Cisco Security Cloud Control Integration

Cisco Security Cloud Control (formerly Cisco Defense Orchestrator) is a cloud-based multi-device manager you can use to manage security policy changes across various security products. This platform enables the efficient management of policies in branch offices and other highly distributed environments to achieve a consistent security implementation.

Integrating Cisco Security Cloud Control with Cisco XDR will allow you to add additional cards to your dashboards and a target will also become available in Cisco XDR Automation for automated workflows.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Cisco tab and navigate to the Cisco Security Cloud Control integration.

  3. Click Get Started. The Cisco Security Cloud Control integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Cisco Security Cloud Control integration in Cisco XDR.

You can perform the following tasks after you integrate Cisco Security Cloud Control with Cisco XDR:

  • Dashboard - Add Cisco Security Cloud Control cards to a dashboard in Control Center to view data, such as device summary. For details, see Configure Dashboards and Cards. For a list of available Cisco Security Cloud Control cards, see Integration Cards.

  • Automation:

    • Atomic Actions - The atomic actions for Cisco Security Cloud Control can be used as building blocks in custom workflows. These can be found as available Actions in the left menu of the Workflow Editor. See Atomic Actions and Workflows.

    • Target - The Cisco Security Cloud Control target is automatically created for out-of-box and custom workflows. See Targets Created From Integrations.