Integrating with Cylance

Introduction

Follow this article to integrate Blackpoint with Cylance. The integration consists of four main steps:

  1. Acquiring the Application ID & Secret
  2. Acquiring the Tenant ID
  3. Adding the Integration in the Blackpoint Portal
  4. Verifying your integration

Prerequisites

  • You must have Administrator-level access in Cylance.

Instructions

Acquiring the Application ID & Secret

  1. Log into the Cylance platform.
  2. On the left side menu, navigate to Settings > Integrations. 
  3. On the Settings page, click the +Add Application button. 
  4. In the Add Application pop-up, enter a unique name for the application. Blackpoint recommends that you grant only read rights for all privilege types. Click Save.
    Note: If you do not select any check boxes for a privilege type, then the application will not have access at all to that data type.
  5. An Application Saved pop-up window will appear showing the newly created application ID and application secret. Click the Copy buttons next to each. Save or paste this information in a secure location for later use. Click OK. 

Acquiring the Tenant ID

  1. Back in the Settings > Integrations page, locate the Tenant ID on the right.
  2. Click the Copy button and save or paste this information in a secure location for later use. 

Adding the Integration in the Blackpoint Portal

  1. In the Blackpoint Portal, navigate to Customer in the left-hand menu.
  2. In the Customer List section, find the customer you are setting up a Cylance integration for. Click the Manage button. You will be redirected to the Customer Details page. 
  3. In the Integrations tab, click the +Add button.
  4. In the Add Integration pop-up, select Cylance in the drop-down menu and click Next.
  5. In the next pop-up, enter the following information:
    1. Application ID - The application ID that you noted in the Acquiring the Application ID & Secret section above.
    2. Application Secret - The application secret that you noted in the Acquiring the Application ID & Secret section above.
    3. Tenant ID - The tenant ID that you noted in the Acquiring Tenant ID section above.
    4. Click the Save button.
      Note: If your URL is different than the one shown by default in this pop-up, please contact [email protected] for assistance.
  6. Back in the Customer Details page, you will see the new Cylance integration.

Verifying your integration

  1. In the Blackpoint Portal, click the SNAP-Defense icon.
  2. In the Dashboard page, search for your customer and click the name to open it.
  3. Click Collection in the left-hand menu and then on the Status tab at the top. In the Devices section, click the Package drop-down and select the Cylance package.
    1. Optionally, you can click Network in the left-hand menu which opens the full Device List. Click the inverted triangle icon to expand the filters. Then, expand the Collection Type heading to see the number of Cylance devices being collected. Once you click Apply Filters, the diagram will adjust to show only devices collected by Cylance.