Illusive Networks
  • 24 Mar 2022
  • 1 Minute to read
  • Dark
    Light
  • PDF

Illusive Networks

  • Dark
    Light
  • PDF

Illusive Networks deceives cyber attackers by planting false information about a given network's resources.

NOTE
Axonius uses the Illusive REST API. For details, see the Illusive REST API Guide.


The Illusive Networks adapter connection requires the following parameters:

  1. Illusive Domain – The hostname of the Illusive Networks server.
  2. API Key – The API key obtained from the Illusive Management Server. For more details, see the section below.
  3. Verify SSL – Choose whether to verify the SSL certificate of the server.
  4. HTTPS Proxy (optional) – Connect the adapter to a proxy instead of directly connecting it to the domain.

illusive.png

Generating API Key for Illusive REST API Request

To obtain an API key for the Illusive REST API Request:

  1. Navigate to Settings > General , API keys pane.
  2. Enter values in the following fields:
    • Description - Specify description of key.
    • Permissions - Select the following permissions:
      • All Permissions
      • Create Event Read
      • Monitoring Data
    • Restrict Source IP (optional) - Limit the API key to be used only from the specified source IP address.
  3. Click +Add. The API Key is created and added to the list of keys shown.
  4. Copy the header containing the key to a text file and save it securely.
NOTE
The key is valid for one year to access the REST API on the specific Management Server only.


Advanced Settings

Note:

Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to ​Advanced Configuration for Adapters

  1. Machine execution status include list (required, default: SUCCESS_RESPONSE, FAILURE_CONNECTION, FAILURE_EXECUTION, SUCCESS_EXECUTION, FAILURE_RESPONSE) - Specify which types of machine execution status to include in the fetch.

  2. Use only SUCCESS_RESPONSE responses for last seen (optional, default: false) - Select whether to include only successful pushes to populate the Last Seen field in Axonius.

Illusive_advanced


Note:

To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.



First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.