Documentation Center
AlienVault® USM Anywhere™

Configuring the AlienApp for Cisco Umbrella for Orchestration

  Role Availability   Read-Only   Analyst   Manager

When the AlienApp for Cisco Umbrella is connected to your Cisco Umbrella environment, you can launch app actions and create orchestration rules to send data from USM Anywhere to Cisco Umbrella. For more information about the orchestration actions supported by the AlienApp for Cisco Umbrella, see AlienApp for Cisco Umbrella Orchestration.

For example, you might create a rule where USM Anywhere automatically sends the URLs of suspicious domains that it identifies to Cisco Umbrella. For information about adding these types of orchestration rules for the AlienApp, see Creating Cisco Umbrella Response Action Rules.

Note: To fully integrate USM Anywhere with your Cisco Umbrella implementation, you should also have the Cisco Umbrella log collection enabled so that USM Anywhere can retrieve and normalize raw log data from Cisco Umbrella. For information about enabling this plugin and raw log data retrieval, see Collecting Logs from Cisco Umbrella.