Farsight DNSDB

This integration uses Farsight Security’s DNSDB solution to interactively lookup rich, historical DNS information – either as playbook tasks or through API calls in the War Room – to access rdata and rrset records.

To set up Farsight Security DNSDB to work with Demisto:

User will need DNSDB’s API key and service URL for connecting to the Demisto server.

To set up the integration on Demisto:

  1. Go to ‘Settings > Integrations > Servers & Services’
  2. Locate the DNSDB integration by searching for ‘Farsight DNSDB’ using the search box on the top of the page.
  3. Click ‘Add instance’ to create and configure a new integration. You should configure the following DNSDB and Demisto specific settings:
    Name : A textual name for the integration instance.
    API Key : The API key that user gets from Farsight Security.
    DNSDB Service URL : The service URL for Farsight DNSDB.
    Use system proxy settings : Select whether or not to communicate via the system proxy server.
    Demisto engine : If relevant, select the engine that acts as a proxy to the server.
    Engines are used when you need to access a remote network segments and there are network devices such as proxies, firewalls, etc. that prevent the Demisto server from accessing the remote networks.
    For more information on Demisto engines see:
    https://demisto.zendesk.com/hc/en-us/articles/226274727-Settings-Integrations-Engines
  4. Press the ‘Test’ button to validate connection.
    If you are experiencing issues with the service configuration, please contact Demisto support at support@demisto.com .
  5. After completing the test successfully, press the ‘Done’ button.