![\"Retail](\"https:\/\/dmsretail.com\/RetailNews\/wp-content\/uploads\/2022\/05\/RETAIL-ONLINE-TRAINING-728-X-90.png\")
<\/a><\/p>\n<\/p>\n
Since we adopted an open ecosystems approach, we have witnessed numerous integrations made available by Cisco Security and our technology partners. These integrations aim to improve the cybersecurity posture and defenses of our mutual customers due to their collaborative nature.<\/p>\n
These partnerships enable the creation of more comprehensive, effective and efficient cybersecurity solutions. As cyber threats continue to evolve, these collaborations play an increasingly crucial role in helping organizations protect their digital assets. By utilizing these integrated solutions, businesses can establish a stronger security posture and be better prepared to face the challenges presented by today\u2019s digital landscape. Vendor openness fosters better synergy and outcomes for the state of cybersecurity.<\/p>\n
The strength of our integrations was put to the test at significant events such as RSAC, Black Hat, NFL Superbowl LVIII and the Paris Olympics. In these events, Cisco Security and our technology partners worked together in the Network & Security operations centers and effectively safeguarded these events from threats, ensuring the safety of people and infrastructure.<\/p>\n
As we wrap up our fiscal year 2024, our open and inclusive cybersecurity technology alliance, Cisco Security Technical Alliance, now boasts over 400 technology partners and 825 integrations across Cisco\u2019s cybersecurity product portfolio. In our annual roundup, Cisco Security extends a warm welcome to all new and expanding technology partners in our ecosystem. Deploying these integrated solutions together fosters a \u201csynergy\u201d that aids in more efficiently addressing customer security issues.<\/p>\n
To learn more about each partner integration in this announcement, please review the individual partner highlights below. For more details on the partners, please visit our webpage at Cisco Security Technical Alliance.<\/p>\n
Happy Integrating!<\/p>\n
\n
More details about our partners and their integrations:<\/p>\n
New Cisco Breach Protection Suite integrations<\/h2>\n
These integrations help customers using Cisco\u2019s Breach Protection Suite establish a stronger security posture.<\/p>\n
Atlassian \u2014 Jira Cloud<\/h3>\n
Jira Cloud is built for every member of your software team to plan, track, and manage their work. Jira offers bug tracking, issue tracking, agile project management and more. Enabling this integration in Cisco XDR<\/strong> will make the Jira API available as a target for automation workflows.<\/p>\n Criminal IP by AI Spera is an AI-powered threat intelligence search engine that offers you the latest data on all internet-connected assets. This integration with Cisco XDR<\/strong> offers real-time insights and risk scoring for IP addresses and domains to gain more information on the findings through Criminal IP\u2019s UI by initiating a search in Criminal IP.<\/p>\n Two new Cisco-managed XDR<\/strong> workflows for CrowdStrike were released:<\/p>\n CrowdStrike also developed the Cisco Secure Email Gateway<\/strong> Data Connector to ingest Secure Email Gateway data into their Falcon platform. This improves detection of modern threats by unifying security data from endpoints and emails.<\/p>\n Darktrace is a Network Detection and Response (NDR) offering. In Cisco XDR<\/strong>, we enable Darktrace users to leverage it for threat hunting and investigation features. Use the Darktrace integration to query for security detections of observables including IP, hostname and Darktrace device ID.<\/p>\n Enabling this integration in Cisco XDR<\/strong> will make the Elastic Cloud API available as a target for automation workflows, which can be used to do things like send incident data to Elastic search for indexing and retention.<\/p>\n Integrating with ExtraHop Reveal(x) Enterprise allows you to automatically search for devices, add or remove devices from a watchlist and search for detections. This integration with Cisco XDR<\/strong> also creates an HTTP target automatically in Automation for out-of-box workflows.<\/p>\n The AlienVault Open Threat Exchange (OTX) is the world\u2019s most authoritative open threat information sharing and analysis network. AlienVault OTX integration with Cisco XDR<\/strong> allows OTX Activity Feed data to be used to enhance the threat detection capabilities in XDR.