Prerequisites

The following are prerequisites for the Infoblox SOC Insights integration:

Infoblox

1. Infoblox BloxOne with one of the following

   1. BloxOne Threat Defense Business Cloud + BloxOne Threat Defense Ecosystem + SOC Insights

   2. BloxOne Threat Defense Advanced + BloxOne Threat Defense Ecosystem + SOC Insights

2. An OPH (On-Prem Host) with the Data Connector service enabled. For deploying the Data Connector, refer to this guide.

3. A valid Infoblox API key with SOC Insight access. For generating API Key, refer Configuring User API Keys.

Qualys

1. Officially tested version: 10.28.0.0-5

2. Permission to create scans, access scan results, and manage assets.

2. Generate the following

   1. qualysInstance: URL of the Qualys instance (e.g: qualysguard.qg2.apps.qualys.com)

   2. qualysUsername: Username for authenticating against the Qualys API

   3. qualysPassword: Password for the Qualys user