Add Autofix Automation for Threats in WatchGuard CloudDR

Applies To: WatchGuard CloudDR This topic applies to the WatchGuard Cloud Detection and Response product.

Add automation to automatically trigger an autofix action to run when a threat triggers a rule. Automations are useful to start remediation without the need for manual interaction.

For information on quick response actions, go to Automated Threat Response Actions in WatchGuard CloudDR.

To add automation for a rule, from WatchGuard Cloud:

1. Select Configure > CloudDR.
2. Select Threats > Rules.
3. Select the rule you want to add automation for.
4. On the rule details page, click Automation.

5. Click Setup Automation.

6. Select the action you want to execute automatically when a new threat is detected by this rule.
7. Click Next.
8. The information required to configure the automation depends on the action selected. Enter the required information, then click Save Action.

9. For Service Providers, select the organization where you want to add automation. Click Save Action.
   The Automation Created Successfully dialog box opens.

10. If you want to execute the action now on existing threats, click Execute.
    You can view the status of the automation in the Operations status page. For more information, go to Operations Status in WatchGuard CloudDR.

Related Topics

Threat Rules in WatchGuard CloudDR

Operations Status in WatchGuard CloudDR

Add Autofix Automation for Issues in WatchGuard CloudDR