ConnectWise Configuration
Updated Mar 14, 2024Configure ConnectWise to integrate with Arctic Wolf
You can configure ConnectWise® to synchronize incident tickets with Arctic Wolf®.
Note: As of July 31, 2023, Arctic Wolf supports a bidirectional ConnectWise integration that syncs ticket creation and updates between Arctic Wolf and your ConnectWise environment. We recommend that all customers with legacy integrations configured before this date migrate to the new integration.
The new integration uses credentials associated with a custom ConnectWise API member Role ID, instead of an administrator role. For more information about the custom Role ID permissions, see Step 1: Create a security role.
There are no additional costs associated with the new integration.
Requirements
- A ConnectWise account with administrator permissions
- ConnectWise version 2022.1 or higher
Before you begin
- If you have a self-hosted ConnectWise instance, add the Arctic Wolf IP ranges to your allowlist. To see the IP addresses that you must allowlist, sign in to the Arctic Wolf Unified Portal, click > Allowlist Requirements, and then view the IP addresses in the section for your product.
Note: If you use old hardware or software to host your ConnectWise® instance, you may be blocked from integrating your ConnectWise environment with Arctic Wolf®. The Arctic Wolf IT service management (ITSM) integration uses a callback mechanism to a self-hosted Arctic Wolf URL. This webhook is secured by Arctic Wolf and requires that your TLS ciphers are up to date, following ELBSecurityPolicy-TLS13-1-2-2021-06
from AWS.
TLS protocols:
Protocol-TLSv1.2
Protocol-TLSv1.3
TLS ciphers:
TLS-AES-128-GCM-SHA256
TLS-AES-256-GCM-SHA384
TLS-CHACHAZO-POLY1305-SHA256
ECDHE-ECDSA-AES128-GCM-SHA256
ECDHE-RSA-AES128-GCM-SHA256
ECDHE-ECDSA-AES128-SHA256
ECDHE-RSA-AES128-SHA256
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-RSA-AES256-GCM-SHA384
ECDHE-ECDSA-AES256-SHA384
ECDHE-RSA-AES256-SHA384
Steps
- Create a security role.
- Select a service board.
- Select a status for synchronizing with Arctic Wolf.
- Generate API keys.
- View Company ID.
- Provide credentials to Arctic Wolf.
- Provide integration information to Arctic Wolf.
Step 1: Create a security role
-
Sign in to your ConnectWise instance.
-
In the navigation menu, click System > Security Roles.
-
Click New Item.
-
In the Role ID field, enter a name for the new role.
-
Click Save.
-
On the Security Roles page, click the new role.
The Security Modules page opens.
-
Click System
-
For Table Setup, click Customize.
The Update Security dialog opens.
-
In the Allow Access to these section, make sure that these permissions are listed:
- Company / Company Statuses
- Company / Company Type
- Service / Priority
- Service / ServiceBoard
Note: If any of these permissions are listed in the Disallow Access to these section, select the permission name, and then click <.
-
Click Save.
The Update Security dialog closes.
-
Configure these settings:
Category Permission name Add Level Edit Level Delete Level Inquire Level Companies Company Maintenance None None None All Companies Manage Attachments All None None All Service Desk Close Service Tickets All All None All Service Desk Service Ticket - Dependencies All All None All Service Desk Service Tickets All All None All System Table Setup None None None All -
Click Save.
Step 2: Select a service board
All tickets that are synced to Arctic Wolf must use the same ConnectWise service board. If you want to use an existing service board for the integration, proceed to Select a status for syncing with Arctic Wolf.
-
In the navigation menu, click System > Setup Tables > Search.
-
In the search bar, enter
Service Board
. -
In the Table column, select Service Board.
The Service Board List page opens.
-
Click New Item.
-
Configure the required fields, and then click Save.
Step 3: Select a status for synchronizing with Arctic Wolf
The status field marks a ConnectWise ticket for Arctic Wolf. Any tickets that are saved with the selected status will start to synchronize with Arctic Wolf. After the synchronization starts, changing the status does not affect the synchronization.
If you want to use an existing status, proceed to Generate API keys.
- On the Service Board List page, select the board you created in Select a service board.
- Click the Statuses tab.
- Click New Item, and then configure these settings:
- Status Description — Enter a descriptive name for the status. For example,
Notify Arctic Wolf
. - Configure the remaining required fields.
- Status Description — Enter a descriptive name for the status. For example,
- Click Save.
Step 4: Generate API keys
-
In the navigation menu, click System > Members.
-
Click the API Members tab.
-
Click New Item, and then configure these settings:
- Role ID — Select the role you created in Create a security role.
- Default Board — Select the board you created in Select a service board.
- Configure the remaining required fields.
-
Click Save.
-
Click the API Keys tab.
-
Click New Item.
-
Enter a description for the API key.
-
Click Save.
Public and private keys are generated for the new API member.
-
Copy the keys, and then save them in a safe, encrypted location. You will provide them to Arctic Wolf later.
Note: You cannot access the private key after you leave this page.
Step 5: View Company ID
- In the navigation menu, click Companies > Companies.
- On the Company listing page, copy the Company ID and save it in a safe, encrypted location. You will provide it to Arctic Wolf later.
Step 6: Provide credentials to Arctic Wolf
Note: If you are an MSP, only submit your credentials for the parent company hosting the ConnectWise PSA or Manage tenant.
-
Sign in to the Arctic Wolf Unified Portal.
-
Click Telemetry Management > Connected Accounts.
-
Click Add Account +.
-
On the Add Account page, in the Account Type list, select ITSM Ticketing Integration.
-
In the Cloud Service list, click ITSM ConnectWise Account.
-
On the Add Account page, in the Select a Cloud service section, configure these settings:
- Account Type — Select ITSM Ticketing Integration.
- Search Services — Select ITSM ConnectWise Account.
-
In the Add account information section, configure these settings:
-
Account Name — Enter a unique and descriptive name for the account.
-
ConnectWise URL — Enter the absolute URL that you use to access your ConnectWise instance, using the format
https://example.connectwise.com
. -
Company Identifier — Enter the company identifier that you entered on the ConnectWise sign in page. This is usually a string of alphanumeric characters.
-
ConnectWise Public Key — Enter the public key from the API member you created in Generate API keys.
-
ConnectWise Private Key — Enter the private key from the API member you created in Generate API keys.
-
Credential Expiry — (Optional) Enter the credential expiration date, if applicable.
-
-
Click Test and submit credentials.
Step 7: Provide integration information to Arctic Wolf
- Contact your Concierge Security® Team (CST) at security@arcticwolf.com through your usual ticketing workflow, and include this integration information:
- ConnectWise board — The service board you created in Select a service board.
- ConnectWise status — The status you created in Select a status for syncing with Arctic Wolf.
- ConnectWise note types — Both the ConnectWise note type you want to use when replying to an Arctic Wolf ticket, and the note type that you want Arctic Wolf replies marked as. Select from these options:
- Discussion
- Internal
- Resolution
- Priority mappings — The priority levels in your ConnectWise instance that correspond to low, medium, high, and urgent priority tickets from Arctic Wolf.
- Closure state — The ConnectWise ticket state that Arctic Wolf should use to mark a ticket as resolved.
- Re-opening state — The ConnectWise ticket state that Arctic Wolf should use to mark a ticket as unresolved or re-opened.
- ConnectWise company ID — The value you created in View Company ID.