Jamf Pro Integration

Note: This integration requires Cisco XDR Advantage or Cisco XDR Premier licensing tier.

Jamf Pro is a leader for management of Apple macOS, iOS, and tvOS devices.

When you configure the Jamf Pro integration, data about your devices will become available in the Cisco XDR assets feature. This information is then used to enrich investigations and enhance incident triage with device context. A target will also become available in CIsco XDR Automation for automated workflows.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Third-Party tab and navigate to the Jamf Pro integration.

  3. Click the plus sign (+) in the lower-right corner of the card. The Jamf Pro integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Jamf Pro integration in Cisco XDR.

You can perform the following tasks after you integrate Jamf Pro with Cisco XDR:

  • Pivot Menu - Install the Jamf Pro workflows from the Automation Exchange to use the Pivot menu to access actions in Jamf Pro. Available actions include adding a mobile device to a static group in Jamf Pro.

  • Assets - View devices as reported by Jamf Pro. For more information, including how to filter the view to only the reports from Jamf Pro, see Devices.

  • Automation:

    • Atomic Actions - The atomic actions for Jamf Pro can be used as building blocks in custom workflows. These can be found as available Actions in the left menu of the Workflow Editor. See Atomic Actions and Workflows.

    • Workflows - The workflows for Jamf Pro can be installed from the Automation Exchange. See Workflows and Exchange.

    • Target - The Jamf Pro target is automatically created for out-of-box and custom workflows. See Targets Created From Integrations.