HarfangLab

HarfangLab is an EDR/EPP platform that provides endpoint behavioral analysis, threat detection, and agent/sensor management across servers and workstations.

Use Cases the Adapter Solves

  • Detect unmanaged endpoints: Identify devices that aren't protected by the HarfangLab agent across your network.
  • Verify EDR coverage: Ensure all critical servers and workstations have active HarfangLab agents installed and reporting.

Asset Types Fetched

  • Devices

Data Retrieved through the Adapter

Devices - Fields such as Hostname, Device Name, Operating System, Agent Version

Before You Begin

Required Ports

  • TCP port 443 (HTTPS)

Authentication Methods

Username and Password Authentication

APIs

Axonius uses the HarfangLab API. The following endpoints are called:

  • POST /api/auth/login - Authenticates and retrieves authentication token
  • GET /api/data/endpoint/Agent - Fetches device/agent information

Required Permissions

The API user must have permissions to:

  • Access the HarfangLab API
  • Read endpoint/agent data

Note: The exact permission names should be confirmed with your HarfangLab administrator or HarfangLab support, as the API documentation is not publicly available.

Supported From Version

Supported from Axonius version 9.0.4

Connecting the Adapter in Axonius

Navigate to the Adapters page, search for HarfangLab, and click on the adapter tile.

Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

  1. Host Name or IP Address - Base domain for the API, should contain a prefix of http:// or https://. Do not add any specific endpoints after the domain. Example: https://harfanglab.example.com
  2. User Name - The username for authentication. Example: api_user
  3. Password - The password for authentication.
HarfangLAb

Optional Parameters

  1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
  2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
  3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
  4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.


Did this page help you?