--- title: Cisco AMP Integration description: Cisco Advanced Malware Protection (AMP) for Endpoints is a malware and virus protection platform that you can use to protect your environment from intrusion, infected files, and malicious behavior. This Functions-based integration allows for the enrichment of SOAR data using the results returned from the Cisco AMP for Endpoints API and also to make updates to the Cisco AMP for Endpoint environment. --- [Skip to content](https://content.sirp.io/knowledge-base/cisco-amp-integration-help-center-sirp#main-content) English Show submenu for translations [Customer portal](https://content.sirp.io/customer-portal?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png)](https://sirp.io/) Open main navigation Close main navigation - English Show submenu for translations - [Customer portal](https://content.sirp.io/customer-portal) - [Contact us](https://content.sirp.io/customer-portal/new) [Contact us](https://content.sirp.io/customer-portal/new?hsLang=en) What would you like to automate today? - There are no suggestions because the search field is empty. 1. [SIRP Help Center](https://content.sirp.io/knowledge-base?hsLang=en) 2. [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) # Cisco AMP Integration ### About Cisco AMP Cisco Advanced Malware Protection (AMP) for Endpoints is a malware and virus protection platform that you can use to protect your environment from intrusion, infected files, and malicious behavior. This Functions-based integration allows for the enrichment of SOAR data using the results returned from the Cisco AMP for Endpoints API and also to make updates to the Cisco AMP for Endpoint environment. ### Enable Cisco AMP Integration with SIRP ### Generate a Client ID and API Key Generate an API key for third-party access to connect with SIRP: 1. Log in to your Cisco AMP for Endpoints console, and navigate to **Accounts \> API Credentials** 2. Click the **New API Credential** button   [![](https://sirp.intercom-attachments-1.com/i/o/551837216/b45a35f62f2ea30585fc4e93/AMP-20new-20api-20credentials.png?expires=1752237000&signature=e53ece6601058dd6552da5bbd47894d300a9c6c027fc0748577a2598b281bbdf&req=cSUmHsp5n4BZFb4f3HP0gBZsGnMIwqZWoQ0E%2FI3diR1EZCs21NoVYpFcLMbs%0A1IY%3D%0A)](https://sirp.intercom-attachments-1.com/i/o/551837216/b45a35f62f2ea30585fc4e93/AMP-20new-20api-20credentials.png?expires=1752237000&signature=e53ece6601058dd6552da5bbd47894d300a9c6c027fc0748577a2598b281bbdf&req=cSUmHsp5n4BZFb4f3HP0gBZsGnMIwqZWoQ0E%2FI3diR1EZCs21NoVYpFcLMbs%0A1IY%3D%0A) 3. Provide a name for your third-party application (e.g. **SIRP**) 4. Select the **Read & Write** option for the scope of the API key 5. Click the **Create** button. [![](https://sirp.intercom-attachments-1.com/i/o/551837231/3766a9bbc377c9f1db9ae24a/new-20API-20credential.png?expires=1752237000&signature=383572b228904943b9126ebc2c2c07a7839366644aeed7f2ce999cba8d34a2ea&req=cSUmHsp5n4JeFb4f3HP0gE13sIqD4VlaQtDlM7FVUw%2FqCJb8apPMLmUeOqQT%0Auvk%3D%0A)](https://sirp.intercom-attachments-1.com/i/o/551837231/3766a9bbc377c9f1db9ae24a/new-20API-20credential.png?expires=1752237000&signature=383572b228904943b9126ebc2c2c07a7839366644aeed7f2ce999cba8d34a2ea&req=cSUmHsp5n4JeFb4f3HP0gE13sIqD4VlaQtDlM7FVUw%2FqCJb8apPMLmUeOqQT%0Auvk%3D%0A) 6. You will then see the 3rd Party API Client ID and the API key. Copy these for later use in SIRP. [![](https://sirp.intercom-attachments-1.com/i/o/551837240/37e33e0f580a1e7afe6b8673/AMP-20regenerate-20API-20credentials.png?expires=1752237000&signature=59e351ff8122b783047251ccfe19eb4a3206a97377d8e270b247cfe02de94e0b&req=cSUmHsp5n4VfFb4f3HP0gFmakfl7sCzZAFk3%2Bfi1bRSfnfMgZL4tfKaU4lt0%0ACsM%3D%0A)](https://sirp.intercom-attachments-1.com/i/o/551837240/37e33e0f580a1e7afe6b8673/AMP-20regenerate-20API-20credentials.png?expires=1752237000&signature=59e351ff8122b783047251ccfe19eb4a3206a97377d8e270b247cfe02de94e0b&req=cSUmHsp5n4VfFb4f3HP0gFmakfl7sCzZAFk3%2Bfi1bRSfnfMgZL4tfKaU4lt0%0ACsM%3D%0A) Enable and Configure Cisco AMP app in SIRP - First, log in to SIRP, then go to **Apps** from the left navigation bar. - Locate the app named **Advanced Malware Protection (AMP)**. - **Enable** the Umbrella app by clicking on the toggle button under the **Status** column. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-57-46-2372-AM.png)](https://downloads.intercomcdn.com/i/o/551833589/76e199d8bc5f49488f1be53a/image.png?expires=1752237000&signature=ec0e621f269eedfd64ff32608e9dfba917194189b897ff787f64d91a54040d2a&req=cSUmHsp9mIlWFb4f3HP0gKoLvQmDJAPnGvq9eFyti4mblsbeELkhrY7DR367%0AindBk9KbDJNKzIaTxw%3D%3D%0A) - Once you enable the App, click the **configure** option to integrate SIRP with Cisco Umbrella - Add the following details and click **Save**: 1. **URL:** \** 2. **Username**: \<**Client ID** copied from Cisco AMP interface\> 3. **Password:** \<**API Key** from Cisco AMP interface\> [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-57-51-7559-AM.png)](https://downloads.intercomcdn.com/i/o/551834207/7a70ce0f4a09defcca62e53d/image.png?expires=1752237000&signature=dde347fbe445a8c035d50bb3bcf3fe2947995b7e0f79a5b1b500f31cf4ac452f&req=cSUmHsp6n4FYFb4f3HP0gJInIhREAgxOvsFag3KYEbNVAO8Z5Y28Jym2E6LF%0Ac0htZNkHHfniBifw1Q%3D%3D%0A) - [SIRP Community](https://content.sirp.io/knowledge-base/sirp-community?hsLang=en) - [Playbook Guide](https://content.sirp.io/knowledge-base/playbook-guide?hsLang=en) - [User Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#main-content) - [IM Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#im-guide) - [Admin Guide](https://content.sirp.io/knowledge-base/admin-guide?hsLang=en) - [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) - [Release Notes](https://content.sirp.io/knowledge-base/release-notes?hsLang=en) - [Add on Apps](https://content.sirp.io/knowledge-base/add-on-apps?hsLang=en) - [Architecture](https://content.sirp.io/knowledge-base/architecture?hsLang=en) - [Use Cases](https://content.sirp.io/knowledge-base/use-cases?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png "SIRP-Logo-4c-KO")](https://sirp.io) ### Global Headquarter ##### United States 7735 Old Georgetown Rd, Suite 510 Bethesda, MD 20814 [+1 888 701 9252](tel:+18887019252) [mailto:email@email.com](mailto:email@email.com) Copyright © 2025, SIRP Labs Inc