If you're having trouble at any stage please contact us at support@skyformation.com.

Preface

The goal of this guide is to add a new Fidelis connector to your Exabeam Cloud Connectors (aka SkyFormation platform).

Prerequisites

To add the Fidelis connector to your SkyFormation platform, you will need to have the following Fidelis account's information at hand:

CommandPost Hostname - this is the cloud domain name provided to you by Fidelis. For example, exabeam.fideliscloud.com
User and Password - you may create a new user for the cloud connectors integration. The user that is used for the cloud connector integration should be assigned to a role with at least alerts permission “view” to be able to retrieve alert information.
In the fidelis UI console, take a look at Administration > User Management > Roles and make sure that the user that you want to use for this integration is assigned to such a role.
Minimal Severity of events to be retrieved - Fidelis gives each event a severity. This filter is used by the cloud connector to filter out events with lower severity, if you do not wish to receive them. For example, choosing "High" means the cloud connector will only pull events with "High" or "Critical" severity, as assigned by Fidelis.
The default value is "Low" which means pulling all of the events with no filtering.

Logon to your SkyFormation Platform:
Navigate via left navigation panel to "Settings" section
Navigate via New Settings left navigation panel to "Accounts" section
Click the "Add Account" bottom
At the "SELECT SERVICE TO ADD" choose "Fidelis Network". You will see the following Screen:
Fill in the following information per the prerequisite section.
At this point, you can click on "TEST CONNECTION" to make sure the connection is set up successfully, or just click on "DONE".
Start the connector and make sure that the status becomes "OK" after a few seconds.