Integrating Cylance Protect Endpoint Protection

Before starting, contact get your Enablement Engineer to get your orgname.

1. In the Cylance tenant page, click Settings > Application.

2. Do the following:

   • Check the Syslog/SIEM box.

   • Check the boxes for all event types.

   • In SIEM, select HP Arcsight.

   • In Protocol, select TCP.

   • Check the TLS/SSL box.

   • In IP/Domain, select cy-events.skout-build.com.

   • In Port, select 5047(US-based account) or 5044(EU-based account)

     Open

     

3. Click Test Connection. Look for a green confirmation notice.

To integrate Crowdstrike with Barracuda XDR Dashboard

1. In Barracuda XDR Dashboard, click Integrations .

2. On the Cylance card, click Setup.

   Open

   

3. Select the Enabled check box.

   Open

   

4. Click Save.

‌