In this installment of the Tips and Insights series, Mohammad Anwar gives a brief overview of devices for FireEye Security Orchestrator (FSO).
Hi, my name is Mohammad Anwar and I’m a Security Integration Engineer on the Orchestration Architecture team with FireEye. Today I’ll give you an overview of the devices for the FireEye Security Orchestrator. I’ll go over what devices are, how to create them and configure them for use in a playbook including inputs, outputs and types. Devices are logical containers used in the FireEye Security Orchestrator to store information about the connection to the third party appliance. In order to use a plugin a device must be created and configured so it can be used in a playbook. I’ll be going over how to do that next. In order to create a device, we must first confirm that the plugin is installed, so let’s go head over to the plugins tab and verify that the plugin for ‘info blocks’ is installed.
And we can see that it is installed here and we have the empty parameters, so we can go in to the devices. Select a new device, go to the dropdown and select the plugin ‘info blocks’. We would give it a name and now we can fill in the device parameters.
So we have the username, the password and the base IP and we can go ahead and click Create and once we hit refresh we can see that the device is created and go ahead and enable that. This concludes the overview for the devices in FireEye Security Orchestrator. I hope this overview gives you an understanding of devices and how to use them in FSO . Thank you for taking the time to check out our plugin overview series and stay tuned for more FireEye Tips and Insights.