You manage your Threat Detection and Response account in WatchGuard Cloud. For information about how to log in to your TDR account, see Log In to TDR.
When you log in to WatchGuard Cloud as a Subscriber, the default view is the main WatchGuard Cloud dashboard. Several tiles on the page display key metrics and important information. Click the title of any tile to see more detailed information.
The main WatchGuard Cloud dashboard shows four TDR tiles:
- Host Status
- Host Sensor License Details
Service Providers have a different view of WatchGuard Cloud. If you have a Service Provider account, you must select an account from Account Manager to monitor or configure TDR.
You can view TDR features in WatchGuard Cloud from the Monitor and Configure menus.
In the top navigation bar, select Monitor > Threat Detection.
The TDR summary page appears by default in the Monitor > Threat Detection menu. The summary page includes several counters and metrics, and is a snapshot of activity for your account.
In the left navigation menu, you can select pages to monitor TDR. The options available in the left menu depend on your account type, and the user roles assigned to your TDR user account.
The current CYBERCON level appears at the top of the left navigation menu. For more information, see About TDR Cybercon Levels.
In the top navigation bar, select Configure > Threat Detection.
The Containment Exceptions page appears by default in the Configure > Threat Detection menu.
In the left navigation menu, you can select pages to configure TDR. The options available in the left menu depend on your account type, and the user roles assigned to your TDR user account.
Common TDR Features
On many of the TDR pages in WatchGuard Cloud, you can use these common features to navigate through the pages, refine the data you see included in reports, or make configuration changes. Not all features are available on all pages.
To refresh the data on many of the TDR pages, click Refresh Now.
If you have installed the AD Helper component for TDR, AD Helper can synchronize the host, domain, and group data from your Active Directory domain controller to TDR. To synchronize the Active Directory data, click Sync Now.
To export the data in the current page to a text file, click Export.
To save the selected configuration settings to a file, select the items and then click Backup. For example you can backup policies, exclusions, and signature overrides.
To import configuration items from a saved backup file, click Import. You can import settings backed up from one TDR account to a different account.
You can select one or more filters in the column headings. You can save a filter and it is applied by default when you open the page.
- To apply a filter to the items, from the filter at the top of the column, select one or more items to filter on, and click . Click Apply.
The columns with active filters are shaded blue.
- To clear all filters, click . Select Clear.
- To save a filter, click . Select Save.
- To remove a saved filter, click . Select Remove.
Some pages, such as the Policy page, have additional filters above the table.
To search the currently filtered results for items in the current view, in the Search text box type the text or value to search for.
On many pages with tables, you can click Choose Columns to select which columns in the table are visible.
Get More Information
To see more information about a setting in TDR in WatchGuard Cloud, next to the setting, click .