AlienVault® USM Anywhere™

AlienApp for Cisco ASA Orchestration

With the AlienApp for Cisco ASA configured with USM Anywhere,you can respond to threats or suspicious activity by sending IP addresses directly to your Cisco environment.

Actions Available from the AlienApp for Cisco ASA
Action Function

Tag Source IP Address

Run this action to tag the source IP address in Cisco ASA from a rule, action, or event.

Tag Destination IP Address Run this action to tag the destination IP address in Cisco ASA from a rule, action, or event.

To view information about these actions in USM Anywhere

  1. In USM Anywhere, go to Data Sources > Integrations.
  2. Click the AlienApps tab.

    Available Apps tab

  3. On the AlienApps page, click the Cisco ASA tile.

  4. If you have more than one sensor, select the sensor where the AlienApp is enabled.
  5. Click the Actions tab to display information for the supported actions.
  6. Click the History tab to display information about the executed orchestration actions.