Skip to main content

Cloud ConnectorsExabeam Cloud Connectors Configuration Guide

Symantec CloudSOC Cloud Connector

Broadcom’s Symantec CloudSOC is a Cloud Access Security Broker (CAB) that protects cloud applications and services by providing visibility over all the cloud services in the organization and by identifying risks and compliance issues. Symantec CloudSOC helps enterprises to continuously monitor and control the cloud apps usage and protects SaaS, PaaS, and IaaS accounts from misuse, threats, and data loss. For more information see the product information.

Prerequisites to Configure the Symantec CloudSOC Connector

Before you configure the Symantec CloudSOC connector you must obtain the following account information:

  • API Key, also called Key ID

  • Key Secret

  • Tenant

Obtain the API Key, Key Secret, and Tenant

Symantec CloudSOC APIs are authenticated via application keys. You must obtain the API key, key secret, and tenant to use while configuring the Symantec CloudSOC connector.

To obtain an application key ID, key secret, and tenant:

  1. Log in to the Symantec CloudSOC console as an administrator.

  2. Navigate to Settings by clicking your username.

  3. Click API Keys on the Settings page.

  4. On the API Keys page, in the Add a New API Key box, type a name for the key, then click Add New API Key.

  5. In the API Key List area, in the row for the new key that you created, click the download icon to download the config.json file.

  6. Open the config.json file in a text editor and record the values for:

    • Key ID

    • Key Secret

    • Tenant

      Note the values for the API key that is key ID, key secret, and tenant. Use the values while configuring the Symantec CloudSOC Connector on the Exabeam Cloud Connector platform. For more information see CloudSOC Management API Guide.

Configure the Symantec CloudSOC Connector

Broadcom’s Symantec CloudSOC is a Cloud Access Security Broker (CAB) that protects cloud applications and services by providing visibility over all the cloud services in the organization and by identifying risks and compliance issues. Symantec CloudSOC helps enterprises to continuously monitor and control the cloud apps usage and protects SaaS, PaaS, and IaaS accounts from misuse, threats, and data loss. For more information see the product information.

The following table displays audit source API and security events supported by the connector.

Audit Source: API

Service or Module Covered

Events Included

Management API

Any

All

Table 30. Audit source API and security events supported by the connector


To configure the Symantec CloudSOC connector to import data into the Exabeam Cloud Connector platform:

  1. Complete the Prerequisites to Configure the Symantec CloudSOC Connector.

  2. Log in to the Exabeam Cloud Connectors platform with your registered credentials.

  3. Navigate to Settings > Accounts > Add Account.

  4. Click Select Service to Add, then select Symantec CloudSOC from the list.

  5. In the Accounts section, enter the required information. Required fields are indicated with a red bar.

    1. Tenant – Select a tenant to attach to the connector if you are using a multi-tenant edition of Exabeam. Otherwise, select default.

    2. Account Name – Specify a name for the Symantec CloudSOC connector. For example, Corporate Cloud Access Security Broker.

    3. (Optional) Description – Describe the Symantec CloudSOC connector. For example, Symantec CloudSOC CAB for visibility, data security, and threat protection.

    4. Key ID – Enter the value for key ID that you obtained while completing prerequisites.

    5. Key Secret – Enter the value for key secret that you obtained while completing prerequisites.

    6. Tenant – Enter the value for tenant that you obtained while completing prerequisites.

    7. Region – Select the region EU or US based on the cloud host URL. If you use US-based production cloud, the host URL is api-vip.elastica.net. Select US. If you use EU-based production cloud, the host URL is api.eu.elastica.net. Select EU.

  6. To confirm that the Exabeam Cloud Connector platform communicates with the service, click Test Connection.

  7. Click Done to save your changes. The cloud connector is now set up on the Exabeam Cloud Connector platform.

  8. To ensure that the connector is ready to send and collect data, Start the connector and check that the status shows OK.