Infoblox

Infoblox NIOS enables you to receive metadata about IPs in your network and manages the DNS Firewall by configuring RPZs. It defines RPZ rules to block DNS resolution for malicious or unauthorized hostnames, or redirect clients to a walled garden by substituting responses. This integration was integrated and tested with version V2 of Infoblox

Configure Infoblox NIOS on XSOAR

Required Permissions

The API supports only HTTP Basic Authentication. Every user must have permissions that grants them access to the API.

1. Navigate to Settings > Integrations  > Servers & Services.
2. Search for Infoblox NIOS.
3. Click Add instance to create and configure a new integration instance.
   • Name: a textual name for the integration instance.
   • Server URL (e.g. https://example.net)
   • User Name
   • Password
   • Trust any certificate (not secure)
   • Use system proxy settings
4. Click Test to validate the new instance.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

1. Get IP info: infoblox-get-ip.
2. Searches IP related objects by a given IP: infoblox-search-related-objects-by-ip.
3. Lists all response policy rules that belong to the given response policy zone: infoblox-list-response-policy-zone-rules.
4. List all response policy zones: infoblox-list-response-policy-zones.
5. Creates a response policy zone: infoblox-create-response-policy-zone.
6. Creates a response policy rule: infoblox-create-rpz-rule.
7. Creates a substitute record rule: infoblox-create-a-substitute-record-rule.
8. Creates a substitute rule for an AAAA record: infoblox-create-aaaa-substitute-record-rule.
9. Creates a substitute rule for the MX record: infoblox-create-mx-substitute-record-rule.
10. Creates a substitute rule for a NAPTR record: infoblox-create-naptr-substitute-record-rule.
11. Creates a substitute rule of the PTR record: infoblox-create-ptr-substitute-record-rule.
12. Creates a substitute rule of a SRV record: infoblox-create-srv-substitute-record-rule.
13. Create a substitute rule for a txt record: infoblox-create-txt-substitute-record-rule.
14. Create a substitute rule for an IPv4 rule: infoblox-create-ipv4-substitute-record-rule.
15. Creates a substitute of the IPv6 record rule: infoblox-create-ipv6-substitute-record-rule.
16. Disables a rule by its reference ID (reference ID can be extracted by running the search rules command): infoblox-enable-rule.
17. Disable a rule by its reference ID (reference ID can be extracted by running the ‘infoblox-search-rule’ command): infoblox-disable-rule.
18. Returns the object fields names which can be used in the search rules command: infoblox-get-object-fields.
19. Searches a specific rule by its name: infoblox-search-rule.
20. Deletes a rule: infoblox-delete-rpz-rule.
21. Deletes a given response policy zone: infoblox-delete-response-policy-zone.
22. List host information: infoblox-list-host-info.
23. List network information: infoblox-list-network-info.
24. Update a response policy zone rule: infoblox-update-rpz-rule.
25. Create a host record: infoblox-create-host-record.
26. Look up a DHCP lease: infoblox-dhcp-lease-lookup.

infoblox-get-ip

Get IP information.

Base Command

infoblox-get-ip

Input

Context Output

Command Example

!infoblox-get-ip ip="172.0.0.0"

Context Example

{
    "Infoblox.IP": [
        "Extattrs": {},
        "IpAddress": "172.0.0.0",
        "IsConflict": false,
        "MacAddress": "",
        "Names": [],
        "Network": "172.0.0.0/24",
        "NetworkView": "default",
        "Objects": [],
        "ReferenceID": "ipv4address/Li5pcHY0X2FkZHJlc3MkMTcyLjAuMC4wLzA:172.0.0.0",
        "Status": "USED",
        "Types": [
            "NETWORK"
        ],
        "Usage": []
    ]
}

Human Readable Output

Infoblox Integration

infoblox-search-related-objects-by-ip

Searches IP related objects by a given IP.

Base Command

infoblox-search-related-objects-by-ip

Input

Context Output

Command Example

!infoblox-search-related-objects-by-ip ip="172.0.0.0"

Context Example

{
    "Infoblox.IPRelatedObjects": [
        {
            "Network": "172.0.0.0/24",
            "NetworkView": "default",
            "ReferenceID": "network/ZG5zLm5ldHdvcmskMTcyLjAuMC4wLzI0LzA:172.0.0.0/24/default"
        }
    ]
}

Human Readable Output

Infoblox Integration - IP: 172.0.0.0 search results

infoblox-list-response-policy-zone-rules

Lists all response policy rules that belong to the given response policy zone.

