The Balbix Flexible Connector (Flex Connector) is a powerful generic connector with the ability to ingest data from nearly any source, enabling new integrations within hours including proprietary third party tools and legacy data sources. The connector can be used to ingest a wide range of information, including infrastructure assets, business applications (such as custom apps, web apps), vulnerabilities (both infrastructure and apps), configuration control assessments, and business/operational metadata. Leveraging the extensive Balbix data model, the Balbix Flexible Connector can be easily configured to ingest data in a CSV snapshot format, map to appropriate Balbix data fields, and set up the required operational frequency.
Integration summary
This table provides a summary of the Balbix Flexible connector integration.
Integration Type | Fetch: An inbound CSV ingestion to fetch assets, applications, vulnerabilities (infrastructure & apps), misconfigurations, threats, controls, and business criticality. |
Types of Data Fetched | Infrastructure host assets including servers, virtual machines, desktops, laptops, infrastructure, smart phones, OT/IoT devices and other assets accessible on the network (e.g., printers, switches, routers). Business applications including custom and web applications. |
Types of Data Fetched | Infrastructure Assets Asset names (NetBIOS, DNS, other names), hardware information (manufacturer, serial number, etc.), processor information, open port information, location information, interface information (MAC address, IP address), OS information, BIOS information, tags (both flat and hierarchical tags), software information, open ports, system status (such as reboot pending), vulnerabilities (such as CVEs and misconfigurations), timestamps (such as last observed), and control assessment findings. Business Applications Application Name, URL, ID, owner, vulnerabilities (e.g., CVEs, misconfigurations), configuration compliance, relevant timestamps such as first observed, last observed, and tags. |
Create and configure the connector
Follow these steps to create and configure the Balbix Flexible connector.
Field Mapping
Cortex XSIAM
Balbix Field | Imported Field |
host_name | Endpoint Name |
os_name | Operating System |
ip_address | IP Address |
device_owner | User |
Microsoft Defender
Balbix Field | Imported Field |
host_name | Device Name |
os_version | OS Version |
ip_address | Device IPs |
mac_address | Device MACs |
Lansweeper
Balbix Field | Imported Field |
os_name | OS |
ip_address | IP Address |
mac_address | MAC Address |
host_name | FQDN |
Netskope
Balbix Field | Imported Field |
host_name | Hostname |
user_email | User |
Orca Alerts
Balbix Field | Imported Field |
host_name | Inventory.Name |
source_first_observed_at | CreatedAt |
Qualys App Vulns
Balbix Field | Imported Field |
app_vuln_details | QID |
application_url | IP/URL |
app_vuln_name | Vulnerability |
app_vuln_details | Type of Vulnerability |
app_vuln_state | Vulnerability Status |
app_vuln_severity | Severity |
app_page_path | Host |
app_vuln_description | Description |
Qualys VMDR
Balbix Field | Imported Field |
custom_vuln_id | CVE |
custom_vuln_description | CVE Description |
custom_vuln_severity | Severity |
host_name | Asset Name |