- Supported Cloud Connectors
- Armis Cloud Connector
- AWS Cloud Connector
- AWS Multi-Tenant Cloud Connector
- Azure Cloud Connector
- Azure Cloud Connector Overview
- Azure Audit Source and Event Support
- Prerequisites to Configure the Azure Cloud Connector
- Configure the Azure Cloud Connector
- Collect EventHub Information for Azure EventHub Endpoints
- Collect all Microsoft Defender ATP Events
- Configure Azure to Monitor Security Center Events in Azure VMs
- Bitglass Cloud Connector
- Box Cloud Connector
- Centrify Cloud Connector
- Cisco AMP for Endpoints Cloud Connector
- Cisco Meraki Cloud Connector
- Cisco Umbrella Cloud Connector
- Citrix ShareFile Cloud Connector
- Cloudflare Cloud Connector
- Code42 Incydr Cloud Connector
- CrowdStrike Falcon Cloud Connector
- Cybereason Cloud Connector
- CylanceProtect Cloud Connector
- Dropbox Business Cloud Connector
- Duo Security Cloud Connector
- Egnyte Cloud Connector
- Fidelis Cloud Connector
- GitHub Cloud Connector
- Google Cloud Platform (GCP) Cloud Connector
- Google Cloud Pub/Sub Cloud Connector
- Google Workspace (Formerly G Suite) Cloud Connector
- LastPass Enterprise Cloud Connector
- Mimecast Email Security Cloud Connector
- Netskope Cloud Connector
- Office 365 Cloud Connector
- Okta Cloud Connector
- OneLogin Cloud Connector
- Palo Alto Networks SaaS Security Cloud Connector
- Ping Identity Cloud Connector
- Proofpoint Cloud Connector
- Rapid7 InsightVM Cloud Connector
- Salesforce Cloud Connector
- SentinelOne Cloud Connector
- ServiceNow Cloud Connector
- Slack App Cloud Connector
- Slack Classic App Cloud Connector (Formerly known as Slack Enterprise Grid Cloud Connector)
- Snowflake Cloud Connector
- Sophos Central Cloud Connector
- Symantec CloudSOC Cloud Connector
- Symantec Endpoint Protection (SEP) Mobile Cloud Connector
- Symantec Email Security.cloud Cloud Connector
- Symantec WSS Cloud Connector
- Tenable.io Cloud Connector
- VMware Carbon Black Cloud Endpoint Standard Cloud Connector
- Workday Cloud Connector
- Zoom Cloud Connector
- Custom Cloud Connector
- Webhook Cloud Connector
Citrix ShareFile Cloud Connector
Citrix ShareFile is a secure content collaboration, storage, and file sharing solution that offers managed file transfer service, cloud storage, document management, and data privacy controls. Citrix ShareFile provides cloud file sync, secure email functionality with encryption, and secure file sharing. For more information visit their website.
Prerequisites to Configure the Citrix ShareFile Connector
Before you configure the Citrix ShareFile connector you must complete the following prerequisites:
Ensure that the https://*.sharefile.com service is open for communication with the Exabeam Cloud Connector platform
Obtain an API key Exabeam for Citrix ShareFile Cloud Connector supports three authentication methods: oauth2, oauth2 password grant, and token. This topic describes how to use the oauth2 and oauth2 password grant authentication methods. For more information about the token method, contact Exabeam Support. Refer to the following table to choose the authentication method.
Authentication Mode
Citrix ShareFile Administrator Requirement
Citrix ShareFile Administrator Credentials Requirement
Exabeam Cloud Connectors Open API
Oauth2
Yes
No
No
Oauth2-password-grant
No
Yes, used only once for API token creation
Yes
Token
No
No
Yes
Table 6. Authentication Methods
Obtain an API Key
Citrix ShareFile APIs are authenticated via application keys. You must obtain the API key that you can use as a client ID and client secret while configuring the Citrix ShareFile connector. The procedure for obtaining the API key is the same for the oauth2 and oauth2 password grant methods.