Base Command

infoblox-list-response-policy-zone-rules

Input

Context Output

Command Example

!infoblox-list-response-policy-zone-rules response_policy_zone_name=infoblow.com page_size="8"

Context Example

{
    "Infoblox.ResponsePolicyZoneRulesList": [
        {
            "Comment": "",
            "Disable": false,
            "Name": "4.4.4.5",
            "Type": "record:rpz:cname",
            "View": "default",
            "Zone": "infoblow.com"
        },
        {
            "Comment": "",
            "Disable": false,
            "Name": "1.1.1.1",
            "Type": "record:rpz:cname:ipaddressdn",
            "View": "default",
            "Zone": "infoblow.com"
        },
        {
            "Comment": "",
            "Disable": false,
            "Name": "2.2.2.2",
            "Type": "record:rpz:a:ipaddress",
            "View": "default",
            "Zone": "infoblow.com"
        },
        {
            "Comment": "",
            "Disable": false,
            "Name": "5.5.5.111",
            "Type": "record:rpz:cname:ipaddress",
            "View": "default",
            "Zone": "infoblow.com"
        },
        {
            "Comment": "",
            "Disable": false,
            "Name": "moshe",
            "Type": "record:rpz:cname",
            "View": "default",
            "Zone": "infoblow.com"
        },
        {
            "Comment": "",
            "Disable": false,
            "Name": "moshe2",
            "Type": "record:rpz:cname",
            "View": "default",
            "Zone": "infoblow.com"
        },
        {
            "Comment": "",
            "Disable": false,
            "Name": "moshe3",
            "Type": "record:rpz:cname",
            "View": "default",
            "Zone": "infoblow.com"
        }
    ],
    "Infoblox.RulesNextPage": {
        "NextPageID": "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-1cbe432a6c562d903bd34ea2dd75f482330d98e249c3359e4e258b9"
    }
}

Human Readable Output

Infoblox Integration - Zone: Infoblow.com rule list

infoblox-list-response-policy-zones

List all response policy zones.

Base Command

infoblox-list-response-policy-zones

Input

Context Output

Command Example

!infoblox-list-response-policy-zones

Context Example

{
    "Infoblox.ResponsePolicyZones": [
        {
            "Disable": false,
            "FQDN": "local.rpz",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LnJwei5sb2NhbA:local.rpz/default",
            "RpzPolicy": "GIVEN",
            "RpzSeverity": "MAJOR",
            "RpzType": "LOCAL",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "infoblow.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdw:infoblow.com/default",
            "RpzPolicy": "SUBSTITUTE",
            "RpzSeverity": "WARNING",
            "RpzType": "LOCAL",
            "SubstituteName": "infoblox.com",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS5nb29nbGU:google.com/default",
            "RpzPolicy": "DISABLED",
            "RpzSeverity": "INFORMATIONAL",
            "RpzType": "LOCAL",
            "SubstituteName": "sdfdsf",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google2.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS5nb29nbGUy:google2.com/default",
            "RpzPolicy": "DISABLED",
            "RpzSeverity": "INFORMATIONAL",
            "RpzType": "LOCAL",
            "SubstituteName": "sdfdsf",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google3.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS5nb29nbGUz:google3.com/default",
            "RpzPolicy": "DISABLED",
            "RpzSeverity": "INFORMATIONAL",
            "RpzType": "LOCAL",
            "SubstituteName": "sdfdsf",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google4.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS5nb29nbGU0:google4.com/default",
            "RpzPolicy": "DISABLED",
            "RpzSeverity": "INFORMATIONAL",
            "RpzType": "LOCAL",
            "SubstituteName": "sdfdsf",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google33.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS5nb29nbGUzMw:google33.com/default",
            "RpzPolicy": "GIVEN",
            "RpzSeverity": "WARNING",
            "RpzType": "LOCAL",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google.test.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50ZXN0Lmdvb2dsZQ:google.test.com/default",
            "RpzPolicy": "NXDOMAIN",
            "RpzSeverity": "INFORMATIONAL",
            "RpzType": "LOCAL",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google.test2.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50ZXN0Mi5nb29nbGU:google.test2.com/default",
            "RpzPolicy": "NXDOMAIN",
            "RpzSeverity": "INFORMATIONAL",
            "RpzType": "LOCAL",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "google.test4.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50ZXN0NC5nb29nbGU:google.test4.com/default",
            "RpzPolicy": "NXDOMAIN",
            "RpzSeverity": "INFORMATIONAL",
            "RpzType": "LOCAL",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "test.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50ZXN0:test.com/default",
            "RpzPolicy": "GIVEN",
            "RpzSeverity": "WARNING",
            "RpzType": "LOCAL",
            "View": "default"
        },
        {
            "Disable": false,
            "FQDN": "test123.com",
            "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50ZXN0MTIz:test123.com/default",
            "RpzPolicy": "GIVEN",
            "RpzSeverity": "WARNING",
            "RpzType": "LOCAL",
            "View": "default"
        }
    ]
}

Human Readable Output

Infoblox Integration - Response Policy Zones list (fetched 12 results)

5. infoblox-create-response-policy-zone

Creates a response policy zone.

