User Tools

Site Tools


infoblox_threat_defense:applications

This is an old revision of the document!


Infoblox Applications

Infoblox Threat Defense (cloud) can identify application usage. You can find out the exact domains but configuring “Allow - Local Resolution” for an application custom list in a security policy, apply to an endpoint and then look at the corefile.4 config.

e.g. the “Facebook” app detects on the following domains (which doesn't include the login page)

0.facebook.com 
api.facebook.com
apps.facebook.com
b-api.facebook.com
channel.facebook.com
chat.facebook.com
edge-chat.facebook.com
gateway.facebook.com
graph.facebook.com
lookaside.fbsbx.com
m.facebook.com
mqtt.facebook.com
mqtt.t.facebook.com
orcart.facebook.com
pixel.facebook.com
s-static.ak.facebook.com
star-mini.c10r.facebook.com
star.c10r.facebook.com
star.facebook.com
static.ak.facebook.com
touch.facebook.com
upload.facebook.com
vupload2.facebook.com
vupload2.t.facebook.com
web-chat-e2ee.facebook.com
infoblox_threat_defense/applications.1739557006.txt.gz · Last modified: by bstafford