The AlienApp for ConnectWise provides a set of orchestration actionsIn USM Anywhere you can execute an action from alarms, events, and vulnerabilities to run a scan, get forensic information, or execute a response for a configured AlienApp. that automate the creation of service tickets in ConnectWise Manage as a response to threats detected by USM Anywhere, and the management of the Configurations catalog in ConnectWise Manage as a response to asset scans performed by USM Anywhere. The following table lists the available actions from the AlienApp.
Add tickets to the Manage database
This action creates and updates the tickets from USM Anywhere alarms and vulnerabilities.
USM Anywhere includes the Update the Ticket database job in the Scheduler, which executes this action every five minutes. When you configure the AlienApp for ConnectWise, this job is enabled by default.
Note: Currently, configuration issues identified by USM Anywhere are not included in the job to create and update Manage service tickets.
Add configurations to the Manage database
This action updates the Configurations catalog in ConnectWise Manage to reflect the most recent asset scan by USM Anywhere.
USM Anywhere includes the Update Configurations catalog job in the Scheduler, which executes this action every 60 minutes. When you configure the AlienApp for ConnectWise and select Automatically sync assets with Manage, this job is enabled by default.
Note: If an asset that USM Anywhere previously discovered is no longer present in the most recent asset scan, the status changes to inactive. If it discovers the asset in another future scan, the status changes to active.
If you choose to disable one of these jobs for the USM Anywhere instance, you can go to Settings > Scheduler. When you select a ConnectWise job in the page, you can also access history information that is specific to that job. See USM Anywhere Scheduler for more information.
Important: The AlienApp for ConnectWise must be enabled and connected to your Manage environment for successful execution of these jobs. See Configuring the AlienApp for ConnectWise for more information.
To view information about these actions in USM Anywhere
- In USM Anywhere, go to Data Sources > AlienApps.
- Click the Available Apps tab.
- Search for the AlienApp, and then click the tile.
- Click the Actions tab to display information for the supported actions.
- Click the History tab to display information about the executed orchestration actions.