If you're having trouble at any stage please contact us at support@skyformation.com.
Preface
The goal of this guide is to add a new SkyFormation for Cisco Umbrella for endpoints Connector to your SkyFormation Platform.
Prerequisites
To add theCisco Umbrella connector to SkyFormation app, you will need to have the following information at hand:
- Access Key
- Secret Key
- S3 bucket Name
- Folder (Prefix) of the bucket
In order to get this information, follow the next steps:
- log into https://login.umbrella.com/
-
In your Cisco Umbrella console, go to Settings > Log Management and complete the following steps.
- Select the option to use a Cisco managed S3 bucket.
- Select your Region and select Save.
- The console will take a few moments to activate. Then you will see a confirmation message with the Bucket Name, Access Key, and Secret Key.
On-board SkyFormation for Cisco Umbrella connector - steps
1. Login to your SkyFormation Platform:
2. Navigate via left navigation panel to "Settings" section
3. Navigate via New Settings left navigation panel to "Accounts" section
4. Click the "Add Account" bottom
5. At the "SELECT SERVICE TO ADD" choose "Cisco Umbrella"
You will see the below screen:
6. Fill in the following information:
- Account Name
Give the Cisco Cisco Umbrella account a meaningful name for you. This will become your cloud app connector name displayed in the application and the events sent to external systems as SIEM/Log management. This is a mandatory field.
e.g. "Corporate Cisco Umbrella for endpoints"
- Description
Add a text that describes the Cisco Umbrella service account for you.
e.g. "An admin service to manage the Corp Cisco Umbrella suite". This is an optional field.
- Access Key
The client ID from the prerequisites section.
- Client Key
The secure API Key. from the prerequisites section.
- S3 Bucket Name
Cisco managed Amazon S3 bucket
- Folder (Prefix)
Example data path from Cisco usually appears in the form of s3://bucketname/f1/f2/f3.
In the example above, f1/f2/f3 would be used as the folder prefix.
For more information please see
At this point you can click on "TEST CONNECTION" to make sure the connection is setup successfully, or just click on "DONE".
Start the Cisco Umbrella connector and make sure that the status becomes "OK" after a few seconds.
Comments
0 comments
Please sign in to leave a comment.