Radware Cloud DDoS Protection Services

Radware Cloud Service provides customers and partners with the ability to programmatically perform service-related actions. The integration can be used to automate application and assets creation and day-to-day management to retrieve up-to-date data about Security Events and Operational Alerts.

Data Enrichment & Threat Intelligence · Radware Cloud DDoS Protection Services

Details

IDRadware Cloud DDoS Protection Services
ProviderRadware
CategoryData Enrichment & Threat Intelligence
From Version8.0.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesXSIAM

README

Radware Cloud Service provides customers and partners with the ability to programmatically perform service-related actions. The integration can be used to automate application and assets creation and day-to-day management to retrieve up-to-date data about Security Events and Operational Alerts
This integration was integrated and tested with version 25.3.1 of Radware Cloud DDoS Protection Services.

Configure Radware Cloud DDoS Protection Services in Cortex

Parameter Required
Server URL True
Account ID True
API Key True
Event Types to Fetch True
Trust any certificate (not secure) False
Use system proxy settings False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

radware-cloud-ddos-protection-services-get-events

Send events from Radware Cloud DDoS Protection Services to XSIAM. Used mainly for debugging.

Base Command

radware-cloud-ddos-protection-services-get-events

Input

There are no input arguments for this command.

Context Output

There is no context output for this command.

Configuration parameters

  • url — Server URL (required)
  • credentials — Account ID (required)
  • event_types — Event Types to Fetch (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (1)

  • radware-cloud-ddos-protection-services-get-events

    Send events from Radware Cloud DDoS Protection Services to Cortex XSIAM. Used mainly for debugging.

Source

RadwareCloudDDoSProtectionServices.py RadwareCloudDDoSProtectionServices_test.py RadwareCloudDDoSProtectionServices.yml RadwareCloudDDoSProtectionServices_description.md
Download History Raw 
### Authentication and Authorization
The authentication method used is API Key.
Generating the keys are done via the Cloud Portal | API keys screen.
1. Navigate to **Accounts** > **API Keys**
2. Click **+** to create a new API Key
3. Fill out the form in the pane that appears on the right of the display.
4. Click **Save**. The Add New API Key dialog box appears.
5. Copy the API Key that appears in the window.
6. Click **Confirm** to confirm the creation of the new API Key.

Note the following:

• When the API Key is generated it is shown only once. Once you get the API Key, you will no longer be able to retrieve this key, only create a new key. Therefore, it is important to copy the API Key when it appears.

• Do not store the key where unauthorized users can access it. Anyone with this API Key will be able to perform any of the actions that the key authorizes.

• The API Key has an expiration date and can be used only until the predefined expiration date.

• API Key uses rules authorization (permissions) and can be used only per the rule it was assigned with. Any call that the rule does not permit will result in an access denied error code.

All Rest API calls are limited to your Portal Account, and you can use it only on your account data. All API keys require a unique ID that identifies the account. This account ID is found in the Cloud Services portal: navigate to **Accounts** >> **API Keys**, click **Account ID Details** and the Account ID will be listed there. Each service has its own unique ID. Ensure you are using the correct one for the API you are working with.