Skip to content
This repository was archived by the owner on Oct 15, 2025. It is now read-only.

Commit 7f00d42

Browse files
424D57424D57
committed
add RHEL quickstart; add heartbeat url to Master output
1 parent 7c87434 commit 7f00d42

3 files changed

Lines changed: 382 additions & 1 deletion

File tree

‎DeepSecurity/DeepSecurity.cfproj‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,9 @@
6363
<Compile Include="Quickstart\TMQuickStartPPU.template">
6464
<SubType>Code</SubType>
6565
</Compile>
66+
<Compile Include="Quickstart\TMQuickStartRHEL.template">
67+
<SubType>Code</SubType>
68+
</Compile>
6669
<Compile Include="RHEL\DSM96RH.template">
6770
<SubType>Code</SubType>
6871
</Compile>

‎DeepSecurity/Quickstart/TMQuickStartRHEL.template‎

Lines changed: 358 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,358 @@
1+
{
2+
"AWSTemplateFormatVersion" : "2010-09-09",
3+
"Description" : "v3.2 Quick Start that deploys Trend Micro Deep Security into an exisintg VPC with a Multi-AZ Oracle RDS instance **WARNING** This template uses images from the AWS Marketplace and an active subscription is required - Please see the Quick Start documentation for more details. You will be billed for the AWS resources used if you create a stack from this template.",
4+
"Metadata" : {
5+
"AWS::CloudFormation::Interface" : {
6+
"ParameterGroups" : [
7+
{
8+
"Label" : { "default" : "Deep Security Manager Configuration" },
9+
"Parameters" : [ "DeepSecurityAdminName", "DeepSecurityAdminPass", "AWSKeyPairName", "ProtectedInstances" ]
10+
},
11+
{
12+
"Label" : { "default" : "Network Configuration" },
13+
"Parameters" : [ "AWSVPC", "DeepSecuritySubnet", "DatabaseSubnet1", "DatabaseSubnet2" ]
14+
}
15+
16+
],
17+
"ParameterLabels" : {
18+
"AWSKeyPairName" : { "default" : "EC2 Key Pair for SSH access" },
19+
"AWSVPC" : { "default" : "VPC for Deep Security Components" },
20+
"DeepSecuritySubnet" : { "default" : "Public Subnet for Deep Security Managers" },
21+
"DeepSecurityAdminName" : { "default" : "Administrator username for Deep Security" },
22+
"DeepSecurityAdminPass" : { "default" : "Administrator password for Deep Security" },
23+
"DatabaseSubnet1" : { "default" : "Primary private subnet for RDS" },
24+
"DatabaseSubnet2" : { "default" : "Secondary private subnet for RDS" },
25+
"ProtectedInstances" : { "default" : "Number of instances you expect to protect with Deep Security Agents" }
26+
}
27+
}
28+
},
29+
"Parameters" : {
30+
"AWSKeyPairName" : {
31+
"Description" : "Select an existing key pair to use for connecting to your Deep Security Manager Instance.",
32+
"Type" : "AWS::EC2::KeyPair::KeyName",
33+
"MinLength" : "1",
34+
"MaxLength" : "255",
35+
"AllowedPattern" : "[-_a-zA-Z0-9]*",
36+
"ConstraintDescription" : "Select an existing EC2 Key Pair."
37+
},
38+
"AWSVPC" : {
