Use Endpoint Security Installation Scripts in NinjaOne

After you successfully establish a connection to WatchGuard Cloud you can download script parameters for your WatchGuard client accounts. You use these script parameters to run scripts in NinjaOne. Before you can use Endpoint Security installation scripts in NinjaOne you must:

After you get the script parameters and import the Endpoint Security scripts to NinjaOne, you can Run Scripts in NinjaOne

Get WatchGuard Client Script Parameters

You can get WatchGuard Client script parameters in these ways:

Copy Individual Client Script Parameters

You can copy script parameters for a client on the Client Settings page of the NinjaOne Onboarding application.

To copy script parameters for a WatchGuard Cloud client account, from the NinjaOne Onboarding application:

  1. Select Client Settings.
  2. From the WatchGuard Client list, select the WatchGuard Cloud account that you want to copy the script parameters for.

Screenshot of the Client Settings page in NinjaOne Onboarding

  1. From the Network Settings for Installation drop-down list, select the Endpoint Security network settings profile to assign to this client.
    After you select a network settings profile for a client, a Copy button appears in the Script Parameters column.

Screenshot of the Client Settings page in the NinjaOne Onboarding application with Copy Script Parameters highlighted

  1. In the Script Parameters column, click Copy.
    A confirmation message appears.

Screenshot of Copy Script Parameters success confirmation dialog box

  1. Click OK.

Download All Client Script Parameters

You can copy script parameters for all your WatchGuard client accounts on the Client Settings page of the NinjaOne Onboarding application.

To copy script parameters for all WatchGuard Cloud client accounts, from the NinjaOne Onboarding application:

  1. Select Client Settings.
  2. Select a client from the list.
  3. From the Network Settings for Installation drop-down list, select the Endpoint Security network settings profile to assign to the client. Repeat these steps for each client.

If you do not assign a network settings profile to a client in the NinjaOne Onboarding application, the Default Settings profile is used in the script parameters for the .CSV file.

  1. Click Download CSV.

Screenshot of Client Settings page in NinjaOne Onboarding application with Download CSV button highlighted

  1. Save the WatchGuardClients.CSV file to your computer.
    A confirmation message appears.

Screenshot of successful download message in Download CSV dialog box

  1. Click OK.

The WatchGuardClients.CSV file contains the script parameters for every client, along with the client name, WatchGuard Cloud ID, license information, and the network settings profile assigned to the client.

Screenshot of downloaded CSV file contents

Import Scripts to NinjaOne

When you download the WatchGuard Endpoint Security integration for NinjaOne, the downloaded folder includes WatchGuard scripts. Use these installation scripts in NinjaOne to deploy the WatchGuard Endpoint Agent to your client devices.

Create Script Category

Before you import WatchGuard Scripts into NinjaOne, create a category for the scripts.

To create a category, from NinjaOne:

  1. Select Home > Administration > Library > Automation.
  2. Select the Categories tab.
  3. Click Create New Category.

Screenshot of Automation Library page in NinjaOne with Create New Category highlighted

  1. In the Name text box, enter WatchGuard Endpoint Security Installation.

Screenshot of the Add New Category dialog box

  1. Click Save.

Import Scripts

This script table includes the script name, description, category, file name, language, operating system, and architecture information for each WatchGuard script available to use in NinjaOne. Use the data in this table when you import scripts into NinjaOne.

Script Name Description Category File Name Language Operating System Architecture
WatchGuard Endpoint Security Agent - Windows Install the WatchGuard Endpoint Agent on Windows devices WatchGuard Endpoint Security Installation WG-Install-Windows.PS1 PowerShell Windows All
WatchGuard Endpoint Security Agent - Mac Install the WatchGuard Endpoint Agent on Mac devices WatchGuard Endpoint Security Installation WG-Install-Mac.SH ShellScript macOS 64-bit
WatchGuard Endpoint Security Agent - Linux Install the WatchGuard Endpoint Agent on Linux devices WatchGuard Endpoint Security Installation WG-Install-Linux.SH ShellScript Linux All

To import scripts, from NinjaOne:

