Integrate Orchestrate in CFTR
Orchestrate is a universal, security orchestration gateway for executing on-demand or event-triggered tasks across deployment environments at machine speeds. By integrating Orchestrate with CFTR, you can:
Access Orchestrate playbooks from the CFTR application.
Get related playbooks suggestion for incidents.
Run playbooks from the CFTR application.
Automatically execute playbooks when certain parameters of an incident match the parameters to run a playbook.
Before you Start
Before you can integrate Orchestrate in CFTR, you must generate authorization credentials for accessing the features of Orchestrate using APIs. For more information on how to generate the authorization credentials, see Generate Orchestrate Authorization Credentials.
To generate the authorization credentials, ensure that you have the Admin level access in the Orchestrate application.
Generate Orchestrate Authorization Credentials
To generate the authorization credentials:
Sign in to your Orchestrate application.
Go to Admin Panel > Open API.
On the top-right corner of the Open API page, click New.
On the New Open API page, update the API details:
API Title: Enter a title for the API configuration.
Expiration Date: Enter an expiration date for the API configuration.
Bot User: Select a user from the drop-down list to assign the API credentials to a Bot User.
Status: Select the status of API configuration as Active.
Click Create.
After the API configuration is created successfully, the authorization credentials appear. Click the Download Keys button to download the credentials in .csv format.
Note
Cyware recommends you to download the credentials as the Secret Key and Access ID values cannot be viewed or downloaded later.
Configure Orchestrate API Credentials in CFTR
Perform the following steps to configure Orchestrate integration in your CFTR application.
On the CFTR application, go to Admin Panel > Configurations > Orchestrate Integration.
On the Orchestrate Integration page, click Edit.
Use the Orchestrate API configuration credentials and update the authorization credentials.
Click Save.
To test the connectivity of Orchestrate application, on the top-right corner, click Test Connectivity.