Good day All

We have recently moved to CP4S and I am looking at integrating SEP into CP4S to allow us to quarantine and remediate endpoints from CP4S.

I have looked at the Documentation on the the App Exchange portal but it is not very helpful for the Configs. 

I would appreciate it if someone can guide me with this.

Regards

Hi, going to this path is working on integration automation in the case management (SOAR) of CP4S.

1) you should have a SOAR license associated with CP4S 

2) Download the SEP integration from IBM App Exchange https://exchange.xforce.ibmcloud.com/hub/extension/0e21239d8e6823054749d2f51d57c701

3) read the documentation associated to understand how to configure et app.config and connect to you SEP.

4) install an Edge Gateway (vm/ova/BYORH) in a place that have access to SEP server

5) deploy the integration and validate the connection

6) use default OOTB playbooks/workflow example to start and learn to create your own.

Note: there is SOAR training offered on the event page of this community (last one is currently deliver this week) where all this is explained. Stay tune to new training published there.

Also you can search in security learning academy to see how to deploy integrations

https://www.securitylearningacademy.com/local/navigator/index.php?search=Integration+&level=inir01