Centralized Control and Monitoring of Privileged Access to Sensitive Assets.

WALLIX Bastion

Easy to deploy and easy to use, the WALLIX PAM delivers robust security and helps maintain control of privileged access to critical IT infrastructure. Streamlined PAM reduces the attack surface and supports compliance with regulatory standards.

What does this pack do

This pack contains an integration for Bastion appliances. It provides an access to a large part of the Bastion API to enable users, targets and sessions management automation.

Read the integration description for more details on the supported Bastion versions.

Notice

This pack is in beta. It is recommended to test manually every command that you want to automate beforehand.

Pack Contributors:

Yoenn Burban
Bryce Simon

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

WALLIX Bastion

What does this pack do

This pack contains an integration for Bastion appliances. It provides an access to a large part of the Bastion API to enable users, targets and sessions management automation.

Read the integration description for more details on the supported Bastion versions.

Notice

This pack is in beta. It is recommended to test manually every command that you want to automate beforehand.

Pack Contributors:

Yoenn Burban
Bryce Simon

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Integrations

Name	Description
WALLIX Bastion (Partner Contribution)	Centralized Control and Monitoring of Privileged Access to Sensitive Assets.

Integrations

Name	Description
WALLIX Bastion (Partner Contribution)	Centralized Control and Monitoring of Privileged Access to Sensitive Assets.

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

3.1.0 - 2074399 (January 26, 2025)

Integrations

WALLIX Bastion

Removed unneeded parameters:

Breaking changes: wab-add-notification: removed notification_post_type
Breaking changes: wab-edit-notification: removed notification_put_type
Added new commands:
wab-add-user-group
wab-edit-user-group
wab-delete-user-group
wab-get-external-authentications
wab-get-external-authentication
wab-add-global-domain
wab-delete-global-domain
wab-add-local-domain-in-application
wab-delete-local-domain-from-application
wab-add-local-domain-in-device
wab-delete-local-domain-from-device
wab-get-global-domain-account-credentials
wab-get-global-domain-account-credential
wab-add-credential-to-global-domain-account
wab-edit-credential-of-global-domain-account
wab-add-credential-to-application-account
wab-edit-credential-of-application-account
wab-get-application-account-credentials
wab-get-device-account-credentials, wab-get-device-account-credential
wab-edit-credential-of-device-account
Documented more optional command outputs:
for wab-get-applications and wab-get-application:
- cluster
- target
- paths.target
- paths.program
- paths.working_dir
- global_domains
- application_url
for wab-get-auth-domains and wab-get-auth-domain:
- certificate_authority
- enable_ca
- check_x509_san_email
- san_domain_name
- x509_condition
- x509_search_filter
- group_attribute
- display_name_attribute
- pubkey_attribute
- email_attribute
- language_attribute
- label
- entity_id
- client_id
- client_secret
- certificate
- private_key
- idp_initiated_url
- force_authn
for wab-get-connection-policies and wab-get-connection-policy:
- authentication_methods
for wab-get-devices, wab-get-device, wab-get-services-of-device, wab-get-service-of-device:
- subprotocols
- multi_tunneling
- enabled
- additional_interfaces
  - ip
  - port
for wab-get-object-to-onboard:
- device_name
- alias, host
- last_connection
- local_domains
- id
- domain_name
- description
- enable_password_change
- admin_account
- password_change_policy
- password_change_plugin
- ca_private_key
- ca_public_key
- url
- tags
- key
- value
- accounts
- id
- account_name
- account_login
- description
- credentials
  - id
  - type
  - password
  - private_key
  - passphrase
  - public_key
  - key_type
  - key_len
  - key_id
  - certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- onboard_status
- first_seen / last_seen
  - id
  - type
  - error
  - status
  - start
  - end
- url
- last_login
- is_admin
- scanned_groups
- account_name
- domain
- device
- application
- account_login
- credentials
- id
- type
- password
- private_key
- passphrase
- public_key
- key_type
- key_len
- key_id
- certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- resources
for wab-get-passwordrights and wab-get-passwordrights-user-name:
- timeframes
- device
- device_alias
- device_host
- device_description
- device_tags
- id
- key
- value
- application
- application_description
- application_tags
- id
- key
- value
- group_timeframes
for wab-get-scans and wab-get-scan:
- subnets
- protocols
- protocol
- port
- banner_regex
- scan_for_accounts
- master_accounts
- search_filter
- userauth
- auth_id
- auth_name
- dn_list
- devices
- protocol
- protocol
- port
for wab-get-sessionrights and wab-get-sessionrights-user-name:
- device
- device_alias
- device_host
- device_description
- service_port
- subprotocols
- session_sharing
- authentication_methods
- device_tags
- id
- key
- value
- service_options
- multi_tunneling
  - enabled
  - additional_interfaces
  - ip
  - port
- seamless_connection
- application
- application_description
- application_tags
- id
- key
- value
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38193
- 38302

