category: Network Security
provider: BlueCat Networks
commonfields:
  id: BluecatAddressManager
  version: -1
configuration:
- defaultvalue: https://192.168.0.1
  display: Server URL (e.g., https://192.168.0.1)
  name: url
  required: true
  type: 0
- display: Username
  name: credentials
  required: true
  type: 9
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- display: Configuration Name
  name: conf_name
  type: 0
  required: false
description: Use the BlueCat Address Manager integration to enrich IP addresses and manage response policies.
display: Bluecat Address Manager
name: BluecatAddressManager
script:
  commands:
  - arguments:
    - default: true
      description: The IP address for which to return data.
      name: ip
      required: true
    description: Enriches an IP address with data, including IP networks and blocks to which it belongs, linked IPs, MAC addresses, and more.
    name: bluecat-am-query-ip
    outputs:
    - contextPath: BlueCat.AddressManager.IP.ID
      description: The address manager ID of the IP address.
      type: Number
    - contextPath: BlueCat.AddressManager.IP.Name
      description: Name of the IP address.
      type: String
    - contextPath: BlueCat.AddressManager.IP.MacAddress
      description: Corresponding MAC address.
      type: String
    - contextPath: BlueCat.AddressManager.IP.Parents.ID
      description: ID of the parent IP address.
      type: String
    - contextPath: BlueCat.AddressManager.IP.Parents.Type
      description: Type of the parent IP address.
      type: String
    - contextPath: BlueCat.AddressManager.IP.Parents.Name
      description: Name of the parent IP address.
      type: String
    - contextPath: BlueCat.AddressManager.IP.Parents.CIDR
      description: Classless Inter-Domain Routing.
      type: String
    - contextPath: BlueCat.AddressManager.IP.Type
      description: Type of IP address.
      type: String
    - contextPath: IP.Address
      description: The IP address.
      type: String
    - contextPath: BlueCat.AddressManager.IP.Parents.Prefix
      description: Prefix of the IP address.
      type: String
  - arguments:
    - defaultValue: '0'
      description: Start index from which to get the response policies. Default is 0.
      name: start
    - defaultValue: '30'
      description: Maximum number of response policies to return.
      name: count
    description: Returns all response policies.
    name: bluecat-am-get-response-policies
    outputs:
    - contextPath: BlueCat.AddressManager.ResponsePolicies.ID
      description: ID of the response policy.
      type: Number
    - contextPath: BlueCat.AddressManager.ResponsePolicies.Name
      description: Name of the response policy.
      type: String
    - contextPath: BlueCat.AddressManager.ResponsePolicies.Ttl
      description: Time to live (TTL) of the response policy.
      type: Unknown
    - contextPath: BlueCat.AddressManager.ResponsePolicies.Type
      description: Type of the response policy (BLACKLIST, BLACKHOLE, WHITELIST, or REDIRECT).
      type: String
    - contextPath: BlueCat.AddressManager.ResponsePolicies.RedirectTarget
      description: Target of redirect, in case of REDIRECT policy type.
      type: String
  - arguments:
    - description: Domain name by which to search.
      name: domain
      required: true
    description: Searches all response policies in which the given domain is included.
    name: bluecat-am-search-response-policies-by-domain
    outputs:
    - contextPath: BlueCat.AddressManager.ResponsePolicies.ID
      description: ID of the response policy.
      type: Number
    - contextPath: BlueCat.AddressManager.ResponsePolicies.Name
      description: Name of the response policy.
      type: String
    - contextPath: BlueCat.AddressManager.ResponsePolicies.Ttl
      description: Time to live (TTL) of the response policy.
      type: Unknown
    - contextPath: BlueCat.AddressManager.ResponsePolicies.Type
      description: Type of the responce policy ( BLACKLIST, BLACKHOLE, WHITELIST, or REDIRECT).
      type: String
    - contextPath: BlueCat.AddressManager.ResponsePolicies.RedirectTarget
      description: Target of redirect, in case of REDIRECT policy type.
      type: String
  - arguments:
    - default: true
      description: ID of the response policy to edit.
      name: policy_id
      required: true
    - description: Domain to add to the response policy.
      name: domain
      required: true
    description: Adds a domain to the given response policy.
    name: bluecat-am-response-policy-add-domain
  - arguments:
    - default: true
      description: ID of the response policy to edit.
      name: policy_id
      required: true
    - description: Domain to remove from the response policy.
      name: domain
      required: true
    description: Removes a domain from the given response policy.
    name: bluecat-am-response-policy-remove-domain
  - arguments:
    - description: The IP address for which to get the range.
      name: ip
      required: true
    description: Returns the IPv4 block that contains the specified IPv4 address.
    name: bluecat-am-get-range-by-ip
    outputs:
    - contextPath: BlueCat.AddressManager.Range.ID
      description: The address manager ID of the range.
      type: String
    - contextPath: BlueCat.AddressManager.Range.Name
      description: Name of the range.
      type: String
    - contextPath: BlueCat.AddressManager.Range.Type
      description: Type of the range.
      type: String
    - contextPath: BlueCat.AddressManager.Range.Parents.ID
      description: ID of the parent range.
      type: String
    - contextPath: BlueCat.AddressManager.Range.Parents.Type
      description: Type of the parent range.
      type: String
    - contextPath: BlueCat.AddressManager.Range.Parents.Name
      description: Name of the parent range.
      type: String
    - contextPath: BlueCat.AddressManager.Range.Parents.CIDR
      description: Classless Inter-Domain Routing.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- Bluecat Address Manager test
fromversion: 5.0.0