IncapWhitelistCompliance

Get all sites from Incapsula. For each site, the script, through a ssh server (one that should NOT be in the allow list), make sure the site is compliant ( allow list is being enforced ). If not, a warning mail will be sent to the domain owner.

python · Imperva Incapsula

Details

ID	`IncapWhitelistCompliance`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	Incapsula

README

Get all sites from Incapsula.
For each site, the script, through a ssh server (one that should NOT be in the allow list), make sure the site is compliant ( allow list is being enforced ).
If not, a warning mail will be sent to the domain owner.

Script Data

Name	Description
Script Type	python3
Tags	Incapsula
Cortex XSOAR Version	5.0.0

Dependencies

This script uses the following commands and scripts.

incap-list-sites
RemoteExec
SendEmail
incap-get-domain-approver-email

Inputs

Argument Name	Description
SSHValidationServer	Name of the non-allow list SSH server instance

Outputs

There are no outputs for this script.

Source

IncapWhitelistCompliance.py IncapWhitelistCompliance_test.py IncapWhitelistCompliance.yml

Download History Raw

commonfields:
  id: IncapWhitelistCompliance
  version: -1
name: IncapWhitelistCompliance
script: ''
type: python
subtype: python3
tags:
- Incapsula
comment: "Get all sites from Incapsula.\nFor each site, the script, through a ssh server (one that should NOT be in the allow list), make sure the site is compliant ( allow list is being enforced ).\n If not, a warning mail will be sent to the domain owner. "
system: true
args:
- name: SSHValidationServer
  required: true
  default: true
  description: Name of the non-allow list SSH server instance
scripttarget: 0
dependson:
  must:
  - incap-get-domain-approver-email
  - SendEmail
  - incap-list-sites
  - RemoteExec
timeout: 0s
tests:
- No test - old script
fromversion: 5.0.0
dockerimage: demisto/python3:3.12.13.10116658
marketplaces:
- xsoar