infoblox_threat_defense:applications
This is an old revision of the document!
Infoblox Applications
Infoblox Threat Defense (cloud) can identify application usage. You can find out the exact domains but configuring “Allow - Local Resolution” for an application custom list in a security policy, apply to an endpoint and then look at the corefile.4 config.
e.g. the “Facebook” app detects on the following domains (which doesn't include the login page)
0.facebook.com api.facebook.com apps.facebook.com b-api.facebook.com channel.facebook.com chat.facebook.com edge-chat.facebook.com gateway.facebook.com graph.facebook.com lookaside.fbsbx.com m.facebook.com mqtt.facebook.com mqtt.t.facebook.com orcart.facebook.com pixel.facebook.com s-static.ak.facebook.com star-mini.c10r.facebook.com star.c10r.facebook.com star.facebook.com static.ak.facebook.com touch.facebook.com upload.facebook.com vupload2.facebook.com vupload2.t.facebook.com web-chat-e2ee.facebook.com
infoblox_threat_defense/applications.1739557006.txt.gz · Last modified: by bstafford
