Axonius Documentation
  1. Connecting Adapters
  2. Adapters B

Broadcom Layer7 API Gateway

Broadcom Layer7 API Gateway is an API management platform that provides service routing, policy enforcement, traffic management, and security controls for enterprise APIs.

Use Cases the Adapter Solves

This adapter allows Axonius users to gain comprehensive visibility into their API Gateway infrastructure:

  • Service Visibility: Track and monitor all published API services, including their routing patterns, enabled status, and HTTP methods supported
  • User Access Management: Identify and audit users with access to the API Gateway, including their roles, account status, and authentication details
  • Security and Compliance: Monitor API service configurations, internal vs. external service classifications, and ensure compliance with API security policies

Asset Types Fetched

  • Application Resources, Users

Endpoint to Asset Type Mapping:

Data SourceAPI EndpointAxonius Asset Type
ServicesGET /restman/1.0/servicesApplication Resources
UsersGET /restman/1.0/usersUsers

Data Retrieved through the Adapter

Application Resources

  • Service ID, Name, Version
  • URL Pattern, HTTP Verbs, Enabled

Users

  • Username, First Name, Last Name
  • Mail, Account Expiration

Before You Begin

Required Ports

  • TCP port 443 (HTTPS) or a custom port as configured in your Layer7 Gateway deployment

Authentication Methods

API Key Authentication

The adapter authenticates using HTTP Basic Authentication with a username and password. The credentials are sent in the Authorization header for all API requests to the Layer7 Gateway RESTful Management API.

APIs

Axonius uses the Layer7 Gateway RESTful Management API v1.0. The following endpoints are called:

  • GET /restman/1.0/services - Retrieves all published API services with their configurations, mappings, and properties
  • GET /restman/1.0/users - Retrieves all user accounts configured in the Gateway
📘

Note

The exact API documentation link should be confirmed with your Broadcom administrator or Broadcom support, as the API documentation is not publicly available.

Required Permissions

The following permissions are required:

Administrator or API Management User

The API user must have sufficient privileges to read service and user information via the RESTful Management API. The specific permissions depend on your Layer7 Gateway configuration:

  • Service Read Access - Allows reading published API services, service details, mappings, and properties
  • User Read Access - Allows reading user account information, including login credentials and user properties
📘

Note

The exact permission names should be confirmed with your Broadcom Layer7 administrator or Broadcom support, as the API documentation is not publicly available.

Supported From Version

Supported from Axonius version 9.0

Setting Up Broadcom Layer7 API Gateway to Work with Axonius

Before connecting the adapter in Axonius, ensure you have:

  1. Access to the Layer7 Gateway admin console or API management interface.
  2. A user account with read permissions for services and users via the RESTful Management API.
  3. The base URL of your Layer7 Gateway (including scheme and port).
  4. Valid credentials (username and password) for API authentication.

Consult your Broadcom Layer7 API Gateway documentation or administrator to:

  • Verify the user account has the necessary permissions.
  • Confirm the RESTful Management API is enabled and accessible.
  • Obtain the full base URL for API access (e.g., https://gateway.example.com:443).

Connecting the Adapter in Axonius

  1. Navigate to the Adapters page, search for Broadcom Layer7 API Gateway, and click on the adapter tile.
  2. Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

  1. Host Name or IP Address - Full base URL of the Layer7 Gateway, including scheme and port. Do not add any path suffix. Example: https://gateway.example.com:443
  2. User Name - The username for API authentication.
  3. Password - The password for the API user account.

Optional Parameters

  1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
  2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
  3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
  4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.