FactoryTalk AssetCentre is a centralized tool by Rockwell Automation designed for managing, securing, versioning, tracking, and reporting automation-related assets. IoT Security integrates through Cortex XSOAR with AssetCentre to import device attributes from AssetCentre databases. Users can enable recurring imports or manually initiate bulk imports to match devices based on MAC or IP address. IoT Security matches the imported devices with those in its inventory by MAC or IP address and augments the attributes it already has for them with those learned from AssetCentre. If the set of imported devices includes a device that isn’t yet in its inventory, IoT Security adds that device if the AssetCentre database includes its MAC address, among other attributes. If AssetCentre doesn’t have the MAC address of a device that’s new for IoT Security, it’s not imported as an IP endpoint; it’s just not imported at all. IoT Security displays device information that it learns from this integration on the AssetsDevices and Device Details pages.

The integration of IoT Security and Rockwell Automation FactoryTalk AssetCentre can occur when one or more Palo Alto Networks firewalls are running on the same network that’s under AssetCentre management. The firewalls send IoT Security network traffic data logs through the Palo Alto Networks logging service and then IoT Security analyzes metadata from the logs to discover and identify devices on the network and track their network behaviors. In addition, IoT Security also supplements this information with the device attributes it imports through Cortex XSOAR from one or more AssetCentre databases on Microsoft SQL servers.

Integrating with AssetCentre requires either a full-featured Cortex XSOAR server or the purchase and activation of an IoT Security third-party integration add-on license, which comes with a free cohosted Cortex XSOAR instance. The basic plan includes a license for three integration add-ons, one of which can be used for AssetCentre. The advanced plan includes a license for all supported third-party integrations.