Cortex XSOAR automated playbooks can help prioritize, deduplicate, check for coverage and distribute the latest malicious indicators to dozens of network devices simultaneously. Conversely, dynamic web services domain lists can be automatically updated to ensure business continuity.

• Automate deny/allow list administration

  Indicators are normalized, scored and prioritized for automated updates of firewall EDLs. Allow lists are updated with each new web services feed.

• Checks CVE coverage at scale

  Automatically checks PAN-OS devices to determine coverage for critical CVEs and if the appropriate defenses are in place.

Cortex XSOAR integrates with Strata network security solutions to automate and scale incident triage for faster response to attacks. Security teams get better visibility and control over incidents happening across their network.

• IoT Security + XSOAR

  Automate IoT security incident triage and business owner communications to resolve incidents

• CN-Series + XSOAR

  We combine the native automation in Kubernetes with the integration of Cortex XSOAR and PAN-OS. This helps customers completely automate security for applications deployed in Kubernetes.

• Prisma Access + XSOAR

  Automate triage of alerts for remote connectivity and user activity. Manage egress IP addresses and populate allow lists within third-party services such as AWS, Google Cloud and Okta.

Ease network security team workload by empowering end user self-service for common requests. For example, a request to access a blocked website will trigger a playbook to extract user information and perform URL reputation lookup. It will then present incident details to the security engineer for approval. Once approved, the playbook performs steps to allow access and close the ticket.