New Cortex Xpanse features and enhancements in the August 2023 release of Expander 2.2.
The table below describes the features and enhancements introduced in the Expander 2.2 August 2023 release.
Feature | Description | Date |
|---|---|---|
IPv6 Support | Cortex Xpanse now supports the discovery and monitoring of IPv6 assets. Xpanse discovers new IPv6 assets through domain resolution using AAAA DNS records or customers can provide a list IPv6 addresses for monitoring. A new Owned IPv6 Ranges page has been added to the Inventory, and an IPv6 field has been added to Services, Domains, Certificates, Owned Responsive IPs, Incidents, and Alerts pages. IPv6 search and filtering on these pages is supported. IPv6 data is included in dashboards, with some widgets supporting IPv6 filtering. Note that Expander does not currently support IPv6 ranges. The Owned IPv6 Ranges page displays single owned IPv6 addresses. See Owned IPv6 Ranges for additional information. | August 2023 |
Splunk TA v5.0.0 Integration | The Cortex Xpanse Splunk integration allows you to forward Xpanse-discovered assets, services, and risks for management, visualization, correlation, and alerting within Splunk. See the Integration Resources on the Cortex Xpanse & Splunk TA Technology Partners page for information. | July 2023 |
XSOAR Integration | Forward risks via API from Expander to XSOAR where you can construct custom playbooks to triage and remediate. This integration also includes commands to call Expander APIs for enrichment purposes. This integration does not include bundled playbooks or a feed integration for Xpanse assets. | July 2023 |