SuperOps Integration
Overview
Scan results are sent as tickets to SuperOps, with options for Company syncing to inform teams of scan alerts/results.
The SuperOps integration has 2 main integration advantages.
Company Syncing - keep your companies synced between ConnectSecure and SuperOps. You can import directly from SuperOps or map an existing ConnectSecure company to a SuperOps company. This ensures any alerts/tickets raised are going to the correct company. This does not require that you or Create Ticket options.
Create Ticket - enable ticketing integration using your defined Event Set and Integration Profile settings. This is optional and is not required to use Company Syncing options.
Getting Started
Click on Overview > Integrations > SuperOps to configure the integration.
Setup
Under the SuperOps click Click on Home and Select Settings here we will get the Details about the API key.
Click on API Token and Generate API Token.
Credentials
Complete the required fields and tap Update to continue:
Name: Give the integration creds a name of your choice.
API Key: Copy the APIKey From SuperOps portal.
Domain: Enter your SuperOps domain.
Associated Company: Leave this blank to use for all companies.
Event Set
This is where you tell the integration what events should generate an alert. Tap the Add button to view and add your desired event sets.
Here a set of Events is to be set to get notified on. Those events are categorized under Agent, Company, Asset, Ports, Remediation, Vulnerability, Azure error, AD Audit, Azure AD Audit, Unquoted Service Path, Reports & Patch.
Enter the Event Name and select the category of an Event as required.
Here a set of Events is to be set to get notified on. Those events are categorized under Agent, Company, Asset, Ports, Remediation, and AD Audit.
Enter the Event Name and select the category of an Event as required.
e.g. Asset category has below-listed alerts and selection of all or any is allowed.
The Ports category, has the below-listed alerts, and the selection of all or anyone is allowed.
For the Remediation category, selection of any one of the listed, Remediation by Company OR Remediation by Assets OR Remediation by Product, Remediation by Asset and Product is allowed.
To Enable Tickets for Remediations based on EPSS, one of the below-listed events is to be selected from the Remediation Group and then select an event from Remediation Filters.
Enable Remediation for Critical and High Severity can enabled as additional Remediation Filters.
For the Vulnerability & Azure error category, the below-listed alert, and selection is allowed.
For the AD Audit category, the below-listed alerts are available and selection of all or any is allowed. (Make sure to select the needed as it will create tickets based on the events).
For the Azure AD Audit and Unquoted service path category, the below-listed alert, and selection is allowed.
For the Reports, the below-listed alerts and selections are allowed.
Choose the listed events to set up CyberCNS Alerting as required.
Choose the Vulnerability alerting events that should be notified on selected channels.
Once the above details are provided, click on Save.
There is an option to Edit, Delete, Map Event Set and Set as default for the Notification Rules using the Action column. The listed Notification Rule can be edited and deleted as needed.
To confirm the Set as a default action, select Yes or No in the confirmation dialogue box.
Once the event is set to default, under Is Default column the status can be seen.
Integration Profile
Users will be able to set notification rules from integrations right away for conditions listed under it.
Under the Integration Profile, click on +Add to add the Integration Rule.
Enter the Name, Select the credential, and fill out all of the required fields in the Integration Parameters.
Once the below details are provided, click on Save.
There is an option to Edit, Delete, and Set as default under the Integration Rules using the Action column. The listed Integration Rule can be edited or deleted as needed.
To confirm the Set as a default action, select Yes or No in the confirmation dialogue box.
Manage Company Mapping
Click on Manage Company Mapping.
Choose SuperOps Credentials from the dropdown and click on + Add to add Integration Mapping.
In New Company Mapping, choose the SuperOps Credential which is listed. (These are to be added under the Credentials section for SuperOps).
One of these two options could be selected
Import Companies from SuperOps:- To import multiple companies listed under SuperOps to CyberCNS at a time.
Map Existing Company to a SuperOps company:- To map an existing company in CyberCNS to the existing company under SuperOps company.
To import multiple companies from SuperOps, choose Import Companies from SuperOps, and click on Next.
As per the below image, the company can be searched using the search option given.
The Page Size shows the rows per page that can be displayed for search results and the Page shows the number of pages that can be displayed for a search result.
Click on Get Companies to show the list of the companies as requested in the search column.
Once searched as per the choice or the requirement it displays the search result in the Select Companies dropdown.
In case you want to manually search the company, you can simply click on the drop-down of SuperOps Companies and it will list all companies available under SuperOps.
Once the company is selected, it shows as an additional entry below. It can be deleted or click on Next to proceed further.
when the companies are imported, the names will be created with the selected company name and site_id, which refers to site numbers.
Click on the checkbox to enable Create Ticket. This is create a ticket with PSA for selected events.
From the dropdown select the event set and Integrate Profile and click on button to add the event set and integration profile.
Once the Event Set, Integration profile is selected click on ‘Add' to select the company and click on Next.
Now click on Finish to import all the selected Halo PSA companies. This completes importing companies from SuperOps.
Click on +Add and select Map Existing Company to SuperOps to add map existing company and click on Next.
As shown in the below image, select the Local company( CyberCNS) and HaloPSA company by using a dropdown or with the search bar as per the requirement so it will map the companies accordingly.
when the companies are imported, the names will be created with the selected company name and site_id, which refers to site numbers.
Click on the checkbox to enable Create Ticket.
From the dropdown select the event set and Integrate Profile and click on button to add the event set and integration profile.
Once the company is selected click on ‘Add' to select the company.
Once all the fields are provided, click on Finish.
Selected companies are shown in the image below, along with details such as Existing Company Name, Company Name, and Mapped Date.
Here click on Copy Settings to Copy the company mapping settings to other company mappings.
To copy settings, select the desired company mappings and click on Update. This will copy the event set, integration profile, and ticket creation fields from the source company mapping to the selected target company mapping.
Using the Action column, you can edit and delete the integration mapping. Any mapping can be removed if necessary.
This completes the documentation of SuperOps Integration.