Skip to main content

Cyware Orchestrate

Imperva SecureSphere Web Application Firewall (WAF)

App Vendor: Imperva

App Category: Network Security

Connector Version: 2.0.0

API Version: 14.5

About App

The Imperva SecureSphere Web Application Firewall (WAF) is a powerful centralized management and reporting solution that unifies and streamlines security operations to simplify distributed management.

The Imperva SecureSphere Web Application Firewall (WAF) app is configured with Orchestrate to perform the following actions:

Action Name

Description

Get All IP Groups

This acton retrieves a list of IP groups.

Update IP Group

This action updates an IP group.

Get Lookup Dataset Columns

This action returns the column information for a lookup data set.

Get Lookup Dataset Records

This action returns data from a specified range of lookup data set rows.

Add Lookup Dataset Record

This action adds a lookup dataset record.

Get Violations

This action retrieves a list of violations.

Get Lookup Datasets

This action returns a list of the names of data sets.

Update Lookup Dataset Entries

This action performs an operation (add/delete rows) on a lookup data set.

Create IP Group

This action creates an IP group.

Delete IP Group

This action deletes an IP group.

Delete IP from Group

This action deletes entries from an IP group.

Configuration Parameters

The following configuration parameters are required for the Imperva SecureSphere Web Application Firewall (WAF) app to communicate with the Imperva SecureSphere Web Application Firewall(WAF) enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Base URL

Enter the base URL for Imperva SecureSphere.

Example:

"https://host.tld:port"

Text

Required

Username

Enter the username to connect to Imperva SecureSphere.

Example:

john.doe

Text

Required

Password

Enter the password to connect to Imperva SecureSphere.

Password

Required

Verify

Set this to true to verify SSL certificate of Imperva SecureSphere requests.

Example:

true

Boolean

Optional

Default value:

false

Allowed values:

  • true

  • false

Action: Get All IP Groups

This acton retrieves a list of IP group names.

Action Input Parameters

This action does not require any action input parameters.

<div></div>
Action: Update IP Group

This action adds or removes rows in an IP group.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Type

Enter the type of network.

Example:

"single"

Text

Required

Allowed values:

  • range

  • single

  • network

Group Name

Enter the name of the IP group.

Example:

"employees"

Text

Required

Operation

Enter the operation to apply on the entry.

Example:

"add"

Text

Required

<span>Allowed values:</span>
  • <span>add</span>
  • <span>delete</span>

IP Address from

Enter the start range for range entries.

Example:

"10.10.0.0"

Text

Optional

For single entries, specify a single IP.

IP Address to

Enter the end of the range IP (v4/v6) for range entries.

Example:

"10.10.0.100"

Text

Optional

Network Address

Enter the network address.

Example:

"10.10.0.1"

Text

Optional

If the type is network, then this parameter is mandatory.

CIDR Mask

Enter network significant bits (upto 32 bits) for CIDR mask.

Example:

"24"

Text

Optional

If the type is network, then this parameter is mandatory.

Action: Get Lookup Dataset Columns

This action returns the column information for a lookup data set.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Dataset Name

Enter the name of the lookup data set.

Example:

"employees"

Text

Required

Action: Get Lookup Dataset Records

This action returns data from a specified range of lookup data set rows.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Dataset Name

Enter the name of the lookup data set.

Example:

"employees"

Text

Required

Starts from

Enter the first lookup data set row from which to return data.

Example:

3

Integer

Optional

Default:

First row of the lookup data set

Ends to

Enter the last lookup data set row from which to return data.

Example:

7

Integer

Optional

Default:

Last row of the lookup data set

Action: Get Violations

This action retrieves a list of violations.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filter Params

Enter parameters to filter out response.

Example:

{'severity':'low'}

Key Value

Required

You must provide at least one filter to filter the response.

Action: Get Lookup Datasets

This action returns a list of the names of data sets.

Action Input Parameters

This action does not require any action input parameters.

Action: Update Lookup Dataset Entries

This action performs an incremental operation (add/delete rows) on a lookup data set.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Dataset Name

Enter the name of the lookup data set.

Example:

"employees"

Text

Required

Action

Enter the action to be taken on the record.

Example:

"add"

Text

Required

Allowed values:

  • add

  • delete

The delete operation requires only the key column of the lookup data set.

Update Data

Enter the records to be updated.

Example:

$LIST[{'key':'572','user':'john doe','groups':'admin'}]

List

Required

Overwrite

Set this to true to overwrite the existing data. If set to false, then the new data is ignored.

Example:

true

Boolean

Optional

Default value:

true

Allowed values:

  • true

  • false

Action: Create IP Group

This action creates an IP group.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Group Name

Enter name of the group to be created.

Example:

"employee"

Text

Required

Type

Enter the type of network.

Example:

"single"

Text

Required

Allowed values:

  • range

  • single

  • network

IP Address from

Enter the start range for range entries.

Example:

"10.10.0.0"

Text

Optional

For single entries, specify a single IP.

IP Address to

Enter the end of the range IP (v4/v6) for range entries. Example:

"10.10.0.100"

Text

Optional

Network Address

Enter the network address.

Example:

"10.10.0.1"

Text

Optional

If the type is network, then this parameter is mandatory.

CIDR Mask

Enter network significant bits (upto 32 bits) for CIDR mask.

Example:

"24"

Text

Optional

If the type is network, then this parameter is mandatory.

Action: Delete IP Group

This action deletes an IP group.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Group Name

Enter name of the group to be deleted.

Example:

"sampleipgroup"

Text

Required

Action: Delete IP From Group

This action deletes entries from an IP group.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Group Name

Enter name of the group from which you want to delete entries (IP addresses).

Example:

"samplegroupname"

Text

Required

Action: Add Lookup Dataset Record

This action adds a lookup dataset record.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Dataset Name

Enter the dataset name.

Example:

"sampledata"

Text

Required

Update Data

Enter the data to update.

Example:

{"key":"351","user":"jack norton","groups":["r&d","finance","supervisors"]}

Key Value

Required