Configure the Cortex Xpanse XDR API connector to enable Xpanse to ingest Cortex XDR endpoint data.
Before configuring the Cortex XDR API connector in Cortex Xpanse, you must generate an API key in Cortex XDR.
Complete this task in Cortex Xpanse Expander to configure the API connector for Cortex XDR.
In Expander, navigate to Settings, and select API Connectors.
When the API Connectors page opens, click Add API Key, select Cortex XDR as the source type, and then click Next.
In the Add New window, complete the information as follows:
Enter the Name of your choice.
In the Access Key ID field, enter your XDR API key ID.
In the Secret Key field, enter your XDR API key.
In the Service URL field, enter the URL for your XDR instance.
In the Business Unit field, select the business unit you’d like to associate the devices with in Xpanse.
Click Add API Key to add the connector. Cortex XDR data may take up to 48 hours to be ingested into your Cortex Xpanse Expander instance.
For more information about Xpanse ASM for Remote Workers and the Expander ASM for Remote Workers dashboard, see Remote Attack Surface Overview.