Cloud Security API
- Cloud Security
- Umbrella API
- Authentication
- Getting Started with Umbrella
- API Changelog
- Guides
- Overview
- Umbrella OAuth 2.0 Scopes
- Control Apps in Umbrella
- Pagination
- Rate Limits
- Errors and Troubleshooting
- Request and Response Samples
- Sample Scripts
- API Reference
- Overview
- Auth
- Deployments
- Admin
- Overview
- KeyAdmin
- Managed Organizations
- Overview
- Providers Console Configuration
- Providers
- Overview
- API
- Providers
- Create Customer for Provider
- List Customers for Provider
- Get Customer for Provider
- Delete Customer for Provider
- Update Customer for Provider
- Update Trial to Customer
- Create Customer Access Request
- Get Customer Access Request
- Update Customer Access Request
- Create Customer Trial Extensions
- Get Customer Subscription Details
- Get Customer Trial Strength
- Get Customer Addresses for Provider
- Get Customer Packages for Provider
- Get Customer Deals by ID
- Update Customer Deals by ID
- Providers
- Model
- AccessRequest
- adminEmails
- ccwDealOwnerEmails
- city
- countryCode
- Customer
- CustomerAddress
- CustomerDeal
- customerId
- customerName
- dealId
- GetCustomer
- organizationId
- organizationName
- Package
- packageId
- packageIdTrialConversions
- packageName
- packageNameTrialConversion
- PpovLifecycle
- seats
- state
- streetAddress
- streetAddress2
- TrialStrength
- zipCode
- Managed Providers
- Users and Roles
- Investigate
- Overview
- Investigate
- Overview
- API
- Domain Status and Categorization
- Domain Volume
- Co-occurrences for a Domain
- Passive DNS
- Tagging Timeline
- Subdomains for a Domain
- Related Domains for a Domain
- Security Information for a Domain
- AS Information for a Domain
- WHOIS Information for a Domain
- Popularity List-Top Million Domains
- Search Domain
- Cisco Secure Malware Analytics Integration
- Model
- Avresult
- Behavior
- Connection
- ContentCategory
- DomainCategorization
- firstSeen
- firstSeenISO
- Grid
- Grids
- lastSeen
- lastSeenISO
- limit
- MatchRecord
- moreDataAvailable
- offset
- Record
- Records
- RiskScore
- Sample
- SampleHashBehaviors
- SampleHashConnections
- SampleHashSamples
- SecurityCategory
- Subdomains
- TimelineItem
- totalresults
- WhoisDomain
- WhoisEmailsAndNameservers
- Policies
- Overview
- Destination Lists
- Overview
- API
- Model
- access
- BadRequestError
- bundleTypeId
- comment
- destination
- DestinationCreateObject
- DestinationIdsList
- DestinationListCreate
- DestinationListDelete
- DestinationListObject
- DestinationListPatch
- DestinationListResponse
- DestinationObject
- ForbiddenError
- id
- idDestination
- isGlobal
- meta
- name
- NotFoundError
- organizationId
- PaginatedDestinationListsResponse
- PaginatedDestinationObjectResponse
- ServerError
- status
- type
- UnauthorizedError
- Reports
- Overview
- Reporting
- Overview
- API
- Activity
- Top Identities
- Identity Distribution
- Top Destinations
- Top Categories
- Top Event Types
- Top DNS Query Types
- Organization Requests by Hour
- Organization Requests by Timerange
- Organization Requests by Hour and Category
- Organization Requests by Timerange and Category
- Deployment Status
- Provider Deployment Status
- Provider Requests by Hour
- Provider Requests by Timerange
- Provider Requests by Organization
- Provider Requests by Category
- Provider Requests by Destination
- Provider Category Requests by Organization
- Bandwidth by Hour
- Bandwidth by Timerange
- Top Files
- Total Requests
- Top Threats
- Top Threat Types
- Utility
- Top IPs
- Summary
- Summaries by Category
- Summaries by Destination
- Summaries by Rule (Intrusion)
- Model
- ActivityAMPRetro
- ActivityDns
- ActivityFirewall
- ActivityIntrusion
- ActivityProxy
- allapplications
