Cisco Umbrella
- Jonas Gonzalez
Cisco Umbrella is a cloud security platform that provides the first line of defense against threats on the internet wherever users go. By learning from internet activity patterns, Umbrella automatically uncovers current and emerging threats.
Connect Cisco Umbrella with Devo SOAR
Navigate to Automations > Integrations.
Search for Cisco Umbrella.
Click Details, then the + icon. Enter the required information in the following fields.
Label: Enter a connection name.
Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
Remote Agent: Run this integration using the Devo SOAR Remote Agent.
Access Key: To access Cisco Umbrella REST API, provide a valid Access Key.
Secret Key: To access Cisco Umbrella REST API, provide a valid Secret Key.
After you've entered all the details, click Connect.
Actions for Cisco Umbrella
Retrieve Devices
Retrieves the list of Network Devices from Cisco Umbrella
Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
Input Name | Description | Required |
|---|---|---|
Organization Id | Jinja-templated text containing the the Organization Id. | Required |
Output
JSON containing the following items:
``` {json}{ "error": null, "has_error": false, "result": {} }
## Get Domain Status
Look up the status, and security and content category IDs for the domain.
### Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
| Input Name | Description | Required |
| :--------- | :------------------------------------------------------------------- | :------- |
| Domain Id | [Jinja-templated](doc:jinja-template) text containing the domain id. | Required |
### Output
JSON containing the following items:
``` {json}{
"error": null,
"has_error": false,
"result": {}
}Get Destination List
Retrieve all the Destination Lists.
Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
Input Name | Description | Required |
|---|---|---|
Time between consecutive API requests | Time to wait between consecutive API requests in milliseconds. (Default is 0 milliseconds) | False |
Output
JSON containing the following items:
``` {json}{ "error": null, "has_error": false, "result": {} }
## Add to Destination List
Add destinations to a destination list.
### Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
| Input Name | Description | Required |
| :------------------ | :------------------------------------------------------------------------------------------------ | :------- |
| Destination List Id | [Jinja-templated](doc:jinja-template) text containing the destination list id. | Required |
| Comment | [Jinja-templated](doc:jinja-template) text containing the comment to be added to the destination. | Required |
| Destination Type | Select destination type. | Required |
### Output
JSON containing the following items:
``` {json}{
"error": null,
"has_error": false,
"result": {}
}Release Notes
v1.0.1- Initial release.