Ask the Community
Groups
Set Up Antivirus-RocketCyber Map - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="want-your-av-results-to-automatically-go-to-the-right-customer-find-out-how">Want your AV results to automatically go to the right customer? Find out how</h2> <p>This setup will allow you to route all <em>future</em> AV results to the correct customer automatically. This will not change existing results. If you have a different AV for each customer or are happy to have all results go to a single RocketCyber customer account, then this is not necessary.</p> <p>Set this up <strong><em>BEFORE</em></strong> configuring an AntiVirus (AV) app to ensure that all AV detections are routed to the appropriate customer.</p> <ol><li>Go into your AV dashboard. You will need a unique identifier to tie to your RocketCyber customer account. <ol><li>In <strong>SentinelOne</strong>, this could be a Site Name, Site ID, or Agent Domain <ol><li>Site Name can be found under the <strong>Sentinels</strong> menu<img src="https://us.v-cdn.net/6032361/uploads/migrated/IIQL5ZCYT60C/sentinelone1.png" alt="sentinelone1.png" class="embedImage-img importedEmbed-img"></img></li> </ol></li> <li>For <strong>Webroot</strong>, this <em>must be</em> the site keycode <ol><li>Go to <strong>Sites<img src="https://us.v-cdn.net/6032361/uploads/migrated/Z50ZCLCY8B4K/webroot1.png" alt="webroot1.png" class="embedImage-img importedEmbed-img"></img></strong> </li> <li>Click on <strong>View</strong> next to a specific site</li> <li> <strong>Keycode </strong>can be seen either under the <strong>Details</strong> menu or under <strong>Downloads</strong> (the picture below is in downloads)<img src="https://us.v-cdn.net/6032361/uploads/migrated/VR76DK2ZEAL7/webroot2.png" alt="webroot2.png" class="embedImage-img importedEmbed-img"></img></li> </ol></li> </ol></li> <li>Go to the MSP level in RocketCyber, and attempt to configure an AV app. You will receive a warning that you should only do this if setting up an AV-RocketCyber map, and a link to do so. Click the <strong>Configure Customer Mapping</strong> link.<img src="https://us.v-cdn.net/6032361/uploads/migrated/DCKZYGXMDAZR/screen-shot-2020-07-14-at-2-39-57-pm.png" alt="Screen_Shot_2020-07-14_at_2.39.57_PM.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select whether you would like all AV detections to be routed to a single customer (Single Customer) or if you would like to enter information that will allow us to associate Antivirus detections and RocketCyber customers.<br><img src="https://us.v-cdn.net/6032361/uploads/migrated/5DU8WAD7UBAG/screen-shot-2020-07-14-at-2-38-58-pm.png" alt="Screen_Shot_2020-07-14_at_2.38.58_PM.png" class="embedImage-img importedEmbed-img"></img></li> <li>Select a customer (if you selected to use a single customer for all detections), or fill in the chart with the IDs you got in step 1. If you have a RocketCyber customer who does not use this Antivirus, leave that field blank.<img src="https://us.v-cdn.net/6032361/uploads/migrated/O5PMLE8SUQM6/screen-shot-2020-07-14-at-2-39-14-pm.png" alt="Screen_Shot_2020-07-14_at_2.39.14_PM.png" class="embedImage-img importedEmbed-img"></img></li> <li>Click<strong> Save</strong> </li> </ol><div data-hs-callout-type="tip"> <p><strong>TIPS</strong></p> <ol><li> <p>When first setting up this integration, check to ensure that all detections on your AV dashboard have been routed correctly. </p> </li> <li> <p>A typo in the unique ID can easily prevent detection from being associated with the correct customer, so use copy/paste</p> </li> </ol></div> </article> </main>