Contents

View Participating Devices and Quarantine Status

For AP-based threats, the AP is the primary device. For client-based threats, the AP is the device that is associated with the primary device (the client).

For client-based threats, the client is the device that is associated with the primary device (the AP). For client-based threats, the client is the primary device.

When you select an event displayed in Forensics, you can view the details of the devices participating in the event. You can also view the quarantine status of these devices.

To view the participating device details and quarantine status:

  1. Select Forensics.
  2. Select the location where you want to view the threats.
  3. Click the time hyperlink next to Select duration to define the time duration for which you want to view the threats.
  4. Select the type of threat under AP related threats or Client related threats.
  5. Select an event row and view the participating devices in the Participating Devices section seen below the event list.

Field

Description

AP

AP name.

Client

Client name.

Association Start Time

Start time when the primary device associates with the participating device.

Association End Time

Time of end of association of primary device with the participating device.

Quarantine Status

Indicates whether the device has been quarantined. Depending on the status, you can click the status hyperlink to view the quarantine details or the reason why the device was not quarantined.

Give Us Feedback  ●   Get Support  ●   All Product Documentation  ●   Technical Search