Targets Created From Integrations

Automation automatically creates targets for out-of-box and custom workflows when you add, enable, or update any of the following integrations:

  • Check Point Quantum Smart-1 Cloud

  • Cisco Defense Orchestrator

  • Cisco Duo (Note: Target supports only Duo Admin APIs, since integration supports only Duo Admin APIs.)

  • Cohesity Data Cloud

  • CrowdStrike

  • Cybereason

  • DarkTrace

  • Elastic Cloud

  • Extrahop Reveal(x) 360

  • Ivanti Neurons for MDM

  • Jamf Pro

  • Jira Cloud

  • Meraki

  • Microsoft Defender for Endpoint

  • Microsoft Defender for Office 365

  • Microsoft Entra ID

  • Microsoft Intune

  • Orbital

  • PagerDuty

  • Palo Alto Networks Cortex XDR

  • Rubrik Security Cloud

  • Secure Cloud Analytics

  • Secure Endpoint

  • Secure Malware Analytics

  • SentinelOne

  • ServiceNow

  • Slack

  • Splunk Cloud

  • Trend Vision One

  • Umbrella

  • Webex

  • xMatters

  • Zendesk

This eliminates the need for you to add and configure targets for technologies that have already been integrated from a Cisco XDR integration.

Select third-party integrations that previously required either the Cisco XDR Advantage or Cisco XDR Premier licensing tier are also available with the Cisco XDR Essentials licensing tier. For details, see the Minimum Cisco XDR Licensing Tier Required column on the Cisco and Third-Party Integrations and Supported Capabilities page.

To configure one of these integrations and install an out-of-box workflow:

  1. In the left navigation menu, under Administration, click Integrations.

  2. Navigate to the integration you want to configure, and click Add, Enable, or Get Started.

  3. If needed, complete the form and click Save. The name you enter for the integration will be shared to name the new target.

  4. A health check is performed to determine if the integration was properly configured. If the integration is successful, click the link in the notification message to go to the Exchange page.

  5. Choose the integration from the Integration drop-down list to find a workflow and click Install.

When importing/exporting a workflow, integration-based targets will be automatically selected and configured, making the process of operationalizing a workflow much simpler.

Important Notes

  • On the Targets page, you can use the Type drop-down list to filter for the targets by type.

  • You can click a target to view its configuration, but Cisco XDR targets and targets that have been automatically created from an integration cannot be edited or deleted.

  • If you delete one of these integrations from Cisco XDR, its corresponding target changes Status to Invalid and can then be deleted (in the Actions menu).

  • Likewise, workflows that use the target will be marked Invalid.