Skip to main content

Cyware Orchestrate

Imperva SecureSphere DAM

App Vendor: Imperva

App Category: Network Security

App Version: 1.1.0

API version: 14.0.0

Product Version: 14.0.0

Default Port: 8083

About App

The Imperva SecureSphere DAM app in the Orchestrate application allows security teams to integrate with the Imperva SecureSphere DAM enterprise application, powerful centralized management and reporting solution that unifies and streamlines security operations to simplify distributed asset management.

The Imperva SecureSphere DAM app in the Orchestrate application can perform the below listed actions:

Action Name

Description

Remove DB Security Policy from an application

This action removes a DB Security Policy from the specified application.

Apply DB Security Policy to an application

This action applies a DB Security Policy to the specified application.

Remove DB Security Policy from a service

This action removes a DB security policy from the specified service.

Apply DB Security Policy to a service

This action applies a DB security policy to a specified service.

Get all DB Security Policies

This action returns a list of all DB Security Policies in the system.

Get all DB Security Policies applied to an application

This action returns a list of all DB Security Policies applied to the application.

Get all DB Security Policies applied to an service

This action returns a list of all DB Security Policies applied to a specified service.

Get Violation

This action can be used to get all Violations (Alerts).

Update IP Addresses in IP Group

This action can be used to update the IP addresses in an IP group.

Get all IP Groups

This action can be used to get all IP groups.

Create DB Audit Report

This action creates a DB audit report.

Get DB Audit Report

This action retrieves the details of a DB audit report.

Get All DB Audit Reports

This action retrieves a list of all the DB audit reports.

Configuration parameters

The following configuration parameters are required for the Imperva SecureSphere DAM app to communicate with the Imperva SecureSphere DAM enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required / Optional

Comments

Base URL

Enter the Base URL for SecureSphere. For example, https://<host.tld:port>

Text

Required

Username

Enter the username to connect to Imperva Securesphere.

Text

Required

Password

Enter the password to connect to Imperva Securesphere.

Password

Required

SSL Verification

Optional action to either verify or skip the TLS certificate verification of Imperva SecureSphere requests.

Boolean

Optional

Allowed values:

  • Yes

  • No

By default, the value is set as "No".

Action: Remove DB Security Policy from an application

This action removes a DB Security Policy from the specified application.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Site Name

Enter the Site name. For example, “Denver”

Text

Required

Server Group Name

Enter the Server Group name. For example, "HR-Prod"

Text

Required

DB Service Name

Enter the DB Service name. For example, “Payroll-Oracle9”

Text

Required

DB Application Name

Enter the DB Application name. For example, “ Oracle Application”

Text

Required

Policy Name

Enter the Policy name. For example, “SQL Storage Policy”

Text

Required

Example Request
[
    {
        "site_name": "Denver",
        "policy_name": "SQL Profile Policy",
        "db_service_name": "Payroll-Oracle9",
       "server_group_name": "HR-Prod",
        "db_application_name": "Oracle Application"
    }
]
Action: Apply DB Security Policy to an application

This action applies a DB Security Policy to the specified application.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Site Name

Enter the Site name. For example, “Denver”

Text

Required

Server Group Name

Enter the Server Group name. For example, "HR-Prod"

Text

Required

DB Service Name

Enter the DB Service name. For example, “Payroll-Oracle9”

Text

Required

DB Application Name

Enter the DB Application name. For example, “Default Oracle Application”

Text

Required

Policy Name

Enter the Policy name. For example, “SQL Profile Policy”

Text

Required

Example Request
[
    {
        "site_name": "Denver",
        "policy_name": "SQL Profile Policy",
        "db_service_name": "Payroll-Oracle9",
       "server_group_name": "HR-Prod",
        "db_application_name": "Default Oracle Application"
    }
]
Action: Remove DB Security Policy from a Service

This action removes a DB security policy from the specified service.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Site Name

Enter the Site name. For example, “Denver”

Text

Required

Server Group Name

Enter the Server Group name. For example, "HR-Prod"

Text

Required

DB Service Name

Enter the DB Service name. For example, “Payroll-Oracle9”

Text

Required

Policy Name

Enter the Policy name. For example, “Direct changes to data dictionary”

