Skip to content

Commit 396575c

Browse files
committed
update integration docs
1 parent 15eea7a commit 396575c

File tree

6 files changed

+56
-6
lines changed

6 files changed

+56
-6
lines changed

crowdsec-docs/unversioned/integrations/checkpoint.mdx

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,7 @@ Once the integration is generated you will be presented with a credentials scree
5050

5151
## Checkpoint Configuration
5252

53+
5354
In the gateways and servers tab, double-click on the specific gateway you want to configure
5455

5556
![](/img/checkpoint_step1.png)
@@ -82,7 +83,7 @@ Check That the feed is working and save the configuration.
8283

8384
![](/img/checkpoint_step6.png)
8485

85-
You can also take a look at the [Checkpoint Documentation](https://support.checkpoint.com/results/sk/sk132193) for more information (if you want to do it using CLI):
86+
You can also take a look at the [Checkpoint Documentation](https://support.checkpoint.com/results/sk/sk132193) for more information (if you want to do it using CLI).
8687

8788
## Format example
8889

crowdsec-docs/unversioned/integrations/cisco.mdx

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,7 @@ Once the integration is generated you will be presented with a credentials scree
5050
Depending on the make and model of your Cisco firewall, you will need to follow the appropriate steps to ingest the blocklist. We provide public documentation that we found on Cisco devices, however, we recommend you refer to the official Cisco documentation for your device.
5151

5252
[Cisco Documentation](https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/710/management-center-device-config-71/objects-object-mgmt.html#ID-2243-00000291)
53+
[Youtube tutorial](https://www.youtube.com/watch?v=OdD9GOjfB3U)
5354

5455
## Format example
5556

crowdsec-docs/unversioned/integrations/fortinet.mdx

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ Once the integration is generated you will be presented with a credentials scree
4949
/>
5050

5151
[Fortinet Documentation](https://docs.fortinet.com/document/fortigate/6.4.5/administration-guide/891236/external-blocklist-policy)
52+
[Youtube tutorial](https://www.youtube.com/watch?v=E3b4Yr2zf_s)
5253

5354
## Format example
5455

crowdsec-docs/unversioned/integrations/juniper.mdx

Lines changed: 50 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,56 @@ Once the integration is generated you will be presented with a credentials scree
4848
}}
4949
/>
5050

51-
[Juniper Documentation JunOS](https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/security-utm-custom-objects-url-feed.html)
51+
[Juniper Documentation JunOS](https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/edit-security-dynamic-address.html)
52+
53+
## Configuration Example
54+
55+
### define the feed server
56+
57+
```
58+
set security dynamic-address feed-server crowdsec-feed description "CrowdSec Feed"
59+
set security dynamic-address feed-server crowdsec-feed url https://<USERNAME>:<PASSWORD>@admin.api.crowdsec.net
60+
```
61+
62+
### define the threat feed and the update interval
63+
64+
```
65+
set security dynamic-address feed-server crowdsec-feed feed-name crowdsec-feed description "CrowdSec Feed"
66+
set security dynamic-address feed-server crowdsec-feed feed-name crowdsec-feed path /v1/integrations/<integration_id>/content
67+
set security dynamic-address feed-server crowdsec-feed feed-name crowdsec-feed update-interval 120 hold-interval 43200
68+
```
69+
70+
### Define AddressName-to-ThreatFeed mapping
71+
72+
```
73+
set security dynamic-address address-name crowdsec-feed address-name crowdsec-feed feed-name crowdsec-feed
74+
```
75+
76+
### Review and commit the configuration
77+
78+
```
79+
show security dynamic-address
80+
```
81+
82+
The output should look like this:
83+
84+
```
85+
feed-server crowdsec-feed {
86+
description "CrowdSec Feed";
87+
url https://<USERNAME>:<PASSWORD>@admin.api.crowdsec.net;
88+
feed-name crowdsec-feed {
89+
description CrowdSec Feed;
90+
path /v1/integrations/<integration_id>/content;
91+
update-interval 120;
92+
hold-interval 43200;
93+
}
94+
}
95+
address-name crowdsec-feed {
96+
profile {
97+
feed-name crowdsec-feed;
98+
}
99+
}
100+
```
52101

53102
## Format example
54103

crowdsec-docs/unversioned/integrations/paloalto.mdx

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ Once the integration is generated you will be presented with a credentials scree
4949
/>
5050

5151
[Palo Alto Documentation](https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/external-dynamic-list#idf36cb80a-77f1-4d17-9c4b-7efe9fe426af)
52+
[Video Tutorial](https://www.youtube.com/watch?v=QFVI4sOFoaI)
5253

5354
## Format example
5455

crowdsec-docs/unversioned/integrations/sophos.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ Once the integration is generated you will be presented with a credentials scree
4949
/>
5050

5151
[Sophos Documentation ↗️](https://docs.sophos.com/nsg/sophos-firewall/latest/Help/en-us/webhelp/onlinehelp/AdministratorHelp/ActiveThreatResponse/ConfigureFeeds/ThirdPartyThreatFeeds/index.html)
52+
[Video provided by Sophos on how to integrate CrowdSec](https://techvids.sophos.com/share/watch/2yEPSmMGQdhH4HnSXK9teU?autoplay=2&second=226.41)
5253

5354
## Format example
5455

@@ -59,10 +60,6 @@ The CrowdSec blocklist will be in plain text format, with one IP address per lin
5960
192.168.38.186
6061
```
6162

62-
## External Resources
63-
64-
- [Video provided by Sophos on how to integrate CrowdSec](https://techvids.sophos.com/share/watch/2yEPSmMGQdhH4HnSXK9teU?autoplay=2&second=226.41)
65-
6663
## Contribute to this documentation
6764

6865
Since CrowdSec is a community-driven project, we welcome contributions to this documentation. If you have any instructions or tips that you would like to share with the community, please feel free to open a pull request on our [GitHub repository](https://github.com/crowdsecurity/crowdsec-docs)

0 commit comments

Comments
 (0)