Download

3.0.0 - R1709192 (November 26, 2024)

Integrations

WALLIX Bastion

The integration now returns the ID of created objects on the Bastion.
Added support for nullable arguments.
Added new commands:
- wab-add-connection-policy
- wab-add-mapping-in-domain
- wab-add-password-change-policy
- wab-add-restriction-to-usergroup
- wab-add-timeframe
- wab-add-timeframe-period
- wab-change-password-or-ssh-key-of-account
- wab-delete-connection-policy
- wab-delete-mapping-of-domain
- wab-delete-password-change-policy
- wab-delete-restriction-from-targetgroup
- wab-delete-restriction-from-usergroup
- wab-delete-scan
- wab-delete-timeframe
- wab-edit-connection-policy
- wab-edit-mapping-of-domain
- wab-edit-mappings-of-domain
- wab-edit-password-change-policy
- wab-edit-restriction-from-targetgroup
- wab-edit-restriction-from-usergroup
- wab-edit-scan
- wab-edit-timeframe
- wab-edit-user
- wab-get-cluster
- wab-get-clusters
- wab-get-connection-policies
- wab-get-connection-policy
- wab-get-external-authentication-group-mappings
- wab-get-local-domain-data-for-application
- wab-get-local-domain-of-device
- wab-get-local-domains-data-for-application
- wab-get-local-domains-of-device
- wab-get-mapping-of-domain
- wab-get-mappings-of-domain
- wab-get-target-group-restriction
- wab-get-user-group-restriction
- wab-get-password-change-policies
- wab-get-password-change-policy
- wab-get-passwordrights
- wab-get-passwordrights-user-name
- wab-get-version
- wab-get-target-group-restrictions
- wab-get-timeframe
- wab-get-timeframes
- wab-get-user-group-restrictions
Updated wab-add-service-in-device arguments:
- set service_post_subprotocols as not required.
- added service_post_seamless_connection option for RAWTCPIP.
Updated wab-edit-service-of-device arguments:
- added service_post_subprotocols.
- added service_put_seamless_connection option for RAWTCPIP.
Updated wab-edit-application arguments:
- added application_put_global_domains.
Breaking changes: removed deprecated command wab-get-metadata-of-one-or-multiple-sessions.
Breaking changes: removed deprecated argument application_put__meters from wab-edit-application.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Updated the Docker image to: demisto/python3:3.11.10.113941.

Related pull requests:
- 36828
- 36540

Download

2.1.0 - 1373264 (September 11, 2024)

Integrations

WALLIX Bastion

Added option to adjust the timeout of requests made to the Bastion API
Added following commands:
- wab-notify-approvers-linked-to-approval-assignment
- wab-get-mappings-of-user-group
- wab-get-mapping-of-user-group
- wab-add-mapping-in-group
- wab-edit-mapping-of-user-group
- wab-delete-mapping-of-user-group
specified an output key field for most commands where applicable
formatted all commands outputs to markdown
added new optional arguments to wab-reply-to-approval-request:
- approval_assignment_post_is_active
- approval_assignment_post_status
added new optional arguments to wab-make-new-approval-request-to-access-target:
- approval_request_post_account
- approval_request_post_domain
- approval_request_post_device
- approval_request_post_application
- approval_request_post_service
added new optional arguments to wab-get-ldap-users-of-domain:
- last_connection
updated description of commands' arguments and outputs according to latest Bastion API documentation
Updated the Docker image to: demisto/python3:3.11.10.111039.

