Prerequisites

The following are prerequisites for the Infoblox SOC Insights integration:

Infoblox

1. Infoblox UDDI with one of the following

   1. Infoblox Threat Defense Business Cloud + Infoblox Threat Defense Ecosystem + SOC Insights

   2. Infoblox Threat Defense Advanced + Infoblox Threat Defense Ecosystem + SOC Insights

2. A NIOS-X virtual server with the Data Connector service enabled. For deploying the Data Connector, refer to this guide.

3. A valid Infoblox API key with SOC Insight access. For generating API Key, refer Configuring User API Keys.

Tenable

1. Permission to create scans, access scan results, and manage assets.

2. Required role on Tenable: Scan Manager or Scan Operator

3. Generate the following

   1. TenableAccessKey: The Tenable API access key.

   2. TenableSecretKey: The Tenable API secret key.

   3. TenableTemplateName: The Tenable scan template name (e.g., Basic Network Scan).

   4. TenableScannerName: The Tenable scanner name (e.g., US Cloud Scanner).