Use Endpoint Security Installation Scripts in NinjaOne

Applies To: Endpoint Security Elite, Endpoint Security 360, Endpoint Security Prime, WatchGuard EDR, WatchGuard EDR Core, Endpoint Security Basic

You can use Endpoint Security installation scripts in NinjaOne to deploy the WatchGuard Agent to your client devices. After you successfully establish a connection to WatchGuard Cloud, you can download script parameters for your WatchGuard client accounts. You use these script parameters to run scripts in NinjaOne. Before you can use Endpoint Security installation scripts in NinjaOne, you must:

After you get the script parameters and import the scripts to NinjaOne, you can Run WatchGuard Scripts in NinjaOne.

Get WatchGuard Client Script Parameters

You can get WatchGuard Client script parameters in these ways:

Copy Individual Client Script Parameters

You can copy script parameters for a client on the Client Settings page of the Endpoint Security Onboarding application.

To copy script parameters for a WatchGuard Cloud client account, from the Endpoint Security Onboarding application:

  1. Select Client Settings.
  2. From the WatchGuard Client list, select the WatchGuard Cloud account that you want to copy the script parameters for.

Screenshot of the Client Settings page in the Onboarding application

  1. From the Network Settings for Installation drop-down list, select the Endpoint Security network settings profile to assign to this client.
    After you select a network settings profile for a client, a Copy button appears in the Script Parameters column.

Screenshot of the Client Settings page in the Onboarding application with Copy Script Parameters highlighted

  1. In the Script Parameters column, click Copy.
    A confirmation dialog box opens.

Screenshot of Copy Script Parameters success confirmation dialog box

  1. Click OK.

Download All Client Script Parameters

You can download script parameters for all your WatchGuard client accounts on the Client Settings page of the Endpoint Security Onboarding application.

To download script parameters for all WatchGuard Cloud client accounts, from the Endpoint Security Onboarding application:

  1. Select Client Settings.
  2. Select a client from the list.
  3. From the Network Settings for Installation drop-down list, select the Endpoint Security network settings profile to assign to the client. Repeat these steps for each client.

Note: If you do not assign a network settings profile to a client in the Onboarding application, the Onboarding application applies the Default Settings profile to the client in the CSV file.

  1. Click Download.

Screenshot of Client Settings page in NinjaOne Onboarding application with Download button highlighted

  1. Save the WatchGuardClients.CSV file to your computer.
    A confirmation dialog box opens.

Screenshot of successful download message in Download CSV dialog box

  1. Click OK.

The WatchGuardClients.CSV file contains the script parameters for every client, along with the client name, WatchGuard Cloud ID, license information, and the network settings profile assigned to the client.

Screenshot of downloaded CSV file contents

Import Client Script Parameters

You can import a CSV file with script parameters for all clients on the Client Settings page of the Onboarding application.

Note: When a WatchGuard Client is listed in the Onboarding application but not in the import file, the Default Settings profile is automatically applied to that client when parameters are imported.

To import script parameters for all WatchGuard Cloud client accounts, from the Endpoint Security Onboarding application:

  1. Select Client Settings.
  2. Click Import.

Screenshot of the Client Settings page with the Import button highlighted.

  1. Select the file you want to import, then click Open.
    The Client Settings page refreshes with imported script parameters.

Screenshot of the Client Settings page with imported script parameters

Import WatchGuard Scripts into NinjaOne

When you download the WatchGuard Endpoint Security integration for NinjaOne, the downloaded folder includes WatchGuard scripts. Use these installation scripts in NinjaOne to deploy the WatchGuard Agent to your client devices.

You must perform these steps to import WatchGuard scripts into NinjaOne:

Create Organization Custom Field

Before you import WatchGuard scripts into NinjaOne, create an organization custom field. You use this field to store client script parameters for your WatchGuard clients (organizations) in NinjaOne.

