The following are prerequisites for the Infoblox SOC Insights integration:
Infoblox
Infoblox BloxOne with one of the following
BloxOne Threat Defense Business Cloud + BloxOne Threat Defense Ecosystem + SOC Insights
BloxOne Threat Defense Advanced + BloxOne Threat Defense Ecosystem + SOC Insights
An OPH (On-Prem Host) with the Data Connector service enabled. For deploying the Data Connector, refer to this guide.
A valid Infoblox API key with SOC Insight access. For generating API Key, refer Configuring User API Keys.
Qualys
Officially tested version: 10.28.0.0-5
Permission to create scans, access scan results, and manage assets.
Generate the following
QualysInstance: URL of the Qualys instance (e.g: qualysguard.qg2.apps.qualys.com)
QualysUsername: Username for authenticating against the Qualys API
QualysPassword: Password for the Qualys user