Blackberry CylanceENDPOINT Connector Guide

CylanceENDPOINT by Blackberry is a self-defending, operationally efficient endpoint protection platform that uses Cylance AI to simplify investigation and response. The Balbix integration with CylanceENDPOINT ingests infrastructure assets and associated vulnerabilities discovered by CylanceENDPOINT.

Balbix leverages AI to aggregate, normalize, and deduplicate ingested data, along with information integrated from your existing IT and cybersecurity tools. This creates a unified view of your entire asset inventory, including vulnerabilities and their business and operational context. Balbix’s AI models then analyze this data to provide insights such as deployment gap analysis, risk-based vulnerability prioritization (with detailed ranking and scoring), and risk quantification. This process delivers a comprehensive assessment of risk, whether for a single asset, groups of assets, or your entire enterprise, enabling more informed and effective security decisions.

Integration Summary

This table provides a summary of the Balbix integration for the CylanceENDPOINT connector.

Integration Type	Fetch: An inbound API integration used to fetch assets and associated vulnerabilities.
Types of Assets Fetched	Host devices including servers, virtual machines, desktops, laptops.
Types of Data Fetched	Asset names, hardware information, interface information (MAC address, IP address), OS information, system information, vulnerability information, all relevant timestamps (e.g., first observed, last observed).

Prerequisites

To configure the Balbix connector, you must first create CylanceENDPOINT API credentials with the appropriate permissions. These credentials are required for completing the configuration process. Here are the steps you need to complete:

Create an Application ID and Secret: Generate an application ID and secret to authenticate the app with Balbix.

Create an Application ID and Secret

To obtain an application ID and application secret:

Log in to the CylanceENDPOINT console.
On the Integration tab, click Add Application.
Specify an application name and check all the boxes in the Read column. Click Save.
Copy the application ID and application secret to securely save them for later use when setting up the CylanceENDPOINT connector in Balbix.
Caution: Be sure to copy and save the application secret—it will no longer be visible after you leave the page.

Create and Configure the Connector

After you have completed the prerequisites, follow these steps to create and configure your Balbix connector for CylanceENDPOINT.

Step 1: Select the Connector

Start by selecting a connector using the steps outlined below:

Go to Data Sources from the left navigation bar.
In the Connectors table, click + Add Connector.
Click Select a Connector to Configure to expand the window and view the list of available connectors.
Click the + icon on the BlackBerry Cylance tile.
Click Next to configure the connector.

Step 2: Configure the Connector

Configure the connector using the steps outlined below:

Fill in the required configuration fields.

	Instance Name
	Blackberry Cylance API Base URL	Enter the base API URL of the server where the information will be fetched (e.g., https://protectapi.cylance.com). Make sure the authorized user for this account has the necessary privileges to access the API.
	Blackberry Cylance API Tenant ID	Enter the tenant ID for the user account with the necessary permissions to fetch assets.
	Blackberry Cylance API Application ID	Enter the application ID for the user account with the necessary permissions to fetch assets.
	Blackberry Cylance API Application Secret	Enter the application secret for the user account with the necessary permissions to fetch assets.
	Asset Last Seen Days Filter

Click Test Connection.

Step 3: Schedule the Connector

Step 4: Review Connector Details

API Reference Documentation

To learn more about the BlackBerry CylanceENDPOINT API, see the reference listed below:

CylanceENDPOINT API