Prerequisites

The following are prerequisites for the Infoblox SOC Insights integration:

Infoblox

1. Infoblox BloxOne with one of the following

   1. BloxOne Threat Defense Business Cloud + BloxOne Threat Defense Ecosystem + SOC Insights

   2. BloxOne Threat Defense Advanced + BloxOne Threat Defense Ecosystem + SOC Insights

2. An OPH (On-Prem Host) with the Data Connector service enabled. For deploying the Data Connector, refer to this guide.

3. A valid Infoblox API key with SOC Insight access. For generating API Key, refer Configuring User API Keys.

ServiceNow

Generate the following

1. servicenowInstance: URL of the ServiceNow instance

2. servicenowUsername: Username for authenticating against the ServiceNow instance

3. servicenowPassword: Password for the ServiceNow user

4. servicenowTableName (Only Incident and Security Incident are supported)