-
BloxOne Quickstart Videos
Please click here to access the BloxOne Quickstart Videos. These videos include the following titles: 1.1 Login and User Creation on BloxOne Platform 1.2 Join Tokens on BloxOne Platform 1.3 VMware On-Prem Hosting 2.1 Global DNS Settings for BloxOne DDI 2.2 DNS Config Profile for BloxOne DDI 2.3 Cloud Primary Zone for…
-
NetMRI saving data to files using ARCHIVE
The ARCHIVE directive is used to save the output of a script command to a file which can later be retrieved, either for archiving or for external processing. To do this, just put ARCHIVE: in front of any line from your script’s Action-Commands or Trigger-Commands section: Action-Commands: ARCHIVE: sh ver The default…
-
Configure Splunk and have CDC to send CSP DNS data to Splunk
This guide describes on how to configure Splunk and have CDC send DNS information from the CSP portal to Cloud Data Connector. Note: This guide is intended to test CDC in a local lab environment for testing purposes. The free Splunk version also has a limit on how much data it can index. You may want to get a license from…
-
How to setup an external Splunk server on Docker
In this section, we will talk about setting up the Splunk Free edition on Docker. Note: This guide is intended to use in a local lab environment for testing purposes. The free Splunk version also has a limit on how much data it can index. You may want to get a license from Splunk if you plan to index more data. If you are…
-
How to install BloxOne CDC on Docker [Bare Metal Deployment]
Introduction: -Why use a Cloud Data Connector? -The Cloud Data Connector (CDC) is a piece of software that can be deployed on Docker or deployed as an OVA in an ESXI server. It can be run either on-prem or in any cloud providers depending on your requirement. - You could visualize CDC more like a middleman who receive some…
-
How to send data from BloxOne Cloud (CSP) to Splunk using Cloud Data Connector (CDC)
This is a guide on how to setup a splunk server and CDC(Cloud Data Connector) and have CSP send logs to splunk. This tutorial will discuss the following: Section 1: How to create an On-Prem Host and enable application CDC from the CSP portal. This section will also describe how to deploy a BloxOne On-Host on Docker and…
-
How to deploy Infoblox DFP on Docker
What is DFP? Below is a quote from CSP Portal Help: Infoblox ActiveTrust Cloud is a SaaS offering designed to provide protection to devices on and off-premises, including roaming, remote, and branch offices. It provides visibility into infected and compromised devices, prevents DNS-based data exfiltration, and…
-
Data Connector 3.0 SIEM support
In late August 2018, Infoblox released Data Connector 3.0. Infoblox Data Connector is a purpose-built, highly efficient, virtual appliance that collects DDI (DNS, DHCP, and IPAM) data from Infoblox Grid. Infoblox's Data Connector 3.0 added support for Microfocus ArcSight, McAfee ESM, and IBM QRadar. Please see the…
-
NetMRI - Python Script to Get Data from a List
Here is an example of how to use Python in NetMRI to get data from "List" within NetMRI # BEGIN-SCRIPT-BLOCK # # Script-Filter: # true # # END-SCRIPT-BLOCK from infoblox_netmri.easy import NetMRIEasy # This values will be provided by NetMRI before execution defaults = { "api_url": api_url, "http_username": http_username,…
-
5 Python Scripts to get you started in NetMRI
If you are like me at some point you got psyched that Python was coming to NetMRI. This article will get you started with Python in NetMRI from the basics “run this command” on my devices to advance “grab some data via an API call” and trigger an action within NetMRI. Before you get started…Need to Know about Python…