This integration enables the security analyst to apply Access Control Lists (ACLs) and Quarantine Policies to the wireless IoT devices through the NAC platform, which helps to enhance the security of the devices.

This integration enabled the seamless data flow between the NAC platform and the IoT Cloud Management Service Provider through the API’s and helped minimise the number of API calls and batch device updates.

Mappers and classifiers were used to extract and map the required attributes related to the NAC platform and the policies to be applied to the devices. These techniques ensured that the correct incident-specific playbook was triggered to apply the appropriate policy to the wireless IoT devices.

The integration simplifies the vulnerability management process, allowing the organisations to initiate scans from both tenable and the IOT cloud management platform.

The integration helps in syncing the data of the between the two platforms and allows security analysts to download reports from the scan

Real-time reporting on vulnerabilities in XSOAR enables organisations to prioritise vulnerabilities that require immediate attention, reducing the risk of data breaches and security incidents.

XSOAR’s integration with EDR enables automated workflows for quickly responding to threats, such as isolating contaminated machines and collecting forensic data.

The integration offers an instance of EDR in XSOAR that requires configuring authentication credentials for the tool.

The playbooks developed in this integration can be used to automate the EDR process, including isolating machines, collecting data and escalating incidents.