Cisco Secure Access
Accelerate security response from Cisco Secure Access to ServiceNow
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
About
The Cisco Secure Access Application for ServiceNow streamlines security event management by integrating directly with your ServiceNow instance. It ingests DLP events and access policy change alerts via webhooks, stages them in a dedicated events table, and automatically converts them into Incidents or Change Requests based on severity and group filter configuration.
Administrators can define organization-specific groups, apply filtering rules to control ticket creation, and review eligible staged DLP events before manual promotion. The application also features scheduler-based processing with retry and backoff mechanisms, proactive operational alerts, multi-organization data isolation, and end-to-end traceability from the originating event to the resulting ticket.
Built for SOC and security operations teams, it eliminates manual ticket creation while ensuring consistent and auditable response workflows for DLP events and access policy change alerts.
Key Features
1. Event staging table workflow: Incoming Secure Access events are first stored in a staging/events table for controlled processing and review before promotion
2. Group and filter-based routing: Events are evaluated against org/group configuration and filtering rules to drive downstream handling
3. Basic Authentication for webhook access to ensure only authorized integrations can submit events
4. Change Requests from access policy change alerts and Incidents from DLP events, based on group filter configuration
5. Severity-based handling for DLP events with configurable processing and admin oversight workflows
6. Admin review and manual promotion for eligible DLP events to Incidents
7. Multi-organization isolation with role-based access controls
8. Secure webhook ingestion with authentication, validation, and asynchronous processing
9. Scheduler-based processing with retries and backoff
10. Notifications for errors and operational alerts surfaced through Admin/Events dashboard visibility and alerting mechanisms
11. Operations dashboard for pipeline states, ticket counts, alert history, and scheduler status
12. Retention and purge controls for terminal event states
13. End-to-end traceability from Secure Access event records to created ServiceNow tickets