Before you can submit TIDE data, you must first create a data profile. For information about how to create a data profile, see Creating Data Profiles.
Submitting TIDE Data
Warning |
---|
Uploaded data must comply with Infoblox's TIDE data requirements; see section TIDE Data Requirements below. |
...
- From the Cloud Services Portal, click Manage > TIDE Data.
- On theData Uploadpage, you can submit data by performing the following:
- Choose a data profile. From the drop-down list of data profiles, select a data profile from which to upload your data.
- Choose a file to upload. Files can either be dragged and dropped onto the area of the UI where it says Drag a file here. Or it can be uploaded by clicking browse for a file to search for and select a file from your local machine for uploading. Files must be correctly formatted and be one of the following supported file types: XML, JSON, and comma/tab/pipe-separated values. Once a file is successfully uploaded, the record of its upload will be displayed in the Upload History section of the page.
- Click Upload to upload the file. Or the form can be reset by clicking Reset.
Note | ||
---|---|---|
| ||
Custom TIDE Bring Your Own Feeds (BYOFs) can be added as a policy rule to a security policy as a threat feed. For details, see Adding Policy Rules and Setting Precedence. The details of a custom TIDE BYOF are shown in the Threat Feed Details panel, where you will also find the address of your custom TIDE RPZ feed. To view your organization's feeds, including all custom RPZ feeds, log in to the Cloud Services Platform, navigate to Policies > On-Prem DNS Firewall Policies, and click Feed Configuration Values (Step 2). |
...
For API guides, see the following pages:
Infoblox API Getting Started Guide - Threat Intelligence Data Exchange
Infoblox Dossier Call Calls Reference
Infoblox TIDE API FAQs Guide
Importing TIDE Data (a walkthrough)
...
To verify that TIDE data has been ingested into the system correctly, conduct a search in Dossier. On the Dossier search page (Research > Dossier), conduct a search for the host www.asdasdasdexample.com, which was included in the uploaded example file. The search should return the uploaded host along with its details, all of which were uploaded with the example file.
For additional information, see the following: