Set up Infoblox for Integration

Table of Contents

Integrate Device Security with Infoblox IPAM

Set up Device Security and XSOAR for Infoblox Integration

Set up Infoblox for Integration

Set up Infoblox for IPAM integration with Device Security through Cortex XSOAR.

Where Can I Use This?	What Do I Need?
Device Security (Managed by Strata Cloud Manager) (Legacy) IoT Security (Standalone portal)	One of the following subscriptions: Device Security subscription for an advanced Device Security product (Enterprise Plus, Industrial OT, or Medical) Device Security X subscription One of the following Cortex XSOAR setups: A free, cohosted, limited-featured Cortex XSOAR instance AND A Cortex XSOAR Engine (on-premises integration) A full-featured Cortex XSOAR server

Where Can I Use This?

What Do I Need?

Device Security (Managed by Strata Cloud Manager)
(Legacy) IoT Security (Standalone portal)

One of the following subscriptions:

Device Security subscription for an advanced Device Security product (Enterprise Plus, Industrial OT, or Medical)
Device Security X subscription

One of the following Cortex XSOAR setups:

A free, cohosted, limited-featured Cortex XSOAR instance
AND
A Cortex XSOAR Engine (on-premises integration)
A full-featured Cortex XSOAR server

When an XSOAR engine connects to an Infoblox Grid Master, it must authenticate itself by presenting a valid username and password belonging to a user account with API access and read-only privileges. It can either use an existing user account or one that you can create specifically for it.

Create a user group with read-only access to the local Grid Master API.
1. Log in to the Infoblox Grid Manager UI on the Grid Master with which you want Cortex XSOAR to connect.
2. Select AdministrationGroups+ (Add) and then, in the General section, enter a name for the group and, optionally, a comment for future reference.
3. Click Next four times to reach step 5 of 8 and then select API as an allowed interface.
4. Save & Close.
5. Select Permissions+ (Add), select Group Permission, choose the name of the user group you just created, choose IPAM Permissions as the Permission Type, and then select Read-Only for the following resources:
  All Network Views
  All IPv4 Networks
  All IPv6 Networks
  All Hosts
  All IPv4 Host Addresses
  All IPv6 Host Addresses
6. Save & Close.
Create a user for the XSOAR engine to use when connecting to the Infoblox API and add it to the group.
1. Select Admins+ (Add) and then enter the following:
  Authentication Type: Local
  Login: Enter a username for the XSOAR engine to use when connecting to the Infoblox API.
  Password and Confirm Password: Enter a password for the XSOAR engine to use.
  Email Address: (Optional) Enter the email address of someone who’s responsible for the integration in case any issues arise in the future.
  Admin Group: Choose the name of the admin group you created to access the API.
2. Save & Close.