39+
"Description" : "Select an existing VPC to deploy Deep Security Manager.",
40+
"Type" : "AWS::EC2::VPC::Id",
41+
"MinLength" : "1",
42+
"MaxLength" : "255",
43+
"AllowedPattern" : "[-_a-zA-Z0-9]*"
44+
},
45+
"DatabaseSubnet1" : {
46+
"Description" : "Select a private subnet for the RDS database. Must be a private subnet contained the in VPC chosen above.",
47+
"Type" : "AWS::EC2::Subnet::Id",
48+
"ConstraintDescription" : "RDS Subnet Groups must be comprised of 2 subnets in seperate availability zones within the specified VPC for deploying this template"
49+
},
50+
"DatabaseSubnet2" : {
51+
"Description" : "Select a second private subnet for the RDS database. Must be a private subnet contained the in VPC chosen above.",
52+
"Type" : "AWS::EC2::Subnet::Id",
53+
"ConstraintDescription" : "RDS Subnet Groups must be comprised of 2 subnets in seperate availability zones within the specified VPC for deploying this template"
54+
},
55+
"DeepSecuritySubnet" : {
56+
"Description" : "Select an existing Subnet for Deep Seucurity Manager. Must be a public subnet contained the in VPC chosen above.",
57+
"Type" : "AWS::EC2::Subnet::Id",
58+
"MinLength" : "1",
59+
"MaxLength" : "255",
60+
"AllowedPattern" : "[-_a-zA-Z0-9]*",
61+
"ConstraintDescription" : "Subnet ID must exist in the chosen VPC"
62+
},
63+
"DeepSecurityAdminName" : {
64+
"Default" : "MasterAdmin",
65+
"NoEcho" : false,
66+
"Description" : "The Deep Security Manager administrator username for Web Console Access.",
67+
"Type" : "String",
68+
"MinLength" : 1,
69+
"MaxLength" : 16,
70+
"AllowedPattern" : "[a-zA-Z][a-zA-Z0-9]*",
71+
"ConstraintDescription" : "Must begin with a letter and contain only alphanumeric characters. Min length 1, max length 16"
72+
},
73+
"DeepSecurityAdminPass" : {
74+
"NoEcho" : true,
75+
"Description" : "The Deep Security Manager administrator password. Must be 8-41 characters long and can only contain alphanumeric characters or the following special characters !^*-_+",
76+
"Type" : "String",
77+
"MinLength" : 8,
78+
"MaxLength" : 41,
79+
"AllowedPattern" : "[a-zA-Z0-9!^*\\-_+]*",
80+
"ConstraintDescription" : "Can only contain alphanumeric characters or the following special characters !^*-_+ Min length 8, max length 41"
81+
},
82+
"ProtectedInstances" : {
83+
"Description" : "Select how many instances would you like to protect.",
84+
"Type" : "String",
85+
"AllowedValues" : [
86+
"1-100",
87+
"101-500",
88+
"501-1000",
89+
"1001-2000"
90+
]
91+
}
92+
},
93+
"Mappings" : {
94+
"DSMSIZE" : {
95+
"us-east-1" : {
96+
"1" : "m3.large",
97+
"2" : "m3.large",
98+
"3" : "c3.xlarge",
99+
"4" : "c3.xlarge"
100+
},
101+
"us-west-1" : {
102+
"1" : "m3.large",
103+
"2" : "m3.large",
104+
"3" : "c3.xlarge",
105+
"4" : "c3.xlarge"
106+
},
107+
"us-west-2" : {
108+
"1" : "m3.large",
109+
"2" : "m3.large",
110+
"3" : "c3.xlarge",
111+
"4" : "c3.xlarge"
112+
},
113+
"eu-west-1" : {
114+
"1" : "m3.large",
115+
"2" : "m3.large",
116+
"3" : "c3.xlarge",
117+
"4" : "c3.xlarge"
118+
},
119+
"eu-central-1" : {
120+
"1" : "m3.large",
121+
"2" : "m3.large",
122+
"3" : "c3.xlarge",
123+
"4" : "c3.xlarge"
124+
},
125+
"sa-east-1" : {
126+
"1" : "m3.large",
127+
"2" : "m3.large",
128+
"3" : "c3.xlarge",
129+
"4" : "c3.xlarge"
130+
},
131+
"ap-northeast-1" : {
132+
"1" : "m3.large",
133+
"2" : "m3.large",
134+
"3" : "c3.xlarge",
135+
"4" : "c3.xlarge"
136+
},
137+
"ap-southeast-1" : {
138+
"1" : "m3.large",
139+
"2" : "m3.large",
140+
"3" : "c3.xlarge",
141+
"4" : "c3.xlarge"
142+
},
143+
"ap-southeast-2" : {
144+
"1" : "m3.large",
145+
"2" : "m3.large",
146+
"3" : "c3.xlarge",
147+
"4" : "c3.xlarge"
148+
},
149+
"ap-northeast-2" : {
150+
"1" : "m4.large",
151+
"2" : "m4.large",
152+
"3" : "m4.xlarge",
153+
"4" : "m4.xlarge"
154+
},
155+
"us-gov-west-1" : {
156+
"1" : "m3.large",
157+
"2" : "m3.large",
158+
"3" : "m3.xlarge",
159+
"4" : "m3.xlarge"
160+
}
161+
},
162+
"RDSStorageSize" : {
163+
"1-100" : {
164+
"Size" : "50"
165+
},
166+
"101-500" : {
167+
"Size" : "150"
168+
},
169+
"501-1000" : {
170+
"Size" : "200"
171+
},
172+
"1001-2000" : {
173+
"Size" : "300"
174+
}
175+
},
176+
"RDSInstanceSize" : {
177+
"us-east-1" : {
178+
"1" : "db.m4.large",
179+
"2" : "db.m4.large",
180+
"3" : "db.m4.xlarge",
181+
"4" : "db.m4.xlarge"
182+
},
183+
"us-west-1" : {
184+
"1" : "db.m4.large",
185+
"2" : "db.m4.large",
186+
"3" : "db.m4.xlarge",
187+
"4" : "db.m4.xlarge"
188+
},
189+
"us-west-2" : {
190+
"1" : "db.m4.large",
191+
"2" : "db.m4.large",
192+
"3" : "db.m4.xlarge",
193+
"4" : "db.m4.xlarge"
194+
},
195+
"eu-west-1" : {
196+
"1" : "db.m4.large",
197+
"2" : "db.m4.large",
198+
"3" : "db.m4.xlarge",
199+
"4" : "db.m4.xlarge"
200+
},
201+
"eu-central-1" : {
202+
"1" : "db.m4.large",
203+
"2" : "db.m4.large",
204+
"3" : "db.m4.xlarge",
205+
"4" : "db.m4.xlarge"
206+
},
207+
"sa-east-1" : {
208+
"1" : "db.m3.large",
209+
"2" : "db.m3.large",
210+
"3" : "db.m3.xlarge",
211+
"4" : "db.m3.xlarge"
212+
},
213+
"ap-northeast-1" : {
214+
"1" : "db.m4.large",
215+
"2" : "db.m4.large",
216+
"3" : "db.m4.xlarge",
217+
"4" : "db.m4.xlarge"
218+
},
219+
"ap-southeast-1" : {
220+
"1" : "db.m4.large",
221+
"2" : "db.m4.large",
222+
"3" : "db.m4.xlarge",
223+
"4" : "db.m4.xlarge"
224+
},
225+
"ap-southeast-2" : {
226+
"1" : "db.m3.large",
227+
"2" : "db.m3.large",
228+
"3" : "db.m3.xlarge",
229+
"4" : "db.m3.xlarge"
230+
},
231+
"ap-northeast-2" : {
232+
"1" : "db.m4.large",
233+
"2" : "db.m4.large",
234+
"3" : "db.m4.xlarge",
235+
"4" : "db.m4.xlarge"
236+
},
237+
"us-gov-west-1" : {
238+
"1" : "db.m3.large",
239+
"2" : "db.m3.large",
240+
"3" : "db.m3.xlarge",
241+
