Cisco Umbrella

Cisco Umbrella is a cloud-delivered firewall that functions at the DNS layer and provides visibility and control for internet traffic across all ports and protocols.

For more information about Cisco and Lucidum, see https://lucidum.io/cisco/ .

Configuring the Connector for Cisco Umbrella

To configure Lucidum to ingest data from Cisco Umbrella:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • URL (required): The URL of the Cisco Umbrella API, for example, https://management.api.umbrella.com/v1/organizations/{org_id}

   • Network API Key and Network API Secret (required): The API Key and API Secret for the Umbrella Network Devices API

   • Management API Key and Management API Secret (required): The API Key and API Secret for the Umbrella Management API

   • Verify SSL. For future use.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.