Axonius Documentation
  1. Connecting Adapters
  2. Adapters O-R

runZero

runZero (formerly Rumble Network Discovery) is a cloud-based network discovery platform that identifies and monitors network-connected IT assets.

Asset Types Fetched

This adapter fetches the following types of assets:

  • Devices, Software, Aggregated Security Findings, SaaS Applications, Domains & URLs, Certificates

APIs

Axonius uses the runZero API to retrieve asset data. The following endpoints are called:

  • GET /api/v1.0/export/org/assets.json - Fetches devices. This endpoint is also used to test the connection.
  • GET /api/v1.0/export/org/vulnerabilities.json - Fetches vulnerabilities, which are added to devices as Aggregated Security Findings. Enabled by Fetch Vulnerabilities.
  • GET /api/v1.0/export/org/findings.json - Fetches finding details that enrich the vulnerabilities. Enabled by Fetch Vulnerabilities.
  • GET /api/v1.0/export/org/software.json - Fetches installed software, which is added to devices as Software. Enabled by Fetch Installed Software.
  • GET /api/v1.0/export/org/certificates.json - Fetches certificates. Enabled by Fetch Certificates.
  • GET /api/v1.0/export/org/sites.json - Fetches sites as Domains & URLs. Enabled by Fetch URLs.

Parameters

  1. Rumble Network Discovery Domain (required, default: https://console.rumble.run) - The hostname of the runZero server. Use the default value.

  2. API Key (required) - An API Key associated with the organization assets to be fetched. For details, see Generate API Key.

  3. Download Token (optional) - An optional download token.

    • If supplied, Axonius will deploy the runZero agent on the host it is running on.
    • If not supplied, Axonius will only fetch data from the source and will not deploy the runZero agent on the host it is running on.

  4. Verify SSL - Select to verify the SSL certificate offered by the host supplied in runZero Domain. For more details, see SSL Trust & CA Settings.

  5. HTTPS Proxy (optional) - A proxy to use when connecting to runZero Domain.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

runzeroconnection

Advanced Settings

Note

Advanced settings can either apply to all connections for this adapter, or to a specific connection. Refer to ​Advanced Configuration for Adapters.

  1. Do not fetch devices with no MAC address and no hostname - Select whether to not fetch devices with no MAC address and no hostname.

  2. Do not fetch devices that are not Alive - Select to not fetch devices that aren't alive.

  3. Add arp MAC to aggregated MACs - Select whether to add the ARP MAC from services to the aggregated MACs.

  4. Skip raw data (default: false) - Select this option to not save the raw data, by default this is set to false and raw data is saved.

  5. Fetch Vulnerabilities / Installed Software / Certificates / URLs - Select to fetch any of these asset types (Vulnerabilities are fetched as Aggregated Security Findings, and installed software is fetched as Software).

  6. Use Switch Name as Hostname (if hostname is empty) - Select this option to use the switch name as the device hostname when the hostname is empty.

Note

To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.

Generate API Key

  1. Open runZero Console.
  2. Click the organization for the API token you want.
  3. Generate a new Export Token and paste this value in the API Key parameter.

Updated 17 days ago

Did this page help you?