Base Command

infoblox-create-response-policy-zone

Input

Context Output

Command Example

!infoblox-create-response-policy-zone FQDN="infonlox.nightly.tpb.com" rpz_policy="DISABLED" rpz_severity="INFORMATIONAL" rpz_type="FEED"

Context Example

{
    "Infoblox.ResponsePolicyZones": {
        "Disable": false,
        "FQDN": "infonlox.nightly.tpb.com",
        "ReferenceID": "zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50cGIubmlnaHRseS5pbmZvbmxveA:infonlox.nightly.tpb.com/default",
        "RpzPolicy": "DISABLED",
        "RpzSeverity": "INFORMATIONAL",
        "RpzType": "LOCAL",
        "View": "default"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone: infonlox.nightly.tpb.com has been created

infoblox-create-rpz-rule

Creates a response policy rule.

Base Command

infoblox-create-rpz-rule

Input

Context Output

Command Example

!infoblox-create-rpz-rule rule_type="Passthru" object_type="Domain Name" name="nightly-test-rpz-sub.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-rpz-sub"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Canonical": "nightly-test-rpz-sub.infoblow.com",
        "Disable": false,
        "Name": "nightly-test-rpz-sub.infoblow.com",
        "ReferenceID": "record:rpz:cname/ZG5zLmJpbmRfY25hbWUkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdy5uaWdodGx5LXRlc3QtcnB6LXN1Yg:nightly-test-rpz-sub.infoblow.com/default",
        "Type": "record:rpz:cname",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: nightly-test-rpz-sub.infoblow.com has been created

infoblox-create-a-substitute-record-rule

Creates a substitute record rule.

Base Command

infoblox-create-a-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-a-substitute-record-rule name="nightly-test-a-sub.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-a-sub" ipv4addr="0.0.0.0"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-a-sub",
        "Disable": false,
        "Ipv4addr": "0.0.0.0",
        "Name": "nightly-test-a-sub.infoblow.com",
        "ReferenceID": "record:rpz:a/ZG5zLmJpbmRfYSQuX2RlZmF1bHQuY29tLmluZm9ibG93LG5pZ2h0bHktdGVzdC1hLXN1YiwwLjAuMC4w:nightly-test-a-sub.infoblow.com/default",
        "Type": "record:rpz:a",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: nightly-test-a-sub.infoblow.com has been created

infoblox-create-aaaa-substitute-record-rule

Creates a substitute rule for an AAAA record.

Base Command

infoblox-create-aaaa-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-aaaa-substitute-record-rule name="nightly-test-aaaa-sub.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-aaaa-sub" ipv6addr="fd60:e32:f1b9::2"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-aaaa-sub",
        "Disable": false,
        "Ipv6addr": "fd60:e32:f1b9::2",
        "Name": "nightly-test-aaaa-sub.infoblow.com",
        "ReferenceID": "record:rpz:aaaa/ZG5zLmJpbmRfYWFhYSQuX2RlZmF1bHQuY29tLmluZm9ibG93LG5pZ2h0bHktdGVzdC1hYWFhLXN1YixmZDYwOmUzMjpmMWI5Ojoy:nightly-test-aaaa-sub.infoblow.com/default",
        "Type": "record:rpz:aaaa",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: nightly-test-aaaa-sub.infoblow.com has been created

infoblox-create-mx-substitute-record-rule

Creates a substitute rule for the MX record.

Base Command

infoblox-create-mx-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-mx-substitute-record-rule name="nightly-test-mx-sub.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-mx-sub" mail_exchanger="0.0.0.0" preference="5"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-mx-sub",
        "Disable": false,
        "MailExchanger": "0.0.0.0",
        "Name": "nightly-test-mx-sub.infoblow.com",
        "Preference": 5,
        "ReferenceID": "record:rpz:mx/ZG5zLmJpbmRfbXgkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdy5uaWdodGx5LXRlc3QtbXgtc3ViLjAuMC4wLjAuNQ:nightly-test-mx-sub.infoblow.com/default",
        "Type": "record:rpz:mx",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: nightly-test-mx-sub.infoblow.com has been created

infoblox-create-naptr-substitute-record-rule

Creates a substitute rule for a NAPTR record.

Base Command

infoblox-create-naptr-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-naptr-substitute-record-rule name="nightly-test-naptr-sub.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-naptr-sub" order="0" preference="1" replacement="infoblow.com"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-naptr-sub",
        "Disable": false,
        "Name": "nightly-test-naptr-sub.infoblow.com",
        "Order": 0,
        "Preference": 1,
        "ReferenceID": "record:rpz:naptr/ZG5zLmJpbmRfbmFwdHIkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdyxuaWdodGx5LXRlc3QtbmFwdHItc3ViLDAsMSwsLCxpbmZvYmxvdy5jb20:nightly-test-naptr-sub.infoblow.com/default",
        "Regexp": "",
        "Replacement": "infoblow.com",
        "Services": "",
        "Type": "record:rpz:naptr",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: nightly-test-naptr-sub.infoblow.com has been created

infoblox-create-ptr-substitute-record-rule

Creates a substitute rule of the PTR record.

