Distribute DVA SD Scripts

 

To distribute DVA (Device Visibility Add-on) SD Scripts, do the following:

  1. Download the DVA SD Script zip file from the Forescout Support Portal and copy it to the machine running the eyeInspect Content Distributor. An example path is shown below:
    ${HOME}/device_visibility_add-ons_v25.03.20.zip
  2. Copy the CVE/IoC bundle zip file to the content/sd-script folder of the eyeInspect Content Distributor using the following command:
    ./content-distributor-cli.sh import --type sd-script --path ${HOME}/device_visibility_add-ons_v25.03.20.zip
  3. Run the eyeInspect Content Distributor.

Next, use one of the following three ways to distribute the DVA SD Scripts. Go here for more details about distribution commands.

Note: If you want to distribute a custom SD Script, first prepare and copy the SD Script files by following the instructions on this page, and then use one of the following methods to distribute.

Use the interactive distribute command

The interactive distribute command guides you through the process of distributing the bundle - simple select the content type, the content file, select the target Command Centers, and confirm the distribution. The bash commands below illustrate this:

eyeinspect:> distribute
? Select content type to distribute: SD_SCRIPT
? Select content file to be distributed: device_visibility_add-ons_v25.03.20.zip
? Select Command Centers: <CC_IP_Address>
? Given content will be distributed to all sensors connected to selected Command Centers. Do you confirm? true
File distribution was successful for all selected Command Centers.
Refer to the log file for more details: <file_name.csv>

Use the distribute command with parameters

It is possible to distribute the DVA SD script using the distribute command with parameters, as seen below:

eyeinspect:> distribute with-params SD_SCRIPT device_visibility_add-ons_25.03.20.zip <CC_IP_Address>
File distribution was successful for all selected Command Centers.
Refer to the log file for more details: <file_name.csv>

Use an existing template to distribute

To create a template for future distributions, use the interactive template create command, and enter the relevant information, as seen below:

eyeinspect:> template create
? Select content type to distribute: SD_SCRIPT
? Select content file to be distributed: device_visibility_add-ons_25.03.20.zip
? Select Command Centers: <CC_IP_Address>
? Input task template name:  dva
The content distribution task template is saved to the file <file_name.json>.
The sensor list can be modified and the distribution task can be initiated by calling `distribute from-template <file_name.json>`

All sensors of the target Command Center are listed in the template file. The target sensors for the distribution can be changed by editing this file:

sudo chown -R $(whoami):$(whoami) ${HOME}/content-distributor-cli-base/export
sudo chmod -R o+w ${HOME}/content-distributor-cli-base/export
nano ${HOME}/content-distributor-cli-base/export/template/<file_name.json>

To distribute the DVA SD script using an existing template, enter the name of the template and the DVA SD script file, as seen below:

eyeinspect:> distribute from-template <file_name.json> device_visibility_add-ons_25.03.20.zip
File distribution was successful for all selected Command Centers.
Refer to the log file for more details: <file_name.csv>