Centralized Control and Monitoring of Privileged Access to Sensitive Assets.

WALLIX Bastion

Easy to deploy and easy to use, the WALLIX PAM delivers robust security and helps maintain control of privileged access to critical IT infrastructure. Streamlined PAM reduces the attack surface and supports compliance with regulatory standards.

What does this pack do

This pack contains an integration for Bastion appliances. It provides an access to a large part of the Bastion API to enable users, targets and sessions management automation.

Read the integration description for more details on the supported Bastion versions.

Notice

This pack is in beta. It is recommended to test manually every command that you want to automate beforehand.

Pack Contributors:

Yoenn Burban
Bryce Simon

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

WALLIX Bastion

What does this pack do

This pack contains an integration for Bastion appliances. It provides an access to a large part of the Bastion API to enable users, targets and sessions management automation.

Read the integration description for more details on the supported Bastion versions.

Notice

This pack is in beta. It is recommended to test manually every command that you want to automate beforehand.

Pack Contributors:

Yoenn Burban
Bryce Simon

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Integrations

Name	Description
WALLIX Bastion (Partner Contribution)	Centralized Control and Monitoring of Privileged Access to Sensitive Assets.

Integrations

Name	Description
WALLIX Bastion (Partner Contribution)	Centralized Control and Monitoring of Privileged Access to Sensitive Assets.

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

3.1.4 - 7839944 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43569

Download

3.1.3 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

3.1.2 - R5469292 (October 20, 2025)

Integrations

WALLIX Bastion

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41158

Download

3.1.1 - R3534539 (May 25, 2025)

Integrations

WALLIX Bastion

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

3.1.0 - 2074399 (January 26, 2025)

Integrations

WALLIX Bastion

Removed unneeded parameters:

Breaking changes: wab-add-notification: removed notification_post_type
Breaking changes: wab-edit-notification: removed notification_put_type
Added new commands:
wab-add-user-group
wab-edit-user-group
wab-delete-user-group
wab-get-external-authentications
wab-get-external-authentication
wab-add-global-domain
wab-delete-global-domain
wab-add-local-domain-in-application
wab-delete-local-domain-from-application
wab-add-local-domain-in-device
wab-delete-local-domain-from-device
wab-get-global-domain-account-credentials
wab-get-global-domain-account-credential
wab-add-credential-to-global-domain-account
wab-edit-credential-of-global-domain-account
wab-add-credential-to-application-account
wab-edit-credential-of-application-account
wab-get-application-account-credentials
wab-get-device-account-credentials, wab-get-device-account-credential
wab-edit-credential-of-device-account
Documented more optional command outputs:
for wab-get-applications and wab-get-application:
- cluster
- target
- paths.target
- paths.program
- paths.working_dir
- global_domains
- application_url
for wab-get-auth-domains and wab-get-auth-domain:
- certificate_authority
- enable_ca
- check_x509_san_email
- san_domain_name
- x509_condition
- x509_search_filter
- group_attribute
- display_name_attribute
- pubkey_attribute
- email_attribute
- language_attribute
- label
- entity_id
- client_id
- client_secret
- certificate
- private_key
- idp_initiated_url
- force_authn
for wab-get-connection-policies and wab-get-connection-policy:
- authentication_methods
for wab-get-devices, wab-get-device, wab-get-services-of-device, wab-get-service-of-device:
- subprotocols
- multi_tunneling
- enabled
- additional_interfaces
  - ip
  - port
for wab-get-object-to-onboard:
- device_name
- alias, host
- last_connection
- local_domains
- id
- domain_name
- description
- enable_password_change
- admin_account
- password_change_policy
- password_change_plugin
- ca_private_key
- ca_public_key
- url
- tags
- key
- value
- accounts
- id
- account_name
- account_login
- description
- credentials
  - id
  - type
  - password
  - private_key
  - passphrase
  - public_key
  - key_type
  - key_len
  - key_id
  - certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- onboard_status
- first_seen / last_seen
  - id
  - type
  - error
  - status
  - start
  - end
- url
- last_login
- is_admin
- scanned_groups
- account_name
- domain
- device
- application
- account_login
- credentials
- id
- type
- password
- private_key
- passphrase
- public_key
- key_type
- key_len
- key_id
- certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- resources
for wab-get-passwordrights and wab-get-passwordrights-user-name:
- timeframes
- device
- device_alias
- device_host
- device_description
- device_tags
- id
- key
- value
- application
- application_description
- application_tags
- id
- key
- value
- group_timeframes
for wab-get-scans and wab-get-scan:
- subnets
- protocols
- protocol
- port
- banner_regex
- scan_for_accounts
- master_accounts
- search_filter
- userauth
- auth_id
- auth_name
- dn_list
- devices
- protocol
- protocol
- port
for wab-get-sessionrights and wab-get-sessionrights-user-name:
- device
- device_alias
- device_host
- device_description
- service_port
- subprotocols
- session_sharing
- authentication_methods
- device_tags
- id
- key
- value
- service_options
- multi_tunneling
  - enabled
  - additional_interfaces
  - ip
  - port
- seamless_connection
- application
- application_description
- application_tags
- id
- key
- value
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38193
- 38302

