As a ConnectWise Automate user with Super Admin permissions, you can create a ticket based on detected threats and automatically send a command to run a scan and remediate the threat. If you receive a notice indicating Invalid OneView credentials, verify your API credentials on the integration card Settings page and login again.
In the Configure Ticketing and Auto-Remediation area, enter the following:
-
Ticketing/Remediation
- Disabled: No tickets are created in Automate.
- Ticket Only: Tickets are created in Automate based on the selected categories in Detection category.
- Ticket and Auto-Remediate: Tickets are created in Automate based on the selected categories in Detection category and automatically sends a command to OneView to execute a scan on the endpoint to remediate.
- Auto-Remediate Only: Automatically sends a command to OneView to execute a scan on the endpoint to remediate.
-
Ticket priority
- Default priority that is set on the ticket when created from the OneView plugin.
- These priorities are pulled from ConnectWise Automate, Dashboard > Config > VNC/Ticket Priority.
-
Ticket category
- Default category that is set on the ticket when created from the OneView plugin.
- These categories are pulled from ConnectWise Automate, Dashboard > Config > Configurations > Information Base Categories.
-
Detection category
- Select the types of threat detections that you want the OneView plugin to automatically create a ticket on.
- Malware
- PUP
- PUM
- Exploit
- Ransomware
- Website
- Remote Intrusion
- Select the types of threat detections that you want the OneView plugin to automatically create a ticket on.
-
Other Notifications
- Select the add-on module events you want the OneView plugin to automatically report to your administrators.
- Vulnerability Events
- OS Patch Events
- Device Control Events
- DNS Events
- App Block Events
- Select the add-on module events you want the OneView plugin to automatically report to your administrators.
-
Suspicious Activities
- Select the suspicious activity events you want the OneView plugin to automatically report to your administrators.
- High Severity
- Medium Severity
- Low Severity
- Select the suspicious activity events you want the OneView plugin to automatically report to your administrators.
Return to the OneView integration with ConnectWise Automate guide.