Prerequisites

The following are prerequisites for the Infoblox SOC Insights integration:

Infoblox

1. Infoblox UDDI with one of the following

   1. Infoblox Threat Defense Business Cloud + Infoblox Threat Defense Ecosystem + SOC Insights

   2. Infoblox Threat Defense Advanced + Infoblox Threat Defense Ecosystem + SOC Insights

2. A NIOS-X virtual server with the Data Connector service enabled. For deploying the Data Connector, refer to this guide.

3. A valid Infoblox API key with SOC Insight access. For generating API Key, refer Configuring User API Keys.

ServiceNow

Generate the following

1. servicenowInstance: URL of the ServiceNow instance

2. servicenowUsername: Username for authenticating against the ServiceNow instance

3. servicenowPassword: Password for the ServiceNow user

4. servicenowTableName (Only Incident and Security Incident are supported)