Monitor WatchGuard SaaS DR

Applies To: WatchGuard SaaS DR

The Monitor menu in the NDR UI is where you monitor your network, review policy alerts, monitor user activity, perform remediation actions, and view audit logs.

Available pages and features vary and depend on your license type. Throughout this documentation, NDR refers generally to all products. If you do not see a page or feature in the NDR UI, it is not supported by your product.

Network Summary

The Network Summary Page opens by default when you select Monitor > NDR.

This page provides an overview of your network and includes information about your users and user activity, and policy alerts. For more information, go to About the NDR Network Summary Page.

Policy Alerts

The Policy Alerts page shows a list of policy violations for you to review and investigate. For more information, go to About Policy Alerts.

Users

The Users page shows a list of users, user activity, and remediation status associated with a NDR cloud integration. This page is only available with a WatchGuard SaaS DR or Total NDR license. For more information, go to WatchGuard NDR and WatchGuard SaaS DR Users, About WatchGuard SaaS DR Licenses, and About Total NDR Licenses.

NDR Audit Logs

The NDR Audit Logs page shows logs for user remediation history, policy and zone configuration history, and SaaS collector log history for your WatchGuard SaaS DR integration. For more information, go to NDR Audit Logs.

Search Raw Logs

The Search Raw Logs page shows details about Microsoft 365 document and user access logs. You can use the information on this page to search, sort, and filter Microsoft 365 raw logs. For more information, go to Search Raw Logs in WatchGuard SaaS DR.

Related Topics

About WatchGuard SaaS DR Cloud Integration — Microsoft 365

Configure WatchGuard SaaS DR