To obtain an application key:
Log in to the Citrix ShareFile developer console by accessing https://api.sharefile.com as an administrator.
In the right pane, click Get an API Key.
In the API Key Generator section, enter the required information.
Application Name – Specify a name for your application.
Description – Enter description for the API key. For example, API key for the Exabeam Cloud Connector.
Redirect URI – Enter https://auth.skyformation.net/v1/oauth.
Click Generate API Key.
A table displays the values for Client ID and Client Secret. Use these values, represented by a string of letters and numbers, to configure the Citrix ShareFile cloud connector. Follow the same procedure if you want to use the oauth2 password grant method. For the oauth2 password grant method, you must enter the Citrix ShareFile administrator’s user name and password while configuring the connector. The cloud connector does not save the username and password. If two-factor authentication is enabled by Citrix, you must generate an application-specific password. For more information, see the Citrix Documentation.
Configure the Citrix ShareFile connector
Citrix ShareFile is a secure content collaboration, storage, and file sharing solution that offers managed file transfer service, cloud storage, document management, and data privacy controls. Citrix ShareFile provides cloud file sync, secure email functionality with encryption, and secure file sharing. For more information visit their website.
The following table displays audit source API and security events supported by the connector.
Audit Source: API | Service or Module Covered | Event Included |
---|---|---|
SharedSend | Any | Sharing |
SharedRequest | Any | Sharing requests |
Activity | Any | Administrative events |
AccessChange | Any | Access events |
To configure the Citrix ShareFile connector to import data into the Exabeam Cloud Connector platform:
Complete the Prerequisites to Configure the Citrix ShareFile Connector.
Log in to the Exabeam Cloud Connectors platform with your registered credentials.
Navigate to Settings > Accounts > Add Account.
Click Select Service to Add, then select Citrix ShareFile from the list.
In the Accounts section, enter the required information.
Tenant – Select a tenant to attach to the connector if you are using a multi-tenant edition of Exabeam. Otherwise, select default.
Account Name – Specify a name for the Citrix ShareFile connector. For example, CitixShareFile_collaboration.
Description – Describe the Citrix ShareFile connector (optional). For example, Citrix ShareFile cloud storage and file sharing solution for secure content collaboration.
Authentication Method – Select oauth2 or oauth2-password-grant.
If you select oauth2 authentication method, enter the required information for the following fields.
Client-ID – Enter the client ID part of API key that you obtained while completing prerequisites.
Client-Secret – Enter the client secret part of API key that you obtained while completing prerequisites.
External Authentication – Click Open External Oauth Window to authorize the Exabeam Cloud Connector to communicate with Citrix account. In a window that requests for granting access to allow Exabeam Cloud Connector to interact with Citrix ShareFile account for retrieving audit events, click Login.
Note
For oauth2 authentication method, the Citrix administrator must be present to enter the credentials and authorize Exabeam cloud connector’s interaction with Citrix ShareFile.
If you select oauth2-password-grant authentication method, enter the required information for the following fields.
Sub-Domain – Enter the initial part of Citrix ShareFile account DNS name. For example, if the Citrix ShareFile account URL is https://mycompany.sharefile.com, the sub-domain is ‘mycompany’.
Client-ID – Enter the client ID part of API key that you obtained while completing prerequisites.
Client-Secret – Enter the client secret part of API key that you obtained while completing prerequisites.
Username – Enter user name of the Citrix ShareFile administrator.
Password – Enter password for the Citrix ShareFile administrator. If two-factor authentication is enabled by Citrix, enter the application specific password that you generated while completing prerequisites.
Note
Required fields are indicated with a red bar.
To confirm that the Exabeam Cloud Connector platform communicates with the service, click Test Connection.
Click Done to save your changes. The cloud connector is now set up on the Exabeam Cloud Connector platform.
To ensure that the connector is ready to send and collect data, Start the connector and check that the status shows
OK
.