Great news, we have brand-new content available for you to learn more about Cisco XDR and it's APIs and other developer focussed information: Developer site: https://developer.cisco.com/cisco-xdr/Developer API docs: https://developer.cisco.com/docs/c...
Forum Posts
Hi i'm working on an intregation and I want to import some data to securex dashboard. I'm following this devnet tutorial > https://developer.cisco.com/learning/modules/securex-serverless-relay-modules/SecureX-7-Dashboard-Tiles/different-securex-dashb...
Hi, I'm testing a draft workflow that modifies a user's attributes in Duo using the Duo Admin API and based on the "Duo - Admin - Add User to Group" atomic. Currently it just modifies user's notes:When I use spaces in the notes parameter, it fails t...
I have recently integrated Microsoft Intune with SecureX and am looking for some "quick wins" to trial automation with the platform.Are there any documents, resources or premade workbooks specific to Intune that would give a flavour for how to get st...
Hello SecureX friends!I am struggling to connect Cisco WSA with SecureX. The error message is "Health check of Module failed: - There was an unexpected error in the WSA module". The WSA virtual appliance is registered in SSE, I followed every step of...
Hi SecureX developer community! Just before the holiday break there was a new SX release with some cool new user facing features: https://docs.securex.security.cisco.com/Orchestration-Help/Content/sxo-release-notes.html Ability to Duplicate Workf...
Resolved! SecureX and SIEM Architecture
Hey everyone! I am working on coming up with a Managed Security offering for the company I work for. Cisco SecureX and the Cisco Security suite offer amazing visibility and one pane of glass to manage Security and Incident Response, but there are som...
Resolved! SecureX MSSP bulk user add
Hello! I am working on adding an Admin to multiple SecureX organizations. I know for Meraki there are scripts for bulk admin management that allow you to select 'all' for organization and add someone to all the orgs the API key has access to. Is th...
Resolved! NGFW Blocks creating Incidents
Hello! I am taking ownership of our SecureX environment and noticed we are almost continuously creating Incidents for known-bad IPs trying to connect to us from the internet. At this point, we have over 30,000 open incidents, and none of them are r...
Use Case: Our threat feeds vendor has whitelisted our company's public ips permitting us access to send http requests to their endpoints. We would like to use secure-x orchestration to initiate the request but it currently appears to be blocked (pres...
Hi, I'm not sure if this is feasible so just checking if someone from the community may have an answer to this. We have some on-premise API endpoints that I would like to query using the orchestration module so we have gone ahead and setup the Secure...
Dear community, I have integrated FMC with SecureX, and it shows integrated successfully in the SSE portal tab. It also shows the Ribbon in the FMC now, however, the ribbon does not show any information, or let me click any tab. Its all empty and sa...
Hey network, i am working on a project where i need to integrate FMC in cisco secureX. Well that part worked but now i would like to use the orchestration tool in secureX to automate some workflows. I would like to block a firewall rule with it. Does...
Hello All,When running the Phishing Investigation, I get following error at the block "For each attachment:Failed to resolve variable reference '[$trigger.Phishing Mailbox.output.Attachments$]'Does any one have this issue and how to fix it ?Best Rega...
I am trying to run CTR & Threat responseV2 casebook, when we run workflows getting below error: 1.CTR Casebook:action execution errored for type python3.script err:code:400 message::Error: raise JSONDecodeError("Expecting value", s, err.value) from N...
