Skybox Firewall Assurance

Skybox Firewall Assurance provides automation of firewall management tasks across different firewall vendors and complex rulesets.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
  
  

Parameters

1. Skybox Domain (required) - The hostname of your Skybox server.
2. User Name and Password (required) - The credentials for a user account that has the permissions to fetch assets.
3. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Skybox Domain. For more details, see SSL Trust & CA Settings.
   • If enabled, the SSL certificate offered by the value supplied in Skybox Domain will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
   • If disabled, the SSL certificate offered by the value supplied in Skybox Domain will not be verified against the CA database inside of Axonius.
4. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Skybox Domain.
   • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Skybox Domain.
   • If not supplied, Axonius will connect directly to the value supplied in Skybox Domain.
5. For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fetch firewall rules (required, default: True) - Select whether to fetch firewall rules from this adapter.
   • If enabled, all connections for this adapter will fetch firewall rules.
   • If disabled, all connections for this adapter will not fetch firewall rules.
2. Create NAT Rule Entities (required, default: False) - Select to fetch NAT rule information from Skybox.
   • If enabled, all connections for this adapter fetch NAT rule information from Skybox and create new entities as required.
   • If disabled, all connections for this adapter will fetch NAT rule information but will treat them as ACL rules without creating a specific NAT rule object.