Monitor Remote Access Applications

Applies To: WatchGuard Advanced Reporting Tool This topic applies to the optional WatchGuard endpoint security module, Advanced Reporting Tool. The Advanced Reporting Tool is available with WatchGuard EPDR and WatchGuard EDR.

We recommend that you only use remote tools that you have validated. Remote tools, such as TeamViewer and VNC, are a common attack vector. We recommend that you limit connectivity to administrators and use a firewall filter, as well as strong passwords. You can use the Special Applications & Tools tab to check for regular use of remote access tools.

To view remote access applications, from the WatchGuard Endpoint Security management UI:

1. In WatchGuard Cloud, select Monitor > Endpoints.
2. Select Status.
3. From the left pane, select Advanced Visualization Tool.
   A new browser tab opens.
4. From the left pane, select Advanced Reporting > Application Control.
5. Select the date range for the data you want to see.

6. Click Refresh.
   The dashboard shows information for the time period selected.
7. Select the Special Applications & Tools tab.

8. In the Remote Access Applications Executed tiles, review the list of applications executed by machine and user.

Related Topics

Monitor Script-Based Applications

Monitor Unwanted Freeware