  1. Select Home > Administration > Library > Automation.
  2. Select the Automations tab.

Screenshot of the Automations tab in NinjaOne

  1. Click Add.
  2. From the drop-down list, select Import From File.

Screenshot of the Add New Automation drop-down list in NinjaOne

  1. Select the WG-Install-Windows.ps1 script from the NinjaOne folder.

Screenshot of the NinjaOne Endpoint Security Integration folder in Windows

  1. Click Open.
    The Create Script page opens.

Screenshot of the Create Script page in NinjaOne

  1. In the Name text box, enter WatchGuard Endpoint Security Agent - Windows.
  2. In the Description text box, enter Install the WatchGuard Endpoint Agent on Windows devices.
  3. From the Categories drop-down list, select WatchGuard Endpoint Security Installation.
  4. From the Language drop-down list, select PowerShell.
  5. From the Operating System drop-down list, select Windows.
  6. From the Architecture drop-down list, select All.
  7. Click Save.
  8. Click Close to return to the Automations tab.
  9. Repeat this procedure for the macOS and Linux installation scripts. Use the data from the script table to enter the required information.

Run Scripts in NinjaOne

To run the WatchGuard Endpoint Security installation scripts in NinjaOne, you must create groups for each of your clients that search for devices without Endpoint Security products installed, and then create tasks to install the Endpoint Security Agent on those devices. You must create separate groups and tasks for the Endpoint Security Agent to install on Windows, Mac, and Linux devices.

You need at least one Windows, Mac, and Linux device with Endpoint Security installed in your NinjaOne inventory to configure groups and tasks.

  1. Select Home > Administration > Devices > Groups.

Screenshot of the Groups page in NinjaOne

  1. Click Create New Group.
    The Devices page for a new group opens.

Screenshot of the Devices section in the Add New Group page in NinjaOne

  1. From the Organization drop-down list, select the organization (the WatchGuard client) you want to create the group for.
  2. From the Location drop-down list, select the locations you want to create the group for.
  3. From the Type drop-down list, select: 
    • Windows Desktop
    • Windows Laptop
    • Windows Server
  4. From the Role drop-down list, select All.
  5. From the Status drop-down list, select All.
  6. From the Additional Filters drop-down list, select Software Inventory.
    The Software Inventory section opens.

Screenshot of the Software Inventory section on the Devices page in NinjaOne

  1. From the Contains drop-down list, select Does Not Contain.
  2. From the All drop-down list, select Any.
  3. Click Add.

Screenshot of the Software Inventory section on the Devices page in NinjaOne with Add highlighted

  1. In the Search text box of the Software dialog box, type WatchGuard Endpoint Agent.
  2. Select the WatchGuard Endpoint Agent check box.

Screenshot of the Software dialog box with WatchGuard Endpoint Agent highlighted in NinjaOne

  1. Click Add.
  2. Click Close.
  3. On the Devices page, click Save.
    The Save as Group dialog box opens.
  4. In the Name text box, enter a name for the group.
  5. In the Description text box, enter a description for the group.
  6. Click Save.

Screenshot of the Save as Group dialog box in NinjaOne with the Save button highlighted

  1. Select Home > Administration > Devices > Groups.

Screenshot of the Groups page in NinjaOne

  1. Click Create New Group.
    The Devices page for a new group opens.

Screenshot of the Devices section in the Add New Group page in NinjaOne

  1. From the Organization drop-down list, select the organization (the WatchGuard client) you want to create the group for.
  2. From the Location drop-down list, select the locations you want to create the group for.
  3. From the Type drop-down list, select: 
    • Mac Desktop
    • Mac Laptop
    • Mac Server
  4. From the Role drop-down list, select All.
  5. From the Status drop-down list, select All.
  6. From the Additional Filters drop-down list, select Software Inventory.
    The Software Inventory section opens.

Screenshot of the Software Inventory section on the Devices page in NinjaOne

  1. From the Contains drop-down list, select Does Not Contain.
  2. From the All drop-down list, select Any.
  3. Click Add.

