Review MDR Endpoints

Applies To: WatchGuard Core MDR This topic applies to the WatchGuard Core MDR managed service., WatchGuard Core MDR for Microsoft This topic applies to the WatchGuard Core MDR for Microsoft managed service., WatchGuard Total MDR This topic applies to the WatchGuard Total MDR managed service.

The Endpoints page in the Managed Services portal shows a list of connected endpoints that send data to WatchGuard MDR.

This includes endpoints that run WatchGuard Endpoint Security or Microsoft Defender.

To open the Endpoints page:

1. In WatchGuard Cloud, select Monitor > Managed Services.
   The Managed Services portal opens in a new browser tab.
2. If you are a Service Provider, select your Subscriber account from the drop-down list.
3. Select Connections > Endpoints.
   The Endpoints page opens.

4. To review the details of an endpoint, click the endpoint from the list.
   

Sort and Filter the Endpoints List

By default, the endpoints list shows all endpoints that connected and sent data to WatchGuard MDR in the last 30 days.

To customize the endpoints you see, you can filter the list by:

OS

To filter the list by operator system, select Windows, Mac, or Linux.

Status

To filter the list by connection status, select one or more of these options:

• Active — Connected endpoints that sent data in the last 30 days.
• Inactive — Connected endpoints that did not send data in the last 30 days.

Time

By default, the list shows endpoints that connected in the last 30 days. To filter the list by date range, select a time period or a custom date range.

To reset the filters, click Reset Filters. To export the list of endpoints to a .CSV file, click Export.

Related Topics

Managed Services Portal Dashboard