"4" : "db.m3.xlarge"
242+
}
243+
},
244+
"DeploymentSize" : {
245+
"1-100" : {
246+
"Size" : "1"
247+
},
248+
"101-500" : {
249+
"Size" : "2"
250+
},
251+
"501-1000" : {
252+
"Size" : "3"
253+
},
254+
"1001-2000" : {
255+
"Size" : "4"
256+
}
257+
}
258+
},
259+
"Resources" : {
260+
"MasterRH96" : {
261+
"Type" : "AWS::CloudFormation::Stack",
262+
"Properties" : {
263+
"TemplateURL" : "https://s3.amazonaws.com/trend-micro-quick-start/v3.4/RHEL/MasterRH96.template",
264+
"Parameters" : {
265+
"AWSIKeyPairName" : {
266+
"Ref" : "AWSKeyPairName"
267+
},
268+
"AWSIVPC" : {
269+
"Ref" : "AWSVPC"
270+
},
271+
"DSISubnetID" : {
272+
"Ref" : "DeepSecuritySubnet"
273+
},
274+
"DBIRDSInstanceSize" : {
275+
"Fn::FindInMap" : [
276+
"RDSInstanceSize",
277+
{
278+
"Ref" : "AWS::Region"
279+
},
280+
{
281+
"Fn::FindInMap" : [
282+
"DeploymentSize",
283+
{
284+
"Ref" : "ProtectedInstances"
285+
},
286+
"Size"
287+
]
288+
}
289+
]
290+
},
291+
"DBIStorageAllocation" : {
292+
"Fn::FindInMap" : [
293+
"RDSStorageSize",
294+
{
295+
"Ref" : "ProtectedInstances"
296+
},
297+
"Size"
298+
]
299+
},
300+
"DBPBackupDays" : "5",
301+
"DBPCreateDbInstance" : "Yes" ,
302+
"DBICAdminName" : "dsmadmin",
303+
"DBICAdminPassword" : {
304+
"Ref" : "DeepSecurityAdminPass"
305+
},
306+
"DBPEngine" : "Oracle",
307+
"DBPEndpoint" : "" ,
308+
"DBPName" :"dsm",
309+
"DSCAdminName" : {
310+
"Ref" : "DeepSecurityAdminName"
311+
},
312+
"DSCAdminPassword" : {
313+
"Ref" : "DeepSecurityAdminPass"
314+
},
315+
"DSIMultiNode" : "2" ,
316+
"DSIPLicenseKey" : "XX-XXXX-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX",
317+
"DSIPHeartbeatPort" : "4120",
318+
"DSIPGUIPort" : "443",
319+
"DSIPInstanceType" : {
320+
"Fn::FindInMap" : [
321+
"DSMSIZE",
322+
{
323+
"Ref" : "AWS::Region"
324+
},
325+
{
326+
"Fn::FindInMap" : [
327+
"DeploymentSize",
328+
{
329+
"Ref" : "ProtectedInstances"
330+
},
331+
"Size"
332+
]
333+
}
334+
]
335+
},
336+
"DBISubnet1" : {
337+
"Ref" : "DatabaseSubnet1"
338+
},
339+
"DBISubnet2" : {
340+
"Ref" : "DatabaseSubnet2"
341+
},
342+
"DBIInstanceIdentifier" : "deep-security",
343+
"DBPMultiAZ": "true"
344+
}
345+
}
346+
}
347+
},
348+
"Outputs" : {
349+
"DeepSecurityConsole" : {
350+
"Value" : {
351+
"Fn::GetAtt" : [
352+
"MasterRH96",
353+
"Outputs.DeepSecurityConsole"
354+
]
355+
}
356+
}
357+
}
358+
}

‎DeepSecurity/RHEL/MasterRH96.template‎

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -844,6 +844,26 @@
844844
]
845845
]
846846
}
847-
}
847+
},
848+
"DeepSecurityHeartbeat" : {
849+
"Value" : {
850+
"Fn::Join" : [
851+
"",[
852+
"dsm://",
853+
{
854+
"Fn::GetAtt" : [
855+
"DSIELB",
856+
"Outputs.ELBFQDN"
857+
]
858+
},
859+
":",
860+
{
861+
"Ref" : "DSIPHeartbeatPort"
862+
},
863+
"/"
864+
]
865+
]
866+
}
867+
}
848868
}
849869
}

0 commit comments

Comments
 (0)