Datto EDR and Datto AV Integration

SECURITY  To enable the integration, refer to Setup > Integrations in Permissions.
The API token used to set up this integration must be generated by a Datto EDR administrator. Refer to Generating Datto EDR API tokens in the Datto EDR Help system.

NAVIGATION  Setup > Integrations > Datto EDR

About Datto EDR and Datto AV

Endpoint Detection and Response (EDR) platforms are designed to work in conjunction with antivirus (AV) products installed on the endpoints they monitor. The AV solution performs the detection and quarantine function, while EDR monitors the status of the endpoint, providing alerting and remediation responses when rule-based threat detection is triggered. Datto EDR and Datto AV are deployed using the same agent, and Datto AV operates from within the Datto EDR platform.

To learn more about Datto EDR and Datto AV, review this comparison resource and peruse the FAQs in the Datto EDR Help system.

About the integration in Datto RMM

Both new and existing Datto EDR and Datto AV customers can take advantage of this built-in integration to protect their endpoints from threats.

Datto RMM sites will be automatically synchronized with Datto EDR as locations and assigned to the Default RMM organization in Datto EDR. Any endpoints protected by the Endpoint Security agent will be synced as devices and assigned to their corresponding locations. Once created, you can move synced locations to the organization of your choice.

Highlights

  • In just a couple of clicks, you can leverage your existing standalone Datto EDR tenant URL and API token for integration within Datto RMM.
  • Once integrated, your standalone Datto EDR tenant will function identically to an EDR-integrated-with-RMM tenant. This means you'll benefit from the familiar functionality and centralized management within the Datto RMM web interface.
  • Take advantage of the various Endpoint Security features, functionality, and workflows offered through this integration. For details, refer to Endpoint Security.

Prerequisites

  • A standalone instance of Datto EDR.
  • An API token generated from Datto EDR. Refer to Generating Datto EDR API tokens in the Datto EDR Help system.

    • IMPORTANT  The API token must be generated by a Datto EDR administrator for the integration setup to succeed in Datto RMM.


QUESTION  Does the order of product purchases matter (purchasing Datto EDR before Datto RMM or vice versa)?

No, the order of purchases doesn't affect the integration process. Regardless of which product you purchased first, you can integrate them through the Datto RMM setup process.

QUESTION  Can I deploy agents via a policy within Datto RMM after integration? Will locations from RMM sync with the standalone Datto EDR locations?

Agent deployment via an Endpoint Security policy within Datto RMM and one-to-one location syncing between RMM and EDR will work after integration configuration. To ensure a smooth deployment process, we recommend not deploying the EDR agent before integrating your instance with RMM.

QUESTION  How does this integration impact an existing standalone Datto EDR instance with multiple locations and agents?

The updated integration process is best suited for new Datto EDR deployments. However, it's important to consider how the updated process will affect existing standalone EDR deployments with multiple locations and agents.

To use Datto RMM for centralized management of Datto EDR deployments, you'll need to uninstall any existing agents deployed via the standalone EDR instance and redeploy them through RMM. The existing organizations and locations created with your standalone EDR instance will remain. The EDR instance will also receive the synced organizations and locations from RMM.

How to...

To enable the Datto EDR Integration, complete the following steps in Datto RMM:

  1. Navigate to Setup > Integrations > Datto EDR and Datto AV.
  2. In the API Details card, enter the full URL for your instance of Datto EDR.
  3. Paste the API token copied from your Datto EDR instance. To learn how to generate this token, refer to Generating Datto EDR API tokens in the Datto EDR Help.

    4. NOTE  This API token will be used only for authentication purposes. Once the integration is enabled, deleting the API token in Datto EDR will not affect the integration in Datto RMM.

  4. Click Save and check now.

  5. Upon successful connection, the authentication button will be disabled and will display Mapped.

Turning off this integration will delete any saved credentials and deregister the current Datto EDR and Datto AV Integration.

This integration cannot be disabled when any associated Endpoint Security policies are enabled in Datto RMM. To be able to disable the integration, you must turn off the Datto EDR and Datto AV toggle in all Endpoint Security policies. Refer to Datto EDR and Datto AV in Endpoint Security policy.

NOTE  On Datto EDR/AV-enabled Datto RMM accounts, disabling an Endpoint Security policy or turning off the Datto EDR and Datto AV toggle in an Endpoint Security policy will automatically uninstall Datto EDR and Datto AV from the devices targeted by the policy. You will be prompted to confirm that you wish to execute this action.

Turn off the integration as follows:

  1. Navigate to Setup > Integrations > Datto EDR and Datto AV.
  2. In the API Details card, click Turn Off.
  3. Enter any valid API token, either new or existing, generated from the Datto EDR subdomain used for this integration. Refer to Generating Datto EDR API tokens in the Datto EDR Help.

    4. NOTE  This step is skipped if you've turned on the integration but have not yet configured it.

    NOTE  You will not be able to enter your API token or click Confirm until you've turned off the Datto EDR and Datto AV toggle in all Endpoint Security policies. Refer to Datto EDR and Datto AV in Endpoint Security policy.

  4. Click Confirm to execute the action, or click Cancel to close out of the dialog box.

In the future, you have the option to reenable the integration with the previously integrated Datto EDR subdomain or a different Datto EDR subdomain.