Change Log

Updated to use flask 0.12.4
Updated to use new requests library

Assets 3

29 Jan 14:53

zacharyestep

1.3.3

649e25a

Cb InfoBlox Connector 1.3.3

V1.3.3 overview:
The Infoblox connector integrates CbR and Infoblox Secure DNS. DNS events are reported to CbR as a threat intelligence feed and are correlated against network activity on CbR sensors - providing automatic isolation and termination of the offending processes. Prior to version 1.3.3, only on-premise Infoblox Appliances were supported but the 1.3.3 release adds support for integration with Infoblox Active Trust Cloud.

https://csp.infoblox.com

New configuration options relevant to Integration with Infoblox ATC:
use_cloud_api=false
Controls whether to use the cloud rest API for integration or to use syslog from an on-prem infoblox appliance defaults to false.
api_route=https://csp.infoblox.com/api/threats/v1/dns_event
Controls the route used when polling the infoblox API.
rest_poll_interval=5M
Controls the frequency at which the Infoblox Cloud API is polled.

Assets 3