<\/p>\n Microsoft Azure Active Director \u2014 Users: <\/strong>Microsoft Azure AD with Cisco XDR<\/strong> provides user and device information to the Cisco XDR Assets feature. It enriches investigations and incident triage and response with device and user context.<\/p>\n Microsoft Defender of Endpoint:<\/strong> In Cisco XDR<\/strong>, we enable Defender for Endpoint users to leverage it for threat hunting and investigation features, as well as rapid response actions to understand and defend against threats on the endpoint. It also provides important device inventory context to help triage detected threats.<\/p>\n Microsoft Defender for Office 365:<\/strong> In Cisco XDR<\/strong>, we enable Defender for Office 365 users to leverage email intelligence and detections while performing incident investigations and threat hunting.<\/p>\n NetApp-Volume-Snapshot:<\/strong> The workflow performs a volume snapshot operation on all volumes in a NetApp ONTAP system, excluding those specified in the Skip Volumes input variable. It can be triggered by Cisco XDR<\/strong> for automated response actions or playbooks to protect volume data during a threat response.<\/p>\n Enabling this integration in Cisco XDR<\/strong> will make the PagerDuty REST and Events APIs available as targets for automation workflows. Workflows can be used to do things like send a page through PagerDuty when Cisco XDR incidents are generated.<\/p>\n Palo Alto Panorama \u2014 Add IP, Domain, or URL to Group or Category:<\/strong> This Cisco XDR<\/strong> workflow appears in the pivot menu and allows you to add a URL, IP or domain name to a group or category in Palo Alto Panorama.<\/p>\n Pure Storage Volume Snapshot:<\/strong> This Cisco XDR<\/strong> workflow performs a volume snapshot operation on the set of volumes configured on the Flash Array (On-Premises Target) using the names provided as an input variable.<\/p>\n Pure Storage Protection Group Snapshot:<\/strong> This workflow performs a Protection Group snapshot operation on the set of protection group volumes configured on the Flash Array (On-Premises Target) using the names provided as an input variable.<\/p>\n Pure Storage Delete User:<\/strong> This workflow performs a user deletion on the Flash Array (On-Premises Target) using the names provided as an input variable.<\/p>\n Red Sift Pulse provides IP, hostname, and domain-based threat intelligence to Cisco XDR<\/strong> users to aid swift identification and remediation of phishing and impersonation attacks. By leveraging Red Sift OnDMARC\u2019s email security capabilities, Red Sift Pulse gives security teams complete visibility into and control over what\u2019s happening across their email-sending infrastructure.<\/p>\n Two new Cisco XDR<\/strong> automation workflows were added for SentinelOne integration.<\/p>\n Add Hash to Blocklist:<\/strong> This workflow appears in the pivot menu and allows you to add a file hash to a blocklist in SentinelOne.<\/p>\n Remove Hash from Blocklist:<\/strong> This workflow appears in the pivot menu and allows you to remove a file hash to a blocklist in SentinelOne.<\/p>\n Enabling this integration in Cisco XDR<\/strong> will make the ServiceNow API available as a target for Automation workflows. This target can be used to perform tasks such as creating incidents, creating change tickets and more.<\/p>\n Slack brings team communication and collaboration into one place so you can get more work done, whether you belong to a large enterprise or a small business. This integration allows Cisco XDR<\/strong> users to leverage Slack as a team collaboration and communication tool in Automation workflows, including incident notification and response.<\/p>\n The xMatters service reliability platform helps DevOps, SREs and Ops teams automate workflows, ensure infrastructure availability and deliver products at scale. The integration with Cisco XDR<\/strong> makes the xMatters API available as a target for automation workflows.<\/p>\n These integrations help customers using Cisco\u2019s Cloud Protection Suite establish a stronger security posture.<\/p>\n Cisco Umbrella Data Connector:<\/strong> Seamlessly ingest Cisco Umbrella<\/strong> Security Service Edge (SSE) data into the CrowdStrike Falcon\u00ae platform to gain comprehensive cross-domain visibility of threats throughout your attack surface.<\/p>\n Cisco Secure Workload <\/strong>now has a Device Support Module (DSM) for IBM QRadar. The DSM module parses received events from Secure Workload and converts them to a standard taxonomy format that can be displayed in IBM QRadar.