Cisco Secure Access App for Splunk

The Cisco Secure Access App for Splunk integrates cloud security data with event data from Splunk to drive improved network visibility, faster threat detection, and mitigation response. This App: 1. Provides visualizations using Cloud Security APIs (Secure Access and Umbrella). 2. Gives SOC’s/Threat Hunting teams the ability to learn more about destinations using the Investigate API. 3. Enables SOCs to block destinations using APIs. 4. Provides visibility into Applications used (API). 4. Lets teams manage Cloudlock CASB incidents.