Setting up Coro in Connectwise¶

This guide describes setting up Coro in Connectwise Automate, enabling administrators to verify Coro's installation status on devices, check the agent's version, and manage remote updates.

ConnectWise Automate is a remote monitoring and management (RMM) solution that provides complete access and control over agent and agentless endpoint devices across your network. You can remotely access endpoint devices, either manually or automatically, without disrupting users while resolving performance and/or security issues. You can setup Coro in ConnectWise Automate

The procedure in this section describes:

1. Configuring a Coro antivirus entry

2. Testing AV configuration on a device

Prerequisites¶

Before you begin this guide, make sure you have:

• An active Coro subscription

• Connectwise Control installed on your device

• A ConnectWise Automate subscription

Configuring a Coro antivirus entry¶

To configure a Coro antivirus (AV) entry:

1. Sign into the ConnectWise Control application.

2. Select System:

   

3. Expand the Configuration section and then select Dashboard:

   

   The System Dashboard appears:

4. Navigate to Config > Configurations > Virus Scan:

   

5. Enter the following:

   • Name: Coro

   • Program Location: %ProgramFiles%\Coro Cyber Security Ltd\Coro\user\Coro.exe

   • Definition Location: %ProgramData%\CoroAgent1SRV\p\status\malware_db_update_time.log

   • Update Command: "%ProgramFiles%\Coro Cyber Security Ltd\Coro\updater.exe" /silentall -nogui -nofreqcheck

   • Version Check: {%-HKLM\SOFTWARE\Coro Cyber Security Ltd\Coro:Version-%}

   • Infection Check: Leave blank

   • Scan Template: Leave blank

   • AP Process: coro*

   • Date Mask: (.*)

   • OS Type: 64-bit Windows

   • Version Mask: ^\d+(?:.\d+)*$

   • Infection Path: Leave blank

6. Select Add:

   

   The Coro AV entry is added to the Virus Scan configuration list:

   

7. Close the System Dashboard.

Testing AV configuration on a device¶

After a Coro AV entry is added to the Virus Scan configuration list, test the AV configuration on a device. The easiest method is to test the AV configuration on a device that already has Coro installed.

To test the AV configuration:

1. From the ConnectWise Control application, select a device that has Coro installed:

   

   The device information page appears.

2. Select Device:

   

   The Antivirus panel displays that the Coro service is running as well as the most recent virus definition update date:

   

   AV scripts can now be executed on the device.

To schedule the execution of a virus definition update script on the device:

1. Select Begin.

2. Select Scripts, and then select Antivirus.

3. Select Update Virus Definitions:

   

   A script execution options dialog appears.

4. From the Schedule options, select Once.

5. Select the Start date and time, and then select OK:

   

   The progress of the script execution is displayed on the device information page:

   

6. Select the gear option and then select the Commands panel to check the script execution progress:

   

   The Commands dialog appears.

7. Select Scripts:

   

8. Select Running.

   All running scripts are displayed:

   

9. Select All Scripts.

   All script information is displayed.

   The following example entry contains status information for the Update Virus Definitions script:

   • Name: Update Virus Definitions

   • State: Information

10. Select View Log listed under the Result column:

    

    The status of the Update Virus Definitions Results dialog appears, which provides the current status of the script: