About Veeam App for Palo Alto Networks XSOAR

Veeam App for Palo Alto Networks XSOAR is a Cortex XSOAR content pack that allows you to monitor various security activities in your Veeam backup infrastructure:

• Veeam Backup & Replication events related to malware detection and health state of the backup infrastructure components.
• Alarms triggered by Veeam ONE.

The app gets information using Veeam Backup & Replication and Veeam ONE REST APIs and creates an incident for each security activity with Medium, High and Critical severity. You can manage incidents through Veeam Incident Dashboard and resolve them manually or automatically with built-in Veeam playbooks.

The content pack includes:

• Veeam Backup & Replication REST API integration:
  • Multiple Veeam Backup & Replication integration instance support.
  • Incident types and fields related to malware detection and health state of the backup infrastructure components.
  • Incident classifiers and incoming mappers for incident types.
  • Incident layouts for backup infrastructure events.
  • Built-in playbooks to automate specific operations.
  • Commands for automation tasks. For more information, see this article in the Cortex XSOAR Reference.
• Veeam ONE REST API integration:
  • Multiple Veeam ONE integration instance support.
  • Incident types and fields related to Veeam ONE triggered alarms.
  • Incident classifiers and incoming mappers for incident types.
  • Incident layout for triggered alarms.
  • Built-in playbook to resolve or acknowledge triggered alarms.
  • Commands for automation tasks. For more information, see this article in the Cortex XSOAR Reference.
• Veeam Incident Dashboard