TOP Hub called Malware where my TIE Master and Slave are located. Please note, do not use the DXL Broker Service on the TIE Server in productive or bigger environment.
The result of your DXL Configuration is the "sitelist" for your DXL Client and can be used in the DXL Client Policy.
Two things are importante.
Finally, just a hint from my side, read the documents from the Expert Center carefully.
Hope this helps,