Configure Context Integrations

About Context Integrations

Context integrations provide enriched asset context to Netography Fusion from third-party products. This is done by reading asset information from the external product (generally via an API) and then adding asset information as context Labels associated with the asset's IP address.

Types of context integrations

• SaaS - Directly integrated into Netography Fusion - can only be configured and deployed in the Netography Fusion SaaS.

• NetoFuse - NetoFuse modules can be deployed as a context integration in the Netography Fusion Portal or deployed locally (as a container or software package) in your environment. Local deployments are useful for on-prem integrations or to maintain control of the configuration, connection, and credentials to a third-party data source locally.

• Cloud Function - AWS, Azure, and GCP also support deploying a cloud function via Terraform as part of the Netography cloud onboarding automation. In this case, context enrichment information is gathered from within your cloud environment, and the function then uses a Fusion API key to make an outbound connection to Fusion to send it to the API. No inbound access to your cloud accounts is used for context enrichment when using a Cloud Function.

To understand more about the difference between Context Integrations and NetoFuse modules, see About NetoFuse.

Available Context Integrations

Cloud Providers

Vendor	Product	Type
Amazon	Amazon Web Services	SaaS, Cloud Function
Google Cloud Platform	Google Cloud Platform	SaaS, Cloud Function
IBM	IBM Cloud	SaaS
Microsoft	Microsoft Azure	SaaS, Cloud Function
Oracle	Oracle Cloud Infrastructure	SaaS

Asset Management / Device Inventory

Vendor	Product(s)	Type
Axonius	Axonius Platform	NetoFuse
Device42	Device42	NetoFuse
RunZero	RunZero	NetoFuse
Tanium	Tanium	NetoFuse

Cloud Security

Vendor	Product	Type
Wiz	Wiz	NetoFuse

Endpoint Protection Platforms

Vendor	Product	Type
Crowdstrike	CrowdStrike Falcon Discover CrowdStrike Falcon Protect	SaaS
Microsoft	Microsoft Defender for Endpoint Microsoft Defender XDR	NetoFuse
SentinelOne	SentinelOne	SaaS

Industrial Cybersecurity (OT) Security Platforms

Vendor	Product	Type
Claroty	Claroty CTD Claroty EMC	NetoFuse

Vulnerability Management

Vendor	Product	Type
Tenable	Tenable Vulnerability Management	NetoFuse

Generic Integration Capabilities

These options provide additional methods to integrate asset context from any data source.

Method	Formats Supported	Type
Amazon S3	CSV files in Netography label format	SaaS
Custom NetoFuse Module	All Formats	NetoFuse
Local File NetoFuse Module	CSV files in any format CSV files in Netography label format JSON	NetoFuse
NetoFuse upload command	CSV files in any format CSV files in Netography label format JSON	NetoFuse
Netography Fusion API Reference	CSV files in Netography label format JSON	REST API

Adding a Context Integration

In the Netography Fusion Portal:

1. Select Settings at the bottom of the left-hand navigation menu

2. Select Context Integrations in the Data Management section.

3. Select the Add Integration button.

4. Select a context integration from the list provided.

5. Follow the configuration steps in the documentation for the context integration you selected.