Organizations

The Organizations page in the Administration group provides information about the current Orbital organization, allows you to enable the Script feature, and configure your Linked Organizations. Only administrators can link organizations and view linked organizations.

 

Linked Organizations

Before Orbital can run queries and scripts across your organization's devices, it must identify the devices and their locations. Secure Endpoint customers must link their Secure Endpoint organizations to Orbital to complete this.

XDR customers do not need to create any linkage, as Orbital and XDR are inherently linked. Cisco XDR and Orbital maintain a one-to-one relationship, sharing the same unique Organization ID and Organization name, both of which are displayed on the Organizations page.

An organization's devices are defined when the organization creates an account with Cisco Secure Endpoint. Lists of devices are considered Secure Endpoint organizations, which are linked in the Link organization section of the Organizations page.

An Orbital registered organization may link to more than one Secure Endpoint list. This can be useful when an organization is responsible for the care and maintenance of more than one independent network infrastructure.

Secure Client Cloud Management users can link their organizations by enabling the Cisco XDR or Secure Client Cloud Management integration in the Secure Endpoint console.

You can only link to Secure Endpoint integrations.

When a Secure Endpoint organization is connected to an Orbital organization, that connection is available to all users in the Orbital organization.

 

Organization name

The Organization name field displays the name that your organization registered with Secure Endpoint.

 

Organization ID

The Organization ID field displays the ID number assigned by Orbital to your organization.

 

Organization features

Orbital Script feature allows you to use Python to counteract threats found through queries on one or more of an organization's devices. Script is turned on or off using the Enabled toggle switch.

For information on how to turn Script on or off, refer to the Configuring Your Organization topic.

To learn more on how to use Script, refer to the Using Scripts topic.

Only an administrator can turn on or off the Script feature. Additionally, once the Script is enabled, it will be available to use across all linked organizations.

 

Link Organizations

This allows you to link any appropriate Secure Endpoint defined organization or organizations to the organization you have defined in Orbital, as discussed in Linked Organizations.

If you access Orbital before you have set up a module in Cisco XDR, the Link organization button and associated table will not be displayed. Only the Set up modules button will be displayed.

 

Page Refresh Display

This element is used to display the last date that the Link organization listing was refreshed.

This element consists of:

  • Refresh - This component is used to refresh the listing of the Link organization. For more information on linked organizations, refer to Link Organizations.

  • Created - This component is primarily used to display the date and time that the Linked Organizations list was created. It allows you to:

    • Copy the date and time of last Linked Organization list refresh in ISO-8601 format.

    • Copy the date and time of last Linked Organization list refresh in UNIX time format.

    • Change the default time preferences for your account. Clicking the Change time preferences... will take you to the My Account page of the Administration group. Refer to the Orbital My Account Page topic for more information on setting your account's default Time Options.

The Link Organization element comprises these columns:

Status

This column shows if the organization in the current row is linked to the current Orbital organization.

If the Secure Endpoint organization is linked to the current Orbital organization, the word Linked will appear in this column.

If the Secure Endpoint organization is not linked to the current Orbital organization, the Link organization button will be displayed.

Clicking Link will link the displayed Secure Endpoint organization to the current Orbital organization.

Device organization name

This column lists the name of the organization that the devices belong to.

Product

This column lists the name of the Cisco product that the listed organization is registered through. In the case of Orbital, these will all be Secure Endpoint.

Created

The column lists the date and time that the link to the organization was created.

Linked By

This column displays the name of the user that linked the Secure Endpoint organization to the current Orbital organization.

If the current organization has been linked during system setup, the value Automatically Linked will be displayed in the column.

Device organization ID

This column lists the identification number of the organization that is being linked to by the current user for the current Orbital organization.

 

More Info