Welcome › Forums › Integrations › Cisco OpenDNS Umbrella
- This topic has 0 replies, 1 voice, and was last updated 4 years, 6 months ago by
Charles Herring.
Viewing 1 post (of 1 total)
- AuthorPosts
- March 9, 2019 at 3:27 pm #1945
Charles Herring
Keymasterin cisco umbrella console
Log in to Umbrella for the organization and create a secret and key:
- In Umbrella, navigate to Admin > API Keys and click Create; or
in a management console (Multi-org, MSP, or MSSP), navigate to Settings > API Keys and click Add. - Select Umbrella Reporting and click Create.
- Expand Umbrella Reporting and copy Your Key and Your Secret.
- Click To keep it secure, … check box and then click Close.
You must acknowledge that your key and secret are only displayed once to activate the Close button.
Note: You have only one opportunity to copy your secret. Umbrella does not save it and it cannot be retrieved after its initial creation.
To generate a new key and secret, click Refresh for your current key and secret. Alternatively, delete the existing key and secret, then create a new key and secret pair.
CONFIGURE WITFOO PRECINCT
- Go to Admin > SOAR > Cisco Umbrella > Config
- Click the checkbox for Enable the Cisco Umbrella Integration
- Paste the API Key, API Secret, and Organization ID
- Click the disk icon (Save)
- Click Jobs and go to Artifacts from Cisco Umbrella.
- Select Triggers, expanding Manual Trigger and Interval Trigger.
- Toggle both to State: ENABLED
- The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization. (Recommended: 30 minutes)
- Click the disk icon (Save)
- Within 1 hour the tool should be listed as an Artifact Source under Report->Tool Effectiveness->Artifact Source Types
- In Umbrella, navigate to Admin > API Keys and click Create; or
- AuthorPosts
Viewing 1 post (of 1 total)
- You must be logged in to reply to this topic.