Infoblox DDI
  • 3 Minutes To Read
  • Print
  • Share
  • Dark
    Light

Infoblox DDI

  • Print
  • Share
  • Dark
    Light

Infoblox DDI consolidates DNS, DHCP, IP address management, and other core network services into a single platform, managed from a common console.

Types of Assets Fetched

This adapter fetches the following types of assets:

  • Devices

Parameters

  1. Infoblox Domain (required) - The hostname or IP address of the Infoblox DDI server.
  2. Username and Password (required) - The credentials for a user account that has the Required Permissions to fetch assets.
  3. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Infoblox Domain. For more details, see SSL Trust & CA Settings.
    • If enabled, the SSL certificate offered by the value supplied in Infoblox Domain will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
    • If disabled, the SSL certificate offered by the value supplied in Infoblox Domain will not be verified against the CA database inside of Axonius.
  4. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Infoblox Domain.
    • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Infoblox Domain.
    • If not supplied, Axonius will connect directly to the value supplied in Infoblox Domain.
  5. For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.
    image.png

Advanced Settings

  1. CIDR exclude list (optional, default: empty) - Specify a comma-separated list CIDR blocks (for example: 192.168.20.0/24,192.168.30.0/24).
    • If supplied, all connections for this adapter will not collect devices with an IP address that is in the range of any of the comma-separated list of CIDR blocks that have been defined in this field.
    • If not supplied, all connections for this adapter will collect any device from Infoblox.
  2. Filter results by the Discovered Data field (Required, default: False)
    • If enabled, all connections for this adapter will only collect devices from Infoblox if their Discovered Data field has data.
    • If disabled, all connections for this adapter will collect any device from Infoblox.
  3. Results per page (Required, default: 1000) - Set the number of results per page received for a given query to the Infoblox wAPI, to gain better control on the performance of all connections for this adapter.
  4. Time in seconds to sleep between each request (optional, default: empty) - Specify sleeping time in seconds between each API request Axonius sends to Infoblox.
    • If supplied, all connections for this adapter will wait for the specified number of seconds between each API request sent to Infoblox.
    • If not supplied, all connections for this adapter will not wait between each API request sent to Infoblox.
  5. Fetch lease information (Required, default: True) - Select whether to fetch information from the 'lease' API endpoint or from the 'ipv4address’ API endpoint. While the 'ipv4address’ API endpoint is considered faster by Infoblox, the 'lease' API endpoint considered slower, confirmed by Infoblox, but fetches much more information like 'Fingerprint' and discovery information.
    • If enabled, all connections for this adapter will fetch devices from Infoblox using the 'lease' API endpoint.
    • If disabled, all connections for this adapter will fetch devices from Infoblox using the 'ipv4address' API endpoint.

image.png

NOTE

For details on general advanced settings under the Adapter Configuration tab, see Adapter Advanced Settings.

APIs

Axonius uses Infoblox wAPI versions 2.2 and 2.5.

Required Permissions

The value supplied in Username must have read access to devices.
To create such a user, go to the Infoblox panel.

  1. Login to Infoblox as an administrator, click Administration -> Roles:
    image.png
  2. Click the plus sign on the right part of the page to add a new role.
    image.png
  3. Give this role an indicative name, and press next. In the Extensible Attributes page, click next again, then click Save & Add Permissions.
    image.png
  4. In the permissions page, click the plus sign to add permissions to the role we just created.
    Axonius needs read-only permissions to the following things, select them and click Save & Close.
    image.png
  5. Navigate to "Groups" and click the plus sign to create a new group.
    image.png
  6. Give this group an indicative name, and click Next.
    image.png
  7. Select the API checkbox to allow this group API access, and click the plus sign to add a role to it.
    image.png
  8. Navigate to Custom Roles and click the role we just created.
    image.png
  9. You should now see the role in the roles list. Make sure "API" is checked and click Save & Close.
    image.png
  10. Click the group we just created and then click the plus sign to create a new user. Fill in the details and click Save & Close.
    image.png
Was This Article Helpful?