About Cloud Connector

Last updated
Save as PDF

Skyhigh Cloud Connector (CC), also known as GroundLink, is an on-premises software service that provides an integration point between Skyhigh Security Cloud and your enterprise network. The Cloud Connector can be deployed centrally or in a distributed manner, depending on your network topology.

Skyhigh Cloud Connector identifies relevant log entries while tokenizing confidential information, enhancing the value of your existing infrastructure investments. Then Cloud Connector compresses the data and securely uploads it to Skyhigh CASB for discovery and analysis. Sensitive log data is tokenized on-premises, making sure no personally identifiable information or confidential data, such as usernames and IP addresses, leaves your organization.

The Cloud Connector is responsible for the following key functions:

Collecting and processing logs from security egress devices
Pre-filtering log data
Integrating with LDAP and Active Directory
Integrating with enterprise SIEM systems
Tokenizing and detokenizing enterprise PII
Securely transferring logs to Skyhigh Security Cloud data centers
Enabling closed-loop remediation with web proxies
Integrating with Checkpoint Firewall API

Cloud Connector runs on a virtual machine. Cloud Connector installers are available for download on Windows and Linux environments. Before installation:

Review the Skyhigh Cloud Connector Prerequisites.
Download the appropriate CC Installers for your environment.
Refer to the Skyhigh Cloud Connector Release and Support Plan for the latest updates, including Currently Supported Software Versions and End-of-Life (EOL) Software Versions.

Once you have installed Cloud Connector, the next step is to connect it to the Skyhigh CASB Cloud and configure the required allow listed URLs. Skyhigh Security Support can also help you configure CC to use High-Availability Mode for backup and scaling benefits.

The Skyhigh CASB API (SHNAPI) communicates with Skyhigh Cloud Connector to do the following:

Uploads health and monitoring statistics
Downloads configuration and properties
Downloads Skyhigh CASB Registry updates

Cloud Connector also integrates with edge devices (proxies and firewalls) for Closed-Loop Remediation, Active Directory, SIEM, and SMTP.