Screenshot of the Software Inventory section on the Devices page in NinjaOne with Add highlighted

  1. In the Search text box of the Software dialog box, type Management-Agent.
  2. Select the Management-Agent check box.

Screenshot of the Software dialog box with Management Agent highlighted in NinjaOne

  1. Click Add.
  2. Click Close.
  3. On the Devices page, click Save.
    The Save as Group dialog box opens.
  4. In the Name text box, enter a name for the group.
  5. In the Description text box, enter a description for the group.
  6. Click Save.

  1. Select Home > Administration > Devices > Groups.

  1. Click Create New Group.
    The Devices page for a new group opens.

Screenshot of the Devices section in the Add New Group page in NinjaOne

  1. From the Organization drop-down list, select the organization (the WatchGuard client) you want to create the group for.
  2. From the Location drop-down list, select the locations you want to create the group for.
  3. From the Type drop-down list, select: 
    • Linux Desktop
    • Linux Laptop
    • Linux Server
  4. From the Role drop-down list, select All.
  5. From the Status drop-down list, select All.
  6. From the Additional Filters drop-down list, select Software Inventory.
    The Software Inventory section opens.

Screenshot of the Software Inventory section on the Devices page in NinjaOne

  1. From the Contains drop-down list, select Does Not Contain.
  2. From the All drop-down list, select Any.
  3. Click Add.

Screenshot of the Software Inventory section on the Devices page in NinjaOne with Add highlighted

  1. In the Search text box of the Software dialog box, type protection-agent-dkms.
  2. Select the protection-agent-dkms check box.

Screenshot of the Software dialog box with protection-agent-dkms highlighted in NinjaOne

  1. Click Add.
  2. Click Close.
  3. On the Devices page, click Save.
    The Save as Group dialog box opens.
  4. In the Name text box, enter a name for the group.
  5. In the Description text box, enter a description for the group.
  6. Click Save.

Screenshot of Save as Group dialog box in NinjaOne

Create Tasks

Create tasks in NinjaOne to install the Endpoint Security Agent on all devices in a corresponding group. You can schedule tasks to run on a daily, weekly, or monthly basis. You must create separate tasks to install the Endpoint Security Agent on Windows, Mac, and Linux devices.

To create tasks to install the Endpoint Security Agent on client devices, you must use the script parameters you copied or downloaded for the client. For more information, go to Get WatchGuard Client Script Parameters.

After the Endpoint Security Agent is installed on a device, it no longer appears in the group filter results.

To create a task to install the WatchGuard Endpoint Security Agent, from NinjaOne:

  1. Select Home > Administration > Tasks.
  2. Click New Task.
    The New Scheduled Task window opens.

Screenshot of New Scheduled Task page in NinjaOne

  1. Enable the General Enabled toggle.
  2. In the Name text box, enter a name for the installation task. For this example, enter Install Agent on Windows Devices.
  3. In the Description text box, enter a description for the task.
  4. Select the Allow Groups check box.
  5. From the Repeats drop-down list, select how often you want the task to run.
  6. In the Automations section, click Add.
    The Automation Library window opens.

Screenshot of Automation Library in NinjaOne

  1. From the Automations list, select a WatchGuard Endpoint Security Agent installation script from the list. For this example, select WG-Install-Windows.
    The WG-Install_Windows dialog box opens.
  2. In the Run As drop-down list, select System.
  3. In the Preset Parameter text box, enter the script parameters for the client you created the group for. For more information about the script parameters, go to Get WatchGuard Client Script Parameters.

Screenshot of WG-Install-Windows dialog box in NinjaOne

  1. Click Apply.
  2. Select Targets.

Screenshot of Targets highlighted on the New Scheduled Task page in NinjaOne

  1. Click Add.

Screenshot of Add highlighted on the New Scheduled Task page in NinjaOne

  1. From the Targets drop-down list, select Group.

Screenshot of the Targets drop-down list in NinjaOne

  1. In the Targets text box, enter the name of the Windows group you created. For this example, select the group you created for Windows devices.
  2. Select the check box next to the name of the group.

Screenshot of the Targets dialog box in NinjaOne

  1. Click Apply.
  2. Click Save. Click Close.
  3. Repeat this procedure to create installation tasks for Mac and Linux devices.

Related Topics

About the WatchGuard Endpoint Security Integration with NinjaOne

Install the NinjaOne Onboarding Application

Manage the NinjaOne Onboarding Application