What is Cisco Umbrella #
Cisco Umbrella is a cloud-delivered firewall that functions at the DNS layer and provides visibility and control for internet traffic across all ports and protocols.
Why Should You Use the Cisco Umbrella Connector? #
The Cisco Umbrella connector provides visibility into the assets in your environment. You can use this visibility to:
-
ensure assets are managed per your security policies
-
find vulnerabilities quickly and remediate
How Does This Connector Work? #
Lucidum executes read-only requests to the Cisco Umbrella REST API and ingests only meta-data about Cisco Umbrella assets. Lucidum does not retrieve any data stored on your assets.
Configuring the Connector in Lucidum #
|
Field |
Description |
Example |
|---|---|---|
|
URL |
The URL of the Cisco Umbrella API. |
https://management.api.umbrella.com/v2/ |
|
API Key |
API key for accessing the Cisco Umbrella API. This key must have the following access:
|
Lucidum |
|
API Secret |
API secret for the API key |
aCELgL0imfnc8mVLWwsAawjYr4Rx-Af50DDqtlx |
Source Documentation #
Creating Credentials #
Creating a Cisco Umbrella API Key:
https://developer.cisco.com/docs/cloud-security/#!authentication/manage-api-keys
Required Permissions #
The API Key for use with Lucidum must have these permissions:
Admin:Read
-
admin:read
-
deployments:read
-
policies:read
-
reports:read
API Documentation #
https://developer.cisco.com/docs/cloud-security/#!get-started-with-umbrella-apis
https://developer.cisco.com/docs/cloud-security/#!authentication
