The Remote Agents module provides a secure way to connect a local Siemplify instance to remote sites. This provides MSSP and enterprise Security Operations Centers with a variety of capabilities:

  • Execute actions and playbooks on remote sites directly from Siemplify
  • Pulling alerts and security data from remote sites with remote connectors
  • Connect to separate networks to pull data for incident response purposes

The Remote Agents infrastructure for Cloud Users consists of 2 main components:

Siemplify Platform
Deployment of Siemplify platform to consolidate all security alerts in one place, and orchestrate security and network products with automated workflows.

Siemplify Agent
A remote agent deployed on the remote site. The agent pulls new tasks from Siemplify, executes locally (on the remote\separate network) and updates Siemplify with the results.
The agent is easily deployed and allows both enterprise and MSSP end customers to deploy it by themselves.
The agent can initiate communication with Siemplify to get new commands and to send new alerts and data.

Feedback

Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.

Post your comment on this topic.

Post Comment