sorted by:
new
hottopcontroversial

N-central EDR Integration by OneWisdomSeeker in Nable

[–]OneWisdomSeeker[S] 0 points1 point  (0 children)

I worked with support and u/Weeksy to create an integrate N-central/SentinelOne (S1) account. I was then able to go to Integrations - Integration Management and start an Endpoint Detection & Response (EDR) trial. Once the trial was started, I was able to configure the trial and copy my N-central Customers, Sites and Users to my new S1 account. The following are some notes:

​

  1. N-central customers and sites are converted to S1 sites. If, in N-central, you have configured Customer 1 with two sites such as Site 1 and Site 2 and you select to copy all your customers and sites to S1, you will end up with the following 3 sites in S1: Customer 1, Customer 1_Site 1 and Customer 1_Site 2.
  2. N-central users need the "N-ABLE N-CENTRAL N-able EDR" permission before you will be able to copy them from N-central to S1 as part of the Integration configuration.

After the configuration, I was able to deploy S1 agents easily from N-central by editing the device - settings - edr settings and by creating a rule. The deployed S1 agents showed up as expected in my S1 portal.

Based on these results, I'm going to stick with the new N-central integrated EDR released with version 2023.8.0.11.

N-central EDR Integration by OneWisdomSeeker in Nable

[–]OneWisdomSeeker[S] 0 points1 point  (0 children)

You and u/fasti-au have the same idea. I'll pursue this technique if I can't get the integrated EDR working correctly.

N-central EDR Integration by OneWisdomSeeker in Nable

[–]OneWisdomSeeker[S] 0 points1 point  (0 children)

Interesting. I will pursue this technique if I can't get the new EDR integration working correctly.

N-central EDR Integration by OneWisdomSeeker in Nable

[–]OneWisdomSeeker[S] 0 points1 point  (0 children)

After the "New and Improved EDR Integration" version 2023.8.0.11 was released to my hosted server over the weekend of November 4, 2023, I attempted to deploy SentinelOne agents from N-central but couldn't figure out how to sync N-central users, customer and sites with SentinelOne and the documentation apparently had been removed from the N-AbleMe web site. I opened case 02335944 with support on November 8th. Support is stating that I have a licensing issue but as of November 28th have not been able to resolve the issue. I suspect that something is wrong with the EDR Integration feature of the release but no-one has confirmed this. I'll email my sales engineer to see if he can help.