IoT Security
Send Security Alerts to SoftPro Medusa
Table of Contents
Send Security Alerts to SoftPro Medusa
Send security alerts from IoT Security to SoftPro Medusa.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
One of the following Cortex XSOAR setups:
|
From the IoT Security portal, you can send a security alert to
SoftPro Medusa. Before forwarding the alert to SoftPro Medusa,
Cortex XSOAR converts it into a security incident, which
SoftPro Medusa receives. From there, a SoftPro Medusa user
can create a work order for a network security analyst to investigate.
When sending alerts to SoftPro Medusa, you can choose to send:
- An alert from a Device Details page
- A specific alert from the Alert Details page
- An alert from the alerts inventory
Because each alert ticket requires a MAC address to match the alert to a device,
you can only send one alert at a time.
After you send an alert to SoftPro Medusa, the action of sending the
alert will appear in the alert history on the alert details page. On your
SoftPro Medusa instance, you can view the ticket created from the alert.
- Log in to the IoT Security portal and send an alert to SoftPro Medusa.
- From the Device Details page:Navigate to and select the device with an alert that you want to send to SoftPro Medusa. On the Device Details page, click on the Alerts tab, select the alert that you want to send, and select .
- From the Alert Details page:Navigate to and select the alert that you want to send to SoftPro Medusa. On the Alert Details page, select .
- From the alerts inventory:Navigate to and select the check box for the alert that you want to send to SoftPro Medusa. After you have chosen the alert, select .
- In the Send to SoftPro Medusa pop-up that appears, fill in the following fields:
- Priority: Enter a priority number that your SoftPro Medusa system analyst can use to correlate with the priority numbering system in SoftPro Medusa.
- Add Comments: Add any additional comments that would help with the risk mitigation workflow.
- Send the alert to SoftPro Medusa.After you click Send, a link to the Cortex XSOAR work plan appears at the bottom of the pop-up. The link opens a new tab or window to see the Cortex XSOAR work plan for this action.
- To confirm that the alert successfully reached SoftPro Medusa, click the link to the Cortex XSOAR playbook for this action.For the link in IoT Security to open the corresponding work plan in Cortex XSOAR, you must already be logged in to your cloud Cortex XSOAR instance before clicking on the link. If you have an on-premises Cortex XSOAR, you need to search the incidents on your Cortex XSOAR to find the work plan.Follow the path through the playbook to see if the action completed successfully, or to triage where the action might have failed.
