BloxOne Threat Defense

BloxOne Threat Defense uses the cloud to detect threats while tightly integrating with companies' on-premises ecosystem.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the BloxOne Threat Defense server that Axonius can communicate with via the Required Ports.

2. Token (required) - A Token associated with a user account that has permissions in order to fetch assets.

3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

4. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

5. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

6. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

Advanced Settings

1. Fetch only active devices - Select this option to fetch only devices with the value of ‘ACTIVE’ in the 'calculated_status' field.

2. Fetch users - Select this option to fetch users.

APIs

Axonius uses the BloxOne EndPoint API

Required Ports

Axonius must be able to communicate with the value supplied in Host Name or IP Address via the following ports:

• TCP port 80/443
  
  

Supported From Version

Supported from Axonius version 6.0