- AntivirusThreats
- Application
- ApplicationCategories
- ApplicationsWithCategories
- bandwidth
- BandwidthbyHour
- categories
- Category
- CategoryByHour
- CategoryCount
- CategoryRequests
- CategoryWithLegacyId
- CiscoAMP
- Classification
- count
- CVE
- DataCenter
- DataLossPreventionState
- Date
- DeploymentStatus
- DestinationIp
- DestinationPort
- Egress
- FirewallApplication
- HttpError
- identities
- Identity
- IdentityDistribution
- IdentityType
- Isolated
- Meta
- Organization
- OrganizationDeploymentStatus
- Policy
- policycategories
- PrivateApplicationGroup
- Protocol
- ProviderCategoryRequestsByOrganization
- ProviderCountsByCategory
- ProviderCountsByDestination
- ProviderDeploymentStatus
- ProviderRequestsbyDestination
- rank
- RequestCounts
- requests
- RequestsbyCategory
- RequestsbyHour
- RequestsbyOrganization
- RequestsByOrgCounts
- Rule
- RuleParam
- SessionId
- Severity
- sha256
- Signature
- SignatureList
- SignatureListSummary
- SourceIp
- SourcePort
- Summary
- SummaryWithCategory
- SummaryWithDestination
- Threat
- ThreatName
- ThreatType
- Time
- Timestamp
- TimestampForBucket
- TimestampInSeconds
- TopCategory
- TopDestination
- TopDnsQueryType
- TopEventType
- TopFile
- TopIdentity
- TopIP
- TopThreats
- TopThreatTypes
- TopURL
- TotalRequest
- verdict
- verdictDetected
- App Discovery
- Overview
- API
- Model
- ApplicationAttribute
- ApplicationAttributeCategory
- ApplicationAttributeCategoryList
- ApplicationAttributeValue
- ApplicationCategory
- ApplicationCategoryList
- ApplicationIdentity
- ApplicationIdentityList
- ApplicationInList
- ApplicationList
- ApplicationObject
- ApplicationRisk
- AppType
- BulkLabelApplications
- BusinessRisk
- CdfwSource
- DataStorage
- DnsSource
- Error
- FinancialViability
- Label
- ProtocolIdentity
- ProtocolIdentityList
- ProtocolList
- ProtocolObject
- ProtocolObjectInList
- Sources
- SwgSource
- UsageType
- WeightedRisk
- API Usage
- Providers Consoles
- Umbrella Dynamic Network Update API
- Postman Collection
- Authorization Client Samples
- Secure Access API
- Authentication
- Getting Started with Secure Access
- API Changelog
- Guides
- Overview
- Secure Access OAuth 2.0 Scopes
- Rate Limits
- Errors and Troubleshooting
- Request and Response Samples
- Sample Scripts
- Overview
- Key Admin API Guide
- Network Tunnel Groups API Guide
- Destination Lists API Guide
- Secure Web Gateway Device Settings API Guide
- Resource Groups and Private Resources API Guide
- Application Lists API Guide
- Policy Rules API Guide
- Resource Connector Groups and Connectors API Guide
- VPN User Connections API Guide
- API Reference
- Overview
- Auth
- Admin
- Deployments
- Overview
- Network Tunnel Groups and Regions
- Overview
- API
- Model
- 400BulkStatesError
- 400ListError
- 400NTGIDError
- 400RegionsError
- 400ValidationError
- 401Error
- 403Error
- 404Error
- 409Error
- 500Error
- asNumber
- authId
- bgp
- bgpDataRequestObj
- bgpDataResponseObj
- createdAt
- datacenter
- datacenterWithIP
- deviceType
- filtersNTGsObject
- filtersRegionsObject
- hubId
- hubs
- hubState
- hubsWithIP
- hubsWithState
- id
- isPrimary
- modifiedAt
- name
- networkCIDRS
- networkTunnelGroupBulkStateResponse
- networkTunnelGroupListResponse
- networkTunnelGroupResponse
- networkTunnelGroupsList
- networkTunnelGroupStateResponse
- organizationId
- region
- regionList
- routingRequest
- routingResponse
- staticDataRequestObj
- staticDataResponseObj
- status
- tunnelDataState
- tunnelIKEState
- tunnelIPSecState
- tunnelRoutingStats
- tunnelsStatus
- tunnelState
- Resource Connector Groups and Connectors
- Roaming Computers
- Secure Web Gateway Device Settings
- Internal Domains
- Sites
- Investigate
- Overview
- Investigate
- Overview
- API
