Configure the BlackBerry extension for QRadar
BlackBerry
extension for QRadar- In QRadar, click Menu > Admin.
- ClickCylancePROTECT and CylanceOPTICSunderCylanceQRadar App.
- ClickAdd configuration.
- Enter the CylancePROTECT API URL for your region.The CylancePROTECT API URL varies based on your region.ItemDescriptionAPI URL
- Asia-Pacific - North: https://protectapi-apne1.cylance.com
- Asia-Pacific - Southeast: https://protectapi-au.cylance.com
- Europe - Central: https://protectapi-euc1.cylance.com
- North America: https://protectapi.cylance.com
- South America: https://protectapi-sae1.cylance.com
- US Government: https://protectapi.us.cylance.com
- Enter the Tenant ID for yourCylancetenant.
- Enter the Application ID for yourCylancetenant.
- Enter the Application Secret for yourCylancetenant.
- Enter the Report prefix URL for your threat data reports.
- Enter the Report token for your threat data reports.
- Enter a friendly name for yourCylancetenant.
- Select Set as default tenant if you want this to be your default tenant when you access the QRadar console.
- Select Set as active tenant if you to make this tenant's information available in your QRadar console.
Only the active tenant is used by theBlackBerryextension for QRadar. If no tenant is marked as active, then the tenant marked as default is used for REST API interactions. - Select theEnable Proxycheck box if a proxy server is required for internet access, which is needed to establish communication with the Cylance tenant.
- Enter the Proxy URL, Username, and Password .Include the correct protocol between https or http in the URL, and specify the proxy port. Use the following format for the Proxy URL: {header}://{proxy domain/IP}:{proxy port} (for example, http://10.3.0.22:3128).
- ClickSave.