Documentation Center
AlienVault® USM Anywhere™

AlienApp for ConnectWise Orchestration

The AlienApp for ConnectWise provides a set of orchestration actionsIn USM Anywhere you can execute an action from alarms, events, and vulnerabilities to run a scan, get forensic information, or execute a response for a configured AlienApp. that automate the creation of service tickets in ConnectWise Manage as a response to threats detected by USM Anywhere, and the management of the Configurations catalog in ConnectWise Manage as a response to asset scans performed by USM Anywhere.

Action Function

Add tickets to the Manage database

This action creates and updates the tickets from USM Anywhere alarms and vulnerabilities.

USM Anywhere includes the Update the Ticket database job in the Scheduler, which executes this action every five minutes. When you configure the AlienApp for ConnectWise, this job is enabled by default.

Note: Currently, configuration issues identified by USM Anywhere are not included in the job to create and update Manage service tickets.

Add configurations to the Manage database

This action updates the Configurations catalog in ConnectWise Manage to reflect the most recent asset scan by USM Anywhere.

USM Anywhere includes the Update Configurations catalog job in the Scheduler, which executes this action every 60 minutes. When you configure the AlienApp for ConnectWise and select the Automatically sync assets with Manage? option, this job is enabled by default.

Note: If an asset that USM Anywhere previously discovered is no longer present in the most recent asset scan, the status changes to inactive. If it discovers the asset in another future scan, the status changes to active.

If you choose to disable one of these jobs for the USM Anywhere instance, you can go to SETTINGS > SCHEDULER. When you select a ConnectWise job in the page, you can also access history information that is specific to that job. For more information, see Managing Jobs in the Scheduler.

Important: The AlienApp for ConnectWise must be enabled and connected to your Manage environment for successful execution of these jobs. For more information, see Configuring the AlienApp for ConnectWise.

To view information about these actions in USM Anywhere

  1. In USM Anywhere, go to DATA SOURCES > INTEGRATIONS.
  2. Click the AlienApps tab.

    Access the AlienApps page

  3. In the AlienApps page, click the ConnectWise tile.

    Click the ConnectWise tile

  4. Click the Actions tab to display information for the supported actions.
  5. Click the History tab to display information about the executed actions.

    View the history of executed ConnectWise response actions