The Umbrella Documentation Hub

Welcome to the Umbrella documentation hub. Here you'll find access to all of our Cisco Umbrella user guides.

Get Started    

Third-party Security Integrations

The Integrations section of the Security Settings page lists various third-party security products—including Cisco AMP Threat Grid—that have been integrated into Umbrella. Umbrella supports third-party integrations through apps, network devices, and the Umbrella Enforcement API. The Umbrella Enforcement API is a REST API that enables threat intelligence and security information event platforms to register domain and security events programmatically.

Once integrated into Umbrella, these products build their own custom destination block list of discovered malicious domains. These integrations can be selected in a policy, just like any other security category, so that any matches against their special destination block lists are prohibited. Umbrella supports logging and reports of the traffic from the integrated networks.

In the following integration example, an organization uses Umbrella and Investigate alongside their own security information event management system, and leverages the Umbrella APIs to create a full feedback loop.

For more information about integrations, see IT Security Integrations and APIs.


Dispute a Security Categorization < Third-party Security Integrations > Set Up Custom Integrations

Updated 2 days ago

Third-party Security Integrations


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.