New Features in January 2025
Focus
Focus
Device Security

New Features in January 2025

Table of Contents

New Features in January 2025

Review the new features introduced in Device Security in January 2025.
Where Can I Use This?What Do I Need?
  • (Legacy) IoT Security (Standalone portal)
One of the following subscriptions:
  • Device Security subscription for an advanced Device Security product (Enterprise, OT, or Medical)
  • Device Security X subscription
The following new features and enhancements were introduced for Device Security in January 2025.

New Polling Integration Support

(January 2026) The Device Security polling integration with Cortex XSOAR now supports the following protocols for polling:
  • GE CARESCAPE Gateway
  • Ping/ICMP Connection Test and ICMP Traffic
  • Hikvision for custom OID
  • Axis Communications for older devices
(October 2025) The Device Security polling integration with Cortex XSOAR now supports the following protocols for polling:
  • Beckhoff TwinCAT UDP
  • Codesys TCP
  • Siemens PLC HTTP/HTTPS
(August 2025) The Device Security polling integration with Cortex XSOAR now supports the following protocols for polling:
  • HTTP / HTTPS banner extraction
  • GE-SRTP
  • Beckhoff TwinCAT
(April 2025) The Device Security polling integration with Cortex XSOAR now supports the following protocols for polling:
  • Axis Communications
  • FTP Banner
Additionally, you can now provide a DNS server when configuring polling with reverse DNS to get device hostnames.
(January 2025) The Device Security polling integration with Cortex XSOAR now supports the following protocols for polling:
  • Cognex Discovery
  • EPM
  • Moxa
  • Niagara Fox

NetBrain Network Management Integration

Device Security supports integrating with NetBrain to learn about devices from NetBrain’s CMDB. Once integrated, Device Security can retrieve device details from NetBrain and use that information to enrich device information in the Device Security assets inventory. Device Security also creates new devices in the asset inventory for devices learned through the NetBrain integration.

Cisco DNA Center Integration Enhancement

(January 2025): Added a playbook for Device Security to learn new devices in addition to device attributes.
Device Security integrates with Cisco DNA Center to learn new devices, and to learn about device attributes for existing devices in your Device Security asset inventory. After integrating Device Security with Cisco DNA Center through Cortex XSOAR, you can configure device update jobs to run periodically, or after a manual push.

Third-party Integration Status

Device Security adds a pop-up for you to view the activity for third-party integrations integrations in the Device Security portal. On the Integrations Solutions table, you can hover over the status of an integration to see a summary of successful and failed calls. The pop-up displays calls for both active and disabled integrations.

Custom Alerts Enhancement

(March 2025) Device Security supports using the Site attribute when defining the target devices in the Alert Rule Engine Editor. You can create a new custom alert rule or edit an existing alert rule to use the Site attribute.
(January 2025) Device Security adds "Endpoint Protection" and "Profile Change" as options for the Change Event condition when configuring Custom Alerts. The "Profile Change" event happens when a device's profile changes from the "Target Profile" to a different profile.