Cisco Meraki - Push XDR Feed to Content Filtering
Details
This workflow fetches the URLs from a Cisco XDR feed and compares them to the blocked URLs in the Cisco Meraki appliance content filtering configuration. If a URL from the XDR feed is missing in Meraki, it will be added to the content filtering configuration.
Description
This workflow fetches the URLs from a Cisco XDR feed and compares them to the blocked URLs in the Cisco Meraki appliance content filtering configuration. If a URL from the XDR feed is missing in Meraki, it will be added to the content filtering configuration.
Target: Automation APIs system target, Platfrom APIs system target, Meraki integration target
Steps:
- Fetch the integration configuration
- Fetch the feed contents
- Check the networks by organization
- Remove networks without an appliance
- Prompt the configured user for which networks to sync
- For each selected network:
- Fetch the network appliance content filtering
- Compare the appliance filtering configuration with the feed content
- Check if an update is required:
- If it is, attempt to update the filtering configuration and update the workflow results
- If it isn't, update the workflow results
Required targets
This workflow requires the following targets to be available before it can be run.
Integration targets
- Cisco XDR
- Meraki
About
Author
Bindia Gupta
Version
v1.0
Integration
Average rating
No ratings yet
Authorship
Cisco Managed
Contact and support information
External links
Related workflows
Cisco Managed
This workflow can be added to your incident response playbook and allows you to get a summary of network splash login attempts for your Cisco Meraki organization's networks.
Cisco Managed
This workflow can be added to your incident response playbook and allows you to get a summary of top appliances by utilization for your Cisco Meraki organization.
Cisco Managed
This workflow can be added to your incident response playbook and allows you to get a summary of top clients by usage for your Cisco Meraki organization.
Cisco Managed
This workflow appears in the pivot menu and allows a user to block an IP address on a Cisco Meraki MX L3 outbound firewall.
Cisco Managed
This workflow can be added to your incident response playbook and allows you to block IP addresses using the L3 outbound firewall on Cisco Meraki MX appliances.
Cisco Managed
This workflow appears in the pivot menu and allows a user to block an IP address on a Cisco Meraki MX L3 outbound firewall (using the selected observable as the rule's destination).
Cisco Managed
This workflow fetches the URLs from a Cisco XDR feed and compares them to the blocked URLs in the Cisco Meraki appliance content filtering configuration.