See Firebox Status in TDR

When you log in to TDR, you can see the status of the Fireboxes configured for your account. You can also see the Account UUID that uniquely identifies your account. To enable each Firebox configured for your account to send data to your account, you must add the Account UUID to the configuration of each Firebox. All operators can view the status of Fireboxes in TDR but only Administrators and Analysts can make changes.

After you enable TDR on the Firebox, you can review the Firebox page to verify that your Firebox can connect to your TDR account.

To see configured Fireboxes:

  1. Log In to TDR.
  2. Select Monitor > Threat Detection.
  3. In the Devices / Users section, select Firebox
    A list of Fireboxes configured for your account appears.

Screen shot of the Firebox Configuration page

For each Firebox, this page includes:

  • Firebox — The Firebox name specified in the System Information settings on the Firebox
  • Serial Number — The Firebox serial number
  • Last Seen — The last time the Firebox communicated with TDR. The status moments ago indicates that the last communication was received with the last heartbeat.

To add a Firebox to this list, you must enable Threat Detection and Response on the Firebox. For more information, see Enable TDR on Your Firebox.

If you disable Threat Detection and Response on the Firebox, or if the Threat Detection and Response subscription for a Firebox expires, the Firebox remains in the list, but the Last Seen date is no longer updated. Administrators or Analysts can manually remove Fireboxes from the list.