<\/p>\n By integrating with Cisco Umbrella<\/strong> and correlating the data there with other tools, Sevco provides comprehensive asset inventory which can uncover previously unknown vulnerabilities in your environment like missing security controls, misconfigured agents, out-of-date software and more.<\/p>\n These integrations help customers using Cisco\u2019s User Protection Suite establish a stronger security posture.<\/p>\n Google Chrome\u00a0Device\u00a0Trust\u00a0Connector:<\/strong> The Duo + Chrome\u00a0Device\u00a0Trust\u00a0Connector\u00a0helps organizations easily enforce\u00a0device\u00a0posture at the time of authentication and simplifies endpoint\u00a0trust access policy management through a simple, agentless configuration for MacOS, Windows and ChromeOS.<\/p>\n Google Chronicle<\/strong> updated its integration with Cisco ISE.<\/strong> This new integration with ISE extends the existing one with Chronicle SIEM.<\/p>\n Microsoft Entra ID External Authentication Methods (EAM):<\/strong> Duo was one of the first partners to build an integration with\u00a0Microsoft\u2019s new framework for integrating with third-party\u00a0authentication\u00a0providers, External Authentication Methods.\u00a0With EAM, Duo is a fully integrated MFA and advanced identity secure identity provider within Entra ID.\u00a0Duo is supported across all\u00a0Microsoft\u00a0workflows including\u00a0Microsoft\u00a0Partner Center.<\/p>\n Organizations can easily protect access to their applications with Duo SSO and enjoy all the benefits of our continuous identity solution. Duo SSO is simple to set up and deploy, making it easy for end users to access the applications they need, without the hassle of remembering passwords. Additionally, Duo SSO combines Duo\u2019s authentication capabilities, such as MFA and Passwordless, with powerful security insights into identity and device risk. This provides organizations with a robust tool to safeguard their users, data, and applications.<\/p>\n Our Duo SSO team has been actively building integrations with the top applications that organizations use. Here is a list of the some of the FY24 new Duo SSO integrations:<\/p>\n These integrations help customers using Cisco Secure Firewall establish a stronger security posture.<\/p>\n By collecting logs from Cisco Secure Firewall<\/strong>, Blumira\u2019s Automated Cloud SIEM makes advanced detection and response easy and effective for small and medium-sized businesses, accelerating ransomware and breach prevention.<\/p>\n CrowdStrike Falcon Insight XDR ingests cross-domain telemetry from Cisco Secure Firewall ASA<\/strong> to enable unified and threat-centric detection across an organization\u2019s infrastructure.<\/p>\n Titania Nipper Enterprise accurately assesses the security and compliance status of Cisco Secure Firewall<\/strong> and Secure Firewall ASA<\/strong> regularly to make sure all configurations are up to date and compliance goals are met and maintained.<\/p>\n Tufin now supports Cisco Cloud Delivered FMC<\/strong> for Tufin Orchestration Suite, which is a centralized security management layer allowing organizations to define and implement a comprehensive security policy and rapidly automate network changes while remaining compliant to that policy.<\/p>\n Acknowledgements: <\/strong>Thank you to my amazing teammates. Their collaboration with our technology partners has been instrumental in expanding our ecosystem \u2014 Jessica Oppenheimer, Ryan Maclennan, Dinkar Sharma, Correine Wiechec, Ginger Leishman, Jenn Kwok, Ben Greenbaum and Apostolos Kouloukourgiotis.<\/p>\n We\u2019d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social!<\/em><\/p>\n Cisco Security Social Channels<\/strong><\/p>\n Instagram<\/strong> Share:<\/p>\n \n \t<\/div>\nCriminal IP<\/h3>\n
CrowdStrike<\/h3>\n
\n
Darktrace<\/h3>\n
Elastic Cloud<\/h3>\n
LevelBlue (AlienVault)<\/h3>\n
Microsoft<\/h3>\n
NetApp<\/h3>\n
Palo Alto Networks<\/h3>\n
Pure Storage<\/h3>\n
Red Sift<\/h3>\n
Sentinel One<\/h3>\n
ServiceNow<\/h3>\n
Slack<\/h3>\n
xMatters<\/h3>\n
New Cisco Cloud Protection Suite integrations<\/h2>\n
CrowdStrike<\/h3>\n
IBM QRadar<\/h3>\n
Sevco Security<\/h3>\n
New Cisco User Protection Suite integrations<\/h2>\n
Google<\/h3>\n
Microsoft<\/h3>\n
Duo SSO integrations<\/h2>\n
\n
New Cisco Secure Firewall integrations<\/h2>\n
Blumira<\/h3>\n
CrowdStrike<\/h3>\n
Titania<\/h3>\n
Tufin<\/h3>\n
\n
Facebook<\/strong>
Twitter<\/a><\/strong>
LinkedIn<\/strong><\/p>\n