AlienVault® USM Anywhere™

Configuring the AlienApp for Cisco Umbrella for Orchestration

Role Availability Read-Only Analyst Manager

When the AlienApp for Cisco Umbrella is connected to your Cisco Umbrella environment, you can launch app actions and create orchestration rules to send data from USM Anywhere to Cisco Umbrella. See AlienApp for Cisco Umbrella Orchestration for more information about the orchestration actions supported by the AlienApp for Cisco Umbrella.

For example, you might create a rule where USM Anywhere automatically sends the URLs of suspicious domains that it identifies to Cisco Umbrella. See Creating Cisco Umbrella Response Action Rules for information about adding these types of orchestration rules for the AlienApp.

Note: To fully integrate USM Anywhere with your Cisco Umbrella implementation, you should also have the Cisco Umbrella log collection enabled so that USM Anywhere can retrieve and normalize raw log data from Cisco Umbrella. See Collecting Logs from Cisco Umbrella for information about enabling this plugin and raw log data retrieval.