Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Ensure that you have enabled the following on the BloxOne Threat Defense Cloud Client:

    • Credentials to access your BloxOne Threat Defense Cloud Services Portal tenant. An email address and a password . However, if you are using multi-factor authentication, enable the service account email ID and the of a valid user can be used. The best practice is to use a dedicated service account on the Cloud Services Portal as the email address and its associated API key as the password. Service accounts on the Cloud Services Portal have an auto-generated email address that you can use (for example, user.service.[UUID]@infoblox.invalid). You must use a service account if the interactive user login IDs are restricted with multi-factor authentication.

    • A Grid member that is online.

  • Ensure that at least one outbound notification rule for DNS RPZ event type is active for outbound settings.

  • Only superusers can update the BloxOne Threat Defense Cloud Client settings.

  • If the timestamp for the data collected by the BloxOne Threat Defense Cloud Client is ahead of the current time in NIOS, then such events are logged in the syslog. In such an instance, the client does not request any data until the current time reaches the timestamp of the data that is collected and it logs a message in the Infoblox.log based on the time interval that you have set.

...

  1. Grid: From the Grid tab, select the Grid Manager tab, and then select Grid Properties -> Edit from the Toolbar.
    Standalone appliance: From the System tab, select the System Manager tab, and then select System Properties -> Edit from the Toolbar.

  2. In the Grid Properties Editor or the System Properties Editor, click Toggle Advanced Mode to switch to the advanced mode.
    Note that if the editor is already in the advanced mode, then you will see the Toggle Basic Mode button.

  3. On the BloxOne Threat Defense Cloud Integration tab -> Basic tab, specify the following in the BloxOne Threat Defense Cloud Integration section:

    • URL: Displays the REST API URL of the Infoblox Cloud Services Portal.

    • Credentials:

      • Email: Enter the email address that is registered in the Cloud Services Portal. This email address is used for authorization by The best practice is to use a dedicated service account on the Cloud Services Portal . If you are using multi-factor authentication, enable the service account email IDas the email address (for example, user.service.[UUID]@infoblox.invalid).

      • Password: Enter the password that is registered in the Cloud Services Portal. This password is used for authorization by the Cloud Services Portalassociated with the email address you specified in the Email field. If you are using multi-factor authentication, use a service account on Cloud Services Portal, enter the API key as the associated with the service account rather than a password.

      • Test Connection: Click this to test the connectivity between NIOS and the Cloud Services Portal.

  4. Save the configuration.

...