Targets Created From Integrations
Automation automatically creates targets for out-of-box and custom workflows when you add, enable, or update any of the following integrations:
-
Check Point Quantum Smart-1 Cloud
-
Cisco Duo (Note: Target supports only Duo Admin APIs, since integration supports only Duo Admin APIs.)
-
Cohesity Data Cloud
-
CrowdStrike
-
Cybereason
-
DarkTrace
-
Extrahop Reveal(x) 360
-
Jira Cloud
-
Meraki
-
Microsoft Defender for Endpoint
-
Microsoft Defender for Office 365
-
Orbital
-
PagerDuty
-
Palo Alto Networks Cortex XDR
-
Rubrik Security Cloud
-
Secure Cloud Analytics
-
Secure Endpoint
-
Secure Malware Analytics
-
SentinelOne
-
ServiceNow
-
Slack
-
Trend Vision One
-
Umbrella
-
Webex
-
xMatters
-
Zendesk
This eliminates the need for you to add and configure targets for technologies that have already been integrated from a Cisco XDR integration.
To configure one of these integrations and install an out-of-box workflow:
-
In the left navigation menu, under Administration, click Integrations.
-
Navigate to the integration you want to configure, and click Add, Enable, or Get Started.
-
If needed, complete the form and click Save. The name you enter for the integration will be shared to name the new target.
-
A health check is performed to determine if the integration was properly configured. If the integration is successful, click the link in the notification message to go to the Exchange page.
-
Choose the category from the Category drop-down list to find a workflow and click Install.
Important Notes
-
When importing/exporting a workflow, integration-based targets will be automatically selected and configured, making the process of operationalizing a workflow much simpler.
-
On the Targets page, you can use the Type drop-down list to filter for the targets by type.
-
You can click a target to view its configuration, but Cisco XDR targets and targets that have been automatically created from an integration cannot be edited or deleted.
-
If you delete one of these integrations from Cisco XDR, its corresponding target changes Status to Invalid and can then be deleted (in the Actions menu).
-
Likewise, workflows that use the target will be marked Invalid.