Related pull requests:
- 36112
- 36245

Download

2.0.2 - 765039 (January 16, 2024)

Integrations

WALLIX Bastion

Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 32212

Download

2.0.1 - 733853 (January 2, 2024)

Integrations

WALLIX Bastion

Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31878

Download

3.1.0 - 2074399 (January 26, 2025)

Integrations

WALLIX Bastion

Removed unneeded parameters:

Breaking changes: wab-add-notification: removed notification_post_type
Breaking changes: wab-edit-notification: removed notification_put_type
Added new commands:
wab-add-user-group
wab-edit-user-group
wab-delete-user-group
wab-get-external-authentications
wab-get-external-authentication
wab-add-global-domain
wab-delete-global-domain
wab-add-local-domain-in-application
wab-delete-local-domain-from-application
wab-add-local-domain-in-device
wab-delete-local-domain-from-device
wab-get-global-domain-account-credentials
wab-get-global-domain-account-credential
wab-add-credential-to-global-domain-account
wab-edit-credential-of-global-domain-account
wab-add-credential-to-application-account
wab-edit-credential-of-application-account
wab-get-application-account-credentials
wab-get-device-account-credentials, wab-get-device-account-credential
wab-edit-credential-of-device-account
Documented more optional command outputs:
for wab-get-applications and wab-get-application:
- cluster
- target
- paths.target
- paths.program
- paths.working_dir
- global_domains
- application_url
for wab-get-auth-domains and wab-get-auth-domain:
- certificate_authority
- enable_ca
- check_x509_san_email
- san_domain_name
- x509_condition
- x509_search_filter
- group_attribute
- display_name_attribute
- pubkey_attribute
- email_attribute
- language_attribute
- label
- entity_id
- client_id
- client_secret
- certificate
- private_key
- idp_initiated_url
- force_authn
for wab-get-connection-policies and wab-get-connection-policy:
- authentication_methods
for wab-get-devices, wab-get-device, wab-get-services-of-device, wab-get-service-of-device:
- subprotocols
- multi_tunneling
- enabled
- additional_interfaces
  - ip
  - port
for wab-get-object-to-onboard:
- device_name
- alias, host
- last_connection
- local_domains
- id
- domain_name
- description
- enable_password_change
- admin_account
- password_change_policy
- password_change_plugin
- ca_private_key
- ca_public_key
- url
- tags
- key
- value
- accounts
- id
- account_name
- account_login
- description
- credentials
  - id
  - type
  - password
  - private_key
  - passphrase
  - public_key
  - key_type
  - key_len
  - key_id
  - certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- onboard_status
- first_seen / last_seen
  - id
  - type
  - error
  - status
  - start
  - end
- url
- last_login
- is_admin
- scanned_groups
- account_name
- domain
- device
- application
- account_login
- credentials
- id
- type
- password
- private_key
- passphrase
- public_key
- key_type
- key_len
- key_id
- certificate
- domain_password_change
- auto_change_password
- auto_change_ssh_key
- checkout_policy
- certificate_validity
- can_edit_certificate_validity
- resources
for wab-get-passwordrights and wab-get-passwordrights-user-name:
- timeframes
- device
- device_alias
- device_host
- device_description
- device_tags
- id
- key
- value
- application
- application_description
- application_tags
- id
- key
- value
- group_timeframes
for wab-get-scans and wab-get-scan:
- subnets
- protocols
- protocol
- port
- banner_regex
- scan_for_accounts
- master_accounts
- search_filter
- userauth
- auth_id
- auth_name
- dn_list
- devices
- protocol
- protocol
- port
for wab-get-sessionrights and wab-get-sessionrights-user-name:
- device
- device_alias
- device_host
- device_description
- service_port
- subprotocols
- session_sharing
- authentication_methods
- device_tags
- id
- key
- value
- service_options
- multi_tunneling
  - enabled
  - additional_interfaces
  - ip
  - port
- seamless_connection
- application
- application_description
- application_tags
- id
- key
- value
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38193
- 38302

Download

3.0.0 - R1709192 (November 26, 2024)