Text

Required

Example Request
[
    {
        "site_name": "Denver",
        "policy_name": "Direct changes to data dictionary",
        "db_service_name": "Payroll-Oracle9",
       "server_group_name": "HR-Prod"
    }
]
Action: Apply DB Security Policy to a Service

This action applies a DB security policy to a specified service.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Site Name

Enter the Site name. For example, “Denver”

Text

Required

Server Group Name

Enter the Server Group name. For example, "HR-Prod"

Text

Required

DB Service Name

Enter the DB Service name. For example, “Payroll-Oracle9”

Text

Required

Policy Name

Enter the Policy name. For example, “Direct changes to data dictionary”

Text

Required

Example Request
[
    {
        "site_name": "Denver",
        "policy_name": "Direct changes to data dictionary",
        "db_service_name": "Payroll-Oracle9",
       "server_group_name": "HR-Prod"
    }
]
Action: Get All DB Security Policies

This action returns a list of all DB Security Policies in the system.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Apply Level

Enter the apply-level query parameter to filter DB Security Policies by “service-level” and “application-level”.

Text

Optional

Allowed Values:

  • dbServiceLevel

  • dbAppLevel

Example Request
[
    {
        "apply_level": "dbServiceLevel"
    }
]
Action: Get all DB Security Policies applied to an application

This action returns a list of all DB Security Policies applied to the application.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Site Name

Enter the Site name. For example, “Denver”

Text

Required

Server Group Name

Enter the Server Group name. For example, "HR-Prod"

Text

Required

DB Service Name

Enter the DB Service name. For example, “Payroll-Oracle9”

Text

Required

DB Application Name

Enter the DB Applicationname. For example, “Default Oracle Application”

Text

Required

Example Request
[
    {
        "site_name": "Denver",
        "db_service_name": "Payroll-Oracle9",
       "server_group_name": "HR-Prod",
        "db_application_name": "Default Oracle Application"
    }
]
Action: Get all DB Security Policies applied to a Service

This action returns a list of all DB Security Policies applied to a specified service.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Site Name

Enter the Site name. For example, “Denver”

Text

Required

Server Group Name

Enter the Server Group name. For example, "HR-Prod"

Text

Required

DB Service Name

Enter the DB Service name. For example, “Payroll-Oracle9”

Text

Required

Example Request
[
    {
        "site_name": "Denver",
        "db_service_name": "Payroll-Oracle9",
       "server_group_name": "HR-Prod"
    }
]
Action: Get all Violations

This action can be used to get all Violations (Alerts).

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Query Parameter

Enter the query parameters in the form of key value pairs to filter the violations. For example, “lastFewDays”: “100”

Key Value

Required

Allowed values:

  • lastFewDays

  • fromDate

  • toDate

  • sourceIp

  • alertNumber

  • eventNumber

  • severity

  • requestUrPath

  • siteName

  • serverGroupName

  • serviceName

  • applicationName

  • limit

Example Request
[
    {
        "query_params": {
            "lastFewDays": "100"
        }
    }
]
Action: Update IP Addresses in IP Group

This action can be used to update the IP addresses in an IP group.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

IP Group Name

Enter the IP Group name. For example, “Connector Test”

Text

Required

Network Address

Enter the network address to update. For example, 10.10.0.0

Text

Required

CIDR Mask

Enter the CIDR mask to update. For example, 24

Text

Required

Example Request
[
    {
        "cidr_mask": "24",
        "ip_groupname": "Connector Test",
        "network_address": "10.10.0.0"
    }
]
Action: Get All IP Groups

This action can be used to get all IP groups.

Request Parameters

This action does not require request parameters.

Action: Create DB Audit Report

This action creates a DB audit report.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Report Name

Enter the report name.

Text

Optional

Body

Enter the body of the report in JSON format.

Any

Optional

Action: Get DB Audit Report

This action retrieves the details of a DB audit report.

Request Parameters

Parameter

Description

Field Type

Required / Optional

Comments

Report Name

Enter the name of the report that you need to retrieve.

Text

Optional

Action: Get All DB Audit Reports

This action returns a list of all the DB audit reports.

Request Parameters

This action does not require a request parameter.