Multi-Tenant Management — Filter and Review Client Protection Status

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EDR This topic applies to the WatchGuard EDR endpoint security product., WatchGuard EPP This topic applies to the WatchGuard EPP endpoint security product., WatchGuard EDR Core This topic applies to the WatchGuard EDR Core, available in the Total Security Suite license.

To access the multi-tenant management UI for endpoint security, your Service Provider account must have an active WatchGuard Endpoint Security license in its inventory.

On the Status page, Service Providers can filter and review protection information for tenant accounts. Use filters to find accounts with a specific status.

To search for an account, from WatchGuard Cloud:

1. From Account Manager, select a Service Provider account.
   To select your own Service Provider account, select Overview. Or, select a tier-n Service Provider account.
2. Select Monitor > Endpoints.
3. Select Status.
4. In the Search text box, type the name of an account, and press Enter.

To filter the list of accounts, from WatchGuard Cloud:

1. From Account Manager, select a Service Provider account.
   To select your own Service Provider account, select Overview. Or, select a tier-n Service Provider account.
2. Select Monitor > Endpoints.
3. Select Status.
4. Click Filters.

5. From the Protection Status list, select the status you want to filter the list for.
   For example, to show a list of all computers and devices without a license, select No License.
6. To refine the results, select options from these drop-down lists:
   • Protection Up to Date — Select an option to filter the list for accounts with WatchGuard Endpoint Security that is up to date, out of date, or pending update.
   • Knowledge Up to Date — Select an option to filter the list for a signature file that is up to date or out of date.
   • Last Connection — Select an option to filter the list for accounts that last connected less than 3 days ago, between 3 and 30 days ago, or more than 30 days ago.
   • Connection to Knowledge Servers — Select an option to filter the list for accounts that have a connection to the server that is OK or with problems.
7. To refine the results based on status, select the check boxes in these lists:
   • Protection Status — Installing, Properly protected, Protection disabled, Protection with errors, Installation errors, or No license
   • Isolation Status — Not isolated, Isolated, Isolating, or Stopping isolation
8. To refine the results for accounts with computers in RDP attack containment mode, select Yes. Select All to include all accounts in the list. Select No to include accounts with computers that have turned off RDR attack containment mode.
9. Click Filter.

Client Protection Status Table

The table includes detailed information about the status of each account group's endpoint security software and includes filters to show fewer results. A hyphen indicates that the account group's endpoint security product does not include the feature.

When the table includes a color bar, Service Providers can point to it with the mouse to show the number of computers in each group and the percentage of the total number of computers on the network.

The table includes this information:

Client

The name of the WatchGuard Cloud account.

Group

The name of the WatchGuard Cloud account group the account belongs to.

Unmanaged Computers Discovered

The total number of computers and devices without WatchGuard Endpoint Security installed.

Managed Computers

The total number of computers and devices with WatchGuard Endpoint Security installed.

Advanced Protection

A color bar that indicates the advanced protection status of the computers and devices.

Red — Computers with protection errors, with disabled protection software, with installation errors, or without a license.

Green — Computers where the protection software is OK or in the process of installation.

Antivirus

A color bar that indicates the antivirus protection status of the computers and devices.

Red — Computers with protection errors, with disabled protection software, with installation errors, or without a license.

Green — Computers where the protection software is OK or in the process of installation.

Protection Up to Date

A color bar that indicates the update status of WatchGuard Endpoint Security on the endpoint (computer or device).

Red — Computers with out of date protection software.

Orange — Computers that require a restart to complete the update.

Green — Computers with up to date protection software.

Knowledge

A color bar that indicates the update status of the signature file on the endpoint (computer or device).

Red — Computers with an out of date signature file.

Green — Computers with and up to date signature file.

Last Connection

A color bar that indicates the date when connection status was last sent to WatchGuard Cloud.

Green — Less than 3 days ago

Orange — More than 3 days ago

Darker Orange — More than 7 days ago

Red — More than 30 days ago

More information is available in the exported file. To export the table results, in the upper-right corner of the page, click .

Related Topics

About Multi-Tenant Management in WatchGuard Endpoint Security

Multi-Tenant Management — Session and User Actions