The ThreatLocker integration with IT Glue creates 2 Flexible Asset Types in the IT Glue Portal: ‘ThreatLocker Computer Groups’ and ‘ThreatLocker Computers’. ThreatLocker will then synchronize the organization's computers and computer groups from ThreatLocker into IT Glue as Flexible Assets.
Generating an API Key
First, you must generate your API Key. This will be a unique identifier that allows the management and retrieval of information. To create a new API Key, within your IT Glue Organization, select the ‘Admin’ button at the top of the page, then select the ‘Settings’ tab from the left-hand menu.
From here, select the ‘API Keys’ tab within the ‘Settings’ page.
Navigate to the ‘Custom API Keys’ section of the page. Where it says ‘Enter Name’, input the following:
ThreatlockerAPI
Note: It is CRUCIAL you maintain the correct syntax. The API key will fail during integration if the key is named anything else.
Select the ‘Generate API Key’. Your API Key will be generated in the provided area.
If you have any questions regarding your API Key generation, please consult ITGlue’s documentation with the following link:
Integration Settings
Within the ThreatLocker Portal, navigate to the ‘Integrations’ page using the left-hand menu.
From within the ‘Integrations’ page, use the search bar labeled ‘Search for New Integrations’ at the top of the page to search for ‘IT Glue’.
Selecting ‘IT Glue’ from the dropdown will open a new window from Legacy Portal. In here, you will be provided with all the settings needed to integrate IT Glue.
To start, enter the API Key you generated within the first field.
You can also use the check boxes shown below to say if you are an EU or AU partner.
Next, use the checkboxes to select which items you would like to Sync. You can choose ‘Computers’ and ‘Groups’. Select the ‘Validate Connection’ button when this is chosen.
IT Glue will automatically sync with ThreatLocker every 24 hours. If changes are made and a sooner sync is needed, you can select the ‘Force Sync Now’ button from within this page.
Once all changes in the ‘Integration Settings’ tab have been made, you can select the ‘Save’ button on the top left side of the page.
Company Mapping
Once your API Key has been validated using the ‘Validate Connection’ button, you will see that a new tab populates at the top of the page called ‘Company Mapping’. Select this tab.
In this page, you will see a list of your ThreatLocker organizations.
Select the dropdown to the right of each organization.
For each organization, select the IT Glue organization you would like to have correspond to your ThreatLocker organization. Once you have done this, select the ‘Save’ button once more in the top left corner of the page.
Once you have selected 'Save', your ThreatLocker computers and groups (depending on what you selected) will be listed in your IT Glue account under the corresponding IT Glue organization according to your mapping. Computer Names and Computer IDs are synchronized, and Computer Group Names and Computer Group IDs are synchronized.
Customizing the Sidebar in IT Glue
Navigating to the ‘Admin’ tab in IT Glue, then go to ‘Settings’.
In the ‘General’ tab, navigate to the bottom of the page and select the button titled ‘Customize Sidebar’.
Select the button labeled ‘+ Add Section’, which can be found towards the bottom of the page.
Name your section.
Locate ‘ThreatLocker Computers’ and ‘ThreatLocker Computer Groups’ in the ‘Flexible Assets’ section. These are the assets that will be automatically created upon the integration of your organization with ThreatLocker as mentioned at the beginning of this article.
Select each asset, then drag it from the ‘Flexible Assets’ box into your newly created Section.
Select the ‘Save’ button at the bottom of the page.
Under the Organizations tab, you will now see your Flexible Assets now added to the Sidebar.
Setting Up IP Access Control on IT Glue
Setting up IP Access Control limits the logins and API access to the specified IP addresses in IT Glue. This will be required for your ThreatLocker IT Glue integration to ensure that it continues to work as expected.
To add IP addresses to IP Access Control in IT Glue, select the ‘Admin’ tab at the top of the page, then ‘Settings’. Select the ‘IP Access Control’ tab within the settings page.
Within the ‘IP Access Control’ tab, select the ‘Allow specific IP addresses’ option. A field called ‘Add IP Addresses’ will now populate.
In the ‘Add IP Addresses’ field, you will now be able to add IP addresses or ranges of IP addresses. The ones you need to enter here are as follows:
- Canada
- 155.204.122.96/28
- 38.22.73.99/28
- Chicago
- 38.99.229.32/28
- 184.105.26.128/27
- Orlando
- 71.74.165.193/26
- 38.77.143.0/24
- Dublin
- 149.5.35.0/24
- 84.207.211.144/28
- Virginia
- 38.68.197.0/24
- 148.51.137.160/27
- Australia
- 175.45.118.80/28
- 60.242.12.32/28
- Saudi Arabia
- 34.1.56.105
- 34.1.50.186
Once these have been entered, select the ‘Save’ button at the bottom of the page to finalize these changes.
If you have any further questions regarding IP Access Control, please consult IT Glue’s documentation using the link provided below: