Akamai Client-Side Protection & Compliance (CPC) is a security solution that protects websites against JavaScript threats and helps prevent end-user data exfiltration. It works by analyzing script behavior in real time, detecting malicious activity, and providing alerts for security teams to mitigate risks. For more information, refer to Akamai’s official documentation.

Integration Method: API

Tables: Detection Finding (2004)

This integration supports the following events.

This integration supports the following versions.

Note:

Akamai CPC is a continuously updated cloud service.  As of this documentation, the latest release was in Aug 2024.

Prerequisites

• The user should have admin access to create API tokens to retrieve data successfully.

• The user should have access to the DataBee console.

• Verify if Akamai Client-Side Protection & Compliance feature is available/enabled in the server under the tab WEB and DATA CENTER SECURITY.

Configuration Overview

1. Generate client credentials with the required scopes.

2. Add the Akamai CPC data feed in the DataBee console with the below parameters.

   DataBee Parameter	Akamai WAF Parameter
   Access Token	Access Token
   Client Token	Client Token
   Client Secret	Client Secret
   Base URL (<Instance>)	Host

Akamai CPC Configuration

To generate the access token, client token, client secret and host follow the below steps:

1. Sign in to the Akamai Control Center Dashboard.
    

2. Click the three horizontal lines in the top-left corner to open the sidebar.
    

3. In the side bar menu, select Show all services option.
    

4. In the Control Center under ACCOUNT ADMIN, click Identity & access.
    

5. Under Users and API Clients, click Create API client.
    

6. Choose Myself and click Quick to create an API client.
    

7. The client credentials, including the Client Secret, Client Token, Access Token, and Host, will be displayed on the next page. Copy the credentials and download them for future use.
    

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the Akamai CPC and click it as shown below.
    

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    

5. In the next dialog, enter the following:

   • Authorization Method: Akamai EdgeGrid

   • API Base URL: replace <instance> with your Host.

   • Access Token: paste the Access Token.

   • Client Token: paste the Client Token.

   • Client Secret: paste the Secret.

   • Event Types: preselected for all the event types that integration pulls.
      

6. Click on Submit.

Troubleshooting Tips

• If you’re facing invalid_client or unauthorized_client issues this might be possibly due to incorrect credentials. Ensure the token is pasted correctly. Since you cannot view the token after the 1st time, re-create the token, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.