Contact sales
Details

Microsoft Intune is a cloud-based endpoint management solution. It manages user access to organizational resources and simplifies app and device management across your many devices.

Microsoft Intune is a cloud-based endpoint management solution. It manages user access to organizational resources and simplifies app and device management across your many devices, including mobile devices, desktop computers, and virtual endpoints.

When you configure the Microsoft Intune integration, data about your devices will be available in XDR assets and enriched endpoint data will become available when you investigate incidents.​ A target will also become available in XDR automation for automated workflows.

Capabilities
Automation
Automatic target creation for Cisco XDR automation
Device Insights
Provides information about assets
Regions
North America
Europe
Asia-Pacific, Japan & China
Installable workflows

These are workflows that you can install in Cisco XDR automation and use with this integration. These are different from built-in workflows which are built into Cisco XDR by default for all customers.

Cisco Managed
This workflow appears in the pivot menu and allows you to wipe a device in Microsoft Intune.
Cisco Managed
This incident response workflow allows you to wipe one or more devices using Microsoft Intune from a playbook.
Built-in actions

These actions can be used in Cisco XDR automation to build workflows for this product. Workflows can help you automate how you investigate, respond to incidents, and more.

Configuration details