Base Command

infoblox-create-ptr-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-ptr-substitute-record-rule rp_zone="infoblow.com" comment="nightly-test-ptr-sub" ptrdname="infoblow.com" ipv4addr="0.0.0.0"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-ptr-sub",
        "Disable": false,
        "Ipv4addr": "0.0.0.0",
        "Name": "0.0.0.0.in-addr.arpa.infoblow.com",
        "Ptrdname": "infoblow.com",
        "ReferenceID": "record:rpz:ptr/ZG5zLmJpbmRfcHRyJC5fZGVmYXVsdC5jb20uaW5mb2Jsb3cuYXJwYS5pbi1hZGRyLjAuMC4wLjAuaW5mb2Jsb3cuY29t:0.0.0.0.in-addr.arpa.infoblow.com/default",
        "Type": "record:rpz:ptr",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: None has been created

infoblox-create-srv-substitute-record-rule

Creates a substitute rule of a SRV record.

Base Command

infoblox-create-srv-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-srv-substitute-record-rule name="nightly-test-srv-sub.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-srv-sub" port="22" priority="10" target="infoblow.com" weight="10"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-srv-sub",
        "Disable": false,
        "Name": "nightly-test-srv-sub.infoblow.com",
        "Port": 22,
        "Priority": 10,
        "ReferenceID": "record:rpz:srv/ZG5zLmJpbmRfc3J2JC5fZGVmYXVsdC5jb20uaW5mb2Jsb3cvbmlnaHRseS10ZXN0LXNydi1zdWIvMTAvMTAvMjIvaW5mb2Jsb3cuY29t:nightly-test-srv-sub.infoblow.com/default",
        "Target": "infoblow.com",
        "Type": "record:rpz:srv",
        "View": "default",
        "Weight": 10,
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: nightly-test-srv-sub.infoblow.com has been created

infoblox-create-txt-substitute-record-rule

Create a substitute rule for a txt record.

Base Command

infoblox-create-txt-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-txt-substitute-record-rule name="nightly-test-txt-sub.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-txt-sub" text="nightly-test-txt-sub"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-txt-sub",
        "Disable": false,
        "Name": "nightly-test-txt-sub.infoblow.com",
        "ReferenceID": "record:rpz:txt/ZG5zLmJpbmRfdHh0JC5fZGVmYXVsdC5jb20uaW5mb2Jsb3cubmlnaHRseS10ZXN0LXR4dC1zdWIuIm5pZ2h0bHktdGVzdC10eHQtc3ViIg:nightly-test-txt-sub.infoblow.com/default",
        "Text": "nightly-test-txt-sub",
        "Type": "record:rpz:txt",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: nightly-test-txt-sub.infoblow.com has been created

infoblox-create-ipv4-substitute-record-rule

Create a substitute rule for an IPv4 rule.

Base Command

infoblox-create-ipv4-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-ipv4-substitute-record-rule name="3.3.3.3.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-ipv4-sub" ipv4addr="3.3.3.4"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-ipv4-sub",
        "Disable": false,
        "Ipv4addr": "3.3.3.4",
        "Name": "3.3.3.3.infoblow.com",
        "ReferenceID": "record:rpz:a:ipaddress/ZG5zLmJpbmRfYSQuX2RlZmF1bHQuY29tLmluZm9ibG93LHJwei1pcC4zLjMuMy4zLjMyLDMuMy4zLjQ:3.3.3.3.infoblow.com/default",
        "Type": "record:rpz:a:ipaddress",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: 3.3.3.3.infoblow.com has been created

infoblox-create-ipv6-substitute-record-rule

Creates a substitute of the IPv6 record rule.

Base Command

infoblox-create-ipv6-substitute-record-rule

Input

Context Output

Command Example

!infoblox-create-ipv6-substitute-record-rule name="000:000:000::1.infoblow.com" rp_zone="infoblow.com" comment="nightly-test-ipv6-sub" ipv6addr="fd60:e22:f1b9::2"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Comment": "nightly-test-ipv6-sub",
        "Disable": false,
        "Ipv6addr": "fd60:e22:f1b9::2",
        "Name": "::1.infoblow.com",
        "ReferenceID": "record:rpz:aaaa:ipaddress/ZG5zLmJpbmRfYWFhYSQuX2RlZmF1bHQuY29tLmluZm9ibG93LHJwei1pcC56ei4xLjEyOCxmZDYwOmUyMjpmMWI5Ojoy:%3A%3A1.infoblow.com/default",
        "Type": "record:rpz:aaaa:ipaddress",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: 000:000:000::1.infoblow.com has been created

infoblox-enable-rule

Disables a rule by its reference ID (reference ID can be extracted by running the search rules command).

Base Command

infoblox-enable-rule

Input

Context Output

Command Example

!infoblox-enable-rule reference_id="record:rpz:cname/ZG5zLmJpbmRfY25hbWUkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdy41LjQuNC40:4.4.4.5.infoblow.com/default"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Canonical": "4.4.4.5.infoblow.com",
        "Disable": false,
        "Name": "4.4.4.5.infoblow.com",
        "ReferenceID": "record:rpz:cname/ZG5zLmJpbmRfY25hbWUkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdy41LjQuNC40:4.4.4.5.infoblow.com/default",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: 4.4.4.5.infoblow.com has been enabled

infoblox-disable-rule

Disable a rule by its reference ID (reference ID can be extracted by running the ‘infoblox-search-rule’ command).

