This article leads you through the process of integrating Cisco Firepower with Red Canary. Follow the procedure from beginning to end.
Step 1: Red Canary–Create your Red Canary generated email
Create a Red Canary provided-email to send Cisco Firepower alerts for ingestion.
- From the Red Canary homepage, click Integrations, and then click Alert Sources.
- In the search bar, type and select Cisco Firepower.
- To configure your new alert source, scroll down and click Cisco Firepower.
- Click Edit Configuration.
- Enter a Name for your external alert source.
- Select a Display Category.
- Under the Ingest Format/Method dropdown, select Cisco Firepower via Email.
- Click Save Configuration. This will generate the email address you will use to send Cisco Umbrella alerts to.
- Click Edit Configuration.
- Click Activate.
Comments
1 comment
The article does not explain where to enter the email provided within Firepower. Anyone unfamiliar with navigating and using the FMC only has half the process.
Please sign in to leave a comment.