Applies To: WatchGuard NDR, WatchGuard SaaS DR
The Monitor menu in the NDR UI is where you monitor your network, review Smart Alerts and policy alerts, monitor devices, monitor user activity, and view policy and zone logs.
Available pages and features vary and depend on your license type. Throughout this documentation, NDR refers generally to all products. If you do not see a page or feature in the NDR UI, it is not supported by your product.
Network Summary
The Network Summary Page opens by default when you select Monitor > NDR.
This page provides an overview of your network and includes information about your subnets and organizations, zones, and devices. For more information, go to About the NDR Network Summary Page.
Smart Alerts
The Smart Alerts page shows open Smart Alerts for operators to review and respond to. For more information, go to About Smart Alerts.
Policy Alerts
The Policy Alerts page shows a list of policy violations for you to review and investigate. For more information, go to About Policy Alerts.
Users
The Users page shows a list of users and user activity associated with Microsoft 365, VPN, or Google Workspace. For more information, go to WatchGuard NDR and WatchGuard SaaS DR Users.
Discover
The Discover page shows new devices or subnets on your network that NDR detected. For more information, go to WatchGuard NDR Asset Discovery.
NDR Audit Logs
The NDR Audit Logs page shows logs for policy and zone configuration history on your network, IP addresses, users, SaaS collector logs, and Smart Alert Controls audit logs. For more information, go to NDR Audit Logs.
Search Raw Logs
The Search Raw Logs page shows details about Microsoft 365 document and user access logs. This page is only available with a WatchGuard SaaS DR or Total NDR license. For more information, go to Search Raw Logs in WatchGuard SaaS DR and About WatchGuard SaaS DR Licenses.
All IP Addresses
The All IP Addresses page shows details about internal and external IP addresses. You can use the information on this page to view detailed information about IP address activity, device activity, view associated Smart Alerts and policy alerts, and you can perform block and unblock actions on specific external IP addresses. For more information, go to All IP Addresses.