Base Command

infoblox-disable-rule

Input

Context Output

Command Example

!infoblox-disable-rule reference_id="record:rpz:cname/ZG5zLmJpbmRfY25hbWUkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdy41LjQuNC40:4.4.4.5.infoblow.com/default"

Context Example

{
    "Infoblox.ModifiedResponsePolicyZoneRules": {
        "Canonical": "4.4.4.5.infoblow.com",
        "Disable": true,
        "Name": "4.4.4.5.infoblow.com",
        "ReferenceID": "record:rpz:cname/ZG5zLmJpbmRfY25hbWUkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdy41LjQuNC40:4.4.4.5.infoblow.com/default",
        "View": "default",
        "Zone": "infoblow.com"
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: 4.4.4.5.infoblow.com has been disabled

infoblox-get-object-fields

Returns the object fields names which can be used in the search rules command.

Base Command

infoblox-get-object-fields

Input

Context Output

Command Example

!infoblox-get-object-fields object_type="record:rpz:cname"

Context Example

{
    "Infoblox.ObjectFields": {
        "ObjectType": "record:rpz:cname",
        "SupportedFields": [
            "canonical",
            "comment",
            "disable",
            "extattrs",
            "name",
            "rp_zone",
            "ttl",
            "use_ttl",
            "view",
            "zone"
        ]
    }
}

Human Readable Output

Infoblox Integration - Object record:rpz:cname supported fields

infoblox-search-rule

Searches a specific rule by its name.

Base Command

infoblox-search-rule

Input

Context Output

Command Example

!infoblox-search-rule object_type="record:rpz:cname" rule_name="4.4.4.5.infoblow.com" output_fields="canonical,comment,disable,extattrs,name,rp_zone,ttl,use_ttl,view,zone"

Context Example

{
    "Infoblox.RulesSearchResults": [
        {
            "Canonical": "4.4.4.5.infoblow.com",
            "Disable": false,
            "Extattrs": {},
            "Name": "4.4.4.5.infoblow.com",
            "ReferenceID": "record:rpz:cname/ZG5zLmJpbmRfY25hbWUkLl9kZWZhdWx0LmNvbS5pbmZvYmxvdy41LjQuNC40:4.4.4.5.infoblow.com/default",
            "UseTtl": false,
            "View": "default",
            "Zone": "infoblow.com"
        }
    ]
}

Human Readable Output

Infoblox Integration - Search result for: 4.4.4.5.infoblow.com

infoblox-delete-rpz-rule

Deletes a rule.

Base Command

infoblox-delete-rpz-rule

Input

Context Output

There are no context output for this command.

Command Example

!infoblox-delete-rpz-rule reference_id=record:rpz:ptr/ZG5zLmJpbmRfcHRyJC5fZGVmYXVsdC5jb20uaW5mb2Jsb3cuYXJwYS5pbi1hZGRyLjAuMC4wLjAuaW5mb2Jsb3cuY29t:0.0.0.0.in-addr.arpa.infoblow.com/default

Context Example

{}

Human Readable Output

Infoblox Integration - A rule with the following id was deleted: record:rpz:ptr/ZG5zLmJpbmRfcHRyJC5fZGVmYXVsdC5jb20uaW5mb2Jsb3cuYXJwYS5pbi1hZGRyLjAuMC4wLjAuaW5mb2Jsb3cuY29t:0.0.0.0.in-addr.arpa.infoblow.com/default

infoblox-delete-response-policy-zone

Deletes a given response policy zone.

Base Command

infoblox-delete-response-policy-zone

Input

Context Output

There are no context output for this command.

Command Example

!infoblox-delete-response-policy-zone reference_id="zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50cGIubmlnaHRseS5pbmZvbmxveA:infonlox.nightly.tpb.com/default\"

Context Example

{}

Human Readable Output

Infoblox Integration - Response Policy Zone with the following id was deleted: zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50cGIubmlnaHRseS5pbmZvbmxveA:infonlox.nightly.tpb.com/default

Additional Information

In order to create new rule for a response policy zone for all rules different from substitute record use the command ‘create-rpz-rule’. For substitute record rules use the designated command for each use case.

Known Limitations

Troubleshooting

Context Output

There are no context output for this command.

Command Example

!infoblox-delete-response-policy-zone reference_id="zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50cGIubmlnaHRseS5pbmZvbmxveA:infonlox.nightly.tpb.com/default\"

Context Example

{}

Human Readable Output

Infoblox Integration - Response Policy Zone with the following id was deleted: zone_rp/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS50cGIubmlnaHRseS5pbmZvbmxveA:infonlox.nightly.tpb.com/default

Additional Information

In order to create new rule for a response policy zone for all rules different from substitute record use the command 'create-rpz-rule'. For substitute record rules use the designated command for each use case.