Download

3.0.0 - R1709192 (November 26, 2024)

Integrations

WALLIX Bastion

The integration now returns the ID of created objects on the Bastion.
Added support for nullable arguments.
Added new commands:
- wab-add-connection-policy
- wab-add-mapping-in-domain
- wab-add-password-change-policy
- wab-add-restriction-to-usergroup
- wab-add-timeframe
- wab-add-timeframe-period
- wab-change-password-or-ssh-key-of-account
- wab-delete-connection-policy
- wab-delete-mapping-of-domain
- wab-delete-password-change-policy
- wab-delete-restriction-from-targetgroup
- wab-delete-restriction-from-usergroup
- wab-delete-scan
- wab-delete-timeframe
- wab-edit-connection-policy
- wab-edit-mapping-of-domain
- wab-edit-mappings-of-domain
- wab-edit-password-change-policy
- wab-edit-restriction-from-targetgroup
- wab-edit-restriction-from-usergroup
- wab-edit-scan
- wab-edit-timeframe
- wab-edit-user
- wab-get-cluster
- wab-get-clusters
- wab-get-connection-policies
- wab-get-connection-policy
- wab-get-external-authentication-group-mappings
- wab-get-local-domain-data-for-application
- wab-get-local-domain-of-device
- wab-get-local-domains-data-for-application
- wab-get-local-domains-of-device
- wab-get-mapping-of-domain
- wab-get-mappings-of-domain
- wab-get-target-group-restriction
- wab-get-user-group-restriction
- wab-get-password-change-policies
- wab-get-password-change-policy
- wab-get-passwordrights
- wab-get-passwordrights-user-name
- wab-get-version
- wab-get-target-group-restrictions
- wab-get-timeframe
- wab-get-timeframes
- wab-get-user-group-restrictions
Updated wab-add-service-in-device arguments:
- set service_post_subprotocols as not required.
- added service_post_seamless_connection option for RAWTCPIP.
Updated wab-edit-service-of-device arguments:
- added service_post_subprotocols.
- added service_put_seamless_connection option for RAWTCPIP.
Updated wab-edit-application arguments:
- added application_put_global_domains.
Breaking changes: removed deprecated command wab-get-metadata-of-one-or-multiple-sessions.
Breaking changes: removed deprecated argument application_put__meters from wab-edit-application.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Updated the Docker image to: demisto/python3:3.11.10.113941.

Related pull requests:
- 36828
- 36540

Download

3.1.4 - 7839944 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43569

Download

3.1.3 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

3.1.2 - R5469292 (October 20, 2025)

Integrations

WALLIX Bastion

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41158

Download

3.1.1 - R3534539 (May 25, 2025)

Integrations

WALLIX Bastion

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

3.1.0 - 2074399 (January 26, 2025)

Integrations

WALLIX Bastion

Removed unneeded parameters:

Breaking changes: wab-add-notification: removed notification_post_type
Breaking changes: wab-edit-notification: removed notification_put_type
Added new commands:
wab-add-user-group
wab-edit-user-group
wab-delete-user-group
wab-get-external-authentications
wab-get-external-authentication
wab-add-global-domain
wab-delete-global-domain
wab-add-local-domain-in-application
wab-delete-local-domain-from-application
wab-add-local-domain-in-device
wab-delete-local-domain-from-device
wab-get-global-domain-account-credentials
wab-get-global-domain-account-credential
wab-add-credential-to-global-domain-account
wab-edit-credential-of-global-domain-account
wab-add-credential-to-application-account
wab-edit-credential-of-application-account
wab-get-application-account-credentials
wab-get-device-account-credentials, wab-get-device-account-credential
wab-edit-credential-of-device-account
Documented more optional command outputs:
for wab-get-applications and wab-get-application:
- cluster
- target
- paths.target
- paths.program
- paths.working_dir
- global_domains
- application_url
for wab-get-auth-domains and wab-get-auth-domain:
- certificate_authority
- enable_ca
- check_x509_san_email
- san_domain_name
- x509_condition
- x509_search_filter
- group_attribute
- display_name_attribute
- pubkey_attribute
- email_attribute
- language_attribute
- label
- entity_id
- client_id
- client_secret
- certificate
- private_key
- idp_initiated_url
- force_authn
for wab-get-connection-policies and wab-get-connection-policy:
- authentication_methods
for wab-get-devices, wab-get-device, wab-get-services-of-device, wab-get-service-of-device:
- subprotocols
- multi_tunneling
- enabled
- additional_interfaces
  - ip
  - port
for wab-get-object-to-onboard:
- device_name
- alias, host
- last_connection
- local_domains
- id
- domain_name
- description
- enable_password_change
- admin_account
- password_change_policy
- password_change_plugin
- ca_private_key
- ca_public_key
- url
- tags
- key
- value
- accounts
- id
- account_name
- account_login
- description
- credentials
  - id
  - type
  - password
  - private_key
  - passphrase
  - public_key
  - key_type
  - key_len
  - key_id
  - certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- onboard_status
- first_seen / last_seen
  - id
  - type
  - error
  - status
  - start
  - end
- url
- last_login
- is_admin
- scanned_groups
- account_name
- domain
- device
- application
- account_login
- credentials
- id
- type
- password
- private_key
- passphrase
- public_key
- key_type
- key_len
- key_id
- certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- resources
for wab-get-passwordrights and wab-get-passwordrights-user-name:
- timeframes
- device
- device_alias
- device_host
- device_description
- device_tags
- id
- key
- value
- application
- application_description
- application_tags
- id
- key
- value
- group_timeframes
for wab-get-scans and wab-get-scan:
- subnets
- protocols
- protocol
- port
- banner_regex
- scan_for_accounts
- master_accounts
- search_filter
- userauth
- auth_id
- auth_name
- dn_list
- devices
- protocol
- protocol
- port
for wab-get-sessionrights and wab-get-sessionrights-user-name:
- device
- device_alias
- device_host
- device_description
- service_port
- subprotocols
- session_sharing
- authentication_methods
- device_tags
- id
- key
- value
- service_options
- multi_tunneling
  - enabled
  - additional_interfaces
  - ip
  - port
- seamless_connection
- application
- application_description
- application_tags
- id
- key
- value
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38193
- 38302

Download

3.0.0 - R1709192 (November 26, 2024)

Integrations

WALLIX Bastion

The integration now returns the ID of created objects on the Bastion.
Added support for nullable arguments.
Added new commands:
- wab-add-connection-policy
- wab-add-mapping-in-domain
- wab-add-password-change-policy
- wab-add-restriction-to-usergroup
- wab-add-timeframe
- wab-add-timeframe-period
- wab-change-password-or-ssh-key-of-account
- wab-delete-connection-policy
- wab-delete-mapping-of-domain
- wab-delete-password-change-policy
- wab-delete-restriction-from-targetgroup
- wab-delete-restriction-from-usergroup
- wab-delete-scan
- wab-delete-timeframe
- wab-edit-connection-policy
- wab-edit-mapping-of-domain
- wab-edit-mappings-of-domain
- wab-edit-password-change-policy
- wab-edit-restriction-from-targetgroup
- wab-edit-restriction-from-usergroup
- wab-edit-scan
- wab-edit-timeframe
- wab-edit-user
- wab-get-cluster
- wab-get-clusters
- wab-get-connection-policies
- wab-get-connection-policy
- wab-get-external-authentication-group-mappings
- wab-get-local-domain-data-for-application
- wab-get-local-domain-of-device
- wab-get-local-domains-data-for-application
- wab-get-local-domains-of-device
- wab-get-mapping-of-domain
- wab-get-mappings-of-domain
- wab-get-target-group-restriction
- wab-get-user-group-restriction
- wab-get-password-change-policies
- wab-get-password-change-policy
- wab-get-passwordrights
- wab-get-passwordrights-user-name
- wab-get-version
- wab-get-target-group-restrictions
- wab-get-timeframe
- wab-get-timeframes
- wab-get-user-group-restrictions
Updated wab-add-service-in-device arguments:
- set service_post_subprotocols as not required.
- added service_post_seamless_connection option for RAWTCPIP.
Updated wab-edit-service-of-device arguments:
- added service_post_subprotocols.
- added service_put_seamless_connection option for RAWTCPIP.
Updated wab-edit-application arguments:
- added application_put_global_domains.
Breaking changes: removed deprecated command wab-get-metadata-of-one-or-multiple-sessions.
Breaking changes: removed deprecated argument application_put__meters from wab-edit-application.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Updated the Docker image to: demisto/python3:3.11.10.113941.

Related pull requests:
- 36828
- 36540

Download

Certification	Certified	Read more
Supported By	Partner
Created	May 15, 2023
Last Release	March 22, 2026

WALLIX Bastion

WALLIX Bastion

What does this pack do

Notice

Pack Contributors:

WALLIX Bastion

What does this pack do

Notice

Pack Contributors:

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

PUBLISHER

PLATFORMS

INFO

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER