- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
automate RPZ download to non-infoblox server
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-27-2017 08:50 AM
I'm trying to download our RPZ feeds to a seperate splunk server for analysis. Is it possible to export the records via API or some other automated method?
Thanks.
Solved! Go to Solution.
Re: automate RPZ download to non-infoblox server
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
06-27-2017 01:00 PM
You can use dig the following way:
dig axfr <rpz-name> @<server-ip> -y 'name:keydata'
where -y is the TSIG Key Name and Key Data.
Re: automate RPZ download to non-infoblox server
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-18-2017 08:37 AM
To have a TSIG key I would need to have the server I am querying from added as an external secondary name server, is that right (since it is not already a dns server)?
Thank you!
Re: automate RPZ download to non-infoblox server
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-18-2017 10:06 AM
I'm not sure I understand you right.
The original question was about downloading the RPZ feed to a external server. This is what you can do with the DIG command in a shell-script and have it scheduled with cron.
> To have a TSIG key I would need to have the server I am querying from added as an external secondary name
> server, is that right (since it is not already a dns server)?
You would know the TSIG key from Infoblox (as you would have purchased the RPZ feeds as a license).
Now if you want to use RPZ, you would add it as an External Primary Server and use Infoblox Members as Grid Secondaries
Re: automate RPZ download to non-infoblox server
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-19-2017 12:45 PM
Thanks I understand now, I forgot there was a key listed in the CSP portal. Working as advertised, thanks for your help!