Cisco Umbrella
- 2 Minutes to read
- Print
- PDF
Cisco Umbrella
- 2 Minutes to read
- Print
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
About this document
This document provides the step-by-step procedure to configure Cisco Umbrella in SAFE.
Introduction
SAFE integrates with Cisco Umbrella and fetches the security misconfiguration of the Cisco Umbrella account in SAFE.
Prerequisites
Access required in SAFE:
SAFE Admin Access
Access required in Cisco Umbrella:
Cisco Umbrella Admin Access
Required User Inputs:
API URL
API Key
Key Secret
Asset Name in SAFE (optional)
Required Scope:
Admin Read Access
Generate Connection Details
How to generate API Key
Login to your Cisco Umbrella account as Admin.
Click Admin from left navigation to expand it.
Click on the API Keys.
On the API Keys page, Click the Add button available at the top-right of the screen.
.png "1(17).png")
Enter the API Key name and description.
Mark the Admin checkbox from the Key Scope section and select the Read-Only option in the Scope section.
Select an Expiry Date, It's important to regularly update the API Token in SAFE according to its expiration date.
Click on the Create Key button.
.png "2(15).png")
The system displays the API Key and Key Secret. Copy and save the API Key and Secret to use it while configuring Cisco Umbrella in SAFE.
It's important to regularly update the API Key and Key Secret in SAFE according to its expiration date.
.png "3(14).png")
How to get API URL
Access the Cisco Umbrella API documentation by clicking on the provided link.
Upon reaching the Cisco Umbrella API documentation page, locate the section titled "Base URI".
In the exhibit provided, find the base URL highlighted as 3. Copy and save this API URL to use it while configuring Cisco Umbrella in SAFE.
.png "4(12).png")
.png "1(17).png")
.png "2(15).png")
.png "3(14).png")
.png "4(12).png")
Configure Cisco Umbrella in SAFE
Log in to your SAFE account as Admin.
Click on the Integrations option from the left navigation.
Scroll to find the Cisco Umbrella integration card or search for Cisco Umbrella in the search bar.
.png "5(14).png")
Hover over the Cisco Umbrella integration card and click on the Configure button.
Enter the following:
API URL
API Key
Key Secret
Asset Name in SAFE - Provide a unique identifier which can uniquely identify the asset
Enter the Auto Sync Frequency.
.png "6(14).png")
Click on the Test Connection button.
Once the connection is successful, click on the Save button.
Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.
Upon a successful sync, the system pulls the Cisco Umbrella assets and their findings in SAFE. You can track the status of the sync in the History table.
.png "7(12).png")
.png "5(14).png")
.png "6(14).png")
.png "7(12).png")
View Results
Go to the integration homepage
Scroll to find the Cisco Umbrella integration card or search for Cisco Umbrella in the search bar.
Click on the Cisco Umbrella integration card for Finding View and Asset View.
Finding View: This tab displays all the findings details pulled from Cisco Umbrella.
.png "8(14).png")
Asset View: This tab displays all the assets pulled from Cisco Umbrella.
.png "9(14).png")
.png "8(14).png")
.png "9(14).png")
History
Learn More about Integration History here.
SAFE's Outgoing IP Addresses
Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.
Was this article helpful?