Known Limitations

Troubleshooting

infoblox-list-host-info

Get all host records.

Base Command

infoblox-list-host-info

Input

Context Output

Command example

#### Context Example

```json
{
    "Infoblox": {
        "Host": [
            {
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {},
                "IPv4Address": "192.168.10.10",
                "Name": "localhost.test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QuMTkyLjE2OC4xMC4xMC4:192.168.10.10/localhost.test/default"
            },
            {
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {
                    "IB Discovery Owned": "EMEA",
                    "Site": "Tel-Aviv"
                },
                "IPv4Address": "192.168.100.100",
                "Name": "localdoman.localhost.test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QubG9jYWxkb21hbi4xOTIuMTY4LjEwMC4xMDAu:192.168.100.100/localdoman.localhost.test/default"
            },
            {
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {
                    "Site": "Local"
                },
                "IPv4Address": "255.255.255.192",
                "Name": "test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC4uMjU1LjI1NS4yNTUuMTkyLg:255.255.255.192/test/default"
            },
            {
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {
                    "IB Discovery Owned": "dummy value",
                    "Site": "ciac-5843"
                },
                "IPv4Address": "192.168.1.0",
                "Name": "ciac-3607.test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5jaWFjLTM2MDcuMTkyLjE2OC4xLjAu:192.168.1.0/ciac-3607.test/default"
            }
        ]
    }
}

Human Readable Output

Host records (first 50)

ConfigureForDHCP	ExtendedAttributes	IPv4Address	Name	Reference
false		192.168.10.10	localhost.test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QuMTkyLjE2OC4xMC4xMC4:192.168.10.10/localhost.test/default
false	IB Discovery Owned: EMEA Site: Tel-Aviv	192.168.100.100	localdoman.localhost.test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QubG9jYWxkb21hbi4xOTIuMTY4LjEwMC4xMDAu:192.168.100.100/localdoman.localhost.test/default
false	Site: Local	255.255.255.192	test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC4uMjU1LjI1NS4yNTUuMTkyLg:255.255.255.192/test/default
false	IB Discovery Owned: dummy value Site: ciac-5843	192.168.1.0	ciac-3607.test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5jaWFjLTM2MDcuMTkyLjE2OC4xLjAu:192.168.1.0/ciac-3607.test/default

Command example

!infoblox-list-host-info additional_return_fields=extattrs,aliases

Context Example

{
    "Infoblox": {
        "Host": [
            {
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {},
                "IPv4Address": "192.168.10.10",
                "Name": "localhost.test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QuMTkyLjE2OC4xMC4xMC4:192.168.10.10/localhost.test/default"
            },
            {
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {
                    "IB Discovery Owned": "EMEA",
                    "Site": "Tel-Aviv"
                },
                "IPv4Address": "192.168.100.100",
                "Name": "localdoman.localhost.test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QubG9jYWxkb21hbi4xOTIuMTY4LjEwMC4xMDAu:192.168.100.100/localdoman.localhost.test/default"
            },
            {
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {
                    "Site": "Local"
                },
                "IPv4Address": "255.255.255.192",
                "Name": "test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC4uMjU1LjI1NS4yNTUuMTkyLg:255.255.255.192/test/default"
            },
            {
                "AdditionalFields": [
                    {
                        "Aliases": [
                            "test_host.test"
                        ]
                    }
                ],
                "ConfigureForDHCP": false,
                "ExtendedAttributes": {
                    "IB Discovery Owned": "dummy value",
                    "Site": "ciac-5843"
                },
                "IPv4Address": "192.168.1.0",
                "Name": "ciac-3607.test",
                "Reference": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5jaWFjLTM2MDcuMTkyLjE2OC4xLjAu:192.168.1.0/ciac-3607.test/default"
            }
        ]
    }
}

Human Readable Output

Host records (first 50)

ConfigureForDHCP	ExtendedAttributes	IPv4Address	Name	Reference
false		192.168.10.10	localhost.test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QuMTkyLjE2OC4xMC4xMC4:192.168.10.10/localhost.test/default
false	IB Discovery Owned: EMEA Site: Tel-Aviv	192.168.100.100	localdoman.localhost.test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5sb2NhbGhvc3QubG9jYWxkb21hbi4xOTIuMTY4LjEwMC4xMDAu:192.168.100.100/localdoman.localhost.test/default
false	Site: Local	255.255.255.192	test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC4uMjU1LjI1NS4yNTUuMTkyLg:255.255.255.192/test/default
false	IB Discovery Owned: dummy value Site: ciac-5843	192.168.1.0	ciac-3607.test	record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuX2RlZmF1bHQudGVzdC5jaWFjLTM2MDcuMTkyLjE2OC4xLjAu:192.168.1.0/ciac-3607.test/default

infoblox-list-network-info

List network information.

Base Command

infoblox-list-network-info

Input

Context Output

Command example

#### Context Example

