Endpoint Details in WatchGuard Cloud

Applies To: WatchGuard Cloud

Use the Endpoint Details page in WatchGuard Cloud to review details for all endpoints with the WatchGuard Agent installed. This includes WatchGuard Agent connection and version information, as well as the status of products and components such as Endpoint Security, FireCloud, ThreatSync+ NDR, Full Encryption, and Data Control data protection.

For more information for endpoints with a Endpoint Security product installed, go to Computer Details in Endpoint Security.

Your operator role determines what you can see and do in WatchGuard Cloud. Your role must have the Manage Endpoints permission to view or configure this feature. You must also have the Endpoint Security permissions enabled (Add, Discover, and Delete Computers and Restart and Repair Computers). For more information, go to Manage WatchGuard Cloud Operators and Roles.

To open the Endpoint Details page, in WatchGuard Cloud:

  1. Select Monitor > Endpoints.
  2. Select an endpoint from the Endpoints list.
    The Endpoint Details page opens for the selected endpoint.

Screen shot of Endpoint Details page in WatchGuard Cloud

In the upper-right corner of the page, click an icon in the toolbar to perform an action:

Icon Action
Sync icon Sync the endpoint with the WatchGuard servers and refresh the page.
Move icon Move the endpoint to another endpoint group.
Move to AD path icon Move the endpoint to its Active Directory Path group. This feature is only available for Windows, Linux, and Mac endpoints.
Delete icon Delete the endpoint and remove it from the list of endpoints. This feature is only available for Windows, Linux, and Mac endpoints.
Restart icon Restart the endpoint. This feature is only available for Windows, Linux, and Mac endpoints.

Click a tab to review information on these pages:

Details Page

On the Details page, the information available depends on the type of endpoint (for example, mobile device, computer, server) and operating system. Device details can include:

  • Name — Name of the endpoint. This name also shows in the upper section of the page.
  • Account — Service Provider account that owns the endpoint. Click the account name to open the Endpoints page for the account.
  • Description — Description assigned to the endpoint.
  • IP Addresses — Primary IP address of the endpoint. There can be more than one IP address, separated by commas for each hardware network connection.
  • Physical Addresses (MAC) — Comma-separated list of the physical addresses of each network interface installed on the computer.
  • Domain — Windows domain the endpoint belongs to.
  • Active Directory Path — Full path to the computer in the company Active Directory.
  • Last Discovered in Active Directory — Date and time when the endpoint was last discovered in Active Directory.
  • Endpoint Group — Assigned group for the endpoint. Click Move To to move the endpoint to a different endpoint group.
  • Operating System — Operating system name and version installed on the endpoint.
  • Virtual Machine — Shows whether the endpoint is a virtual machine or not (Yes or No).
  • Remote Control — Shows the feature status (Enabled, Disabled, Installation error, No license, No information).

In the WatchGuard Agent section of the page, you can review these details:

  • Version — WatchGuard Agent version (for example, v1.23.1.0000) installed on the endpoint.
  • Last Start — Last date and time the protection software started on the endpoint.
  • Installed — Date and time the WatchGuard Agent was installed on the endpoint.
  • Last Proxy Used — Name of the last proxy that the WatchGuard Agent connected to.
  • Last Connection — Last date and time the WatchGuard Agent connected to the WatchGuard servers.
  • Last Settings Check — Last date and time the WatchGuard Agent checked for updated settings.

Component Status Page

On the Component Status page, you can review the settings and status of products and components such as Endpoint Security, FireCloud, ThreatSync+ NDR, and data protection from Full Encryption and Data Control.

When a status error shows, point to the error to review information on the error.

Screen shot of Component Status page in WatchGuard Cloud

Endpoint Security

Expand this section to review the connection status (Enabled or Error) for:

  • Advanced Protection
  • File Antivirus
  • Mail Antivirus
  • Web Browsing Antivirus
  • Firewall
  • Web Access Control
  • Patch Management
  • Patch Installation
  • Program Blocking
  • Connection to Knowledge Servers

For more information about an install error, point to the error.

You can also review:

  • Last Checked Date — Date and time when connection of the Endpoint Security protection to the WatchGuard servers was checked.
  • Protection Version — Version of the Endpoint Security protection on the endpoint (for example, v8.00.19.0001).
  • Knowledge Update Date — Date and time when signature files (knowledge files) were last updated on the endpoint.

FireCloud

Expand this section to review details for the FireCloud Connection Manager, including:

  • FireCloud Client — Active, Inactive, Installing, Not Installed, or Install Error
  • Client Version

For information on the Connection Manager, go to About the WatchGuard Connection Manager.

ThreatSync+ NDR

Expand this section to review status details for the ThreatSync+ NDR Collection Agent, including:

  • NetFlow — On, Off
  • sFlow Monitoring — On, Off
  • Free Space — Space available on the agent computer (GB)

You can also review status details for the ThreatSync+ NDR Windows Log Agent, including:

  • DHCP Monitoring — On, Off
  • NXLog — On, Off

For more information about an install error, point to the error.

For information on the collection agents, go to About ThreatSync+ NDR Collection Agents.

Data Protection

For endpoints with the WatchGuard Data Control and Full Encryption endpoint security modules, expand this section to review the status of these features that protect the data stored on the computer:

  • Personal Data Monitoring — Enabled, Error
  • Allow Data Searches on this Computer — Enabled, Error
  • Personal Data Inventory — Enabled, Error
  • Indexing Status — Not indexed, Indexed, Indexed (text only), Indexed (all content), or Indexing
  • Hard Disk Encryption — Not Available, No Information, Enabled, Disabled, Error, Error Installing, or No License
  • Authentication Method — Unknown, Security Processor (TPM), Security Processor (TPM) + Password, Password, USB Drive, or None

Related Topics

Manage Endpoints in WatchGuard Cloud

About ThreatSync+ NDR Collection Agents