To create an organization custom field, in NinjaOne:

  1. Select Home > Administration > Organizations > Organization Custom Fields.
  2. Click Add Custom Field.

Screenshot of the Custom Fields page in NinjaOne

  1. From the drop-down list, select Secure.
    The Add Custom Field dialog box opens.

Screenshot of the Add Custom Field dialog box in NinjaOne.

  1. On the Overview tab, in the Label text box, type WatchGuard Agent Script Parameters.
    The Name text box auto-populates when you enter text in the Label text box.

Screenshot of the Add Custom Field dialog box with the Label and Name text boxes highlighted.

  1. On the Permissions tab, from the Automations drop-down list, select Read Only.
  2. On the Advanced Settings tab, in the Max Characters text box, type 10000.

Screenshot of the Add Custom Field dialog box with the Max Characters text box highlighted.

  1. Click Submit.

Add Script Parameters to Organization

After you create the WatchGuard Agent Script Parameters custom field, enter the script parameters for each of your WatchGuard clients (organizations) in NinjaOne.

To add script parameters to an organization:

  1. In NinjaOne, select Dashboard > Overview.
  2. From the Organizations list, select the organization (WatchGuard Client) you want to add script parameters for.
  3. From the Custom drop-down list, select Default Fields.
    The Custom (Default Fields) page opens.
  4. Find WatchGuard Agent Script Parameters in the list, and click the edit icon.

Screenshot of the Custom (Default Fields) page in NinjaOne with the Edit icon highlighted for WatchGuard Agent Script Parameters.

  1. Open the Endpoint Security Onboarding application and go to the Client Settings page.
  2. Select the WatchGuard Cloud account that you want to copy the script parameters for, then click Copy.

Screenshot of the Client Settings page in the Onboarding application with Copy Script Parameters highlighted

  1. Return to NinjaOne.
  2. In the WatchGuard Agent Script Parameters text box, paste the script parameters you copied from the Endpoint Security Onboarding application.

Screenshot of the Custom (Default Fields) page in NinjaOne with WatchGuard Agent Script Parameters populated.

  1. Click Save.
  2. Repeat this procedure for every organization you deploy to.

Create Script Category

You must create an automation category in NinjaOne for the imported scripts.

To create a category, from NinjaOne:

  1. Select Home > Administration > Library > Automation.
  2. Select the Categories tab.
  3. Click Create Category.

Screenshot of Automation Library page in NinjaOne with Create Category highlighted

  1. In the Name text box, type WatchGuard Endpoint Security Installation.

Screenshot of the Create Category dialog box.

  1. Click Create.

Import the WatchGuard Scripts

This script table includes the script name, description, category, file name, language, operating system, and architecture information for each WatchGuard script. Use the data in this table when you import scripts into NinjaOne.

Script Name Description Category File Name Language Operating System Architecture
WatchGuard Endpoint Security Agent - Windows Install the WatchGuard Agent on Windows devices WatchGuard Endpoint Security Installation WG-Install-Windows.PS1 PowerShell Windows All
WatchGuard Endpoint Security Agent - Mac Install the WatchGuard Agent on Mac devices WatchGuard Endpoint Security Installation WG-Install-Mac.SH ShellScript macOS 64-bit
WatchGuard Endpoint Security Agent - Linux Install the WatchGuard Agent on Linux devices WatchGuard Endpoint Security Installation WG-Install-Linux.SH ShellScript Linux All

To import scripts, from NinjaOne:

  1. Select Home > Administration > Library > Automation.
  2. Select the Automations tab.
  3. Click Add Automation.

Screenshot of the Automations tab in NinjaOne with Add Automation highlighted.

