WatchGuard EPP Security Dashboard

Applies To: WatchGuard EPP

The WatchGuard EPP Security dashboard shows an overview of the security status of the network for a specific time period. Several tiles show important information and provide links to more details.

In WatchGuard EPP, the Status page includes some of the dashboards and lists available in WatchGuard EPDR and WatchGuard EDR.

The WatchGuard EPP Security dashboard does not include:

  • Classification of all programs run and scanned
  • Information on malware activity, blocked programs, PUP activity, or exploit activity
  • An Advanced Protection column in the Computer Protection Status list

Screen shot of the WatchGuard EPP Security dashboard

Time Period Selector

The dashboard shows information for the time period you select from the drop-down list at the top of the Status page.

Screen shot of the Time Selector drop-down list

You can select the following time periods:

  • Last 24 hours
  • Last 7 days
  • Last month
  • Last year

Some tiles do not show information for the last year. If last year information is not available for a specific tile, a notification is displayed.

The WatchGuard EPP Security dashboard includes these tiles:

Click a tile to view detailed information.

Status Icons

The icons in the Advanced Protection, Antivirus, Updated Protection, and Knowledge columns indicate their status:

  • The installing icon — Installing
  • The Enabled icon — Enabled
  • The Disabled icon — Disabled
  • The Error icon — Error
  • The No License icon — No License
  • The Not Available Icon — Not Available
  • The Pending Restart icon — Pending Restart

Protection Status

The Protection Status tile shows:

  • Computers where WatchGuard EPP is working properly
  • Computers with errors or problems installing or running the product

Screen shot of the Protection Status tile

The total number of computers and devices at the center of the tile includes iOS devices. The tile includes no other information about iOS devices. iOS devices do not have advanced or antivirus protection. For more information, go to Configure iOS Device Settings.

Click the tile to open the Computer Protection Status list.

Screen shot of the Computer Protection Status list in EPP

Not all columns are available for each type of device.

To filter the Computer Protection Status list:

  1. Click Filters.
  2. Select the Computer Type.
  3. Specify platform, connection, and protection parameters.
  4. Select the Protection Status.
  5. Click Filter.

Offline Computers

The Offline Computers tile shows the number of computers that have not connected to the cloud for a number of days.

Screen shot of the Offline Computers tile

Click the tile to review details of the computers that might be susceptible to security problems and require attention.

Screen shot of the Offline Computers list

For more information on the icons used in this list, go to Icons.

Outdated Protection

The Outdated Protection tile shows the number of computers with a signature file that is more than three days older than the latest released file. The tile also shows the number of computers with an antivirus engine that is more than seven days older than the latest released engine.

  • Protection — The computer has had a version of the antivirus engine older than the latest released engine for at least seven days.
  • Knowledge — The computer has not updated its signature file for at least three days.
  • Pending Restart — The computer requires a restart to complete the update.

Screen shot of the Outdated Protection tile

Click the progress bar in the tile to go to the list of computers associated with each status:

  • Computers with out-of-date protection
  • Computers with out-of-date knowledge
  • Computers pending restart

Programs Allowed by the Administrator

These tiles show the number of programs allowed by the administrator which WatchGuard EPP initially prevented from running. These programs were classified as a threat (malware, PUP, or exploit) or unknown files in the process of classification.

Screen shot of the Detected Items Allowed by the Administrator tile

Click the tile to display specific information in a list.

Screen shot of the Programs Allowed by the Administrator list

To see all events related to threats and unknown files in the process of classification that the administrator allowed to run, click History.

Threats Detected by Antivirus

This tile shows all intrusion attempts that WatchGuard EPP detected in the selected time period. The data covers all infection vectors and all supported platforms. Administrators can get specific data (volume, type, form of attack) related to the malware.

Screen shot of the Threats Detected by Antivirus tile

Click the tile to review detailed information about detected threats.

Screen shot of the Threats Detected by the Antivirus detail page

Related Topics

About My Lists in WatchGuard Endpoint Security

Unmanaged Computers Discovered List

Web Access Dashboard

Organize Filters

Filter a Page by Group