Monitor Remote Access Applications

Applies To: WatchGuard Advanced Reporting Tool

We recommend that you only use remote tools that you have validated. Remote tools, such as TeamViewer and VNC, are a common attack vector. We recommend that you limit connectivity to administrators and use a firewall filter, as well as strong passwords. You can use the Special Applications & Tools tab to check for regular use of remote access tools.

To view remote access applications, from the WatchGuard EPDR or WatchGuard EDR web UI:

  1. From the top navigation bar, select Status.
  2. From the left pane, select Advanced Visualization Tool.
    A new browser tab opens.
  3. From the left pane, select Advanced Reporting > Application Control.
  4. Select the date range for the data you want to see.

Screen shot of Advanced Visualization Tool date selector

  1. Click Refresh.

    The dashboard shows information for the time period selected.
  2. Select the Special Applications & Tools tab.

Screen shot of Advanced Visualization Tool, ART > Special Applications and Tools

  1. In the Remote Access Applications Executed tiles, review the list of applications executed by machine and user.

See Also

Monitor Script-Based Applications

Monitor Unwanted Freeware