Cisco Defense Orchestrator Integration

Cisco Defense Orchestrator is a cloud-based multi-device manager you can use to manage security policy changes across various security products. This platform enables the efficient management of policies in branch offices and other highly distributed environments to achieve a consistent security implementation.

Integrating Cisco Defense Orchestrator with Cisco XDR will allow you to add additional tiles to your dashboards and a target will also become available in XDR Automation for automated workflows.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Cisco tab and navigate to the Cisco Defense Orchestrator integration.

  3. Click Get Started. The Cisco Defense Orchestrator integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Cisco Defense Orchestrator integration in Cisco XDR.

You can perform the following tasks after you integrate Cisco Defense Orchestrator with Cisco XDR:

  • Dashboard - Add Cisco Defense Orchestrator cards to a dashboard in Control Center to view data, such as device summary. For details, see Configure Dashboards and Cards. For a list of available Cisco Defense Orchestrator cards, see Integration Cards.

  • Automation:

    • Atomic Actions - The atomic actions for Cisco Defense Orchestrator can be used as building blocks in custom workflows. These can be found as available Actions in the left menu of the Workflow Editor. See Atomic Actions and Workflows.

    • Target - The Cisco Defense Orchestrator target is automatically created for out-of-box and custom workflows. See Targets Created From Integrations.