Contents x
    Illusive Networks
    • 24 Mar 2022
    • 1 Minute to read
    • Print
    • Dark
      Light
    • PDF
    Contents

    Illusive Networks

    • Updated on 24 Mar 2022
    • 1 Minute to read
    • Print
    • Dark
      Light
    • PDF
    Article summary

    Illusive Networks deceives cyber attackers by planting false information about a given network's resources.

    NOTE
    Axonius uses the Illusive REST API. For details, see the Illusive REST API Guide.


    The Illusive Networks adapter connection requires the following parameters:

    1. Illusive Domain – The hostname of the Illusive Networks server.
    2. API Key – The API key obtained from the Illusive Management Server. For more details, see the section below.
    3. Verify SSL – Choose whether to verify the SSL certificate of the server.
    4. HTTPS Proxy (optional) – Connect the adapter to a proxy instead of directly connecting it to the domain.

    illusive.png

    Generating API Key for Illusive REST API Request

    To obtain an API key for the Illusive REST API Request:

    1. Navigate to Settings > General , API keys pane.
    2. Enter values in the following fields:
      • Description - Specify description of key.
      • Permissions - Select the following permissions:
        • All Permissions
        • Create Event Read
        • Monitoring Data
      • Restrict Source IP (optional) - Limit the API key to be used only from the specified source IP address.
    3. Click +Add. The API Key is created and added to the list of keys shown.
    4. Copy the header containing the key to a text file and save it securely.
    NOTE
    The key is valid for one year to access the REST API on the specific Management Server only.


    Advanced Settings

    Note:

    Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to ​Advanced Configuration for Adapters

    1. Machine execution status include list (required, default: SUCCESS_RESPONSE, FAILURE_CONNECTION, FAILURE_EXECUTION, SUCCESS_EXECUTION, FAILURE_RESPONSE) - Specify which types of machine execution status to include in the fetch.

    2. Use only SUCCESS_RESPONSE responses for last seen (optional, default: false) - Select whether to include only successful pushes to populate the Last Seen field in Axonius.

    Illusive_advanced


    Note:

    To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.


    Was this article helpful?
    What's Next