dark-vex/ansible-soar

Introduction

This project contains an Ansible playbook that can be used among with Zabbix, Jira and Ansible AWX/Tower to automatically evaluate and blocks IPs with bad reputation on Sophos XG Firewall.

The project used for check the IPs Reputation it's AbuseIPDB in the future other project might be integrated

Requirements

• Zabbix Server with Jira Webhook plugin
• Jira
• Ansible AWX/Tower
• Sophos XG

How do I get set up?

• Zabbix Configuration
• Ansible AWX/Tower Configuration
• Setup a vault file
• Jira Configuration
• Sophos XG Configuration

Setup an ansible vault

1. Create/edit credentials.yml file under vars/ folder (see credentials-example.yml)

2. Encrypt the file

ansible-vault encrypt credentials.yml

3. Add password for decrypt the vault on Ansible AWX (Resources > Credentials)