You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
playbooks in the Cisco Umbrella published in Microsoft Sentinel content hub version 3.0.2 fail with a 403 forbidden.
Please update the solution to the new v2 endpoints and thank you ever so kindly for your efforts.
To Reproduce
Steps to reproduce the behavior:
Run a playbook:
CiscoUmbrella-AddIpToDestinationList
CiscoUmbrella-BlockDomain
CiscoUmbrella-GetDomainInfo
CiscoUmbrella-AssignPolicyToIdentity
Additional troubleshooting
Where querying the endpoint with a permissioned API key using postman,
we see that the v1 endpoints:
GET /v1/organizations/{REMOVED_organization_id}/destinationlists
Hi @dimmthewitted,
We have informed the respective team about this issue and created a backlog item. Our team is working to fix this issue, but there is currently no ETA. We are closing this issue for now. If you need further support, feel free to reopen it at any time. Thank you for your cooperation.
Describe the bug
playbooks in the Cisco Umbrella published in Microsoft Sentinel content hub version 3.0.2 fail with a 403 forbidden.
Please update the solution to the new v2 endpoints and thank you ever so kindly for your efforts.
To Reproduce
Steps to reproduce the behavior:
Run a playbook:
CiscoUmbrella-AddIpToDestinationList
CiscoUmbrella-BlockDomain
CiscoUmbrella-GetDomainInfo
CiscoUmbrella-AssignPolicyToIdentity
Additional troubleshooting
Where querying the endpoint with a permissioned API key using postman,
we see that the v1 endpoints:
GET /v1/organizations/{REMOVED_organization_id}/destinationlists
are showing as forbidden but the v2 endpoint paths downloaded from:
https://github.com/CiscoDevNet/cloud-security/tree/master/Umbrella/PostmanExamples
show success.
GET /policies/v2/destinationlists
as per:
https://developer.cisco.com/docs/cloud-security/overview-of-destination-lists-api/#destination-lists-api-use-cases
Please also see document:
How to Migrate to the Umbrella API
regarding: "replace the Umbrella v1 API URIs and Reporting v2 API URI with the Umbrella API endpoints."
https://developer.cisco.com/docs/cloud-security/how-to-migrate-to-the-umbrella-api/#step-2-update-your-client-code
Screenshots
![Image](https://private-user-images.githubusercontent.com/13334181/377249112-2397f017-be19-4b7c-8439-e3f8cc75550b.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.GAzATllsI-YGXiROEQcLpCOjOUO2-8sXO_RKL1OyRrk)
The text was updated successfully, but these errors were encountered: