Illumio Core

Illumio Core is a Zero Trust Segmentation platform that prevents cyber threats by controlling east-west traffic. It provides real-time application visibility and enforces micro-segmentation without traditional firewalls. More information can be found on Illumio's website.

Integration Method: API

Tables: API Activity (6003)

This integration supports the following events.

This integration supports the following versions.

Prerequisites

• The user should have Global Administrator privileges to create an API key from Illumio Core console.

• The user should have access to the DataBee console.

Configuration Overview

1. Create an API Key from Illumio Core application.

2. Add Illumio Core data feed in the Databee console with below parameters.

   DataBee Feed Parameter	Illumio Core Parameter
   Username	auth_username
   Password	secret
   Organization ID	Organization ID
   API Base URL	Instance URL

Illumio Core Configuration

API Key Configuration

1. Log in to Illumio core console.
    

2. Save instance URL from the URL bar as shown below for future use.
    

3. Click on User Profile on top right corner > Select My API Keys.
    

4. Click on Add > provide ‘Name’ and ‘Description’ for the key > click on Create. Save Org ID for future use.
    

5. Click the Download Credentials button to obtain your Username and Secret.
    

   Note:

   Please keep username and secret saved as they are only available once.

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the Illumio Core and click it as shown below.
    

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, enter the following

   • Authentication Method: Basic

   • Username: auth_username saved on the API Key Configuration

   • Password: secret saved on the API Key Configuration

   • Organization ID: Org ID of the logged in user in Illumio core console

   • API Base URL: Instance URL of the Illumio core console

   • Event Types: preselected for all the event types that integration pulls.

   

6. Click Submit.

Troubleshooting Tips

• Ensure that auth_username and secret value entered correctly in the DataBee configuration. Save secret value in the notepad to ensure that no spaces or unwanted character are included in the secret.

• Ensure user has correct permission to generate API Key value from Illumio core console.