Skip to main content

Cyware Threat Intelligence eXchange

Blue Coat

Connector Category: Enrichment Tool

About Integration

Blue Coat Systems provided web security solutions to secure, accelerate, and optimize business applications, web content, and other information. Intel Exchange integrates with Blue Coat Systems to enrich IP addresses, domains, and URLs.

Configure Blue Coat as an Enrichment Tool

Configure Blue Coat in Intel Exchange to enrich IP addresses, domains and URLs.

Before you Start

  • Ensure that you have the base URL and API token of your Blue Coat account.

  • Ensure that your user group has Create, Update, and View permissions for enrichment tools and their associated policies in Intel Exchange.

    Note

    Ensure that the API key includes the permissions to retrieve IP addresses, domains, and URLs.

Steps 

To configure Blue Coat as an enrichment tool in Intel Exchange, follow these steps:

  1. Sign in to Intel Exchange and go to Administration > Enrichment Management > Enrichment Tools. 

  2. Search and select the Blue Coat enrichment tool. 

  3. Click Add Account and enter the following details:

    1. Account Name: Enter a unique account name to identify the instance. For example, Blue Coat Prod.

    2. Base URL: Enter the base URL of your Blue Coat instance. 

    3. Username: Enter the username provided by DomainTools. This will be used to authenticate your access to their services.

    4. Password: Enter the API password to authenticate communication between the Intel Exchange and Blue Coat servers.

    5. Verify SSL: Enable this option to validate the SSL certificate and secure the connection between Intel Exchange and Blue Coat servers. This option is enabled by default.

  4. Click Save.

    After successfully adding an account, you can view and enable Blue Coat feed enrichment types. You can also configure a quota to set a limit on the number of enrichment request the Blue Coat account can make. After the quota is exhausted, no further enrichment requests can be made until the quota resets for the next quota duration. For more details, refer to Define Quota in Configure Enrichment Tools.

    To understand the number of API calls and quota units consumed by the Blue Coat enrichment tool per polling, refer to the following table:

    Enrichment Tool

    Feed Enrichment Type

    No. of API calls

    Quota Consumed

    Blue Coat

    Retrieve Domain Detail

    1

    1

    Retrieve IP Detail

    1

    1

    APIRetrieve URL Detail

    1

    1

    You can configure an enrichment policy to automatically enrich threat data objects using the Blue Coat enrichment tool. For more information, see Enrichment Policy.