Assets

The Cisco XDR Assets feature provides you with a unified view of the devices and users in your organization by consolidating inventories from integrated data sources and third-party, non-Cisco sources. These sources are device managers and user databases that have their own inventories that they work with. Cisco XDR brings information about those device inventories and user databases into a centralized location. This comprehensive view provides you with the data and context you need to better identify vulnerabilities, prevent threats, and prioritize remediations.

In the past, you had to pivot back and forth between all the different sources to find, gather, and organize device information.

Now, Cisco XDR can discover, consolidate, and present this information to you, making it simpler to view all your devices and users holistically and investigate across your portfolio of sources more efficiently. Cisco XDR normalizes all of your device and user data and correlates it between sources. This unified view features flexible filtering in a customizable table of your devices and users with their data.

The Assets feature is ready to automatically pull device and user data from the modules you have integrated with Cisco XDR. So if you already have modules integrated with Cisco XDR, there’s no need to delete or re-add them.

Answer important questions, such as:

  • What types of devices are connected to our network?
  • What users have been accessing those devices?
  • Where are those devices located?
  • What vulnerabilities are associated with those devices?
  • Which security agents are installed?
  • Is our security software up-to-date?

To activate the Assets feature, enable an integration module.

Existing Integrations?

Action

If you already have modules integrated with Cisco XDR…

  • There's no need to delete or re-add them.

  • Cisco XDR will start pulling data from those data sources, according to the sync schedule configured in the Assets > Sources > Source Settings.

  • Or you can click Sync on the Assets > Sources page to start pulling data from the source.

  • The ensuing increase in API-related traffic is not a security incident.

If you don’t have any modules integrated with Cisco XDR…

  • You'll be prompted to integrate one now.

  • For additional guidance, see the Integrations help topic.