Tufin - Investigate Network Alert

Example Playbook utilizing the Tufin integration to enrich a network alert and perform containment, if needed. Requires the following incident details: Source IP, Destination IP, Destination Ports

Tufin · 9 tasks · 2 inputs · 5 outputs

Inputs

  • Source IP — Source IP Address
  • Destination IP — Destination IP Address

Outputs

  • Tufin.Zone —
  • Tufin.ObjectResolve —
  • Tufin.Policysearch —
  • Tufin.Device —
  • Tufin.Topology —

Commands used

tufin-search-topology tufin-search-topology-image tufin-submit-change-request

Flowchart

yes yes Start Start Submit Change Request to Block Traffic - tufin-submit-change-request Submit Change Request to ... tufin-submit-change-request Complete Complete Is Traffic Allowed from Src to Dst? Is Traffic Allowed from S... Search Tufin Topology - tufin-search-topology Search Tufin Topology tufin-search-topology Search Tufin Topology Image - tufin-search-topology-image Search Tufin Topology Image tufin-search-topology-image Tufin - Enrich IP Address(es) - Tufin - Enrich IP Address(es) Tufin - Enrich IP Address... Tufin - Enrich IP Address(es) Tufin - Enrich IP Address(es) - Tufin - Enrich IP Address(es) Tufin - Enrich IP Address... Tufin - Enrich IP Address(es) Do Source and Destination IP Addresses Exist? Do Source and Destination...