It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda XDR
Overview Documentation Materials

Integrating Cylance Protect Endpoint Protection

  • Last updated on
Before starting, contact get your Enablement Engineer to get your orgname.

  1. In the Cylance tenant page, click Settings > Application.

  2. Do the following:

    • Check the Syslog/SIEM box.

    • Check the boxes for all event types.

    • In SIEM, select HP Arcsight.

    • In Protocol, select TCP.

    • Check the TLS/SSL box.

    • In IP/Domain, select cy-event.skout-build.com.
      Cylance1.png

    When entering the Customer token, the format is Customer Name:orgname. Make sure there is space before Name:orgname and no space after the colon between Name:orgname. Also, make sure there is no space after Name:orgname. See the example below, where the orgname is ofilsystems:

    cylance2.png

  3. Click Test Connection. Look for a green confirmation notice.

  4. Once the above changes are made and saved, contact Barracuda XDR so the logs can be verified. If everything is working, the Cylance datasource appears on the dashboard within 1 – 2 hours.