Trellix DLP

Overview

The Trellix DLP (Data Loss Prevention) integration enables autobotAI to interact securely with the Trellix Data Protection APIs. By leveraging this integration, you can automate workflows to monitor endpoints, retrieve data protection incidents, and enhance your data loss prevention operations.

This guide provides instructions for setting up the Trellix DLP integration in your autobotAI account. By completing this process, you will connect your Trellix ePO / IAM environment to the platform.

Prerequisites

Before starting, ensure you have:

• A Trellix account with access to the Developer Portal / IAM interface.
• A Client ID and Client Secret for OAuth 2.0 authentication.
• A Trellix API Key (x-api-key) for request metering.

Steps to Set Up Trellix DLP Integration

Step 1:
Navigate to the Integrations page by selecting Integrations in the menu. Click the + Add Integration button in the top-right corner to view available integrations.

Step 2:
Use the search bar to search for the keyword trellix, and select Trellix DLP + Add from the results to create the integration.

Step 3:
Fill in the required fields as follows:

• Alias: Provide a meaningful name or alias for this integration (e.g., Trellix-DLP-Prod).
• Tag(Optional): Choose a tag to help organize the integration.
• Client ID: Enter your Trellix Client ID (e.g., clientId123...).
• Client Secret: Enter your Trellix Client Secret (e.g., s3cr3t...).
• API Key: Provide your Trellix API Key (x-api-key) (e.g., apikey789...).

Double-check the information, then click Create to complete the integration.

Step 4:
After creating the integration, locate it under Integrations. Click the Play (▶) button in the Actions column to test and ensure your integration is configured correctly. The test automatically fetches an OAuth Bearer token from Trellix IAM and queries the /dpim/v2/incident endpoint to verify your scopes and API key.

Additional Information

How to Retrieve Trellix Credentials

To generate the required Trellix credentials:

1. Log in to Trellix Developer Portal:
   Access your Trellix Developer or IAM portal.
2. Create an API Client:
   • Navigate to the API Client Management section.
   • Create a new Client to generate your Client ID and Client Secret. Ensure the client has permissions for Data Protection (DPIM).
3. Generate an API Key:
   • Under the API Products or Keys section, generate a new API Key.
4. Copy the credentials:
   • Copy the Client ID, Client Secret, and API Key immediately and paste them into the autobotAI platform to complete the setup.