- Domain Status and Categorization
- Domain Volume
- Co-occurrences for a Domain
- Passive DNS
- Tagging Timeline
- Subdomains for a Domain
- Related Domains for a Domain
- Security Information for a Domain
- AS Information for a Domain
- WHOIS Information for a Domain
- Popularity List-Top Million Domains
- Search Domain
- Cisco Secure Malware Analytics Integration
- Model
- Avresult
- Behavior
- Connection
- ContentCategory
- DomainCategorization
- firstSeen
- firstSeenISO
- Grid
- Grids
- lastSeen
- lastSeenISO
- limit
- MatchRecord
- moreDataAvailable
- offset
- Record
- Records
- RiskScore
- Sample
- SampleHashBehaviors
- SampleHashConnections
- SampleHashSamples
- SecurityCategory
- Subdomains
- TimelineItem
- totalresults
- WhoisDomain
- WhoisEmailsAndNameservers
- Policies
- Overview
- About the Access Rule Attributes
- Destination Lists
- Overview
- API
- Model
- access
- BadRequestError
- bundleTypeId
- comment
- destination
- DestinationCreateObject
- DestinationIdsList
- DestinationListCreate
- DestinationListDelete
- DestinationListObject
- DestinationListPatch
- DestinationListResponse
- DestinationObject
- ForbiddenError
- id
- idDestination
- isGlobal
- meta
- name
- NotFoundError
- organizationId
- PaginatedDestinationListsResponse
- PaginatedDestinationObjectResponse
- ServerError
- status
- type
- UnauthorizedError
- Private Resources and Resource Groups
- Overview
- API
- Model
- accessTypes
- accessTypesRequest
- branchAccess
- browserBasedAccessCommon
- browserBasedAccessRequest
- browserBasedAccessResponse
- certificateId
- clientBasedAccess
- descriptionPrivateResource
- descriptionPrivateResourceGroup
- dnsServerId
- externalFQDN
- externalFQDNPrefix
- networkBasedAccess
- ports
- privateResourceGroupList
- privateResourceGroupName
- privateResourceGroupRequest
- privateResourceGroupResponse
- privateResourceList
- privateResourceName
- privateResourceRequest
- privateResourceResponse
- protocolClientToResource
- protocolProxyToResource
- reachableAddresses
- resourceAddresses
- resourceGroupIds
- resourceIds
- sni
- sslVerificationEnabled
- Network and Service Objects
- Overview
- API
- Model
- 400ErrorObject
- 401ErrorObject
- 403ErrorObject
- 404ErrorObject
- 500ErrorObject
- count
- created_at
- descriptionNetworkObject
- descriptionNetworkObjectGroup
- descriptionServiceObject
- descriptionServiceObjectGroup
- groups
- idNetworkObject
- idNetworkObjectGroup
- idReference
- idServiceObject
- idServiceObjectGroup
- limit
- modified_at
- modified_by
- nameNetworkObject
- nameNetworkObjectGroup
- nameServiceObject
- nameServiceObjectGroup
- NetworkObjectGroupRequestSchema
- NetworkObjectGroupResponseSchema
- NetworkObjectRequestSchema
- NetworkObjectResponseSchema
- NetworkValueType
- offset
- ReferencedGroupsResponseSchema
- ReferencedRulesResponseSchema
- rules
- ServiceObjectGroupRequestSchema
- ServiceObjectGroupResponseSchema
- ServiceObjectRequestSchema
- ServiceObjectResponseSchema
- ServiceValueType
- valuesNetworkObjectGroups
- valuesServiceObjectGroup
- Policy Rules
- Overview
- API
- Model
- applicationCategoryIds
- applicationId
- applicationIds
- ApplicationList
- applicationListId
- applicationListName
- ApplicationListRequest
- ApplicationLists
- ApplicationUsageResponse
- attributeName
- attributeNameInQuery
- attributeOperator
- attributeValue
- attributeValueArrayIntegers
- attributeValueInQuery
- createdAtApplicationList
- createdAtRule
- createdAtRuleSetting
- isDefault
- modifiedAtApplicationList
- modifiedAtRule
- modifiedAtRuleSetting
- modifiedBy
- organizationId
- Regions
- Rule
- ruleAction
- ruleConditions
- ruleDescription
- RuleFilterDestinationsExample
- RuleFilterRuleConditionsExample
- RuleFilters
- RuleFilterSourcesExample
- ruleId
