Axonius

About this document

This document provides the step-by-step procedure to configure Axonius in SAFE.

Introduction

This integration helps you fetch and update the metadata for the assets already onboarded in SAFE Platform. It includes fields like FQDN, IP Address, and Asset Type, as well as Custom Fields like "Tags" and "Connection Labels" from Axonius. Axonius integration also pulls Adapter Tags from Axonius. Pulling Custom fields values would require creation of custom fields in SAFE One. Some of these Custom field keys have a standard name where as Adapter tags would require specific keys to be created.

Prerequisites

• Access required in SAFE:

  • SAFE Admin Access

  • Assets already onboarded in SAFE.

  • Custom fields configured in SAFE

• Access required in Axonius:

  • How to generate API keys and API secret - Axonius REST API and Python API Client

• Required User Inputs:

  • Axonius portal url

  • Axonius API Key

  • Axonius API Secret

  • Safe Attack Surface to filter the list of assets for which metadata has to be synced.

  • Auto sync frequency in days

Generate Connection Details

Generate an API Token

Task: Generate an API Token in Axonius.

Steps:

• Log in to Axonius with a user account or Service Account whose role has the API access enabled permission.

• At the bottom of the Navigation toolbar, click on your account avatar.

• Click User Settings and then click the API Key tab. Copy the existing API key and secret. To reset them, click Reset Key.
  

  Configure Custom Fields in SAFE

  ---

  • In SAFE One navigate to Custom Fields page under settings tab.

  • Click Add Custom Field.

  • Create Standard Custom Fields with Name: axonius-connection-label, axonius-tags, axonius-id with Custom Field Type as Any and Multi Valued as Yes.

  • Create Custom Fields with Names matching combinations of Tag Key in Adapter Tags in Axonius Portal from Devices Page. Example: “AX-LO”.

Configure Axonius in SAFE

Task: Configure Axonius integration in SAFE.

Steps:

• Log in to your SAFE account as Admin.

• Click on the Integrations option from the left navigation.

• Scroll to find the Axonius integration card or search for Axonius in the search bar.

• Hover over the Axonius integration card and click on the Configure button.

• Enter the following:

  • Axonius Base URL - This is the same URL that is used to log into Axonius Portal.

  • Axonius API Key and Axonius API Secret - Generated at the end of Section 4.3

  • Applicable SAFE ONE attack surface types for sync - This field is used to filter and pull in only a certain subset of assets by providing “attack surface” as a comma-separated field.

    Example: Cloud, Others

• Click on the Test Connection button.

• Once the connection is successful, click on the Save button.

• Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.

  

• Upon a successful sync, the system pulls the Axonius assets and their findings in SAFE. You can track the status of the sync in the History table.

  ---

View Results

You can navigate to Technology and filter the asset list by the same Attack Surface. Check for the matching Asset Name or FQDN which exists both in SAFE and Axonious, metadata should be updated when the sync is complete.

History

Learn more about Integration History here.

SAFE's Outgoing IP Addresses

Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.