Illumio Rapid Ransomware Containment

Details
Content
Dependencies
Version History

Download With Dependencies

Provides integrations and playbooks to interact with Illumio Core APIs and automate network security tasks

Connects to Illumio Core APIs to perform investigative and restorative actions.

What does this pack do?

Retrieves the traffic analysis of a particular port/protocol.
Creates segmentation rule-sets for workloads.
Create enforcement boundaries for micro-segmentation.
These steps collectively provide the functionality of blocking a particular port.

Connects to Illumio Core APIs to perform investigative and restorative actions.

What does this pack do?

Retrieves the traffic analysis of a particular port/protocol.
Creates segmentation rule-sets for workloads.
Create enforcement boundaries for micro-segmentation.
These steps collectively provide the functionality of blocking a particular port.

Integrations

Name	Description
Illumio Core (Partner Contribution)	Connects to Illumio Core APIs to perform investigative and restorative actions.

Playbooks

Name	Description
Rapid ransomware containment - Illumio	Isolate one or more workloads based on traffic flows to a given port/protocol.
Update enforcement mode - Illumio	Update the enforcement mode for one or more workloads.

Integrations

Name	Description
Illumio Core (Partner Contribution)	Connects to Illumio Core APIs to perform investigative and restorative actions.

Playbooks

Name	Description
Update enforcement mode - Illumio	Update the enforcement mode for one or more workloads.
Rapid ransomware containment - Illumio	Isolate one or more workloads based on traffic flows to a given port/protocol.

Required Content Packs (3)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (4)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Base	By: Cortex XSOAR

1.0.20 - 827009 (February 14, 2024)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.87381.

Related pull requests:
- 32902

Download

1.0.19 - 753737 (January 10, 2024)

Playbooks

Rapid ransomware containment - Illumio

Fixed an issue where the playbook included a hardcoded IP list HREF.
Updated the traffic analysis form title to avoid a validation error.

Related pull requests:
- 31921
- 32103
- 11

Download

1.0.18 - 752611 (January 9, 2024)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.83370.

Related pull requests:
- 32077

Download

1.0.17 - 6864790 (November 12, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.80140.

Related pull requests:
- 30824

Download

1.0.16 - 6715201 (October 26, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.79245.

Related pull requests:
- 30442

Download

1.0.15 - 6285754 (September 10, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.73482.

Related pull requests:
- 29538

Download

1.0.14 - 6117817 (August 22, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.69458.

Related pull requests:
- 29114

Download

1.0.13 - 5955738 (August 4, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.66588.

Related pull requests:
- 28766

Download

1.0.12 - R5866730 (July 25, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.65903.

Related pull requests:
- 28335

Download

1.0.11 - R5801668 (July 18, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.63702.

Related pull requests:
- 27510

Download

1.0.10 - R5450895 (June 5, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.61957.

Related pull requests:
- 27087

Download

1.0.9 - 5277943 (May 16, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.58799.

Related pull requests:
- 26541

Download

1.0.8 - R5170573 (May 2, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.56623.

Related pull requests:
- 26191

Download

1.0.7 - 5057113 (April 17, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.54459.

Related pull requests:
- 25893

Download

1.0.6 - 4910116 (March 27, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.51085.

Related pull requests:
- 25541

Download

1.0.5 - 4771215 (March 8, 2023)

Playbooks

Update enforcement mode - Illumio

Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.0.4 - R4718798 (March 1, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.48839.

Related pull requests:
- 24799

Download

1.0.3 - R4646022 (February 19, 2023)

Integrations

Illumio Core

Updated the Docker image to: demisto/illumio:1.0.0.47302.

Related pull requests:
- 24394

Download

PUBLISHER

Illumio

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Partner
Created	December 7, 2022
Last Release	February 14, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.