Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 1279 views
  • Users 0 members are here
Options
Suggested

Does this new plugin create, or rely on, CWA searches/groups/scripts?

Drew Dixon

Connectwise Automate Version and Patch Level: 2019.10 (patch10)
Sophos Central Plug-in Version Number (From Plugin Manager): 1.0.0.85
Automate Server Location: Self-Hosted

The plugin setup was easy enough and appears to be syncing with our portal.

Other than auto-deploy of agent, assigning of product profiles and displaying portal Alerts, does this new plugin provide incident remediation or other automation?

Perhaps there's some additional documentation I've missed that provides an overview of how this plugin works vs. the previous plugin? Is this new plugin a total rip&replace of the previous plugin, or does it reuse some of the building blocks of the old plugin in some ways (CWA searches/groups/scripts, alert templates, internal/remote monitors, ticketing, etc)?

Thanks for getting this out.

  • +1

    Hi Drew,

    This plugin is self-contained and doesn't rely on any of the Previous Add-on Components.

    The New Sophos Central Plugin is largely about Visibility, Auto Deploy (Windows Only for Now), and Alerts (Read-Only Currently). You have the ability to enable Tamper Protection on computers, Run On-Demand Scans on Computers and Endpoint Uninstall if needed. Alerting is pulled directly from Sophos Central and not from the Connectwise Agent. Ticketing is something on the roadmap, but will probably be brought into Connectwise Manage instead of Automate.

    We definitely have more that we want to do to make the plug-in a quick and easy extension of Sophos Central. ERD, Threat Cases, Reporting, Logging, and other advanced features will remain in Sophos Central.

     

    Thanks,

    Steve

Unfiltered HTML