Focus

IoT Security Integration Guide

Set up Infoblox for Integration

Table of Contents

Set up Infoblox for Integration

Set up Infoblox for IPAM integration with IoT Security through Cortex XSOAR.

When an XSOAR engine connects to an Infoblox Grid Master, it must authenticate itself by presenting a valid username and password belonging to a user account with API access and read-only privileges. It can either use an existing user account or one that you can create specifically for it.

Create a user group with read-only access to the local Grid Master API.
1. Log in to the Infoblox Grid Manager UI on the Grid Master with which you want Cortex XSOAR to connect.
2. Select AdministrationGroups+ (Add) and then, in the General section, enter a name for the group and, optionally, a comment for future reference.
3. Click Next four times to reach step 5 of 8 and then select API as an allowed interface.
4. Save & Close.
5. Select Permissions+ (Add), select Group Permission, choose the name of the user group you just created, choose IPAM Permissions as the Permission Type, and then select Read-Only for the following resources:
  All Network Views
  All IPv4 Networks
  All IPv6 Networks
  All Hosts
  All IPv4 Host Addresses
  All IPv6 Host Addresses
6. Save & Close.
Create a user for the XSOAR engine to use when connecting to the Infoblox API and add it to the group.
1. Select Admins+ (Add) and then enter the following:
  Authentication Type: Local
  Login: Enter a username for the XSOAR engine to use when connecting to the Infoblox API.
  Password and Confirm Password: Enter a password for the XSOAR engine to use.
  Email Address: (Optional) Enter the email address of someone who’s responsible for the integration in case any issues arise in the future.
  Admin Group: Choose the name of the admin group you created to access the API.
2. Save & Close.

Integrate IoT Security with Infoblox IPAM

Set up IoT Security and XSOAR for Infoblox Integration