Cisco Defense Orchestrator Integration

Cisco Defense Orchestrator is a cloud-based multi-device manager you can use to manage security policy changes across various security products. This platform enables the efficient management of policies in branch offices and other highly distributed environments to achieve a consistent security implementation.

Integrating Cisco Defense Orchestrator with Cisco XDR will allow you to add additional tiles to your dashboards and a target will also become available in XDR Automation for automated workflows.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Cisco tab and navigate to the Cisco Defense Orchestrator integration.

  3. Click Get Started. The Cisco Defense Orchestrator integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Cisco Defense Orchestrator integration in Cisco XDR.

You can perform the following tasks after you integrate Cisco Defense Orchestrator with Cisco XDR:

  • Dashboard Tiles - Add Cisco Defense Orchestrator tiles to a dashboard in Control Center to view data, such as device summary. For details, see Configure Dashboards and Tiles. For a list of available Cisco Defense Orchestrator tiles, see Integration Tiles.

  • Atomic Actions - The atomic actions for Cisco Defense Orchestrator can be used as building blocks in custom workflows. For details, see Atomic Actions.

  • Automation Workflows - The Cisco Defense Orchestrator target is automatically created for out-of-box workflows. For details, see Targets Created From Integrations.