# Vectra AI

The Dropzone AI Platform integrates with [Vectra AI](https://www.vectra.ai/platform), an AI-driven NDR platform for automated threat detection and response across hybrid networks, including public clouds, SaaS, identity systems, and data centers. Dropzone supports both Cloud and On-premise deployments of Vectra AI.

## Create an API Client (Cloud Deployment)

If you have a Cloud deployment, Vectra AI requires an API Client and Secret Key to enable.

To obtain these, do the following:

* Log in to your Vectra AI console
* In the left sidebar, navigate to Manage > API Clients
* Click "Add API Client"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-e3018b7760d0f74fc2485d68d3f37a5c7a613d0d%2Fvectra-ai-1.png?alt=media" alt=""><figcaption><p>Add API Client</p></figcaption></figure>

* Name the client something memorable, such as "Dropzone AI"
* Assign the client the Read-Only role
* Click "Generate Credentials"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-c2c037733fa19118b14b5273b49ab1556c15eaaf%2Fvectra-ai-2.png?alt=media" alt=""><figcaption><p>Generate the API Client</p></figcaption></figure>

* Copy the Client ID and Secret Key generated for use later in the Dropzone UI, where they are called "OAuth2 Client ID" and "OAuth2 Client Secret," respectively

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-980e823f5257b1af37368e528b846469d0be8e1b%2Fvectra-ai-3.png?alt=media" alt=""><figcaption><p>Save the credentials</p></figcaption></figure>

## Create an API Token (On-Premise Deployment)

* Log in to your Vectra AI console
* In the left sidebar, navigate to My Profile

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-4ab84f2f9fe2acb44fbea5a9f8861b00e0eebc5e%2Fvectra-ai-4.png?alt=media" alt=""><figcaption><p>Click "My Profile"</p></figcaption></figure>

* Click "View API Token"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-972fa60a2ccc22af88d970304f3f09ccf1ef7a70%2Fvectra-ai-5.png?alt=media" alt=""><figcaption></figcaption></figure>

* Input your password, then click "Continue"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-2124daf8328c34db3adecd03d6bf5da915b8cfb1%2Fvectra-ai-6.png?alt=media" alt=""><figcaption><p>Input your credentials</p></figcaption></figure>

* Copy the API token shown for use later in the Dropzone UI, where it is called "API Token"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-243aefb498a6321dfd21bc9cd992e0be8674ab66%2Fvectra-ai-7.png?alt=media" alt=""><figcaption><p>Copy the API Token</p></figcaption></figure>

* Click "Close"

## Enable Vectra AI

To enable the Data Source integration, you'll need the following information:

| Dropzone Field       | Source                                                                                    |
| -------------------- | ----------------------------------------------------------------------------------------- |
| Deployment Type      | Your Vectra AI deployment type, e.g. Cloud or On-Premise                                  |
| Vectra AI URL        | The base URL of your Vectra instance, e.g. <https://api.vectra.ai> or <https://10.20.1.5> |
| OAuth2 Client ID     | The Client ID value you copied earlier. Only necessary for Cloud deployments              |
| OAuth2 Client Secret | The Secret Key value you copied earlier. Only necessary for Cloud deployments             |
| Vectra AI Server     | The server hostname of your on-premise deployment, e.g. 10.20.1.5                         |
| Vectra AI Port       | The API port of your on-premise deployment                                                |

To enable the Data Source integration, do the following:

* Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app
* In the bottom left hand corner, navigate to Settings > Integrations

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-b3f07f902b1402dadc7abbd8bb62f9c204547390%2Fui-integrations-dropdown.png?alt=media" alt=""><figcaption><p>Integrations Dropdown</p></figcaption></figure>

* Click "Available"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-434641ec6d4e45051842f86164f485d6bd289424%2Fapp_system_integrations_available.png?alt=media" alt=""><figcaption><p>Click Available</p></figcaption></figure>

* In the Search bar, search Vectra AI then click "Configure"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-9ba395033aafd4ad23b8ed5099c6ac2c6c84dd5e%2Fapp_system_integrations_available_vectra-ai.png?alt=media" alt=""><figcaption><p>The Vectra AI Tile</p></figcaption></figure>

* Under the Data Source header, if your Vectra AI integration is behind an [On-premise Dropzone Connector](https://docs.dropzone.ai/platform/settings/connector), select your connector from the dropdown
* Input your Deployment Type and Vectra AI URL

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-1d48a525c1e509c200462b1dec4dd1657de10699%2Fapp_system_integrations_available_vectra-ai_data_config_1.png?alt=media" alt=""><figcaption><p>The Vectra AI alert source configuration (pt 1)</p></figcaption></figure>

* If you have a Cloud deployment, input the OAuth2 Client ID and Secret

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-33c8726c007e4e9c51cea510fe5a628d4357440f%2Fapp_system_integrations_available_vectra-ai_data_config_2.png?alt=media" alt=""><figcaption><p>The Vectra AI alert source configuration (pt 2)</p></figcaption></figure>

* If you have an On-premise deployment, input the Vectra AI Server, Port, and API Token

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-90406c28b9c214c5a8a5edf3ffb16211c4735ff9%2Fapp_system_integrations_available_vectra-ai_data_config_3.png?alt=media" alt=""><figcaption><p>The Vectra AI alert source configuration (pt 3)</p></figcaption></figure>

* Click "Test & Save" to finish

If you have any errors or questions, engage your Dropzone AI support representative.
