Device Intelligence supports integration with the following plugins:
- Tanium
- Qualys
- ServiceNow
- Infoblox
- Microsoft Entra ID (formerly Azure AD)
- Forescout
This article provides detailed information for each plugin.
Tanium Integration
The Tanium plugin retrieves inventoried device data from the Assets module.
Required Configuration Parameters
- Tanium Host: Instance URL of the Tanium platform
- API Token: API token for the Tanium instance
Device Attributes
Device Intelligence maps the following fields from Tanium:
| Tanium Source Field | Data Type |
|---|---|
| ci_network_adapter.mac_address | str |
| system_uuid | str |
| user_name[:32] | str |
| computer_name | str |
| ip_address | str |
| city, country | str |
| last_seen_at | str |
| manufacturer | str |
| model | str |
| operating_system | str |
| os_version | str |
| serial_number | str |
Qualys Integration
The Qualys plugin retrieves asset inventory and vulnerability data from the Qualys platform.
Required Configuration Parameters
- Username: Username for the Qualys instance
- Password: Password for the Qualys instance
- Qualys API Gateway URL: API gateway URL of the Qualys platform
Device Attributes
Device Intelligence maps the following fields from Qualys:
| Qualys Source Field | Data Type |
|---|---|
| networkInterfaceListData.networkInterface[i].macAddress | String |
| assetUUID | String |
| hardware.category | String |
| lastModifiedDate | String |
| assetName | String |
| address | String |
| lastLocation.name | String |
| hardware.manufacturer | String |
| hardware.model | String |
| operatingSystem.osName | String |
| operatingSystem.version | String |
| assetType | String |
| tagList.tag.tagName | String |
| agent.version | String |
| userAccountListData.userAccount.name | String |
| reference | String |
| launch_date | Date/Time |
| qid | String |
| title | String |
| severity | String |
| port | String |
| cve_id | String |
| category | String |
ServiceNow Integration
The ServiceNow plugin retrieves asset data from the ServiceNow alm_asset table.
Required Configuration Parameters
- ServiceNow URL: Instance URL of the ServiceNow platform
- Username: Username for the ServiceNow instance
- Password: Password for the ServiceNow instance
Device Attributes
Device Intelligence maps the following fields from ServiceNow:
| ServiceNow Source Field | Data Type |
|---|---|
| ci.mac_address | str |
| sys_id | str |
| model_category.name | str |
| sys_updated_on | str |
| display_name | str |
| ci.ip_address | str |
| ci.location.name | str |
| ci.manufacturer.name | str |
| model.name | str |
| serial_number | str |
| asset_tag | str |
| assigned_to.user_name | str |
| sys_created_by | str |
| ci.sys_class_name | str |
| ci.sys_class_name.os_version | str |
Infoblox Integration
The Infoblox plugin retrieves active DHCP lease data from the Infoblox platform.
Required Configuration Parameters
- Infoblox URL: Instance URL of the Infoblox platform
- Username: Username for the Infoblox instance
- Password: Password for the Infoblox instance
Device Attributes
Device Intelligence maps the following fields from Infoblox:
| Infoblox Source Field | Data Type |
|---|---|
| hardware | str |
| address | str |
| client_hostname | str |
| server_host_name | str |
| username | str |
| discovered_data.os | str |
| discovered_data.device_location | str |
| discovered_data.device_model | str |
| discovered_data.device_vendor | str |
| discovered_data.device_type | str |
Microsoft Entra ID Integration
The Microsoft Entra ID plugin retrieves managed device data from Microsoft Entra ID.
Required Configuration Parameters
- Tenant ID: Tenant ID of the Microsoft Entra ID platform
- Client ID: Application (client) ID
- Client Secret: Client secret value
Device Attributes
Device Intelligence maps the following fields from Microsoft Entra ID:
| Entra ID Source Field | Data Type |
|---|---|
| ethernetMacAddress | str |
| id | str |
| lastSyncDateTime | str |
| operatingSystem | str |
| osVersion | str |
| deviceCategoryDisplayName | str |
| userDisplayName | str |
| model | str |
| manufacturer | str |
| serialNumber | str |
Forescout Integration
The Forescout plugin retrieves device inventory data discovered by the Forescout platform.
Required Configuration Parameters
- Forescout Host: Base URL of the Forescout platform (for example, https://<instance>). Do not include trailing slashes or paths.
- API Token: Bearer token used to authenticate API requests
- SSL Validation: Enable to validate SSL certificates (default). Disable only for test environments
Device Attributes
Device Intelligence maps the following fields from Forescout:
| Forescout Source Field | Max Length | Min Length |
|---|---|---|
| ip_addresses[0] | — | — |
| mac_addresses[0] | — | — |
| rem_os | 128 chars | 2 chars |
| rem_vendor | 64 chars | 2 chars |
| rem_category | 32 chars | 2 chars |
| id | 128 chars | 2 chars |