How to configure one remote agent for multiple environments?

I don’t know if that is possible. I have 6 remote agents all going to different environments. Maybe if you had everything going to the same environment it would work. Again I don’t know your setup.

@pigram86 its new feature one agent for multiple environments!

View files in slack

@Mohammad_Sulaim will share the process by EOD.

@shakedtal , that would be great, thanks in advance.

Interesting, depends how you are using environments. Each environment for me is a separate client as a MSSP, so not much use for us as we are using for specific client internal products. But interesting concept.

The main use case for configuring multiple environments for an agent is when you have multiple SOAR environments which need to have access to the same remote network.

For example - customers on environment A and B both need to communicate with on-premise SIEM product on the MSSP environment (environment C). In this case - you could use the same agent in multiple environments instead of deploying several agents on the same MSSP network for each one of the environments.

In terms of configuration, it's similar to configuring agent on 1 environment - create a new agent on Chronicle SOAR and choose all the relevant environments.

Important to mention that this capability is available only when creating a new agent (and not when editing an existing one)

I get it for the cases where TLS and encryption is not enough.

@shakedtal hi, when creating new agent, it does not allow to select multiple environments. just allow to select one only.

cant select multiple environments. :(

View files in slack

@Mohammad_Sulaim apologies for the late reply. Can you please let me know which version you have in the SOAR platform?

@shakedtal License Type: Cloud, System Version: 6.2.22.3
I have also opened support ticket for this!

Thank you for your response. I have forwarded this info to the team and let them know that you have also opened a support ticket.

thanks