- 03 Dec 2023
- 3 Minutes to read
- Print
- DarkLight
- PDF
Orca Cloud Visibility Platform
- Updated on 03 Dec 2023
- 3 Minutes to read
- Print
- DarkLight
- PDF
Orca Cloud Visibility Platform delivers visibility to cloud security posture, including prioritized alerts on vulnerabilities, compromises, misconfigurations, and more.
Types of Assets Fetched
This adapter fetches the following types of assets:
- Devices
Parameters
- Orca Domain (required) - The hostname of the Orca Cloud Visibility Platform server.
- API Key (optional) - The API Key generated in the Orca Cloud Visibility Platform.
The API Key was deprecated in Orca. An API Key is supported only if it was previously generated.
- API Token (optional) - The API Key generated in the Orca Cloud Visibility Platform for Axonius usage.
- You must supply either the API Key or API Token.
- It is highly recommended to use the API Token.
- Filter - A filter that allows fetching only some devices based on an Orca query. For example, device types or devices that come from specific accounts.
- Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
- HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
- To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.
Advanced Settings
Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to Advanced Configuration for Adapters.
Asset type exclude list (optional) - Specify a comma-separated list of asset types.
- If supplied, all connections for this adapter won't fetch devices whose asset type is any of the comma-separated list of asset types that have been defined in this field.
- If not supplied, all connections for this adapter will fetch devices with any asset type.
Asset type include list (optional) - Specify a comma-separated list of asset types.
- If supplied, all connections for this adapter will only fetch devices whose asset type is any of the comma-separated list of asset types defined in this field.
- If not supplied, all connections for this adapter will fetch devices with any asset type.
Fetch only selected assets categories - From the drop-down select one or more categories to fetch. Only these categories will be fetched. If none are selected, then all categories are fetched.
Fetch only selected asset sub-categories - From the drop-down select one or more sub-categories to fetch. Only these sub-categories will be fetched. If none are selected, then all sub-categories are fetched.
Fetch alerts starting from the last X hours - Enter the number of hours back from which to begin to fetch alerts. Alerts will be fetched from that number of hours back, or greater.
Fetch logs starting from the last x hours - Enter the number of hours back from which to begin to fetch logs. Logs will be fetched from that number of hours back, or greater.
Fetch Container Tags (required, default: true) - Select whether to fetch container tags to the GUI.
Fetch extra endpoints. If nothing is selected, only assets are fetched (required, default: Containers, Logs, Alerts, Compliance, Inventory) - Filter endpoint values to fetch by the specified endpoints. If no values are specified, only assets are fetched.
Fetch inventory only for these types of assets. If empty, inventory will not be fetched (optional, default: vm, ec2spot) - Filter asset results to fetch by the specified inventory values. If empty, inventory won't be fetched.
Fetch assets with current states. If nothing is selected, all asset states are fetched (optional) - Enter which current states to fetch assets. If nothing is selected, all asset states are fetched.
Ignore devices that have not been seen by the source in the last X days (optional, default: 10) - Select whether to ignore devices not seen by the source in the last specified number of days.
Use Asset Name as Hostname and Hostname as Asset Name (15 chars) for Azure Select this option to switch between the asset name value and the hostname value if the hostname has 15 characters and the cloud provider is Azure.
List of asset tags to fetch - Enter a space separated list of the asset tags to fetch in the following format:
< TAG NAME> = <TAG VALUE>
. Both TAG_NAME and TAG_VALUE are case sensitive.Use CVSS Max Score as Risk Totals source - Select this option so that the source for the vulnerability risk level will be from CVSS Max Score
For details on general advanced settings under the Adapter Configuration tab, see Adapter Advanced Settings.