About the Illumio and Claroty Integration
The Illumio and Claroty integration allows you to view traffic from OT devices, between OT devices, and between OT and IT devices. You can drill down on these flows to view details and use the information to enforce policies.
Before You Onboard the Illumio and Claroty Integration
Important
To be able to view traffic for Claroty devices, you must set up Flowlink. See Flowlink.
Important
You must generate the API token in Claroty xDome before you onboard the API Connector.
Use one of the following procedures depending whether or not you already have an API User user in xDome:
Generate an API Token from Claroty xDome
Important
Use this procedure if you already have a user in xDome with the API User role.
Log into Claroty xDome and navigate to Home > Settings > Admin Settings.
On the User Management page, select a user with the API User role.
Click the key icon at the end of the row for the API User to generate the API token.
In the Generate API Token modal, select an expiration date for the token from the Token Expiration drop-down list.
Note
Claroty recommends that you set tokens to expire after 90 days.
Click Generate.
Make sure to copy the API token because it only displays once.
Click Finish.
Create a New User and Generate an API Token in Claroty xDome
Important
Use this procedure only if you do not already have a user in xDome with the API User role.
Log into Claroty xDome and navigate to Home > Settings > Admin Settings.
On the User Management page, click + Add User and set the following values in the Create User modal:
Select the API User role.
Click Edit Site Permissions and set the following values in the Add Site Permissions modal:
Select the Group values, select Including future sites and groups, and click Apply.
Select Read-Only User from the Roles drop-down list.
Click Create User.
The Pending Token Generation badge displays while the token is generating.
After you create the new user, click the key icon at the end of the row for that user.
In the Generate API Token modal, select an expiration date for the token from the Token Expiration drop-down list.
Note
Claroty recommends that you set tokens to expire after 90 days.
Click Generate.
Make sure to copy the API token because it only displays once.
Click Finish.