Integrations
Integration supported formats
For some constructors, the integrations can generate vendor-specific format, see table below:
| Constructor | Authentication | Multiple URLs | Constructor Doc | Format |
|---|---|---|---|---|
| CheckPoint | Basic Auth | Yes | CheckPoint doc | checkpoint |
| Cisco | Basic Auth | Yes | Cisco doc | cisco |
| F5 | Basic Auth | Yes | F5 doc | f5 |
| Fortinet | Basic Auth | Yes | Fortinet doc | fortigate |
| Palo alto | Basic Auth | Yes | PaloAlto doc | paloalto |
| Sophos | Basic Auth | Yes | Sophos doc | sophos |
For all the other providers, the plain_text format consists of one ip per line, and should be supported by most devices. If a specific format is missing, reach out to us and we'll help you support it!
Dealing with blocklist size limits
Some providers have technical limits on the number of IPs they can pull at once. That's why we recommand to monitor the number of IPS returned by the integration and use the pagination feature if needed. For this, you can use the page and page_size query parameters in the URL.
https://admin.api.crowdsec.net/v1/integrations/123/content?page=1&page_size=1500
You can then use the page parameter to get the next page of IPs.
