Configure ConnectWise to integrate with Arctic Wolf

You can configure ConnectWise® to synchronize incident tickets with Arctic Wolf®.

Note:

As of July 31, 2023, Arctic Wolf supports a bidirectional ConnectWise integration that syncs ticket creation and updates between Arctic Wolf and your ConnectWise environment. We recommend that all customers with legacy integrations configured before this date migrate to the new integration.

The new integration uses credentials associated with a custom ConnectWise API member Role ID, instead of an administrator role. For more information about the custom Role ID permissions, see Create a security role.

There are no additional costs associated with the new integration.

These resources are required:
  • A ConnectWise account with administrator permissions
  • ConnectWise version 2022.1 or higher
These actions are required:
  • If you have a self-hosted ConnectWise instance, add the Arctic Wolf IP ranges to your allowlist.

    To see the IP addresses that you must allowlist, sign in to the Arctic Wolf Unified Portal, click Resources > Allowlist Requirements, and then view the IP addresses in the section for your product.

Note:

If you use old hardware or software to host your ConnectWise® instance, you might be blocked from integrating your ConnectWise environment with Arctic Wolf. The Arctic Wolf IT service management (ITSM) integration uses a callback mechanism to a self-hosted Arctic Wolf URL. This webhook is secured by Arctic Wolf and requires that your TLS ciphers are up to date, following ELBSecurityPolicy-TLS13-1-2-2021-06 from AWS.

TLS protocols:

  • Protocol-TLSv1.2
  • Protocol-TLSv1.3

TLS ciphers:

  • TLS-AES-128-GCM-SHA256
  • TLS-AES-256-GCM-SHA384
  • TLS-CHACHAZO-POLY1305-SHA256
  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES128-SHA256
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-AES256-SHA384
  • ECDHE-RSA-AES256-SHA384

Create a security role

  1. Sign in to your ConnectWise instance.
  2. In the navigation menu, click System > Security Roles.
  3. Click New Item.
  4. In the Role ID field, enter a name for the new role.
  5. Click Save.
  6. On the Security Roles page, click the new role.

    The Security Modules page opens.

  7. Click System
  8. For Table Setup, click Customize.

    The Update Security dialog opens.

  9. In the Allow Access to these section, make sure that these permissions are listed:
    • Company / Company Statuses
    • Company / Company Type
    • Service / Priority
    • Service / ServiceBoard
    Note: If any of these permissions are listed in the Disallow Access to these section, select the permission name, and then click <.
  10. Click Save.

    The Update Security dialog closes.

  11. Configure these settings:

    Category

    Permission name

    Add Level

    Edit Level

    Delete Level

    Inquire Level

    Companies

    Company Maintenance

    None

    None

    None

    All

    Companies

    Manage Attachments

    All

    None

    None

    All

    Service Desk

    Close Service Tickets

    All

    All

    None

    All

    Service Desk

    Service Ticket - Dependencies

    All

    All

    None

    All

    Service Desk

    Service Tickets

    All

    All

    None

    All

    System

    Table Setup

    None

    None

    None

    All

  12. Click Save.

Select a service board

All tickets that are synced to Arctic Wolf must use the same ConnectWise service board. If you want to use an existing service board for the integration, proceed to Select a status for synchronizing with Arctic Wolf.

  1. In the navigation menu, click System > Setup Tables > Search.
  2. In the search bar, enter Service Board.
  3. In the Table column, select Service Board.

    The Service Board List page opens.

  4. Click New Item.
  5. Configure the required fields, and then click Save.

Select a status for synchronizing with Arctic Wolf

The status field marks a ConnectWise ticket for Arctic Wolf. Any tickets that are saved with the selected status will start to synchronize with Arctic Wolf. After the synchronization starts, changing the status does not affect the synchronization.

If you want to use an existing status, proceed to Generate API keys.

  1. On the Service Board List page, select the board you created in Select a service board.
  2. Click the Statuses tab.
  3. Click New Item, and then configure these settings:
    • Status Description — Enter a descriptive name for the status. For example, Notify Arctic Wolf.
    • Configure the remaining required fields.
  4. Click Save.

Generate API keys

  1. In the navigation menu, click System > Members.
  2. Click the API Members tab.
  3. Click New Item, and then configure these settings:
  4. Click Save.
  5. Click the API Keys tab.
  6. Click New Item.
  7. Enter a description for the API key.
  8. Click Save.

    Public and private keys are generated for the new API member.