  1. From the drop-down list, select Import From File.

Screenshot of the Add Automation drop-down list in NinjaOne

  1. Select the WG-Install-Windows.PS1 script from the NinjaOne folder.

Screenshot of the NinjaOne Endpoint Security Integration folder in Windows

  1. Click Open.
    The Create Script page opens.

Screenshot of the Create Script page in NinjaOne

  1. In the Name text box, type WatchGuard Endpoint Security Agent - Windows.
  2. In the Description text box, type Install the WatchGuard Agent on Windows devices.
  3. From the Categories drop-down list, select WatchGuard Endpoint Security Installation.
  4. From the Language drop-down list, select PowerShell.
  5. From the Operating System drop-down list, select Windows.
  6. From the Architecture drop-down list, select All.
  7. Click Save.
  8. Repeat this procedure for the macOS and Linux installation scripts. Use the data from the script table to enter the required information.

Run WatchGuard Scripts in NinjaOne

To run the imported WatchGuard scripts in NinjaOne, you must create groups for the devices without Endpoint Security products installed, then create tasks to install the WatchGuard Agent on the devices in those groups. You must create separate groups and tasks for the WatchGuard Agent to install on Windows, Mac, and Linux devices.

Create Groups

Create groups for each type of device you want to deploy to.

Note: You must have at least one Windows device, one Mac device, and one Linux device with Endpoint Security installed in your NinjaOne inventory to configure groups and tasks.

  1. Select Home > Administration > Devices > Groups.

Screenshot of the Groups page in NinjaOne

  1. Click Create New Group.
    The Devices page for a new group opens.

Screenshot of the Devices page to create a new group in NinjaOne

  1. From the Organization drop-down list, select the organization (the WatchGuard client) you want to create the group for.
  2. (Optional) From the Location drop-down list, select the locations you want to create the group for.
  3. From the Type drop-down list, select: 
    • Windows Desktop
    • Windows Laptop
    • Windows Server
  4. From the Role drop-down list, select All.
  5. From the Status drop-down list, select All.
  6. From the More Filters drop-down list, select Software Inventory.
    The Filter By: Software Inventory dialog box opens.

Screenshot of the Filter by: Software Inventory dialog box in NinjaOne with no settings entered

  1. From the Contains drop-down list, select Does Not Contain.
  2. From the All drop-down list, select Any.
  3. Click Add.
  4. In the Search text box of the Software dialog box, enter WatchGuard Agent.
  5. Select the WatchGuard Agent check box, then click Add.
  6. In the Filter by: Software Inventory dialog box, click Apply.

Screentshot of the Filter by: Software Inventory dialog box with settings populated

  1. On the Devices page, click Save Group.
    The Save as Group dialog box opens.
  2. In the Name text box, type a name for the group. For example, Windows Devices without Endpoint Security Agent.
  3. In the Description text box, type a description for the group.
  4. Click Save.

Screenshot of the Save as Group dialog box in NinjaOne with the Save button highlighted

  1. Select Home > Administration > Devices > Groups.

Screenshot of the Groups page in NinjaOne

  1. Click Create New Group.
    The Devices page for a new group opens.

Screenshot of the Devices section in the Add New Group page in NinjaOne

  1. From the Organization drop-down list, select the organization (the WatchGuard client) you want to create the group for.
  2. (Optional) From the Location drop-down list, select the locations you want to create the group for.
  3. From the Type drop-down list, select: 
    • Mac Desktop
    • Mac Laptop
    • Mac Server
  4. From the Role drop-down list, select All.
  5. From the Status drop-down list, select All.
  6. From the More Filters drop-down list, select Software Inventory.
    The Filter By: Software Inventory dialog box opens.

Screenshot of the Filter by: Software Inventory dialog box

  1. From the Contains drop-down list, select Does Not Contain.
  2. From the All drop-down list, select Any.
  3. Click Add.
  4. In the Search text box of the Software dialog box, enter Management-Agent.
  5. Select the Management-Agent check box, then click Add.
  6. In the Filter by: Software Inventory dialog box, click Apply.

Screentshot of the Filter by: Software Inventory dialog box with settings entered

  1. On the Devices page, click Save Group.
    The Save as Group dialog box opens.
  2. In the Name text box, type a name for the group. For example, Mac Devices without Endpoint Security Agent.
  3. In the Description text box, type a description for the group.
  4. Click Save.

