Skip to main content

Cloud-delivered Incident ResponderIncident Responder Documentation

Configure the FireEye HX Service

Configure FireEye HX as a service to search for and get information about entity and assets, get the containment state of a FireEye host, and run other FireEye HX actions.

  • Note the domain of your FireEye HX endpoint.

  • Note the port number of your FireEye HX endpoint.

  • If you use a proxy, ensure that you whitelist the hostname of your FireEye HX endpoint.

  1. In the sidebar, click SETTINGSA grey gear icon, then select Core.

  2. Under SERVICE INTEGRATIONS, select Services.

  3. Select a service:

    • To configure a specific service, hover over a service, then click CONFIGURE. Use the search by vendor or filter by action to find a service.

    • To manually provide the relevant information for a service, click Configure a new serviceA dark blue plus sign..

    • To view all actions for a service, hover over a service, then click the information icon An icon of a grey i inside a grey circle..

  4. Enter information about the service:

    • Service Name – Enter a unique name for the service. By default, the service name is FireEyeHX.

    • (Optional) Description – Describe the service.

    • (Optional) Owner – Enter the email address of the person or group responsible for the service. 

    • Host – Enter the domain of your FireEye HX endpoint.

    • Port – Enter the port number of your FireEye HX endpoint.

    • Username – Enter the username for your FireEye account.

    • Password – Enter the password to your FireEye account.

  5. To validate the source, select TEST CONNECTIVITY.

  6. Select CREATE SERVICE.