17.4 Integrator Manager

Integrators are plug-ins that can be used in Sentinel Rapid Deployment to extend the features and functionality of Sentinel remediation actions. The Sentinel system is loaded with several Integrators by default, but you can download updates and additional Integrators from the Sentinel Plug-in Web site.

Integrators allow Sentinel to connect to other external systems, for example, an LDAP server, SMTP server, or SOAP server. JavaScript actions can use Integrators to interact with other systems. For example, you can set the attribute in Novell eDirectory (an LDAP server) to enable or disable a user, edit details and so on. You could also start an Identity Manager workflow, such as a provisioning request, by using SOAP calls.

The general process for using an Integrator to perform remediation actions includes the following steps:

  1. Determine the best type of Integrator to access the external system with which you want to interact.

  2. Import and configure the appropriate Integrator to connect to the external system.

  3. Write a JavaScript action to be executed through the Integrator. This script makes calls to methods specific to the Integrator in order to execute actions on the external system.

  4. Import and configure the JavaScript action by using the Action Manager.

  5. Perform additional configuration, if desired, to associate the action with a deployed correlation rule or an event menu action.

  6. Execute the action when a correlation rule fires, manually by a user from the event menu, or from the Execute Incident Action menu in an incident.

For more information on specific Integrators, see the documentation that is available with the Integrators. You can download the updated Integrators from the Sentinel documentation Web site. Alternatively, you can view the Integrators documentation by clicking the Help button in Integrator Manager after configuring the Integrator.

17.4.1 Permissions for Using Integrators

To use the Integrator Manager, a user must be assigned the necessary permissions in the User Manager. By default these permissions are not assigned to the users.

  1. Log in to the Sentinel Control Center as a user with permissions to use the User Manager.

  2. Go to the Admin tab.

  3. Open the User Configuration folder.

  4. Open the User Manager window. Double-click User. The User Details window displays.

  5. Click the Permissions tab.

  6. Select View Integrators, Manage Integrators, Manage Integrator Plugins, or Integrators (which automatically selects all child permissions).

    The new permissions are applied the next time the user logs in. For more information, see Sentinel 6.1 Rapid Deployment Control Center User Permissions in the Sentinel 6.1 Rapid Deployment Reference Guide.