Configuring integration with ArtX TLSproxy 1.9.1

You can configure the integration of Kaspersky Anti Targeted Attack Platform with ArtX TLSproxy 1.9.1 to unwrap encrypted SSL/TLS traffic. Integrating Kaspersky Anti Targeted Attack Platform with ArtX TLSProxy 1.9.1 improves the security and performance of infrastructure.

To configure the integration of Kaspersky Anti Targeted Attack Platform with ArtX TLSproxy 1.9.1:

1. Specify and edit integration settings in ArtX TLSproxy 1.9.1.

   For more details on specifying and editing integration settings in ArtX TLSproxy 1.9.1, see the ArtX TLSproxy User Manual on the ArtX website.

2. Create the erspan.netdev file in the /etc/systemd/network directory with the following contents:

   [NetDev]

   Name=<name of the ERSPAN interface>

   Kind=erspan

   [Tunnel]

   Independent=true

   ERSPANIndex=<index or port number associated with the ERSPAN traffic source port>

   Local = <local fixed IP address of the network interface on which you are configuring ERSPAN traffic transmission>

   Remote = <IP address of the server hosting the Kaspersky Anti Targeted Attack Platform application on which you want to process ERSPAN traffic>

   Key = <Sequential number or key of the GRE header>. If not used, enter 0 as the value.

   SerializeTunneledPackets=true

3. Create the erspan.network file in the /etc/systemd/network directory with the following contents:

   [Match]

   Name=<name of the ERSPAN interface>

   [Network]

   Address = <local IP address of the network interface/network interface mask>

4. Restart the server with the Kaspersky Anti Targeted Attack Platform application on which you are configuring the integration with ArtX TLSproxy 1.9.1.
5. Go to the ArtX TLSproxy 1.9.1 application and specify the network interfaces that you configured.

The settings in the erspan.netdev and erspan.network files must match the settings that you specified in ArtX TLSproxy 1.9.1.

Integration with ArtX TLSproxy 1.9.1 is configured.