As a ConnectWise Automate user with Super Admin permissions, you can create a ticket based on detected threats and automatically send a command to run a scan and remediate the threat. If you receive a notice indicating Invalid OneView credentials, verify your API credentials on the integration card Settings page and log in again.
Note: Use the Sync Now button to pull ticket data immediately rather than waiting for it to sync. This can help troubleshoot if there are any communication issues with tickets.
In the Configure Ticketing and Auto-Remediation area, enter the following:
-
Ticketing/Remediation
- Disabled: No tickets are created in Automate.
- Ticket Only: Tickets are created in Automate based on the selected categories in Detection category.
- Ticket and Auto-Remediate: Tickets are created in Automate based on the selected categories in Detection category and automatically sends a command to OneView to execute a scan on the endpoint to remediate.
- Auto-Remediate Only: Automatically sends a command to OneView to execute a scan on the endpoint to remediate.
-
Ticket priority
- Default priority that is set on the ticket when created from the OneView plugin.
- These priorities are pulled from ConnectWise Automate, Dashboard > Config > VNC/Ticket Priority.
-
Ticket category
- Default category that is set on the ticket when created from the OneView plugin.
- These categories are pulled from ConnectWise Automate, Dashboard > Config > Configurations > Information Base Categories.
-
Detection category
- Select the types of threat detections for the OneView plugin to create a ticket automatically.
- Malware
- PUP
- PUM
- Exploit
- Ransomware
- Website
- Remote Intrusion
- Select the types of threat detections for the OneView plugin to create a ticket automatically.
-
Other Notifications
- Select the add-on module events you want the OneView plugin to automatically report to your administrators.
- Vulnerability Events
- OS Patch Events
- Device Control Events
- DNS Events
- App Block Events
- Select the add-on module events you want the OneView plugin to automatically report to your administrators.
-
Suspicious Activities
- Select the suspicious activity events you want the OneView plugin to automatically report to your administrators.
- High Severity
- Medium Severity
- Low Severity
- Select the suspicious activity events you want the OneView plugin to automatically report to your administrators.
Return to OneView and ConnectWise Automate integration.