Guardicore

​

Overview

​

Setup instructions

​

Authorization/setup steps

1. Log in to Guardicore Centra Console:
   • Access the Guardicore Centra Console with an administrator account.
2. Generate API Access Token:
   • In the Guardicore console, navigate to Administration > API Tokens.
   • Click Create Token and name it (e.g., “ThreatAware Integration”).
   • Assign the necessary permissions, typically Read-only or the minimum access needed for ThreatAware.
   • Copy the generated API Token.
3. Input API Token in ThreatAware:
   • Open ThreatAware, go to Integrations, and select Guardicore.
   • Enter the API Token and Guardicore Instance URL into their respective fields.

​

Important notes and links

• For more information on API configuration and permissions, consult the Guardicore API Documentation.
• Securely store the API token, as it allows access to Guardicore data and operations.

​

Input details

• API Token: Token created for API access in Guardicore Centra.
  Field: API Token
  Name: Guardicore API Token
  Type: Password
  
• Guardicore Instance URL: URL of your Guardicore Centra instance.
  Field: Guardicore Instance URL
  Name: Guardicore URL
  Type: String
  Placeholder: "https://your-guardicore-instance-url"
  

​

Verification and troubleshooting

• Verification: After completing setup, confirm that the Integration Status in ThreatAware is shown as Active.
• Troubleshooting:
  • Invalid Token: Ensure the API token is accurately entered.
  • Permission Issues: Check that the API token has the required permissions configured for ThreatAware’s access.