Cisco Umbrella is a cloud security service that provides DNS-layer security, web security via selective proxy, and application discovery and blocking. The Balbix integration with Cisco Umbrella ingests infrastructure assets, operating system information and operational/business context configured by your IT and cybersecurity teams for assets managed by Cisco Umbrella.
Balbix leverages AI to aggregate, normalize, and deduplicate ingested data, along with information integrated from your existing IT and cybersecurity tools. This creates a unified view of your entire asset inventory, including vulnerabilities and their business and operational context. Balbix’s AI models then analyze this data to provide insights such as deployment gap analysis, risk-based vulnerability prioritization (with detailed ranking and scoring), and risk quantification. This process delivers a comprehensive assessment of risk, whether for a single asset, groups of assets, or your entire enterprise, enabling more informed and effective security decisions.
Integration summary
This table provides a summary of the Balbix integration for the Cisco Umbrella connector.
Integration Type | Fetch: An inbound API integration used to fetch assets and related metadata such as tags. |
Types of Assets Fetched | Host devices including servers, virtual machines, desktops, laptops. |
Types of Data Fetched | Asset names, interface information (MAC address, IP address), OS information, system information, tags. |
Prerequisites
To configure the Balbix connector, first create Cisco Umbrella API credentials with the appropriate permissions. These credentials are required for completing the configuration process. Here are the steps you need to complete:
Create an API key: Generate an API key to authenticate Cisco Umbrella with Balbix.
Create an API key
To generate an API key from Cisco Umbrella:
Log in to Cisco Umbrella.
Go to Admin > API Keys.
Click API Keys and then click Add.
Enter a name and description for the key. A name must contain less than 256 characters.
Check the key scopes and expand a scope to see its categories. Select each category within a scope to enable access to the corresponding API endpoints.
Choose Read-only for your selected scope and resource.
Click Never Expire as the Expiry Date.
Click Create Key.
Copy the API key and secret and securely save them for later use when setting up the Cisco Umbrella connector in Balbix.
Caution: Be sure to copy and save the API secret—it will no longer be visible after you leave the page.
Click Accept and Close.
Set up your Cisco Umbrella connector
After completing the prerequisites, follow these steps to configure your Balbix connector for Cisco Umbrella.
API references
This section provides references for the API version and reference documentation to help you effectively integrate and utilize the API in your system.
API version
Balbix uses Cisco Cloud Security API: Umbrella API, V2.
API documentation
For more information about the Cisco Umbrella API, see the following references: