Impelix IMPACT Integration
with Cisco Stealthwatch
The Impelix IMPACT platform ingests telemetry from your all your security products as well as third-party feeds (threat intelligence, cybersecurity risk, business resilience intelligence, etc.) and delivers event correlation, security control efficacy, and compliance monitoring.
We believe that the more data ingested into IMPACT, the more context you will have regarding security incidents, which will allow effective and efficient incident response and compliance management. Therefore, we encourage and facilitate connecting vendor products telemetry with Impelix IMPACT platform.
Cisco Stealthwatch
Impelix IMPACT Configuration
- Go to Admin > SOAR > Cisco Stealthwatch > Config
- Click the checkbox for Enable the Stealthwatch Integration
- Paste the following:
- Hostname or IP Address of SMC
- API Username
- API Password
- Domain ID
- Click the disk icon (Save)
- Click Jobs and go to Artifacts from Stealthwatch
-
Select Triggers, expanding Manual Trigger and Interval Trigger.
- Toggle both to State: ENABLED
- The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization. (Recommended: 10 minutes)
- Click the disk icon (Save)