Cisco ESA

Version: 1.1
Updated: Jul 06, 2023

Cisco ESA provides a comprehensive view of security for improved threat intelligence, defense, and remediation. That includes: Centralized management of email spam quarantine, comprehensive threat monitoring across multiple web and email security gateways.

Actions

Get Spam Quarantine List (Enrichment) - Retrieve Blocklist Entries.
Edit Spam Quarantine List (Containment) - Add, edit or append Recipient/Sender List/Addresses.

Cisco ESA in Automation Service and Cloud SOAR

Access integrations in the Automation Service or Cloud SOAR.
After the list of the integrations appears, search for the integration and click on the row.
The integration details will appear. Click on the "+" button to add new Resource.
Populate all the required fields (*) and then click Save.
- URL API
- Username
- Password
To make sure the resource is working, hover over the resource and then click the pencil icon that appears on the right.
Click Test.
You should receive a successful notification in the bottom right corner.