NetQuestOMX

NetQuest’s products are high-capacity service nodes that help security teams access and analyze network traffic. Powerful packet and flow processing features assist security tools in detecting and mitigating security threats as cost effectively as possible.

Category

Utilities

Pack

NetQuestOMX

Configuration parameters

• url — Server URL (required)
• credentials — Username (required)
• slot — Slot number (required)
• port — Port number (required)
• isFetchEvents — Fetch Events
• eventFetchInterval — Events Fetch Interval
• statistic_types_to_fetch — Statistic types to fetch (required)
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)

Commands (6)

• get-events — Gets events from NetQuest OMX. Each event is a report for the specified statistic type. Available only for Cortex XSIAM.
• netquest-address-list-create — Creates a new address list. This list will replace and override the old list entity.
• netquest-address-list-delete — Deletes the address list of the name provided.
• netquest-address-list-optimize — Optimizes the updated address list. If the traffic elements are IP addresses, the integration will optimize the list by compressing IP addresses into CIDR groups.
• netquest-address-list-rename — Renames an address list. This is only meant to change the name of the list. If you try to give the value of the new_name argument to an existing address list, the command will fail.
• netquest-address-list-upload — Uploads a .txt file with the address list to the appliance. The appliance temporarily stores the file until it is saved to the Library and replaces any previously loaded list file.