Distribute DVA SD Scripts
To distribute DVA (Device Visibility Add-on) SD Scripts, do the following:
- Download the DVA SD Script zip file from the Forescout Support Portal and copy it to the machine
running the eyeInspect Content Distributor. An example path is shown below:
${HOME}/device_visibility_add-ons_v25.03.20.zip - Copy the CVE/IoC bundle zip file to the
content/sd-scriptfolder of the eyeInspect Content Distributor using the following command:./content-distributor-cli.sh import --type sd-script --path ${HOME}/device_visibility_add-ons_v25.03.20.zip - Run the eyeInspect Content Distributor.
Next, use one of the following three ways to distribute the DVA SD Scripts. Go here for more details about distribution commands.
Use the interactive distribute command
The interactive distribute command guides you through the process of
distributing the bundle - simple select the content type, the content file, select
the target Command Centers, and confirm the distribution. The bash commands below
illustrate this:
eyeinspect:> distribute ? Select content type to distribute: SD_SCRIPT ? Select content file to be distributed: device_visibility_add-ons_v25.03.20.zip ? Select Command Centers: <CC_IP_Address> ? Given content will be distributed to all sensors connected to selected Command Centers. Do you confirm? true File distribution was successful for all selected Command Centers. Refer to the log file for more details: <file_name.csv>
Use the distribute command with parameters
It is possible to distribute the DVA SD script using the distribute
command with parameters, as seen below:
eyeinspect:> distribute with-params SD_SCRIPT device_visibility_add-ons_25.03.20.zip <CC_IP_Address> File distribution was successful for all selected Command Centers. Refer to the log file for more details: <file_name.csv>
Use an existing template to distribute
To create a template for future distributions, use the interactive template
create command, and enter the relevant information, as seen below:
eyeinspect:> template create ? Select content type to distribute: SD_SCRIPT ? Select content file to be distributed: device_visibility_add-ons_25.03.20.zip ? Select Command Centers: <CC_IP_Address> ? Input task template name: dva The content distribution task template is saved to the file <file_name.json>. The sensor list can be modified and the distribution task can be initiated by calling `distribute from-template <file_name.json>`
All sensors of the target Command Center are listed in the template file. The target sensors for the distribution can be changed by editing this file:
sudo chown -R $(whoami):$(whoami) ${HOME}/content-distributor-cli-base/export
sudo chmod -R o+w ${HOME}/content-distributor-cli-base/export
nano ${HOME}/content-distributor-cli-base/export/template/<file_name.json>
To distribute the DVA SD script using an existing template, enter the name of the template and the DVA SD script file, as seen below:
eyeinspect:> distribute from-template <file_name.json> device_visibility_add-ons_25.03.20.zip File distribution was successful for all selected Command Centers. Refer to the log file for more details: <file_name.csv>
minute read