This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
I
donโt
know if that is possible. I have 6 remote agents all going to different environments. Maybe if you had everything going to the same environment it would work. Again I
donโt
know your setup.
Interesting, depends how you are using environments. Each environment for me is a separate client as a MSSP, so not much use for us as we are using for specific client internal products. But interesting concept.
The main use case for configuring multiple environments for an agent is when you have multiple SOAR environments which need to have access to the same remote network.
For example - customers on environment A and B both need to communicate with on-premise SIEM product on the MSSP environment (environment C). In this case - you could use the same agent in multiple environments instead of deploying several agents on the same MSSP network for each one of the environments.
In terms of configuration, it's similar to configuring agent on 1 environment - create a new agent on Chronicle SOAR and choose all the relevant environments.
Important to mention that this capability is available only when creating a new agent (and not when editing an existing one)
LinkedIn
Twitter
