EgoSecure GmbH
            Help Center Knowledge Base EN Solutions General

            Setting up EgoSecure IntellAct to trigger Matrix42 Workspace Management workflows

            ID: 18111401
            Languages: EN, DE
            Components: Matrix42 Workspace Management, EgoSecure Server
            Operating System: Windows

            Task

            The integration of two systems - the Matrix42 Workspace Management system and the EgoSecure Server - allows to extend the administration options in your company. Via the central management tool of the EgoSecure Server -  the EgoSecure Management Console - you can create IntellAct tasks and then select the Trigger workflow option as an action to trigger the previously defined workflow in the Service Desk, once the conditions of an IntellAct client rule are met.

            Solution

            1. Connecting the EgoSecure Server and the Matrix 42 Server
            1. In the Matrix42 Workspace Management , navigate to Administration | Integration | Web Services Tokens and then click Generate Api Token .

            2. In the Name field, define the token name.
            3. In the Expires on drop-down menu, select Never .
            4. In the User field, specify a user for whom this token is assigned. With the help of this key the specified user can perform only the actions permitted within his rights in the system.  
            5. Click Generate API token .

            6. Copy the Api Token value.
            Copy the Api Token value now, as it will not be available later. 
            7. Open the EgoSecure Management Console and navigate to Administration | Server management | Mail, proxy and others .
            8. Scroll down to the Matrix42 Workspace Management server settings area.
            9. In the Server field, define the web address of the Matrix42 Workspace Management server .
            10. In the Token field, enter paste the Api Token value, created in the steps before.
            11. Click Save .

            2. Creating and preparing workflows for EgoSecure
            1. In the Matrix42 Workflow Studio, create a blank workflow. One workflow is created for one IntellAct event.
            2. Define the workflow properties and click Save .

            3. Under Repository, search for Create task and drag it after Start .

            4. In the View menu, click .
            ⇒The field for editing argument appears on the bottom.

            5. Add all arguments for an intellAct event manually. One argument is per one string. For details, see the list of argument for each event below in the table.
            Event
             List of arguments
             Access rights requests
            • EventID
            • User
            • Computer
            • EventData
            • Time
            • RequestedRights
            • Comments
            • Server

             Access denied (files)

            • EventID
            • DeviceClass
            • DeviceName
            • DeviceID
            • User
            • Computer
            • EventDate
            • Time
            • Path
            • Process
            • Access
            • Reason
            • Server
             Break-in attempt
             Not available in 13.3, will be added in next versions.
             AV: Threat found
            • Computer
            • EventDate
            • Time
            • EventID
            • Reason
            • Type
            • Status
            • Server
             AV: State changed
            • Computer
            • EventDate
            • Time
            • EventID
            • Status
            • Server
             Access denied (application)
            • EventID
            • Application
            • User
            • Computer
            • EventDate
            • Time
            • Reason
            • Server
             Suspicious activity
            • EventID
            • Computer
            • EventDate
            • Time
            • Event
            • Server
             AV: Signatures are outdated
            • EventID
            • Message
            • Computer
            • Server
             Avira: Threat found
             Not available in 13.3, will be added in next versions.
             Avira: State changed
             Not available in 13.3, will be added in next versions.


             




























            6. Add arguments to display them in a certain field of an incident, once an administrator receives it:
            a. Select the field and click .

            ⇒ The dialog for editing appears.
            b. Enter the text, which describes the argument and then click .

            ⇒ The Select Variable dialog appears.
            c. Select the argument and click OK to close the dialog.
            ⇒ The argument appears after a user-defined text in an orange box.
            d. Click OK to close the dialog and save the changes.
            7. Publish the workflow:
            a. In the Release & Publish area, click Validate.
            b. In the Document area, click Check In.
            c. In the Release & Publish area, click Release and then Publish.

            8. As soon as workflows for all IntellAct events are created, get the workflow IDs:

            a. Navigate to Administration | Services & Processes | Workflows | Manage Workflows.

            b. Select a registered workflow from the list. For details about creating and managing workflows, see Matrix42 help files - workflows .
            c. Click , select the XML radio button and then click Export .
            ⇒ The XML file opens in a new tab.
            d. In the XML file, search for the tag and copy the workflow ID.

            3. Setting up IntellAct rules for triggering workflows
            1. In the EgoSecure Management Console , create an IntellAct rule under Product settings | IntellAct | Rules - Client . For details about creating intellAct rules, see the EgoSecure Console Manual , chapter "Configuring IntellAct for computers".
            2. Under Actions , set the Trigger workflow check box and paste the ID you copied in step d . In 13.3 version of EgoSecure Data Protection, the Trigger workflow check box is available only for Rules - Client , in next releases, we plan to integrate this check box for the Rules - Custom area.

            3. Click Save .
            ⇒Once the conditions are met, the EgoSecure Server sends all information to the Matrix server and all information appears in the Service Desk under Incidents .



            Updated: 29 Nov 2018 01:34 PM
            Helpful?  
            Help us to make this article better
            0 0