Cisco Umbrella is a cloud security platform that provides an additional line of defense against malicious software and threats on the internet by using threat intelligence. That intelligence helps prevent adware, malware, botnets, phishing attacks, and other known bad Websites from being accessed.

SIRP’s integration with Cisco Umbrella allows security teams to execute response actions right from SIRP which results in effective incident management and reduced MTTR.

To generate API keys, you need to first access Umbrella's dashboard

Note: Umbrella API only accepts Reporting API credentials (key and secret) created by a valid Umbrella Admin user account. Umbrella API does not authenticate requests for deactivated or deleted Admin user accounts.