ExtraHop - Adaptive Plugins - BlueCat Gateway - 20.3.0

ExtraHop Administration Guide

prodname
BlueCat Gateway
version_custom
20.3.0

BlueCat Adaptive Plugins are scripts that integrate the BlueCat Adaptive DNS platform, DNS Integrity, with third-party IT applications and services, or automate common tasks and workflows. These Adaptive Plugins help optimize existing IT investments, providing instant access and integration of BlueCat into a broader ecosystem of solutions.

The ExtraHop Networks Package is an Adaptive Plugin that provides automatic pointer records (PTR) healing when ExtraHop Reveal(x) detects an invalid PTR response from the DNS server. Normally, one of the many low hanging fruits in many environments are the missing reverse records. Additionally, when ExtraHop Reveal(x) detects a threat, you can now automatically push a policy to Edge to block the question traffic.

Capabilities
  • Automatically create the reverse records
  • By date, see reverse records that were healed in Address Manager
  • Auto-create Edge metadata: Domain List called (RevealX Blocked Threats), Site Group called (RevealX Sites), and Policy called (RevealX Threats Blocked)
  • Auto-enforce, adding a threat to the domain list