Integrating Cylance Protect Endpoint Protection

1. In the Cylance tenant page, click Settings > Application.

2. Do the following:

   • Check the Syslog/SIEM box.

   • Check the boxes for all event types.

   • In SIEM, select HP Arcsight.

   • In Protocol, select TCP.

   • Check the TLS/SSL box.

   • In IP/Domain, select cy-events.skout-build.com.

   • In Port, select 5047(US-based account) or 5044(EU-based account)

     

   When entering the Customer token, the format is CustomerName:orgname. Make sure there is space before Name:orgname and no space after the colon between Name:orgname. Also, make sure there is no space after Name:orgname. See the example below, where the orgname is ofilsystems:

   

   
   

3. Click Test Connection. Look for a green confirmation notice.

   
   

To integrate Crowdstrike with Barracuda XDR Dashboard

1. In Barracuda XDR Dashboard, in the Account list, select the name of the company you created in the previous procedure.
2. Click Administration > Integrations.
3. On the Cylance card, click Setup.
   
4. Select the Enabled check box.
   
5. Click Save.