>
    Strata Copilot
    Integrate Device Security with Infoblox IPAM
    Focus
    Download PDF
    Focus
    1. Home
    2. Device Security
    3. Device Security Integration Guide
    4. IP Address Management
    5. Integrate Device Security with Infoblox IPAM
    Download PDF
    Device Security

    Integrate Device Security with Infoblox IPAM

    Table of Contents

    Integrate Device Security with Infoblox IPAM

    Integrate Device Security through Cortex XSOAR with Infoblox to import and maintain IPAM data in real time or on a schedule.
    Where Can I Use This?What Do I Need?
    • Device Security (Managed by Strata Cloud Manager)
    • (Legacy) IoT Security (Standalone portal)
    One of the following subscriptions:
    • Device Security subscription
    • Precision AI bundle subscription
    • Device Security X subscription
    One of the following Cortex XSOAR setups:
    • A free, cohosted, limited-featured Cortex XSOAR instance
      AND
      A free Cortex XSOAR Engine (on-premises integration)
    • A full-featured Cortex XSOAR server
    Infoblox Internet Protocol Address Management (IPAM) provides a means for managing the IP address space of a network. When you integrate Device Security through Cortex XSOAR with Infoblox IPAM, you can import all the IP address blocks and subnets (called containers and networks in Infoblox) into Device Security and then display them on the Networks page. You can also specify subnet scopes to limit the IP CIDR blocks and subnets retrieved from Infoblox.
    Device Security supports two methods of integrating with Infoblox:
    • A direct integration, which is useful for bulk ingestion of data and for configuring a recurring schedule for the integration jobs.
    • An integration with the Infoblox Outbound API, which is useful for real-time synchronization between Infoblox networks and Device Security networks.
    The two integration modes are complementary. Use the bulk read integration for the initial synchronization and as a safety net; enable the Outbound API for near real-time updates.
    Through integration with Infoblox, Device Security can learn the following types of information about the IP address blocks and subnets on the network:
    • Prefix (for example, 10.1.0.0/16)
    • Type: Block or Subnet
    • Description (if configured on Infoblox)
    • Site (if configured on Infoblox)
    • VLAN (subnets only)
    For a full list of attributes that Device Security can learn through the integration, see Infoblox Attribute Reference.
    Integrating with Infoblox requires either a full-featured Cortex XSOAR™ server or the activation of a Device Security free cohosted Cortex XSOAR instance.

    © 2026 Palo Alto Networks, Inc. All rights reserved.