MSP Sentry Integrates ConnectWise Manage and Sentinel One

What is MSP Sentry?

MSP Sentry is an independent integration service that automates ticketing in ConnectWise Manage PSA for Sentinel One incidents.

When a security incident occurs in Sentinel One that cannot be resolved without human intervention, a service ticket is created in Manage that contains details of the event and a direct link to open the Incident Page in the Sentinel One web interface. This capability eliminates the need for technicians and security analysts to manually open a browser, find the right scope, and then manually add filters to find the active threat.

Eliminating these steps from your response procedure significantly reduces time to recognition and resolution when time is supremely critical. At scale, you can cut hundreds or thousands of hours out of time to resolution for security incidents every year.

What does it do?

MSP Sentry automatically creates tickets for critical security threats. It also automatically creates configurations for your clients in Manage that contain their Site ID and Site Registration Token. With these pieces of information readily available, you can more easily automate deployment, monitoring, and response action.

Additionally, when your technicians and analysts respond to an incident in the Sentinel One web interface, classify the incident, and set the verdict as “Resolved,” MSP Sentry will complete the ticket in ConnectWise Manage.

Additional Features

MSP Sentry also has Powershell Modules and a NodeJS CLI tool that can be used to automate site and group creation, retrieve endpoint details, automate deployment and removal of agent software, and more.

These tools help your engineers customize your security stack to leverage Sentinel One and ConnectWise even further.