Skip to main content

 

 

Cisco Defense Orchestrator

Onboard an Umbrella Organization

Prerequisites

License Requirements

In order to successfully onboard an Umbrella organization to CDO, you must have one of the following license packages selected from the Umbrella dashboard:

  • Umbrella SIG Essentials
  • SIG Advantage

To verify the licenses that are currently enabled, log into the Umbrella dashboard and navigate to Admin > Licensing.

Umbrella Credentials

Locate the Umbrella Organization ID

Locate the organization ID within the URL for your umbrella dashboard:

  1. Access the Cisco Umbrella dashboard and log into your organization.
  2. The page URL will contain a numeric identifier. For example, the Organization ID for https://dashboard.umbrella.com/o/123456/#/overview is 123456.
  3. Copy the Organization ID from the URL. We recommend temporarily pasting it into a note until you are ready to use it.
Generate an API Key and Secret

The management API key from Umbrella is used for the following Umbrella services:

You cannot onboard an Umbrella organization without allowing access to these services. Generate a new API key and retrieve both the API Key and the corresponding Secret before you onboard an Umbrella organization to CDO.

If you already have an API key but do not have the secret saved, navigate to the Admin > API Keys screen and click Refresh to update the key and secret. Otherwise, use the following procedure to create a new API key:

  1. Access the Cisco Umbrella dashboard and log into your organization.
  2. In the Umbrella dashboard, click Admin in the left navigation pane and select API Keys
  3. Click Create API Key
  4. Select Umbrella Management. Click Next.
  5. Copy the API Key and the corresponding Secret. We recommend temporarily pasting it into a note until you are ready to use it.

 

Onboarding Procedure

We recommend onboarding any ASA peers associated with the Umbrella organization alongside this process. Once an Umbrella organization is onboarded, the Devices & Services page displays any detected ASA devices associated with the org as "peers", and notes whether the devices are onboarded to CDO or not. If a peer device is not already onboarded, you have the option to onboard directly from that page by clicking Onboard Device
You can also onboard an ASA device manually. See Onboard an ASA for more information. 

Use the following procedure to onboard an Umbrella organization to CDO:

  1. From the CDO Navigation Bar, click Devices & Services. 
  2. Click the blue plus button blue_cross_button.png to begin onboarding the device.
  3. Click Umbrella Organization.
  4. Enter the Umbrella Organization information:
    • Organization Name.
    • Organization ID.
    • API Key.
    • Secret.
  5. Click Next
  6. (Optional) Add unique Labels for the device. You can later filter your list of devices by this label.
  7. Click Go to Dashboard & Services.

 

Related Articles:

  • Was this article helpful?