Email Integration
CyberCNS supports integrations for different purposes. Email Integration being one of them helps to send outbound emails for notification purposes.
Select Integration
This section helps to set up Email Integration for CyberCNS.
This screen is likely to change as we go on adding more integrations.
Navigate to Global Settings() > Integrations and choose Email from the integrations listed here.
It will lead to “Add credentials” for your Email Instance. Provide details as requested.
Input Email Credentials as requested. Credential Name, SMTP Host, SMTP Port, SMTP Username, SMTP Password, From Address, & Test Address details are required to configure successfully.
Enter Credentials
Enter Credential Name: Choose a name of your choice for the set of credentials to be added.
Enter SMTP Host: Enter an SMTP Host for the credentials to be added.
Enter SMTP Port: Enter an SMTP Port for the credentials to be added.
Enter SMTP Username: Enter an SMTP Username for the credentials to be added.
Enter SMTP Password: Enter an SMTP Password for the credentials to be added.
Enter From Address: Enter an email address for the email to be sent from.
Enter Test Address: Enter an email address to test the email address to be checked.
Select Company: To map these credentials to the company, please select Associated Company from the dropdown.
SSL and TLS status:-
How do I set up an SSL & TLS email?
To get your IMAP Server: Log in to your Panel >> Email Accounts >> Select More from the Actions on any E-Mail account >> Configure Email Account >> Browse down to Manual Settings >> Secure SSL/TLS Settings (Recommended) >> Incoming Server: This is the information you are looking for.
Once all the below details are provided, SAVE the data. Likewise, can add multiple credentials in this section using the '+' sign.
When the credentials are added, an option to add the default template is seen.
Instead of selecting each time for ticket creation in the integration action, we can add a default template here for a particular integration.
In the Default template, Enter the Email IDs, the email address that the email is to send from, and send a reply to the Email.
Click on Save once all the fields are provided.
The next step is to map local companies in CyberCNS to Email Integration companies corresponding to the selected domain.
Company Mapping
Multiple companies can be mapped using company mapping.
In Company Mapping events for alerting are to be set by using Event Set, Integration Profile, and Manage Company Mapping.
Under the Event Set, click on +Add to add the Alert Rule.
Here a set of Events can be set to get notified for. Those events are categorized as Agent, Company, Asset, Ports, Remediation, and AD Audit. Every category will have certain events which can be set.
Enter the Event Name and select the category and an Event/s as required.
Every Category has a set of events/alerts under them which can be selected as per the requirement.
e.g. Asset category has below-listed alerts and selection of all or any is allowed.
For the Ports category, has the below-listed alerts, and the selection of all or anyone is allowed.
For Remediation notifications via email, MS Teams, Slack, OR PSA integrations, any of the below can be selected. Any of the below is used for grouping of action items listed under the remediation plan.
To list all the remediations for a company into one ticket OR one email or one message.
Remediation by Company
OR
To list all the remediations for an asset into one ticket OR one email or one message.
Remediation by Assets
OR
To list all the remediations for a product into one ticket OR one email or one message.
Remediation by Product
OR
To list all the remediations for a product but grouped by a fix into one ticket OR one email or one message.
Remediation By Product(grouped by a fix)
OR
To create a ticket OR an email or a message for every remediation
Remediation By Asset, Company And Product.
To Enable Tickets for Remediations based on EPSS, one of the below-listed events is to be selected from the Remediation Group.
Enable Tickets for Critical and High severity Remediations
Enable Tickets for Remediations with EPSS greater than 0.95
Enable Tickets for Remediations with EPSS greater than 0.90
Enable Tickets for Remediations with EPSS greater than 0.85
Enable Tickets for Remediations with EPSS greater than 0.50
Based on the above selection of any one criteria, the remediation items will be grouped.
For the Vulnerability & Azure error category, the below-listed alert, and selection is allowed.
For the AD Audit category, the below-listed alerts are available and selection of all or any is allowed. (Make sure to select the needed as it will create tickets based on the events)
For the Azure AD Audit & Unquoted service path, the below-listed alerts and selections are allowed.
For the Reports, the below-listed alerts and selections are allowed.
Choose the listed events to set up CyberCNS Alerting as required.
Choose the Vulnerability alerting events that should be notified on selected channels.
Once the above details are selected, click on Save.
There is an option to Edit, Delete, and set as default for the Alert Rules using the Action column. The listed Alert Rule can be edited and deleted if needed.
For setting the created Event as default, select the option Set as Default.
To confirm the Set as a default action, select Yes or No in the confirmation dialogue box.
Once the event is set to default, under Is Default column, the status Yes can be seen.
Integration Profile
Under the Integration Profile, click on +Add to add the Integration Rule.
Enter the Name, Select the credential, and fill out all of the required fields in the Integration Parameters.
Once the below details are provided, click on Save.
There is an option to Edit, Delete and Set as default under the Integration Rules using the Action column. The listed Integration Rule can be edited and deleted if needed.
For setting the newly created Event as the default, select the option Set as Default.
To confirm the Set as default, select Yes or No in the confirmation dialogue box.
Manage Company Mapping
Click on Manage Company Mapping.
Choose Email Credentials from the dropdown and click on + Add to add Integration Mapping for specific companies.
In New Company Mapping, choose the Email Credential which is listed. (These are to be added under the Integration> Credentials section for Email).
In case the local company is already created in CyberCNS and is to be mapped with ConnectWise company, then select Map Existing Company to Email company and click on Next.
As shown in the below image, select the Local company( CyberCNS) by using a dropdown or with the search bar as per the requirement so it will map the companies accordingly.
Please choose/select the Create Email Alert Creation option only if no notifications are required using this integration and click Add.
Once the Email alerts are enabled, select the Event Set, and the Integration Profile, and click on '+' to add the record.
Delete the Integration profile in case not required using the bin icon as shown below.
Click on Add to see all the details of the selected fields and click on Finish.
Once all the fields are provided, Click on Finish to map all the selected Email companies.
Delete the company record in case not required using the bin icon as shown below.
Selected companies are shown in the image below, along with details such as Existing Company Name, Company Name, Event Set, Integration Profile, Pause Ticket Creation, and Mapped Date.
Here click on Copy Settings to Copy the company mapping settings to other company mappings.
To copy the selected settings, select the desired company mappings and click on Update. This will copy the event set, integration profile, and ticket creation fields from the source company mapping to the selected target company mappings.
Using the Action column can edit or delete the integration mapping. Any mapping can be edited or deleted, whenever necessary.
This completes the documentation of Email Integration.