Targets Created From Integrations

Automation automatically creates targets for out-of-box and custom workflows when you add, enable, or update any of the following integrations:

  • Check Point Quantum Smart-1 Cloud

  • Cisco Duo (Note: Target supports only Duo Admin APIs, since integration supports only Duo Admin APIs.)

  • Cohesity Data Cloud

  • CrowdStrike

  • Cybereason

  • DarkTrace

  • Extrahop Reveal(x) 360

  • Jira Cloud

  • Meraki

  • Microsoft Defender for Endpoint

  • Microsoft Defender for Office 365

  • Orbital

  • PagerDuty

  • Palo Alto Networks Cortex XDR

  • Rubrik Security Cloud

  • Secure Cloud Analytics

  • Secure Endpoint

  • Secure Malware Analytics

  • SentinelOne

  • ServiceNow

  • Slack

  • Trend Vision One

  • Umbrella

  • Webex

  • xMatters

  • Zendesk

This eliminates the need for you to add and configure targets for technologies that have already been integrated from a Cisco XDR integration.

To configure one of these integrations and install an out-of-box workflow:

  1. In the left navigation menu, under Administration, click Integrations.

  2. Navigate to the integration you want to configure, and click Add, Enable, or Get Started.

  3. If needed, complete the form and click Save. The name you enter for the integration will be shared to name the new target.

  4. A health check is performed to determine if the integration was properly configured. If the integration is successful, click the link in the notification message to go to the Exchange page.

  5. Choose the category from the Category drop-down list to find a workflow and click Install.

Important Notes

  • When importing/exporting a workflow, integration-based targets will be automatically selected and configured, making the process of operationalizing a workflow much simpler.

  • On the Targets page, you can use the Type drop-down list to filter for the targets by type.

  • You can click a target to view its configuration, but Cisco XDR targets and targets that have been automatically created from an integration cannot be edited or deleted.

  • If you delete one of these integrations from Cisco XDR, its corresponding target changes Status to Invalid and can then be deleted (in the Actions menu).

  • Likewise, workflows that use the target will be marked Invalid.