Configuring and Running Contextual Playbooks
Contextual playbooks display only the Configure option in the Security Orchestration module. The Run Automation option for these playbooks is available only on specific FortiRecon pages.
You can also run predefined playbooks or create and run new contextual playbooks from Security Orchestration > Playbooks. See Playbooks.
For example, to configure and run the Create Ticket for EASM Security Issues playbook:
-
Go to the Ticketing Automation collection in Security Orchestration > Home > Playbook Collections section.
-
Select Create Ticket for EASM Security Issues. Click Configure and then click Start.
-
Configure the Jira connector by providing the necessary information:
-
Configuration Name: Provide a name for configuration.
-
Server URL: (e.g., https://api.test.atlassian.com/)
-
Username: Enter a username with access to the desired project for creating tickets in Jira.
-
API Token: Provide the API token for the configured user.
-
Verify SSL: Enable this toggle if required.
-
Tags: Add tags if required.
-
-
Click Save.
-
Click Next after successful configuration, then click Close. The playbook is now configured.
By default, the solution pack includes a Jira connector. However, you can replace this with any other ticketing platform. To check the availability of other ticketing platform connectors, visit Security Orchestration > Content Hub > Discover.
-
To run the playbook, navigate to Attack Surface Management > Security Issues (EASM).
-
Select any issue.
-
Under the Action menu, click Run Automation. You will see the configured playbook listed.
-
Click Execute Playbook.
-
The Issue Details input dialog opens. This is a step within the playbook. Provide the required information, select the project ID, enter the ticket summary and description, and then click Create Ticket.
To view the playbook steps, navigate to Playbooks, click Ticketing Automation, and then click Create Ticket for EASM Security Issues.