Tufin - Investigate Network Alert

Example Playbook utilizing the Tufin integration to enrich a network alert and perform containment, if needed. Requires the following incident details: Source IP, Destination IP, Destination Ports

Pack

Tufin

Tasks

9

Inputs

• Source IP — Source IP Address
• Destination IP — Destination IP Address

Outputs

• Tufin.Zone
• Tufin.ObjectResolve
• Tufin.Policysearch
• Tufin.Device
• Tufin.Topology

Commands used

• tufin-search-topology
• tufin-search-topology-image
• tufin-submit-change-request