How to Configure Connectors/Integrations

How to Configure Connectors/Integrations

Overview

Integrations are how Interno gets its data. You pick a tool from the catalogue, save a set of credentials for it, and run a scan; from then on Interno holds the records that tool reports.

This guide covers finding a tool, adding credentials, running and checking scans, editing credentials, and deactivating or deleting a connection.


Prerequisites

  • The Integration View permission (defence:integration:view), plus Credentials Create to make changes
  • API credentials for the tool you want to connect
  • Network access from Zeron to the tool's API — if that has to go through a proxy, have the proxy details ready

Step 1: Find the Tool

Navigation: Sidebar → Admin → Integrations

  1. Click Admin in the sidebar, then Integrations.
  2. The catalogue is shown as cards, 27 to a page, with a pager at the bottom.
  3. Narrow it down with:
  • the Search box, which matches on the tool's name
  • the Category filter (Choose Category)

Each card shows the tool's logo and name, its category, the kinds of data it brings in, and the status of its most recent scan.

Categories are broad tool classes rather than vendors. Examples include:

CategoryExample tools
Endpoint Detection and Response (EDR)Microsoft Defender ATP, Crowdstrike Falcon, SentinelOne
Vulnerability Management, Detection, and Response (VMDR)Tenable Security Center
Security Information and Event Management (SIEM)IBM QRadar, LogRhythm
Identity and Access Management (IDAM)Microsoft Active Directory
IT Service Management (ITSM)ServiceNow
Cloud Security Posture Management (CSPM)Microsoft Azure CSPM
FirewallCheck Point Next Generation Firewalls (NGFW)
Patch ManagementManageEngine Patch Manager Plus

Others in the list include Vulnerability Assessment (VA), Data Loss Prevention (DLP), Web Application Firewall (WAF), Privileged Access Management (PAM), Attack Surface Management (ASM), Extended Detection and Response (XDR), Network Access Control (NAC), Email Security and Container Security.


Step 2: Add Credentials

  1. Click the tool's card. A panel slides in from the right, listing any credentials already saved for that tool.
  2. Click Add <tool> Credentials.
  3. Fill in the form.
FieldNotes
NameRequired. Your label for this connection. Only letters, digits, and . _ - are allowed — no spaces, up to 100 characters. It cannot be changed afterwards.
VersionShown only for tools that support more than one version.
Authentication MethodShown only for tools that offer more than one, for example basic authentication or OAuth. Changing it changes the fields below.
Tool-specific fieldsWhatever that tool needs, such as base URL, instance, username, password, client ID, client secret or token. Required fields are marked with a red asterisk.
Use Proxy?Switch on if Zeron must reach the tool through a proxy; it reveals HTTP Proxy, HTTPS Proxy and No Proxy.
  1. Click Save Changes.

> Warning: The name is permanent. It identifies this connection everywhere afterwards, including in scan history, and the platform refuses any attempt to rename it later. Choose it carefully — for example defender-prod, not Defender Prod.

> Note: There is no "test connection" button. A connection proves itself by completing a scan, so run one next.


Step 3: Run and Check a Scan

Saved credentials appear as cards in the same panel, newest first, five to a page. Each card shows the credential's name, its non-secret field values, and whether it is active.

  1. Click the three-dot Actions button on the credential card.
  2. Choose Start Scan. While a scan is running the entry reads Scanning....
  3. Click the Scan Information icon on the card to see the scan history, with Started at, Ended at, Time taken and Status for each run.

Scan status is one of:

StatusMeaning
ProcessingThe scan is running
CompletedThe scan finished successfully
FailedThe scan did not finish; the card is outlined in red and the scan information holds the error detail

Step 4: Confirm the Data Arrived

Navigation: Sidebar → Assets → Asset Inventory

On the Assets Listing tab, open the Source: dropdown and pick the data set your new integration feeds. The count chip beside the dropdown shows how many records Interno now holds.


Editing an Existing Integration

You can change a saved connection in place — there is no need to delete it and start again.

  1. Open the tool's card, find the credential, and click the three-dot Actions button.
  2. Choose Edit. The same form reopens, filled in with what was saved: the readable fields, the version, and the proxy settings.
  3. Change what you need. Then click Update.

Two things behave differently in edit mode:

  • Secrets are blank. Passwords, tokens and client secrets are shown empty and labelled *(leave blank to keep current)*. Leave a secret alone and the stored value is kept; type into it and it is replaced. You never have to re-enter every credential to change one field.
  • The Name is locked. The field is disabled and hovering it explains that the name cannot be changed once the integration is added.

If you click Update without altering anything, Interno tells you there are no changes to update and closes the form.


Deactivating or Deleting an Integration

From the same three-dot Actions menu:

ActionWhat it does
DeactivateStops the connection being used, while keeping it and its history. The card's status icon turns red.
ActivateBrings a deactivated connection back into use.
DeleteRemoves the credential after a confirmation prompt.

Deleting needs the defence:integration:credentials:delete permission; everything else on that menu needs defence:integration:credentials:create.


Troubleshooting

Saving failed with a message about the name → The name may contain only letters, digits, and . _ -, with no spaces or other symbols, and must be at most 100 characters.

I want to rename an integration → Names are permanent. The field is disabled on edit and the platform rejects a rename with *Credential name cannot be changed after creation.* To use a different name, add a new credential and delete the old one.

The secret fields are empty when I edit → That is deliberate. Existing secrets are never shown. Leave them blank to keep them, or type a new value to replace one.

The scan shows Failed → Open Scan Information on the card to read the error. Common causes are expired or wrong credentials, a base URL Zeron cannot reach, or the API account lacking permission in the source tool. Fix the cause, use Edit to correct the credentials, then Start Scan again.

Zeron cannot reach a tool on our network → Switch on Use Proxy? when adding or editing the credential and fill in the HTTP Proxy, HTTPS Proxy and No Proxy values.

Saving a new integration was refused with a message about a limit → Some plans cap how many integrations can be active at once. The message names the current count and the cap. Deactivate one you no longer need, or contact your Zeron representative about your plan.

I cannot see the Add Credentials button or the Actions menu → Adding, editing, scanning and activating all require defence:integration:credentials:create, and deleting requires defence:integration:credentials:delete. Ask your administrator.

The Integrations page shows an access-denied screen → Browsing integrations requires defence:integration:view.

No data appears even though the scan completed → Check the Source: dropdown in Asset Inventory — the data may be under a source you have not selected. If the source is missing entirely, the tool returned no records for that data type.


Need more help? Contact support@zeron.one