Skip to main content

Cyware Orchestrate

Imperva Incapsula Cloud WAF 1.0.0

Connector Category: Network Security

Connector Version: 1.0.1

API Version: 1.0.0

About App

The Imperva Incapsula Cloud WAF app is configured with Orchestrate to perform the following actions:

Action Name

Description

Get IP Reputation Intelligence

This action retrieves reputation intelligence details for an IP address.

Get Insights

This action retrieves a collection of general insights.

Get Incident Statistics

This action retrieves statistics for an incident.

Get Incident Event Sample

This action retrieves a sample of the events that comprise an incident.

List Incidents

This action retrieves a list of incidents between the timestamp boundaries.

Configuration Parameters

Below is the list of configuration parameters that are required for the Imperva app. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comment

Account ID

Enter the account ID for the Imperva Incapsula WAF application.

Text

Required

API ID

Enter the API ID for the Incapsula Cloud WAF Instance.

Text

Required

API Key

Enter the API Key for your Imperva Incapsula Cloud WAF account.

Password

Required

Action: Reverse IP address lookup

This action is used to search rdata index, which supports an "inverse" with wildcard lookup based on rdata record values for IP addresses and their DNS Type.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

IP Address

Enter the IP address you need to get the reputation.

Text

Required

Example Request
[
  {
    "ip_address": "1.1.1.1",
  }
]
Action: Get Insights

This action retrieves a collection of general insights.

Input Parameters

No Input parameters are required for this action

Action: Get Incident Statistics

This action retrieves statistics for the incident with the provided ID.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Incident ID

Enter the Incident ID to get the statistics.

Text

Required

Example Request
[
  {
    "incident_id": "Example Incident ID",
  }
]
Get Incident Event Sample

This action retrieves a sample of the events that comprise an incident.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Incident ID

Enter the Incident ID to get the statistics.

Text

Required

Example Request
[
  {
    "incident_id": "Example Incident ID",
  }
]
Action: List Incidents

This action retrieves a list of incidents between the provided timestamp boundaries.

Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

From Timestamp

Enter the time from which incident records have to be fetched.

Integer

Required

The earliest time boundary for returned incidents is specified as a number of milliseconds since midnight 1970.

Note: Time format is Epoch.

To Timestamp

Enter the time up to which incident records have to be fetched.

Integer

Required

Note: Time format is Epoch

Example Request
[
  {
    "to_timestamp": 1625843754000,
    "from_timetamp": 1625843753000
  }
]