NetScout Omnis Cyber Intelligence Integration

NETSCOUT Omnis Cyber Intelligence is an Advanced Network Detection and Response platform enabling packet-level security visibility across diverse networks. This integration allows Omnis Cyber Intelligence users to promote Omnis Cyber Intelligence alerts into Cisco XDR’s incident queue and it also provides a Pivot menu lookup link to the NETSCOUT Omnis Cyber Intelligence UI to view more details about the selected observable.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Third-Party tab and navigate to the NetScout Omnis Cyber Intelligence integration.

  3. Click the plus sign (+) in the lower-right corner of the card. The NetScout Omnis Cyber Intelligence integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the NetScout Omnis Cyber Intelligence integration in Cisco XDR.

You can perform the following tasks after you integrate NetScout Omnis Cyber Intelligence with Cisco XDR:

  • Incidents - Select one or more alerts from within the NETSCOUT Omnis Cyber Intelligence interface and promote them to Cisco XDR as incidents. You can then view, investigate, and respond to incidents in Cisco XDR. For more information, see Incidents.

  • Pivot Menu - Use the Pivot menu to access actions in NETSCOUT Omnis Cyber Intelligence. Available actions include a lookup link to view more details about the selected observable.