Skip Navigation

Configure the BlackBerry extension for QRadar

  1. In QRadar, go to the Admin page.
    • Select
      Menu > Admin
      .
  2. Click
    CylancePROTECT and CylanceOPTICS
    under Cylance QRadar App.
  3. Click
    Add configuration
    .
  4. Enter the CylancePROTECT API URL for your region.
    The CylancePROTECT API URL varies based on your region.
    Item
    Description
    API URL
    • Asia-Pacific - North: https://protectapi-apne1.cylance.com
    • Asia-Pacific - Southeast: https://protectapi-au.cylance.com
    • Europe - Central: https://protectapi-euc1.cylance.com
    • North America: https://protectapi.cylance.com
    • South America: https://protectapi-sae1.cylance.com
    • US Government: https://protectapi.us.cylance.com
  5. Enter the Tenant ID for your Cylance tenant.
  6. Enter the Application ID for your Cylance tenant.
  7. Enter the Application Secret for your Cylance tenant.
  8. Enter the Report prefix URL for your threat data reports.
  9. Enter the Report token for your threat data reports.
  10. Enter a friendly name for your Cylance tenant.
    1. Select Set as default tenant if you want this to be your default tenant when you access the QRadar console.
    2. Select Set as active tenant if you to make this tenant's information available in your QRadar console.
    Only the active tenant is used by the BlackBerry extension for QRadar. If no tenant is marked as active, then the tenant marked as default is used for REST API interactions.
  11. Select the
    Enable Proxy
    check box if a proxy server is required for internet access, which is needed to establish communication with the Cylance tenant.
  12. Enter the Proxy URL, Username, and Password .
    Include the correct protocol between https or http in the URL, and specify the proxy port. Use the following format for the Proxy URL: {header}://{proxy domain/IP}:{proxy port} (for example, http://10.3.0.22:3128).
  13. Click
    Save
    .