Industrial Defender ASM (Automation Systems Manager)

Industrial Defender ASM (Automation Systems Manager) is an OT cyber risk management platform providing asset inventory, vulnerability management, configuration monitoring, and compliance reporting for industrial control system environments.

Use Cases the Adapter Solves

• OT Asset Visibility: Gain comprehensive visibility into industrial control system (ICS) and operational technology (OT) devices across your environment, including PLCs, HMIs, SCADA systems, and other critical infrastructure assets.
• Vulnerability Management for Critical Infrastructure: Identify and prioritize vulnerabilities affecting OT assets with detailed CVE information, CVSS scores, EPSS scores, and available mitigations to protect critical industrial systems.

Asset Types Fetched

Devices, Aggregated Security Findings, SaaS Applications

Data Retrieved through the Adapter

Devices - fields such as Asset Name, Asset UUID, Asset Type, Operating System

Aggregated Security Findings - fields such as CVE ID, CVE Description, CVE Severity, CVSS Score,

Before You Begin

Required Ports

• TCP port 443 (HTTPS)

Authentication Methods

OAuth 2.0 Client Credentials

APIs

Axonius uses the Industrial Defender ASM REST API. The following endpoints are called:

• POST /AsmDataService/connect/token - OAuth 2.0 token endpoint for authentication
• GET /api/assets/details - Retrieves device asset inventory with pagination support
• GET /api/vulnerability/assets-vulnerabilities - Retrieves vulnerability data associated with assets

Required Permissions

The exact permission names should be confirmed with your Industrial Defender administrator or Industrial Defender support, as the API documentation is not publicly available.

Connecting the Adapter in Axonius

Navigate to the Adapters page, search for Industrial Defender ASM, and click on the adapter tile.

Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

1. Host Name or IP Address - Base domain for the Industrial Defender ASM API server. Should contain a prefix of http:// or https://. Do not add any specific endpoints after the domain. Example: https://myhost.example.com
2. Client ID - The OAuth 2.0 Client ID generated in Industrial Defender ASM for API access.
3. Client Secret - The OAuth 2.0 Client Secret corresponding to the Client ID.

Optional Parameters

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.