Introduction

This is a "hello world" example of how to create a web hook processing endpoint for McAfee MVision API

Run the Example Webhook Endpoint Server

clone the repo:

git clone ...
cd ...

Install the dependencies:

npm i

create the keypair:

ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/Users/alonghor/.ssh/id_rsa): ./id_rsa
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in ./id_rsa.
Your public key has been saved in ./id_rsa.pub.
The key fingerprint is:
SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx user@host
The key's randomart image is:
+---[RSA 3072]----+
|        .   ...  |
|         o . +o o|
|        o . .o*.+|
|         .   o Bo|
|        S   . o+B|
|           S o.BB|
|          . o.X+B|
|           o E+B=|
|       o    oo==B|
+----[SHA256]-----+

Run the example server:

node index.js

Make sure the server is publicly accessible

NOTE: Webhooks work by the MVision Servers calling out to the web server YOU set up. So this server MUST be publicly accessible on the configured port. Moreover, the server must be https (http will not work from the MVision API service point of view).

This project DOES include a sample of a basic http server, but you would need to front-end this with nginx, haproxy or some other loadbalancer that can provide the https target for the Webhook.

Make sure you have routing set up for incoming connections to forward to your example server on port 3000 (default), or whichever port you set in index.js.

You can easily test connectivity by turning off wifi on your mobile device and trying to get to https://:3000/ . If it's correctly configured you will get the certificate validation issue and if you accept it, will get the welcome message.

Set up the webhook in the MVision Developer Portal

Go to https://developer.mvision.mcafee.com, find the Self-Service -> API Hub Management section

Select the MVision ePO Category and select all event types

Upload the public key you generated when starting the example webhook endpoint server above (it's the id_rsa.pub file you created with ssh-keygen)

Configure the webhook url (you need to use the public IP for your example server you set up above)

Save your configuration. You should then see a success message:

You should now see events coming through to your server as they occur in MVision.