Configure the Xpanse XDR API Connector

Configure the Cortex® Xpanse™ XDR API connector to enable Xpanse to ingest Cortex® XDR™ endpoint data.
Before configuring the Cortex® XDR™ API connector in Cortex Xpanse, you must generate an API key in Cortex XDR.
Complete this task in Cortex Xpanse Expander to configure the API connector for Cortex XDR.
  1. In Expander, navigate to
    , and select
    API Connectors
  2. When the
    API Connectors
    page opens, click
    Add API Key
    , select
    Cortex XDR
    as the source type, and then click
  3. In the
    Add New
    window, complete the information as follows:
    1. Enter the
      of your choice.
    2. In the
      Access Key ID
      field, enter your XDR API key ID.
    3. In the
      Secret Key
      field, enter your XDR API key.
    4. In the
      Service URL
      field, enter the URL for your XDR instance.
    5. In the
      Business Unit
      field, select the business unit you’d like to associate the devices with in Xpanse.
  4. Click
    Add API Key
    to add the connector. Cortex XDR data may take up to 48 hours to be ingested into your Cortex Xpanse Expander instance.
For more information about Xpanse ASM for Remote Workers and the Expander ASM for Remote Workers dashboard, see Remote Attack Surface Overview.

Recommended For You