Setting up a connection to BMC Discovery

Use this procedure to set up a connection to BMC Discovery. By integrating the capabilities of BMC Discovery (formerly called ADDM) to scan a computing environment, the portal can:

• Identify servers that are not included in scans (sometimes known as blind spots)
• Filter information on Threat Director dashboards by software application. This kind of filtering lets you identify targets that may have vulnerabilities.

Currently, you can only set up a single connection to BMC Discovery. 

After the setup is complete, Discovery data is refreshed at a regular interval. The default interval is 24 hours. If necessary, you can manually update the data obtained from BMC Discovery at your convenience. You can also configure the interval for automatic updates.

This topic contains the following sections:

To connect to BMC Discovery

1. As a portal administrator with the Threat Director permission, click the drop-down menu by your user name (at top right). Then, select Administration. 
2. Click the Discovery tab. 
3. Click Add Discovery Connection to create a new connection, or click Edit Discovery Connection on the row representing the connection you want to modify.
   A window opens where you can define the connection to BMC Discovery.
4. Provide the following information:
   

   Parameter	Description
   Connection String	URL for the Discovery instance, such as http://clm-aus-014680/ or http://10.0.0.10/.
   Port	Port number used to connect to the Discovery instance.
   Username	Name of the Discovery user required to connect to the Discovery instance.
   Password	Password required to connect to the Discovery instance.
   Exclude IPs/Hosts/Range	Comma-separated list of devices for which data should be filtered out. You can exclude individual IP addresses or host names, and you can exclude a range of IP addresses. You can also mix host names and IP addresses. Special characters are not permitted in this list. Example IP address to exclude: 192.168.1.100 Example IP address range to exclude: 192.168.1.100-105 Example of mixed formats: 192.168.1.100-105,192.168.1.120,myserver1234.com

5. Click Test Connection to confirm that the connection to BMC Discovery is defined correctly.
   A message confirms whether the connection is valid. 
6. Click Create Discovery Connection (for a new connection) or Update Discovery Connection if you are modifying an existing connection. 
   After establishing the connection, you should periodically update the data that BladeLogic Portal obtains from BMC Discovery.

To manually update data from BMC Discovery

Data from BMC Discovery is updated on a regular interval. If you want to immediately update data, use this procedure.

You can also configure the interval for automatic updates. See Advanced portal configuration.

1. As a portal administrator with the Threat Director permission, click the drop-down menu by your user name (at top right). Then, select Administration. 
2. Click the Discovery tab. 
3. Click Sync Discovery Data.

To delete the connection to BMC Discovery

When you delete the connection to BMC Discovery, you purge all Discovery data and associations with assets enrolled in Threat Director.

1. As a portal administrator with the Threat Director permission, click the drop-down menu by your user name (at top right). Then, select Administration. 
2. Click the Discovery tab. 
3. Select an existing connection and click Delete Discovery Connection .
   A confirmation message warns that you are about to purge all Discovery data.