Integrations

WALLIX Bastion

The integration now returns the ID of created objects on the Bastion.
Added support for nullable arguments.
Added new commands:
- wab-add-connection-policy
- wab-add-mapping-in-domain
- wab-add-password-change-policy
- wab-add-restriction-to-usergroup
- wab-add-timeframe
- wab-add-timeframe-period
- wab-change-password-or-ssh-key-of-account
- wab-delete-connection-policy
- wab-delete-mapping-of-domain
- wab-delete-password-change-policy
- wab-delete-restriction-from-targetgroup
- wab-delete-restriction-from-usergroup
- wab-delete-scan
- wab-delete-timeframe
- wab-edit-connection-policy
- wab-edit-mapping-of-domain
- wab-edit-mappings-of-domain
- wab-edit-password-change-policy
- wab-edit-restriction-from-targetgroup
- wab-edit-restriction-from-usergroup
- wab-edit-scan
- wab-edit-timeframe
- wab-edit-user
- wab-get-cluster
- wab-get-clusters
- wab-get-connection-policies
- wab-get-connection-policy
- wab-get-external-authentication-group-mappings
- wab-get-local-domain-data-for-application
- wab-get-local-domain-of-device
- wab-get-local-domains-data-for-application
- wab-get-local-domains-of-device
- wab-get-mapping-of-domain
- wab-get-mappings-of-domain
- wab-get-target-group-restriction
- wab-get-user-group-restriction
- wab-get-password-change-policies
- wab-get-password-change-policy
- wab-get-passwordrights
- wab-get-passwordrights-user-name
- wab-get-version
- wab-get-target-group-restrictions
- wab-get-timeframe
- wab-get-timeframes
- wab-get-user-group-restrictions
Updated wab-add-service-in-device arguments:
- set service_post_subprotocols as not required.
- added service_post_seamless_connection option for RAWTCPIP.
Updated wab-edit-service-of-device arguments:
- added service_post_subprotocols.
- added service_put_seamless_connection option for RAWTCPIP.
Updated wab-edit-application arguments:
- added application_put_global_domains.
Breaking changes: removed deprecated command wab-get-metadata-of-one-or-multiple-sessions.
Breaking changes: removed deprecated argument application_put__meters from wab-edit-application.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Breaking changes: removed WAB.profile_get.gui_features.dashboards from wab-get-profile(s) outputs.
Breaking changes: removed WAB.application_get.tags.id from wab-get-application(s) outputs.
Breaking changes: removed WAB.device_get.tags.id from wab-get-device(s) outputs.
Updated the Docker image to: demisto/python3:3.11.10.113941.

Related pull requests:
- 36828
- 36540

Download

2.1.0 - 1373264 (September 11, 2024)

Integrations

WALLIX Bastion

Added option to adjust the timeout of requests made to the Bastion API
Added following commands:
- wab-notify-approvers-linked-to-approval-assignment
- wab-get-mappings-of-user-group
- wab-get-mapping-of-user-group
- wab-add-mapping-in-group
- wab-edit-mapping-of-user-group
- wab-delete-mapping-of-user-group
specified an output key field for most commands where applicable
formatted all commands outputs to markdown
added new optional arguments to wab-reply-to-approval-request:
- approval_assignment_post_is_active
- approval_assignment_post_status
added new optional arguments to wab-make-new-approval-request-to-access-target:
- approval_request_post_account
- approval_request_post_domain
- approval_request_post_device
- approval_request_post_application
- approval_request_post_service
added new optional arguments to wab-get-ldap-users-of-domain:
- last_connection
updated description of commands' arguments and outputs according to latest Bastion API documentation
Updated the Docker image to: demisto/python3:3.11.10.111039.

Related pull requests:
- 36112
- 36245

Download

2.0.2 - 765039 (January 16, 2024)

Integrations

WALLIX Bastion

Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 32212

Download

2.0.1 - 733853 (January 2, 2024)

Integrations

WALLIX Bastion

Updated the Docker image to: demisto/python3:3.10.13.83255.

Related pull requests:
- 31878

Download

Certification	Certified	Read more
Supported By	Partner
Created	May 15, 2023
Last Release	January 26, 2025

WALLIX Bastion

WALLIX Bastion

What does this pack do

Notice

Pack Contributors:

WALLIX Bastion

What does this pack do

Notice

Pack Contributors:

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

Integrations

WALLIX Bastion

PUBLISHER

PLATFORMS

INFO

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER