趋势Deep Security安装

Deep Security下载地址：https://help.deepsecurity.trendmicro.com/software.html?regs=en-hk&prodid=1716&_ga=2.165737150.1637045249.1717402661-819692893.1716530462

前言

Trend Micro Deep Security是一个提供深度包检查、入侵防御、恶意软件保护以及其他多层安全措施的综合性安全解决方案。由趋势科技（Trend Micro）开发，这个解决方案旨在为物理、虚拟、云环境中的服务器和应用提供保护。

一、管理端安装

1、准备一个数据库：Postgres必须是14

然后登录进去配置（参数后面用）：
CREATE DATABASE "deepsecuritydb";
CREATE ROLE "deepsecurity" WITH PASSWORD 'deepsecurity' LOGIN;
GRANT ALL ON DATABASE "db" TO "deepsecurity";
GRANT CONNECT ON DATABASE "db" TO "deepsecurity;

2、启动一个redhat 9 EC2，建议选择2xlarge

3、Security manager安装

准备一个文件命名为 config

DatabaseScreen.DatabaseType=PostgreSQL
DatabaseScreen.Hostname=xxx.xxx.xxx.xxx
DatabaseScreen.Transport=TCP
DatabaseScreen.DatabaseName=deepsecuritydb
DatabaseScreen.Username=deepsecurity
DatabaseScreen.Password=deepsecurity
AddressAndPortsScreen.ManagerPort=4119
AddressAndPortsScreen.HeartbeatPort=4120
CredentialsScreen.Administrator.Username=masteradmin
CredentialsScreen.Administrator.Password=masteradmin
CredentialsScreen.UseStrongPasswords=False
SecurityUpdateScreen.UpdateComponents=True
SecurityUpdateScreen.Proxy=False
SecurityUpdateScreen.ProxyAuthentication=False
SoftwareUpdateScreen.UpdateSoftware=True

其中：

（1）DatabaseScreen.Hostname 是Postgre数据库的IP/域名
（2）Security manager的用户名密码是配置如下：
CredentialsScreen.Administrator.Username=masteradmin
CredentialsScreen.Administrator.Password=masteradmin

（3）数据库的用户名密码是配置如下（和Postgre数据库配置的一样）：
DatabaseScreen.Username=deppsecurity
DatabaseScreen.Password=deppsecurity

4、安装

./Manager-Linux-20.0.913.x64.sh -q -console -varfile config

二、Agent安装

mkdir ds_agent
cd ds_agent
curl https://files.trendmicro.com/products/deepsecurity/en/20.0/Agent-amzn2-20.0.1-9400.x86_64.zip -o Agent-amzn2-20.0.1-9400.x86_64.zip
unzip Agent-amzn2-20.0.1-9400.x86_64.zip
sudo rpm -i Agent-Core-amzn2-20.0.1-9400.x86_64.rpm Agent-PGPCore-amzn2-20.0.1-9400.x86_64.rpm
sudo /opt/ds_agent/dsa_control -a dsm://xxx.xxx.xxx.xxx:4120