It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda XDR
Overview Documentation Materials

Setting up ATR for Cisco Umbrella

  • Last updated on

Automatic Threat Response (ATR) isolates threats coming from Cisco Umbrella accounts automatically, minimizing threats to your environment.

Set up ATR for Cisco Umbrella by doing the following:

  • Create the Cisco Umbrella API key and key secret

  • Identify the Organization ID

  • Add a destination list

  • Configure the XDR Dashboard

To create the Cisco Umbrella API key and key secret

You need the API key and key secret to configure the XDR Dashboard. The API key must have an expiration date.

Tokens last up to 3600 seconds. When you request a new token, it returns the same one unless the previous token is still valid.

  1. In the Cisco Umbrella dashboard, navigate to Admin > API Keys.

  2. In the top right corner, click Add Add button.png .

    Policy Scope.png

  3. Give the API key the name Barracuda_XDR_API_Key.

  4. In Key Scope, select the Policies check box.

    API Key.png

  5. Click Create Key.

  6. Scroll to the bottom of the Add New API Key page.

  7. Copy the API Key and Key Secret and save it in a safe place.

To identify the Cisco Umbrella Organization ID

  1. Log in to the Cisco Umbrella dashboard.

  2. In the URL, identify the Organization ID, which is a numerical ID. For example, if your URL is https://dashboard.umbrella.com/o/1234567/#/admin/apikeys, the ID is 1234567.

  3. Copy the ID and save it in a safe place.

To add a destination list

  1. In the Cisco Umbrella dashboard, navigate to Policies > Policy Components > Destination Lists.

  2. In the top right corner, click Add Add button.png .

  3. Name the list Barracuda_XDR_Blocked_Ips.
    NOTE Be sure to use this exact name.

  4. Leave the action as Blocked.

    Blocked List.png

  5. Click Save.

To configure the Barracuda XDR Dashboard

  1. In Barracuda XDR Dashboard, click ATR Settings > Firewalls.

  2. In the Firewalls table, click the Cisco Firewall row.

  3. Click Edit Config.

  4. In the Edit Config dialog box, enter the following:

    • API Key - Paste the API Key from To create the Cisco Umbrella API key and key secret procedure, above.

    • API Secret - Paste the API Secret from To create the Cisco Umbrella API key and key secret procedure, above.

    • Destination List Name - Type Barracuda_XDR_API_Key.

    • Organization ID - Paste the ID number from the To identify the Cisco Umbrella Organization ID procedure above.

      Dashboard.png

  5. Click Save.