--- title: "Cisco Umbrella" slug: "cisco-umbrella" updated: 2025-03-17T17:26:00Z published: 2025-03-17T17:26:00Z canonical: "docs.databee.buzz/cisco-umbrella" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Cisco Umbrella Cisco Umbrella is a cloud-delivered security solution that provides secure internet access and threat protection. With DNS-layer security, web filtering, firewall capabilities, and cloud access security broker (CASB) functionalities, Umbrella helps organizations protect users across any device, location, or network. For detailed information refer to the [Cisco Umbrella’s official documentation](https://umbrella.cisco.com/). **Integration Method:** API **Tables**: Network Activity (4001), DNS Activity (4003) This integration supports the following events. | **Event** | **Description** | | --- | --- | | DNS Activities | List of DNS Activities | | Proxy Activities | List of Proxy Activities | This integration supports the following version. | Cisco Umbrella API version | v1 | | --- | --- | > [!NOTE] > **Note:** > > Cisco Umbrella is a continuously updated cloud service. You can find the latest release for Umbrella software from [Release Notes](https://community.cisco.com/t5/umbrella-software-release-notes/tkb-p/umbrella-release-notes). ## Prerequisites - The user should have access to the Cisco Umbrella instance. - The user should have a client ID and client secret for authentication. - The user should have access to the DataBee console. ## Configuration overview 1. Get the API Key and Key Secret for Cisco Umbrella. 2. Add the [Cisco Umbrella data feed](/user-manual/docs/cisco-umbrella#databee-configuration) in the DataBee console with the below parameters. | **DataBee Parameter** | **Cisco Umbrella Parameter** | | --- | --- | | Client Key | API Key | | Client Secret | Key Secret | ## Cisco Umbrella Configuration 1. Login to the [Cisco Umbrella dashboard](https://login.umbrella.com/). ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-0fihe8pi.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 2. Navigate to **Admin** page and click **API Keys**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-vxwz3so9.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 3. Click on **Add** Button to create new API Key. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-06a5ojv7.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 4. Provide details for new API key: ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-8d563nu3.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 1. Enter ‘API Key Name’. 2. Select the **Reports** as Key Scope with **Read-Only** ‘Scope’. 3. Set the ‘Expiry Date’. 5. Click on **CREATE KEY**. It will create new API Key. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-yx8jqfpt.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 6. Copy the **API Key** and **Key Secret**. These will be used when we create feed in DataBee. Click **ACCEPT AND CLOSE**. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-c5qfcc3a.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-n5wnmahr.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 2. Search for **Cisco Umbrella** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-1knjg90b.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 3. Click on the **API Ingest** option for collection method. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-hfb50l0m.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 4. Enter feed contact information and click **Next**. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-hfb50l0m.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) 5. In the configuration page, confirm the following: ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cisco-umbrella-mar2025-image-bv2vg2k1.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A20Z&se=2026-10-30T12%3A37%3A20Z&sr=c&sp=r&sig=AFbycaiLr%2BB2%2B%2BllQJ2jJmYm8%2F4v4wQagBLQ8atradc%3D) - API Base URL: this is the base URL that DataBee will interact with. - Authorization Method: OAuth2 - Client Key: paste the API Key. - Client Secret: paste the Key Secret. - Token URL: this is the token URL for Authentication. - Event Types: preselected for all the event types that integration pulls. 6. Click **Submit**. ## Troubleshooting Tips - If you are facing **unauthorized (401)** error, this might be possibly due to incorrect credentials. Please refer to the credentials to get client Key and client Secret.