  9. Copy the keys, and then save them in a safe, encrypted location. You will provide them to Arctic Wolf later.
    Note: You cannot access the private key after you leave this page.

View Company ID

  1. In the navigation menu, click Companies > Companies.
  2. On the Company listing page, copy the Company ID and save it in a safe, encrypted location. You will provide it to Arctic Wolf later.

Configure your ConnectWise ticketing integration

Note: If you are an MSP, only submit your credentials for the parent company hosting the ConnectWise PSA or Manage tenant.
  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Organization Profile > Integrations.
  3. Click the ITSM tab.
  4. Click ConnectWise.
    Note: You can change your integration at any time, for example, to ServiceNow. In the Integration Type section, click Change Integration, and then in the Change Integration window, click Remove Integration. Your ITSM integration settings are removed and you can select a different integration option.
  5. In the Account Information section:
    • ConnectWise URL — Enter the absolute URL that you use to access your ConnectWise instance, using the format https://example.connectwise.com.
    • ConnectWise Identifier — Enter the company identifier that you entered on the ConnectWise sign in page. This is usually a string of alphanumeric characters.
    • ConnectWise Public Key — Enter the public key from the API member you created in Generate API keys.
    • ConnectWise Private Key — Enter the private key from the API member you created in Generate API keys.
  6. Click Validate Connections.
  7. After receiving a "Validation Success" confirmation message, click Next: Sync Settings.
  8. In the Sync Settings section:
  9. In the Status for Ticket Routing section:
    1. ConnectWise Status for Arctic Wolf Ticket Routing — Select the ConnectWise ticket status that you will use to route tickets to Arctic Wolf.
    2. Optional: ConnectWise Unlinked Status — Select the ConnectWise ticket status that you will use to stop syncing tickets with Arctic Wolf.
      The ConnectWise status you select for ConnectWise Unlinked Status cannot be used for ticket routing or status mapping.
      Note: When a ticket is unlinked, Arctic Wolf can no longer update the ticket. Unlinked tickets cannot be synced again.
  10. Optional: In the Source section, in the ConnectWise Source list, select a source.
    Tickets that Arctic Wolf creates will be marked as originating from this source.
  11. In the Priority Mapping section, for each Arctic Wolf priority level, select a corresponding ConnectWise ticket priority level.
  12. In the Status Mapping section:
    • Solved — Select the ConnectWise ticket status that Arctic Wolf should use to mark a ticket as resolved.
    • Unresolved — Select the ConnectWise ticket status that Arctic Wolf should use to mark a ticket that gets reopened after it is marked as Solved.

  13. In the Default Note Preferences section:
    • Note Type Used by Arctic Wolf — Select the ConnectWise note type that replies from Arctic Wolf will have.
    • Note Type Sent to Arctic Wolf — Select the ConnectWise note type that will be synced to Arctic Wolf. Note types not selected here will be ignored.

  14. Click Next: Callback Installation.
  15. Click Save New Integration.

Complete the ConnectWise integration process

Complete the appropriate task:

Enable synchronization

  1. In the Unified Portal, toggle Sync Enabled on.
  2. Click Request Sync Test.
    The Sync Test dialog appears.
  3. Select a recipient.
    Tip: The list of recipients are the contacts in your contact directory. For more information, see User permissions.
  4. Click Start Sync Test.
    The Arctic Wolf server checks for integration errors.

Synchronize tenants for ConnectWise

In the Unified Portal, after you configure your ConnectWise integration, the organizations you manage in ConnectWise appear in the Customer List section. To complete your ConnectWise integration, you must synchronize at least one tenant.

Note: This tasks is for MSPs.
  1. In the Customer List section, for each organization, enter the corresponding ConnectWise company ID.
  2. Optional: For one or more organizations, override the Default Note Preferences settings that you configured in Configure your ConnectWise ticketing integration:
    • Note Type Used by Arctic Wolf — If desired, change the Default value.
    • Note Types Sent to Arctic Wolf — If desired, change the Default list.
  3. Under Actions, click Save.
  4. Toggle Sync Enabled on for at least one customer.
    The Sync Test dialog opens the first time that you toggle this on.
  5. Repeat these steps to enable synchronization for each organization:
    1. Under Actions, click > Request Sync Test.
      The Sync Test dialog appears.
    2. Select a recipient.
    3. To complete your ConnectWise integration, click Start Sync Test.
      The Arctic Wolf server checks for integration errors.