Prerequisites

The following are prerequisites for the Infoblox SOC Insights integration:

Infoblox

1. Infoblox BloxOne with one of the following

   1. BloxOne Threat Defense Business Cloud + BloxOne Threat Defense Ecosystem + SOC Insights

   2. BloxOne Threat Defense Advanced + BloxOne Threat Defense Ecosystem + SOC Insights

2. An OPH (On-Prem Host) with the Data Connector service enabled. For deploying the Data Connector, refer to this guide.

3. Generate the CSP API Token.

   1. Log in to your Infoblox BloxOne portal.

   2. Navigate to **API Keys** under your user profile.

   3. Create a new API key and copy the CSP token.

Qualys

1. Officially tested version: 10.28.0.0-5

2. Permission to create scans, access scan results, and manage assets.

2. Generate the following

   1. QualysInstance: URL of the Qualys instance (e.g: qualysguard.qg2.apps.qualys.com)

   2. QualysUsername: Username for authenticating against the Qualys API

   3. QualysPassword: Password for the Qualys user