---
title: "Cisco Secure Endpoint"
slug: "cisco-secure-endpoint"
updated: 2025-03-20T20:04:06Z
published: 2025-03-20T20:04:06Z
canonical: "docs.databee.buzz/cisco-secure-endpoint"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Cisco Secure Endpoint

Cisco Secure Endpoint is a cloud-delivered endpoint protection solution that helps businesses defend against advanced threats to their servers, desktops, and mobile devices. For detailed information refer to the [Cisco Secure Endpoint’s official documentation](https://www.cisco.com/site/in/en/products/security/endpoint-security/secure-endpoint/index.html).

**Integration** **Method**: API

**Tables**: Detection Finding (2004)

This integration supports the following event.

| **Event** | **Description** |
| --- | --- |
| Detection Events | Get the list of Detection Events |

This integration supports the following version.

| [Cisco Secure Endpoint API version](https://developer.cisco.com/docs/secure-endpoint/v1-api-reference-event/) | v1 |
| --- | --- |

> [!NOTE]
> **Note:**
> 
> Cisco Secure Endpoint doesn’t follow a traditional versioning system. Instead, it is a continuously updated cloud service. As of this document preparation, latest release for windows 11 support was on [**30-May-2024**](https://www.cisco.com/c/en/us/support/docs/security/secure-endpoint/222016-cisco-secure-endpoints-windows-connect.html)**.**

## Prerequisites

- The user should have access to the Cisco secure endpoint portal.
- The user should have Cisco secure endpoint API Client ID and API Key.
- The user should have access to the DataBee console.

## Configuration Overview

1. Get the API Client ID and API Key from Cisco Secure Endpoint portal.
2. Add the [Cisco Secure Endpoint data feed](/user-manual/docs/cisco-secure-endpoint#databee-configuration) in the DataBee console with the below parameters.

| **DataBee Parameter** | **Cisco Secure Endpoint Parameter** |
| --- | --- |
| Username | API Client ID |
| Password | API Key |

## Cisco Secure Endpoint Configuration

1. Log in to your AMP for Endpoints Console.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-x297lj8b.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
2. On the Cisco Secure Endpoint dashboard, navigate to **Administration** section and click **API Credentials**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-r3ygcuwe.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
3. Click **New API Credential** to create a new API credential.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-cvo2u57c.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
4. The “New API Credential” window appears. To create a new API Credential:

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-hbyeys3r.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
  1. Enter the ‘Application name’.
  2. Select the **Read-only** ‘Scope’.
  3. Click **Create**.
5. Copy the **API Client ID** and **API Key**. This will be used as username and password when we create a data source in DataBee.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-q59bmqny.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)

> [!NOTE]
> **Note:**
> 
> API credentials will be visible only once. So, copy it and store it securely.

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-qxk0iwnn.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
2. Search for **Cisco Secure Endpoint** and click it as shown below.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-coffuayh.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
3. Click on the **API Ingest** option for collection method.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-zym9bdan.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
4. Enter feed contact information and click **Next**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-34470oc6.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
5. In the configuration page, confirm the following:

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-secure-endpoint-mar2025-image-b0mt9ipv.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A35%3A34Z&se=2026-10-30T12%3A35%3A34Z&sr=c&sp=r&sig=4kMJbCEVrc9SWuUzUIFXHBjTRfH%2F0Wk%2FFP8CDvsiLKo%3D)
  - Authorization Method: Basic
  - API Base URL: this is the base URL that DataBee will interact with.
    - Replace <server_id> with ID of your configured server.
    - There are the server ids available as shown below. Replace as per your server configuration.
      - North America: https://api.amp.cisco.com
      - Europe: https://api.eu.amp.cisco.com
      - Asia Pacific, Japan and China: https://api.apjc.amp.cisco.com
      - Consumer: https://api.consumer.amp.cisco.com
  - Username: paste the API Client ID.
  - Password: paste the API Key.
  - Event Types: preselected for all the event types that integration pulls.
6. Click **Submit**.

## Troubleshooting Tips

- If you are facing **unauthorized (401) error**, this might be possibly due to incorrect API Credentials. Please refer to the API Credentials to retrieve the API details.