IoT Security
Integrate IoT Security with Microsoft SCCM
Table of Contents
Integrate IoT Security with Microsoft SCCM
Integrate with Microsoft SCCM to import device attributes
into the IoT Security inventory.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
One of the following Cortex XSOAR setups:
|
Microsoft System Center Configuration Manager (SCCM)
is a suite of management solutions for user and device management.
By integrating it with IoT Security, you can import device attributes
from SCCM into IoT Security for devices in its inventory.
Import the following device attributes from SCCM for devices
in the IoT Security inventory:
- MAC address (IoT Security links data from SCCM to devices by MAC address.)
- IP address
- Serial number
- Model
- Vendor
- Disk encryption status
- Windows installed patches
- Windows unique identifier
- SCCM site name
- SCCM domain name
The attributes that IoT Security imports from SCCM are supplementary.
If IoT Security has already discovered values for the IP address,
serial number, model, and vendor of a device, it doesn’t overwrite
them with values from SCCM. It only imports attributes for fields
for which it doesn’t yet have a value. You can see the IP address,
serial number, vendor, and model on the Devices page and all imported
attributes on the Device Details page.
IoT Security can import device attributes from the SCCM SQL server
for one or more SQL databases, which is sometimes necessary for
large deployments spanning multiple locations. In these cases, you
create one Cortex XSOAR integration instance and job for each database.
Integrating with Microsoft SCCM requires either a full-featured Cortex XSOAR server or the purchase
and activation of an IoT Security
third-party integration add-on license, which comes with a free cohosted Cortex XSOAR instance. The basic plan
includes a license for three integration add-ons, one of which can be used for this. The
advanced plan includes a license for all supported third-party integrations.