This document explains how to configure the ThirdPartyTrust plugin with the Log Shipper module of the Netskope Cloud Exchange platform. This integration allows pushing alerts and events from Netskope to the ThirdPartyTrust platform.
Prerequisites
To complete this configuration, you need:
- A Netskope tenant (or multiple, for example, production and development/test instances).
- A Cloud Exchange tenant with the Tenant plugin and Log Shipper plugin already configured.
- An account on the ThirdPartyTrust platform with Admin privileges.
Workflow
- Get your ThirdPartyTrust API key.
- Configure a New Plugin Repository.
- Configure the ThirdPartyTrust plugin.
- Configure Log Shipper Business Rules for ThirdPartyTrust.
- Configure Log Shipper SIEM Mappings for ThirdPartyTrust.
Get your API Key from the ThirdPartyTrust Platform
- Log in to your ThirdPartyTrust account that has Admin privileges.
- Go to Settings > Integrations and copy an existing API Key for later. You can also generate a new API key by clicking Generate Key.
Configure a New Plugin Repository
To add the ThirdPartyTrust plugin to your Netskope Cloud Exchange instance, you need to configure a new plugin repository.
- Go to Settings > Plugin Repository and click Configure New Repository.
- Enter these following parameters:
- Repository Name: thirdpartytrust_repo (can be any name).
- Repository URL: https://bitbucket.org/thirdpartytrust/netskope-plugin-install.git
- Username and Password for your ThirdPartyTrust account.
- Click Save.
Configure the BitSight Plugin
- Go to Settings > Plugins, search for and select the BitSight plugin box to open the plugin creation pages.
- Enter a Name and select the BitSight Default Mapping, and then click Next.
- Enter your ThirdPartyTrust API key, and then click Save.
Configure a Log Shipper Business Rules for Bitsight
- Go to Log Shipper > Business Rules.
- Add only the page and application event_type filter values, or use the default All rule. The Bitsight plugin will only send page and application event types, discarding any other type of information.
- Click Save.
Configure Log Shipper SIEM Mappings for Bitsight
- Go to Log Shipper > SIEM Mappings and click Add SIEM Mapping.
- For the Source Configuration, select the Netskope CLS plugin, and for Destination Configuration, select the BitSight plugin. Select a Business Rule (or the default “All”) for this mapping.
- Click Save.
The information will be processed by ThirdPartyTrust daily, at night.
The Discovered Vendors tab will appear in the ThirdPartyTrust application after the first set of data is processed, so you should be able to see it the day after you configured the plugin.