```json
{
    "Infoblox": {
        "NetworkInfo": [
            {
                "ExtendedAttributes": {},
                "Name": "192.168.1.0/24",
                "NetworkView": "default",
                "Reference": "network/ZG5zLm5ldHdvcmskMTkyLjE2OC4xLjAvMjQvMA:192.168.1.0/24/default"
            },
            {
                "ExtendedAttributes": {
                    "Region": "EMEA"
                },
                "Name": "255.255.255.192/26",
                "NetworkView": "default",
                "Reference": "network/ZG5zLm5ldHdvcmskMjU1LjI1NS4yNTUuMTkyLzI2LzA:255.255.255.192/26/default"
            }
        ]
    }
}

Human Readable Output

Network information found (50 limit)

ExtendedAttributes	Name	NetworkView	Reference
	192.168.1.0/24	default	network/ZG5zLm5ldHdvcmskMTkyLjE2OC4xLjAvMjQvMA:192.168.1.0/24/default
Region: EMEA	255.255.255.192/26	default	network/ZG5zLm5ldHdvcmskMjU1LjI1NS4yNTUuMTkyLzI2LzA:255.255.255.192/26/default

Command example

!infoblox-list-network-info pattern=255.255 extattrs="Region=EMEA"

Context Example

{
    "Infoblox": {
        "NetworkInfo": [
            {
                "ExtendedAttributes": {
                    "Region": "EMEA"
                },
                "Name": "255.255.255.192/26",
                "NetworkView": "default",
                "Reference": "network/ZG5zLm5ldHdvcmskMjU1LjI1NS4yNTUuMTkyLzI2LzA:255.255.255.192/26/default"
            }
        ]
    }
}

Human Readable Output

Network information found (50 limit)

ExtendedAttributes	Name	NetworkView	Reference
Region: EMEA	255.255.255.192/26	default	network/ZG5zLm5ldHdvcmskMjU1LjI1NS4yNTUuMTkyLzI2LzA:255.255.255.192/26/default

infoblox-update-rpz-rule

Update a response policy zone rule.

Base Command

infoblox-update-rpz-rule

Input

Context Output

Command example

!infoblox-update-rpz-rule reference_id="record:rpz:cname/sample.example.com/default" name="sample.example.com" rp_zone="example.com" rule_type="PASSTHRU" comment="Updated passthru rule"

Context Example

{
    "Infoblox": {
        "ModifiedResponsePolicyZoneRules": {
            "Canonical": "",
            "Comment": "Updated passthru rule",
            "Disable": false,
            "Extattrs": {},
            "Name": "sample.example.com",
            "ReferenceID": "record:rpz:cname/sample.example.com/default",
            "Type": "record:rpz:cname",
            "View": "default",
            "Zone": "example.com"
        }
    }
}

Human Readable Output

Infoblox Integration - Response Policy Zone rule: sample.example.com has been updated

Comment	Disable	Name	Reference ID	Type	View	Zone
Updated passthru rule	false	sample.example.com	record:rpz:cname/sample.example.com/default	record:rpz:cname	default	example.com

infoblox-create-host-record

Creates a host record. Note: Either ipv4_address or ipv6_address is required.

Base Command

infoblox-create-host-record

Input

Context Output

Command example

!infoblox-create-host-record name=example.com ipv4_address="[{\"ipv4addr\": \"0.0.0.1\"}]" ipv6_address="[{\"ipv6addr\": \"0000:000:0000::0000:000:001\", \"configure_for_dhcp\": false}]" configure_for_dns=false aliases="[\"example2.com\", \"example3.com\"]"

Context Example

{
    "Infoblox": {
        "Host": {
            "Aliases": [
                "example2.com",
                "example3.com"
            ],
            "AllowTelnet": false,
            "ConfigureForDNS": false,
            "DDNSProtected": false,
            "DNSName": "example.com",
            "Disable": false,
            "DisableDiscovery": false,
            "DnsAliases": [
                "example2.com",
                "example3.com"
            ],
            "Extattrs": {},
            "IPV4Addresses": [
                {
                    "ConfigureForDHCP": false,
                    "Host": "example.com",
                    "IPV4Address": "0.0.0.1",
                    "ReferenceID": "record:host_ipv4addr/12345:0.0.0.1/example.com/ "
                }
            ],
            "IPV6Addresses": [
                {
                    "ConfigureForDHCP": false,
                    "Host": "example.com",
                    "IPV6Address": "0000:000:0000::0000:000:001",
                    "ReferenceID": "record:host_ipv6addr/23456:0000:000:0000::0000:000:001/example.com/ "
                }
            ],
            "Name": "example.com",
            "NetworkView": "default",
            "RRSetOrder": "cyclic",
            "ReferenceID": "record:host/45678:example.com/ ",
            "Type": "record:host",
            "UseCLICredentials": false,
            "UseSNMP3Credential": false,
            "UseSNMPCredential": false,
            "UseTTL": false,
            "View": " ",
            "Zone": ""
        }
    }
}

Human Readable Output

Host record created

Aliases	Allow Telnet	Configure For DNS	DDNS Protected	DNS Name	Disable	Disable Discovery	Dns Aliases	IPV4 Addresses	IPV6 Addresses	Name	Network View	RR Set Order	Reference ID	Type	Use CLI Credentials	Use SNMP3 Credential	Use SNMP Credential	Use TTL	View
example2.com, example3.com	false	false	false	example.com	false	false	example2.com, example3.com	- ReferenceID: record:host_ipv4addr/12345:0.0.0.1/example.com/ ConfigureForDHCP: false Host: example.com IPV4Address: 0.0.0.1	- ReferenceID: record:host_ipv6addr/23456:0000:000:0000::0000:000:001/example.com/ ConfigureForDHCP: false Host: example.com IPV6Address: 0000:000:0000::0000:000:001	example.com	default	cyclic	record:host/45678:example.com/	record:host	false	false	false	false

infoblox-dhcp-lease-lookup

Look up a DHCP lease.

Base Command

infoblox-dhcp-lease-lookup

Input

Context Output

Command example

!infoblox-dhcp-lease-lookup limit=3

Context Example

{
    "Infoblox": {
        "DHCPLease": [
            {
                "Address": "0.0.0.2",
                "BindingState": "FREE",
                "CLTT": 1757322665,
                "Ends": 1757365865,
                "Fingerprint": "Microsoft Windows 10",
                "Hardware": "00:00:00:00:00:02",
                "IPV6PrefixBits": 0,
                "IsInvalidMAC": false,
                "Network": "0.0.0.5/20",
                "NetworkView": "default",
                "NeverEnds": false,
                "NeverStarts": false,
                "Protocol": "IPV4",
                "ReferenceID": "lease/123:0.0.0.2/default",
                "ServedBy": "0.0.0.0",
                "ServerHostName": "infoblox.localdomain",
                "Starts": 1757322665,
                "TSTP": 1757365865,
                "UID": "123",
                "Variable": "vendor-class-identifier=\"MSFT 5.0\""
            },
            {
                "Address": "0.0.0.3",
                "BindingState": "ACTIVE",
                "CLTT": 1757399758,
                "ClientHostname": "CE",
                "Ends": 1757442958,
                "Fingerprint": "Ubuntu/Debian 5/Knoppix 6",
                "Hardware": "00:00:00:00:00:03",
                "IPV6PrefixBits": 0,
                "IsInvalidMAC": false,
                "Network": "0.0.0.5/20",
                "NetworkView": "default",
                "NeverEnds": false,
                "NeverStarts": false,
                "NextBindingState": "FREE",
                "Protocol": "IPV4",
                "ReferenceID": "lease/234:0.0.0.3/default",
                "ServedBy": "0.0.0.0",
                "ServerHostName": "infoblox.localdomain",
                "Starts": 1757399758,
                "UID": "234"
            },
            {
                "Address": "0.0.0.4",
                "BindingState": "ABANDONED",
                "CLTT": 1757365722,
                "ClientHostname": "rhel",
                "Fingerprint": "Ubuntu/Debian 5/Knoppix 6",
                "IPV6PrefixBits": 0,
                "IsInvalidMAC": false,
                "Network": "0.0.0.5/20",
                "NetworkView": "default",
                "NeverEnds": true,
                "NeverStarts": false,
                "NextBindingState": "FREE",
                "Protocol": "IPV4",
                "ReferenceID": "lease/345:0.0.0.4/default",
                "ServedBy": "0.0.0.0",
                "ServerHostName": "infoblox.localdomain",
                "Starts": 1757365722
            }
        ]
    }
}

Human Readable Output

DHCP lease lookup, found 3 records

Address	Binding State	CLTT	Ends	Fingerprint	Hardware	IPV6 Prefix Bits	Is Invalid MAC	Network	Network View	Never Ends	Never Starts	Protocol	Reference ID	Served By	Server Host Name	Starts	TSTP	UID	Variable
0.0.0.2	FREE	1757322665	1757365865	Microsoft Windows 10	00:00:00:00:00:02	0	false	0.0.0.5/20	default	false	false	IPV4	lease/123:0.0.0.2/default	0.0.0.0	infoblox.localdomain	1757322665	1757365865	123	vendor-class-identifier=”MSFT 5.0”
0.0.0.3	ACTIVE	1757399758	1757442958	Ubuntu/Debian 5/Knoppix 6	00:00:00:00:00:03	0	false	0.0.0.5/20	default	false	false	IPV4	lease/234:0.0.0.3/default	0.0.0.0	infoblox.localdomain	1757399758		234
0.0.0.4	ABANDONED	1757365722		Ubuntu/Debian 5/Knoppix 6		0	false	0.0.0.5/20	default	true	false	IPV4	lease/345:0.0.0.4/default	0.0.0.0	infoblox.localdomain	1757365722