Cisco Umbrella

The Polarity-Cisco Umbrella (formerly known as OpenDNS) provides immediate awareness on domains. Enabling an analyst to quickly know if a domain is malicious benign or uncategorized, also categorizing the domain into content and security categories.

Configuring Cisco-Umbrella

This integration requires you to complete a few extra steps in order to use it.

Indicator Types - Domain

API Key - An API key is needed in order for the Polarity Cisco-Umbrella integration to work. To obtain an API Key for Cisco-Umbrella you must pay for the service.

Return Statuses - Analysts can choose what statuses they would like the Polarity - Cisco Umbrella integration to return. Allowing the analyst to tailor the results to their workflow.