Applies To: ThreatSync
Some of the features described in this topic are only available to participants in the ThreatSync Beta program. If a feature described in this topic is not available in your version of WatchGuard Cloud, it is a beta-only feature.
The Monitor menu in the ThreatSync management UI is where you monitor and perform actions on incidents for your account.
Your operator role determines what you can see and do in WatchGuard Cloud. Your role must have the ThreatSync Core permission to view or configure this feature. For more information, go to Manage WatchGuard Cloud Operators and Roles.
Summary Page
The Summary page opens by default in the Monitor > Threats menu for both Service Providers and Subscribers.
This page includes graphs, counters, and incident data and provides a snapshot of incident activity for your account over a specified period of time. For more information, go to ThreatSync Incident Summary.
Incidents Page
The Incidents page provides a centralized list of incidents for Incident Responders to review. For more information, go to Monitor Incidents in ThreatSync.
From the Incidents page, you can monitor the incidents that occur in your environment, and complete these tasks:
- Review Incident Details in ThreatSync
- Close or Change the Status of Incidents
- Perform Actions in ThreatSync
Endpoints Page
The Endpoints page shows a list of endpoints and incidents that occur on them for Incident Responders to review. For more information about how to use this page, go to Monitor Endpoints in ThreatSync.
Users Page
The Users page shows a list of users and incidents associated with each user for Incident Responders to review. For more information about how to use this page, go to Monitor Users in ThreatSync.
Review Incident Details in ThreatSync