Illumio Adaptive Security Platform (ASP)

Illumio Adaptive Security Platform (ASP) secures computing platforms in cloud, on-prem, or hybrid environments without any dependency on the underlying network.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the Illumio ASP server that Axonius can communicate with via the Required Ports.
2. Authentication User Name (required) - The credentials for a user account that has the Required Permissions to fetch assets. This is a randomized name generated when a user creates an API key.
3. API Secret (required) - An API Key associated with a user account that has the Required Permissions to fetch assets.
4. Organization ID *(required) - Auto generated when the API Secret is created.
5. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.
   • If enabled, the SSL certificate offered by the value supplied in Host Name or IP Address will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
   • If disabled, the SSL certificate offered by the value supplied in Host Name or IP Address will not be verified against the CA database inside of Axonius.
6. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Host Name or IP Address.
   • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Host Name or IP Address.
   • If not supplied, Axonius will connect directly to the value supplied in Host Name or IP Address.
7. HTTPS Proxy User Name (optional, default: empty) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
   • If supplied, Axonius will authenticate with this value when connecting to the value supplied in HTTPS Proxy.
   • If not supplied, Axonius will not perform authentication when connecting to the value supplied in HTTPS Proxy.
8. HTTPS Proxy Password (optional, default: empty) - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
   • If supplied, Axonius will authenticate with this value when connecting to the value supplied in HTTPS Proxy.
   • If not supplied, Axonius will not perform authentication when connecting to the value supplied in HTTPS Proxy.
9. For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.

APIs

Axonius uses the Illumio ASP 20.1.0 REST API V2.

Required Ports

Axonius must be able to communicate with the value supplied in Host Name or IP Address via the following ports:

• TCP port 8443
  
  

Required Permissions

The value supplied in Authentication User Name and API Secret must have at least read-only role.
That user can have also one of the following Roles: Organization owner, Administrator.

To generate Authentication User Name, API Secret and Organization ID:

1. Log into the Illumio PCE web console.

2. Click your name in the top right corner:
   

3. Click My API Keys in the drop-down list.

4. Click +Add in the window that appears:
   

5. Fill in the Name (mandatory) and Description (optional).

6. Click Save.

7. Click Show Credentials:
   

8. Copy and paste this information into a safe place. There is no way to
   retrieve it once you close this screen.

9. Optionally, you may choose to download the credentials into a file by
   clicking on Download Credentials. Keep this file in a very safe place.

Version Matrix

This adapter has only been tested with the versions marked as supported, but may work with other versions. Please contact Axonius Support if you have a version that is not listed and it is not functioning as expected.