Screenshot of the Save as Group dialog box in NinjaOne

  1. Select Home > Administration > Devices > Groups.

Screenshot of the Groups page in NinjaOne

  1. Click Create New Group.
    The Devices page for a new group opens.

Screenshot of the Devices section in the Add New Group page in NinjaOne

  1. From the Organization drop-down list, select the organization (the WatchGuard client) you want to create the group for.
  2. (Optional) From the Location drop-down list, select the locations you want to create the group for.
  3. From the Type drop-down list, select: 
    • Linux Desktop
    • Linux Laptop
    • Linux Server
  4. From the Role drop-down list, select All.
  5. From the Status drop-down list, select All.
  6. From the More Filters drop-down list, select Software Inventory.
    The Filter by: Software Inventory dialog box opens.

Screenshot of the Filter by: Software Inventory dialog box in NinjaOne

  1. From the Contains drop-down list, select Does Not Contain.
  2. From the All drop-down list, select Any.
  3. Click Add.
  4. In the Search text box of the Software dialog box, enter protection-agent-dkms.
  5. Select the protection-agent-dkms check box, then click Add.
  6. In the Filter by: Software Inventory dialog box, click Apply.

Screentshot of the Filter by: Software Inventory dialog box with settings entered

  1. On the Devices page, click Save Group.
    The Save as Group dialog box opens.
  2. In the Name text box, type a name for the group. For example, Linux Devices without Endpoint Security Agent.
  3. In the Description text box, type a description for the group.
  4. Click Save.

Screenshot of Save as Group dialog box in NinjaOne

Create and Run Tasks

Create tasks in NinjaOne to install the Endpoint Security Agent on all devices in a corresponding group. You can schedule tasks to run on a daily, weekly, or monthly basis. You must create separate tasks to install the Endpoint Security Agent on Windows, Mac, and Linux devices.

Note: After you install the Endpoint Security Agent on a device, the device no longer appears in the group filter results.

To create a task to install the WatchGuard Endpoint Security Agent, from NinjaOne:

  1. Select Home > Administration > Tasks.
  2. Click Create Task.
    The New Scheduled Task page opens.

Screenshot of New Scheduled Task page in NinjaOne

  1. On the Details tab, in the Status section, enable the Enable Scheduled Task toggle.
  2. In the General section, in the Name text box, type a name for the installation task. For this example, type Install Agent on Windows Devices.
  3. In the Description text box, type a description for the task.
  4. Select the Allow Groups check box.
  5. In the Schedule section, from the Repeats drop-down list, select how often you want the task to run.
  6. On the Automations tab, click Add Automation.
    The Automation Library dialog box opens.

Screenshot of Automation Library in NinjaOne

  1. From the Automations list, select a WatchGuard Endpoint Security Agent installation script from the list. For this example, select WatchGuard Endpoint Security Agent - Windows.
    The WatchGuard Endpoint Security Agent - Windows dialog box opens.
  2. From the Run As drop-down list, select System.

Screenshot of WatchGuard Endpoint Security Agent - Windows dialog box in NinjaOne

  1. Click Apply.
  2. On the Targets tab, click Add Targets.
    The Add Targets dialog box opens.

Screenshot of the Add Targets dialog box in NinjaOne

  1. From the Groups drop-down list, select the group you created for the devices you want to deploy to. For this example, select Windows Devices without Endpoint Security Agent.
  2. Click Add.
    The target appears in the Targets list for the task.

Screenshot of the Targets dialog box in NinjaOne

  1. Click Save.
  2. Repeat this procedure to create tasks for Mac and Linux devices.

After you create the tasks for all device groups, the tasks run on the schedule you selected for each.

Related Topics

About the WatchGuard Endpoint Security Integration with NinjaOne

Install the Endpoint Security Onboarding Application for NinjaOne

Manage the Endpoint Security Onboarding Application for NinjaOne