ConnectWise Automate (CWA) enables users to proactively monitor, manage, and support client networks. Tasks or jobs that used to take hours or days are handle with a few clicks of a mouse, then automation takes over.
CWA has valuable features. These include setting up and checking device status automatically. It also tracks managed devices and allows access to each endpoint. Additionally, it configures Windows patch management with pre-set policies for Microsoft and third-party software.
CWA was developed to work with Windows but adapted to work on Linux. As a result, there’s some risk of losing some important core functionalities that Automate provides. Nonetheless, installing an agent on a Linux machine has various benefits. These include remote connectivity, inventory management, basic command line access, and the ability to run custom scripts and monitors.
Important considerations for Linux users:
- Automate has no built-in functionality to support patching on Linux machines.
- No stock content has been created for Linux machines unless a third party vendor has built the content in their solution.
- Linux machines are the existing network monitoring functionality. You have all the tools necessary to create what you desire. However, you must first grasp the concept of networking monitoring and learn which object identifiers (OIDs) to utilize.
- To use automation, scripts, and monitors in Linux and Automate, you need to understand how they work. Success requires knowledge of their functionality.
Common approaches to run ConnectWise Automate on Linux:
- To run a Windows virtual machine (VM) on a Linux host using virtualization tools like VMware or VirtualBox. This allows you to use ConnectWise Automate within the Windows VM while benefiting from Linux’s hosting capabilities.
- To use Wine or other compatibility layers to run Windows applications on Linux. However, this method may not provide full functionality or stability for complex applications like ConnectWise Automate.
- If running ConnectWise Automate directly on Linux is not feasible, you can set up a remote access solution that allows you to manage a Windows machine running ConnectWise Automate from a Linux system.
Installation Best Practices for ConnectWise Automate on Linux
You can install CWA on a Linux machine whether it has a GUI or is all command based. ConnectWise has extensive instructions on how to install an agent, and they also have an Agent Compatibility list.
It’s important to get the agent installed following the instructions recommended by CWA. This will allow you to remotely connect to the machine using ConnectWise Control (formerly ScreenConnect), gain remote command line access and inventory functionality.
But since Linux likes to occasionally get funky with permissions, I am going to briefly take you through the install in easy steps:
1) Use the link from the CWA portal to download the installer to your machine:
Export that file somewhere accessible in your machine.
2) Browse out to the zip file à unzip the file à browse through the folder structure à Enable the script execution with chmod.
3) To execute the install, simply run the command “./install.sh” after running the command “chmod +x ./install.sh”
How to deploy ConnectWise Control?
After you get the agent installed, you can deploy ConnectWise Control using the Redeploy command if it did not do it automatically:
At this point, feel free to create basic automations by completing any task using Automate fully, then navigate to the Command Tile (found under the gear icon).
If you press Ctrl-Click on every command you could to put into a script and create a script from the tasks!
Security tips when running ConnectWise Automate on Linux
At ProVal, we’re big on cybersecurity. So following these tips will help you enhance security when running ConnectWise Automat on a Linux environment:
- Keep Your System Updated: Regularly update both your Linux machine and ConnectWise Automate software to patch known vulnerabilities and enhance security. A scheduled maintenance plan can help you stay current with security patches.
- Configure Firewalls and Network Security: Only allow connections from trusted IP addresses and secure ports that are necessary for the application. Implementing a VPN can also add an additional layer of security for remote connections.
- Employ Strong Authentication Mechanisms: Enable multi-factor authentication (MFA) to add an extra layer of security. Regularly review and update user access permissions to adhere to the principle of least privilege.
- Encrypt Sensitive Data: Protect sensitive data stored and transmitted by ConnectWise Automate by encrypting databases, configuration files, and backups.
- Monitor and Audit System Activity: Tools such as audit and syslog can help detect and alert you to any suspicious activity or unauthorized access attempts.
- Backup Regularly: Store backups in a secure location and periodically test them to ensure their integrity and reliability.
- Harden the Linux Environment: Disable unnecessary services, apply security patches, and configure security modules like SELinux or AppArmor.
- Educate Your Team: Ensure that all users and administrators are aware of security best practices and the specific security policies.
By implementing these security measures, you can significantly reduce the risk of vulnerabilities and ensure that your ConnectWise Automate setup on Linux remains secure and reliable.
ConnectWise Automate, a Powerful Tool For IT Professionals
Adhering to the guidelines mentioned above will help you maximize the benefits of your RMM tool while maintaining a secure and efficient IT infrastructure.
Need help with automations? At ProVal we’re experienced with ConnectWise Automate, we can build automation for Windows and create scripts for Linux.
Contact us today for ConnectWise Consulting!
