Cisco Secure Firewall Threat Defense and Cisco SecureX Threat Response Integration Guide

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

Cisco Secure Firewall Threat Defense and Cisco SecureX Threat Response Integration Guide

Chapter Title

Additional References

Results

Updated:
September 7, 2023

Chapter: Additional References

Additional References

View Event Data in Cisco SecureX Threat Response (from Management Center)

Before you begin

  • You will need your credentials to access Cisco SecureX threat response.

  • Review the online help in Cisco SecureX threat response to learn how to find, investigate, and take action on threats.

Procedure

Step 1

Access Cisco SecureX threat response using one of the following methods:

  • Access Cisco SecureX threat response via management center, by doing one of the following:

    • To pivot to Cisco SecureX threat response from a specific event:

      a. Navigate to a page under the Analysis > Intrusions menu that lists a supported event.

      b. Right-click a source or destination IP address and select View in Threat Response.

    • To view event info generally:

      a. Navigate to System > Integrations > Cloud Services.

      b. Click the link to view events in Cisco SecureX threat response.

  • Access CTR directly:

    See links in Cisco SecureX Threat Response Regional Clouds.

Step 2

Sign in to Cisco SecureX threat response as prompted.

Working in Cisco SecureX Threat Response

Events that are promoted to incidents are displayed on the Incidents page in Cisco SecureX threat response.

If an IP address that you are investigating in Cisco SecureX threat response was observed in an event, that event appears in the investigation dataset, even if the event was not promoted to incident.

For information on effectively using Cisco SecureX threat response to find, investigate, and take action on threats, see the online help in Cisco SecureX threat response.

See also SecureX threat response - FAQs.

Working in Security Services Exchange

For information about using Security Services Exchange or Cisco Security Services Proxy, see the online help in Security Services Exchange.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco