Skip to main content
Skip table of contents

Cisco Umbrella

What is Cisco Umbrella

Cisco Umbrella is a cloud-delivered firewall that functions at the DNS layer and provides visibility and control for internet traffic across all ports and protocols.

For more information about Cisco and Lucidum, see https://lucidum.io/cisco/.

Why Should You Use the Cisco Umbrella Connector?

The Cisco Umbrella connector provides visibility into the assets in your environment. You can use this visibility to:

  • ensure assets are managed per your security policies

  • find vulnerabilities quickly and remediate

How Does This Connector Work?

Lucidum executes read-only requests to the Cisco Umbrella REST API and ingests only meta-data about Cisco Umbrella assets. Lucidum does not retrieve any data stored on your assets.

Configuring the Connector in Lucidum

Field

Description

Example

URL

The URL of the Cisco Umbrella API.

https://management.api.umbrella.com/v2/

API Key

API key for accessing the Cisco Umbrella API. This key must have the following access:

  • admin:read

  • deployments:read

  • policies:read

  • reports:read

Lucidum

API Secret

API secret for the API key

aCELgL0imfnc8mVLWwsAawjYr4Rx-Af50DDqtlx

Source Documentation

Creating Credentials

Creating a Cisco Umbrella API Key:

https://developer.cisco.com/docs/cloud-security/#!authentication/manage-api-keys

Required Permissions

The API Key for use with Lucidum must have these permissions:

Admin:Read

  • admin:read

  • deployments:read

  • policies:read

  • reports:read

API Documentation

https://developer.cisco.com/docs/cloud-security/#!get-started-with-umbrella-apis

https://developer.cisco.com/docs/cloud-security/#!authentication

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.