Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

BloxOne Threat Defense Cloud uses Swagger to publish and deliver its APIs. For a list of available APIs, first log in to the Cloud Services Portal, and then click the following link:

Below is a list of currently supported calls along with their descriptions.

BloxOne Anycast API 

ANYCAST API 

Info
titleANYCAST API

Detailed information for the ANYCAST API can be viewed on at at
 https://csp.infoblox.com/apidoc/?url=https%3A%2F%2Fcsp.infoblox.com%2Fapidoc%2Fdocs%2FAnycast

...

Info
titleFW API

Detailed information for the BloxOne FW API can be viewed on at at
 https://csp.infoblox.com/apidoc/?url=https://csp.infoblox.com/apidoc/docs/Atcfw

BloxOne Threat Defense Cloud is an extension of the BloxOne Suite that provides visibility into infected and compromised off-premises devices, roaming users, remote sites, and branch offices. You can subscribe to Infoblox BloxOne Threat Defense Cloud and use its functionality to mitigate and control malware as well as provide unprecedented insight into your network security posture and enable timely action. BloxOne  Cloud also offers unified policy management, reporting, and threat analytics across the entire spectrum. Using automated and high-quality threat intelligence feeds and unique behavioral analytics, it automatically stops device communications with C&Cs/botnets and prevents DNS based data exfiltration.

...

Info
titleEP API

Detailed information for the BloxOne Endpoint API can be viewed on at 
https://csp.infoblox.com/apidoc/?url=https://csp.infoblox.com/apidoc/docs/Atcep

Infoblox BloxOne Endpoint is a lightweight mobile agent that redirects DNS traffic from your remote devices to BloxOne Threat Defense Cloud. It allows you to apply applicable security policies to your roaming end users in remote sites and branch offices.

...

Info
titleDFP API

Detailed information for the BloxOne Cloud DFP API can be viewed on at at
https://csp.infoblox.com/apidoc/?url=https://csp.infoblox.com/apidoc/docs/Atcdfp 

...

Info
titleLAD API

Detailed information for the LAD API can be viewed on at at
https://csp.infoblox.com/apidoc/?url=https%3A%2F%2Fcsp.infoblox.com%2Fapidoc%2Fdocs%2FTdlad

...

BloxOne Dossier API (Dossier and TIDE)

...

Dossier API

Info
titleDossier API

Detailed information for the Dossier API can be viewed on at at
https://csp.infoblox.com/apidoc/?url=https%3A%2F%2Fcsp.infoblox.com%2Fapidoc%2Fdocs%2FTIDEDossier

Dossier, sometimes referred to as Intel Lookup, is a threat research tool that provides contextual information from multiple sources simultaneously for a given indicator. The APIs listed below allow a user to search on specific sources and view the results that they return.


TIDE Data Service API (TIDE Data)

TIDEData TIDE Data API

Info
titleTIDE Data Service API

Detailed information for the TIDE Data API can be viewed on at
https://csp.infoblox.com/apidoc/?url=https%3A%2F%2Fcsp.infoblox.com%2Fapidoc%2Fdocs%2FTIDEData

...

Note
titleNote

API key expiration notification: The maximum expiration time for an API key is 56 weeks or 13 months. You will receive notification when your API key is about to expire. A new API key will need to be created to replace the expiring key. To create a new API key, select the expiring API key from the list of API keys and remove it by clicking Disable followed by Delete. To create a new API key to replace an expiring api key, see How Do I Create an API Key


Additional API Resources

Listed below are additional API resources.

...