Providing Cisco Secure Endpoint Credentials to Arctic Wolf

Overview Direct link to this section

This document describes how to retrieve the credentials needed for Arctic Wolf® to monitor security information using the Cisco Secure Endpoint API.

After you complete this process, you need to provide the following information about your Cisco Secure Endpoint environment to Arctic Wolf on the Arctic Wolf Portal:

• Client ID
• API Key

Before you begin Direct link to this section

To complete the steps below, you must be an administrator for the Cisco Secure Endpoint environment that you wish to monitor.

Create API client credentials Direct link to this section

To create API client credentials, including the Client ID and API Key:

1. Sign in to the Cisco Secure Endpoint console as an administrator.

2. Select Accounts, and then select Business Settings from the menu.

3. Under Features, select Configure API Credentials to open the API Credentials page.

4. On the API Credentials page, select New API Credential to open the dialog box.

5. Create the New API Credential:

   1. Enter a memorable name for the credentials as the Application name.
   2. Set the Scope to Read-only.
   3. Click Create. This opens the API Key Details page.

6. On the API Key Details page, record the newly generated Client ID and API Key values. You will submit these values to Arctic Wolf.

   Note: Once you dismiss this page, you can no longer retrieve the API Key from the console. Therefore, keep this information safe.

7. Proceed to Provide credentials to Arctic Wolf.

Provide credentials to Arctic Wolf Direct link to this section

To provide the API client credentials to Arctic Wolf:

1. Sign in to the Arctic Wolf Portal.

2. Select Connected Accounts in the banner menu to open the Connected Accounts page.

   

3. Select +Add Account to open the Add Account form.

4. Select Cloud Detection and Response as the Account Type.

5. Select Cisco Secure Endpoint from the list of cloud services, and fill in the form:

   1. Enter a descriptive name for the credentials.

   2. Enter the Client ID and API key that you created as part of Create API client credentials.

6. Select Submit to CST.

7. When prompted with the confirmation message, review your submission, and then select Done. You are returned to the Connected Accounts page.

8. Verify that the newly-submitted credential entry appears in the cloud services list with the status Connection Pending.

After your Concierge Security® Team provisions security monitoring for your account, the status of your credentials changes to Connected.