--- title: "Multi-Environment Orchestration – Executing Playbook Apps Through a Firewall" slug: "multi-environment-orchestration-executing-playbook-apps-through-a-firewall" description: "This article describes how to configure remote execution for Playbook Apps and Service Triggers in ThreatConnect." tags: ["Orchestration and Automation", "Administrator"] updated: 2024-03-18T17:57:08Z published: 2024-03-18T17:57:08Z canonical: "knowledge.threatconnect.com/multi-environment-orchestration-executing-playbook-apps-through-a-firewall" --- > ## Documentation Index > Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt > Use this file to discover all available pages before exploring further. # Multi-Environment Orchestration: Executing Playbook Apps Through a Firewall ## Overview Multi-environment orchestration allows ThreatConnect® users that have an Environment Server behind a firewall to use their instance to communicate with that server and run [Playbook Apps](https://knowledge.threatconnect.com/docs/parts-of-a-playbook) and [Services](https://knowledge.threatconnect.com/docs/playbook-services) inside their firewall. NoteSystem Administrators should refer to the “Multi-Environment Orchestration” section of *ThreatConnect System Administration Guide* for instructions on how to create an Environment in a ThreatConnect instance. Organization Administrators should refer to [*Playbook Environments*](https://knowledge.threatconnect.com/docs/playbook-environments) for instructions on how to activate an Environment, download an Environment Server, configure an Environment Server to an Environment, and administer the Environment from within ThreatConnect. ## Before You Start | Minimum Role(s) | - System role of Administrator (for creating new Environments; enabling remote execution for Apps and Services; and creating and configuring, viewing, and administering Services on the ThreatConnect instance) - Organization role of Organization Administrator (for activating Playbook Environments and; configuring Environment Servers to Environments; and creating, viewing, and administering Services in your own Organization) - Organization role of Standard User (for creating, editing, activating, and de-activating Playbooks) | | --- | --- | | Prerequisites | - An Environment in your Organization that has been configured to an Environment Server - Remote execution enabled for the external Playbook Apps and Services that are to be run inside the firewall | ## Enabling Remote Execution for an App System Administrators can follow these steps to enable remote execution for an App on the **TC Exchange™ Settings**screen: 1. Log into ThreatConnect with a System Administrator account. 2. On the top navigation bar, hover over **Settings![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Settings%20icon.png)**and select **TC Exchange Settings**. The **Installed**tab of the **TC Exchange Settings**screen will be displayed. 3. Locate the desired App and click the vertical ellipsis in the **Options**column. A menu will be displayed. 4. Toggle on the **Allow Remote Execution**slider in the menu. ## Configuring Remote Execution for a Playbook App 1. On the top navigation bar, click **Playbooks**. The [**Playbooks** screen](https://knowledge.threatconnect.com/docs/the-playbooks-screen) will be displayed. 2. Create a new [Playbook](https://knowledge.threatconnect.com/docs/playbooks) or open an existing one. 3. Click the **Menu**![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-gpzolea0.png)icon at the upper-right corner of the Playbook App to verify whether remote execution is enabled for it, as detailed in the [“Enabling Remote Execution for an App”](/docs/multi-environment-orchestration-executing-playbook-apps-through-a-firewall#enabling-remote-execution-for-an-app) section. If an **Environment**option is displayed (Figure 1), then remote execution is enabled. ![Graphical user interface, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-zb8jbkst.png) 4. Select **Environment** from the menu displayed in Figure 1. A window like Figure 2 will be displayed for the App.![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-i8ab67vn.png) - **Remote Environment**: Select the Environment from which the App is to be executed. - Click the **SAVE** button. The **Environment**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-b6im1it2.png)icon will now be displayed at the upper-left corner of the App. Hovering over the **Environment**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-z2i1k25w.png)icon will display the selected remote Environment from which the App is to be executed (Figure 3). ![Diagram Description automatically generated with medium confidence](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-ie50crfs.png) After the Playbook executes, Apps that executed remotely will be displayed in the **Execution Graph**pane on the [**Executions**screen](https://knowledge.threatconnect.com/docs/playbook-executions)****with the **Environment**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-sp7xeu3g.png)icon at the upper-left corner of the App**,**and the remote Environment will be listed in the **Execution Details**pane on the **Executions**screen (Figure 4). ![Graphical user interface Description automatically generated with low confidence](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-tf39ke06.png) ## Configuring Remote Execution for a Service 1. Log into ThreatConnect with an Organization Administrator or System Administrator account. 2. On the top navigation bar, hover over **Playbooks**, and select **Services**. The [**Services**tab of the **Playbooks** screen](https://knowledge.threatconnect.com/docs/playbook-services) will be displayed. 3. Create a new [Playbook Service](https://knowledge.threatconnect.com/docs/playbook-services#creating-a-service) or open an existing one. 4. Click the vertical ellipsis![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-l8en6p8y.png)to the right of the desired Service and select **Environment**. The **Environment**window for that Service will be displayed (Figure 5).NoteFor Organization Administrators, the vertical ellipsis![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-l8en6p8y.png)will be displayed only for Services that they or another Organization Administrator in their Organization created. ![Graphical user interface, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-tu56v06f.png) - Select the Environment from which the Service is to be executed. - Click the **SAVE** button. Service Triggers that have been configured for remote execution will display an **Environment**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-522l6vy3.png)icon at the upper-left corner of the Trigger when it is added to the [**Playbook Designer**](https://knowledge.threatconnect.com/docs/the-playbook-designer) (Figure 6). ![Graphical user interface, application, table, Excel Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/multi-environment-orchestration--executing-playbook-apps-through-a-firewall-image-tw45jh5g.png) --- *ThreatConnect® is a registered trademark, and TC Exchange™ is a trademark, of ThreatConnect, Inc.* 20064-01 v.06.A ## Related - [Parts of a Playbook](/parts-of-a-playbook.md) - [Playbook Environments](/playbook-environments.md) - [The Playbook Designer](/the-playbook-designer.md)