Skip Navigation

Configure the
BlackBerry
extension for QRadar

  1. In QRadar, click Menu > Admin.
  2. Click
    CylancePROTECT and CylanceOPTICS
    under
    Cylance
    QRadar App.
  3. Click
    Add configuration
    .
  4. Enter the CylancePROTECT API URL for your region.
    The CylancePROTECT API URL varies based on your region.
    Item
    Description
    API URL
    • Asia-Pacific - North: https://protectapi-apne1.cylance.com
    • Asia-Pacific - Southeast: https://protectapi-au.cylance.com
    • Europe - Central: https://protectapi-euc1.cylance.com
    • North America: https://protectapi.cylance.com
    • South America: https://protectapi-sae1.cylance.com
    • US Government: https://protectapi.us.cylance.com
  5. Enter the Tenant ID for your
    Cylance
    tenant.
  6. Enter the Application ID for your
    Cylance
    tenant.
  7. Enter the Application Secret for your
    Cylance
    tenant.
  8. Enter the Report prefix URL for your threat data reports.
  9. Enter the Report token for your threat data reports.
  10. Enter a friendly name for your
    Cylance
    tenant.
    1. Select Set as default tenant if you want this to be your default tenant when you access the QRadar console.
    2. Select Set as active tenant if you to make this tenant's information available in your QRadar console.
    Only the active tenant is used by the
    BlackBerry
    extension for QRadar. If no tenant is marked as active, then the tenant marked as default is used for REST API interactions.
  11. Select the
    Enable Proxy
    check box if a proxy server is required for internet access, which is needed to establish communication with the Cylance tenant.
  12. Enter the Proxy URL, Username, and Password .
    Include the correct protocol between https or http in the URL, and specify the proxy port. Use the following format for the Proxy URL: {header}://{proxy domain/IP}:{proxy port} (for example, http://10.3.0.22:3128).
  13. Click
    Save
    .