Send Vulnerabilities to Jira Cloud
Focus
Focus
Device Security

Send Vulnerabilities to Jira Cloud

Table of Contents

Send Vulnerabilities to Jira Cloud

Send individual vulnerability instances from Device Security to Jira Cloud to create tickets for tracking and remediation.
From Device Security, you can send a vulnerability instance to Jira either by selecting the check box of a vulnerability instance on the Vulnerability Details page or from the Vulnerabilities section of the Device Details page. Before forwarding the vulnerability to Jira, Cortex XSOAR converts it into a Jira ticket. The Jira ticket gets created in the Jira project, as the specified issue type, that you configured in the integration instance. From there, the Jira ticket can be assigned and modified in the same way as other Jira tickets.
To bulk create Jira tickets for vulnerabilities, Set up Device Security and Cortex XSOAR for Jira Cloud Integration and configure a job with the Create PANW IoT Alert and Vulnerability Jira Tickets - Jira Integration playbook.
After closing the Jira ticket with the status "Done," you can run the Update PANW IoT Alert and Vulnerabilities - Jira Integration playbook to resolve the vulnerability instance in Device Security.
  1. Log in to Device Security and find the vulnerability instance that you want to send to Jira.
    Vulnerability Details Go to RisksVulnerabilities and click on the vulnerability name to go to the Vulnerability Details page. Under Impact View, select the checkbox for the vulnerability instance you want to send, and then click MoreSend to…Jira.
    Device Details Go to AssetsInventory and click on the name of the device to go to the Device Details page. Under Vulnerabilities, select the vulnerability you want to send, and then click ActionsSend to…Jira.
    The Send to Jira dialog appears.
  2. Optional Enter a label if you want to add a Jira label to the ticket.
  3. Add a comment for the Jira ticket.
    This comment appears in both the Jira ticket and in the event history on the Alert Details page in Device Security.
  4. Send the vulnerability to Jira Cloud.
    After you click Send, a link appears in the dialog. When you click it, a new browser window opens to the Cortex XSOAR playbook for this action.
  5. To confirm that the vulnerability was sent, click the link to the Cortex XSOAR playbook for this action.
    The green boxes in the playbook indicate that a particular step was successfully performed. Following the path through the playbook gives you feedback about whether an action was carried out successfully or, if not, where the process failed.
    If the vulnerability instance was sent successfully, you can view the vulnerability event log on the Device Details page to see the Jira ticket ID.