The Remote Agent is a lightweight application installed at the end-customer site and that connects the remote environment to your Chronicle SOAR platform. The Agent allows security teams to run actions and playbooks on the remote environment to gather information and interact with remote security products.

The agent communicates with Chronicle SOAR via the  Publisher – a Proxy Server that resides in the Cloud and is managed by Chronicle. The agent syncs automatically with Chronicle SOAR to allow seamless communication. The relevant connectors and integrations need to be configured to allow the Agent to run them. 

The following screenshot shows an overview of the solution.