IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Develop multiple credentials on app.config and seperate them by a label just like it is used on FortiGate App.

  • 1.  Develop multiple credentials on app.config and seperate them by a label just like it is used on FortiGate App.

    Posted Thu October 12, 2023 12:36 PM

    Hi. Is there a way to develop on an existing app the same configuration that is used on Fortigate App and allows users to add multiple diferent api credentials?

    On the left side we can see how the fortigate manages different credentials for multiple clients that uses the same product. On the right side we can view the BitDefender managing only 1 pair of API Credentials.
    As you can see the Fortigate App perform this by a label used in Playbooks and allows the Function to choose with which credentials it is going to execute.
    How can we add the same configuration on the BitDefender App? Are there any steps that i could follow?
    Is there any other easier way?


    ------------------------------
    George Petkakis
    ------------------------------


  • 2.  RE: Develop multiple credentials on app.config and seperate them by a label just like it is used on FortiGate App.

    Posted Fri October 13, 2023 09:42 AM

    Hi George,

    Looking at Fortigate code the steps are reasonably straightforward I believe and would be some thing like the following(excuse any errors):

    * Add a new optional function input in the UI for the label e.g. bitdefender_firewall_label


    * Create a python function similar to 'firewall_configs' and use this to override the default config

         configs = firewall_configs(
                PACKAGE_NAME,
                self.opts,
                getattr(fn_inputs, "bitdefender_firewall_label", None))

    * Create bitdefender client using the new config.
      
           client = BitdefenderClient(configs, self.rc)

    * Add label and new section to app.config 
          [fn_bitdefender]
          bitdefender_base_url=https://cloud.gravityzone.bitdefender.com/api
          api_key=<api_key>

          # Proxy Settings (for integration servers only)
          #https_proxy=https://example.com:3000
          # Specify paths to files if client certs are needed to authenticate
          #client_auth_cert=<path_to_cert.pem>
          #client_auth_key=<path_to_cert_private_key.pem>
              [fn_bitdefender:my_label]]
          bitdefender_base_url=https://cloud2.gravityzone.bitdefender.com/api
          api_key=<api_key>

          # Proxy Settings (for integration servers only)
          #https_proxy=https://example.com:3000
          # Specify paths to files if client certs are needed to authenticate
          #client_auth_cert=<path_to_cert.pem>
          #client_auth_key=<path_to_cert_private_key.pem>

    Regards,



    ------------------------------
    JOHN PRENDERGAST
    ------------------------------



  • 3.  RE: Develop multiple credentials on app.config and seperate them by a label just like it is used on FortiGate App.

    Posted Fri October 13, 2023 10:16 AM

    Hi George,

    This is a good idea. I think the best way to make this request is through our ideas portal: https://ideas.ibm.com/. If you can make this request, it can be more easily tracked internally.

    Cheers,
    Mark



    ------------------------------
    Mark Scherfling
    ------------------------------