- ruleIsDefault
- ruleIsEnabled
- ruleName
- rulePriority
- Rules
- ruleSettings
- RuleSourceDestFilters
- RulesResponse
- settingDescription
- settingName
- SettingResponse
- SettingsRequest
- SettingsRequestObject
- SettingsResponse
- SettingsResponseObject
- SettingTypesResponse
- settingValue
- Reports
- Overview
- Reporting
- Overview
- API
- Activity
- Top Identities
- Identity Distribution
- Top Resources
- Top Destinations
- Top Categories
- Top Event Types
- Top DNS Query Types
- Organization Requests by Hour
- Organization Requests by Timerange
- Organization Requests by Hour and Category
- Organization Requests by Timerange and Category
- Deployment Status
- Bandwidth by Hour
- Bandwidth by Timerange
- Top Files
- Total Requests
- Top Threats
- Top Threat Types
- Utility
- Top IPs
- Summary
- Summaries by Category
- Summaries by Destination
- Summaries by Rule
- Remote Access
- Private Resource
- Requests Resource Connector
- Requests Summary Resource Connector Groups
- Resource Connectors
- Rules Activity
- Unique Resources
- Model
- ActivityAMPRetro
- ActivityDecryption
- ActivityDns
- ActivityFirewall
- ActivityIntrusion
- ActivityIP
- ActivityProxy
- ActivityZTNA
- allapplications
- AntivirusThreats
- AppConnectorAgentDetailedStatsTimerange
- AppConnectorAgentSummaryData
- AppConnectorGroupDetailedStatsTimerange
- AppConnectorGroupSummaryData
- Application
- ApplicationCategories
- ApplicationsWithCategories
- bandwidth
- BandwidthbyHour
- categories
- Category
- CategoryByHour
- CategoryCount
- CategoryWithLegacyId
- CiscoAMP
- Classification
- count
- CPUUtilization
- CVE
- DataCenter
- DataLossPreventionState
- Date
- DeploymentStatus
- DestinationIp
- DestinationPort
- Device
- Egress
- FirewallApplication
- FirewallRuleHitcountSummary
- HttpError
- identities
- Identity
- IdentityDistribution
- IdentityType
- IdentityWithStats
- Isolated
- Meta
- Policy
- policycategories
- PolicyZTNA
- PrivateApplicationGroup
- PrivateResourceDetailedStatsIdentities
- PrivateResourceDetailedStatsTimerange
- PrivateResourceStats
- Protocol
- rank
- RemoteAccess
- RequestAndConnectionCounts
- RequestCounts
- requests
- RequestsByAppConnector
- RequestsByAppConnectorGroup
- RequestsbyHour
- RequestSummaryAppConnector
- RequestSummaryAppConnectorGroup
- Rule
- RuleHitcountSummary
- RuleParam
- RulesActivity
- Ruleset
- SessionId
- Severity
- sha256
- Signature
- SignatureList
- SignatureListSummary
- SourceIp
- SourcePort
- Summary
- SummaryWithCategory
- SummaryWithDestination
- Threat
- ThreatName
- ThreatType
- Time
- TimeSeriesAppConnectorAgentData
- TimeSeriesAppConnectorGroupData
- TimeSeriesHitsCount
- Timestamp
- TimestampForBucket
- TimestampInSeconds
- TopCategory
- TopDestination
- TopDnsQueryType
- TopEventType
- TopFile
- TopIdentity
- TopIP
- TopResource
- TopThreats
- TopThreatTypes
- TopURL
- TotalRequest
- TunnelStatus
- UniqueResources
- verdict
- verdictDetected
- ZtnaApplication
- ZtnaPolicy
- ZtnaSummary
- App Discovery
- Overview
- API
- Model
- ApplicationAttribute
- ApplicationAttributeCategory
- ApplicationAttributeCategoryList
- ApplicationAttributeValue
- ApplicationCategory
- ApplicationCategoryList
- ApplicationIdentity
- ApplicationIdentityList
- ApplicationInList
- ApplicationList
- ApplicationObject
- ApplicationRisk
- AppType
- BulkLabelApplications
- BusinessRisk
- CdfwSource
- DataStorage
- DnsSource
- Error
- FinancialViability
- Label
- ProtocolIdentity
- ProtocolIdentityList
- ProtocolList
- ProtocolObject
- ProtocolObjectInList
- Sources
- SwgSource
- UsageType
- WeightedRisk
- Metering
- API Usage
- Postman Collection
- Cloudlock API
- Integration Guides
- Developer Resources
- Community and Support
- Legacy and Deprecated Umbrella APIs