This article leads you through the process of integrating Cisco Firepower with Red Canary. Follow the procedure from beginning to end.

Step 1: Red Canary–Create your Red Canary generated email

Create a Red Canary provided-email to send Cisco Firepower alerts for ingestion.

From the Red Canary homepage, click Integrations, and then click Alert Sources.
In the search bar, type and select Cisco Firepower.
To configure your new alert source, scroll down and click Cisco Firepower.
Click Edit Configuration.
Enter a Name for your external alert source.
Select a Display Category.
Under the Ingest Format/Method dropdown, select Cisco Firepower via Email.
Click Save Configuration. This will generate the email address you will use to send Cisco Umbrella alerts to.
Click Edit Configuration.
Click Activate.

Integrate Cisco Firepower with Red Canary