topic SmartEndpoint changing the number of total endpoints in Endpoint

SmartEndpoint changing the number of total endpoints

Herson_A — Thu, 12 Sep 2019 07:43:16 GMT

Each day I open the SmartEndpoint I found different totals of endpoint installed, sometimes it goes up and sometimes goes down.

What could be the reason for that, as I need to send a report to my CISO every week.

How does heartbeat work to check if a machine is alive?

Re: SmartEndpoint changing the number of total endpoints

G_W_Albrecht — Thu, 12 Sep 2019 09:26:02 GMT

Why did you ask this question in Developers > API / CLI Discussion and Samples ? I would rather use Endpoint Security Products instead !

Different totals of Endpoints installed is strange - connected / disconnected is the usual numbers game...

Re: SmartEndpoint changing the number of total endpoints

Herson_A — Thu, 12 Sep 2019 09:31:19 GMT

Thanks for the reply G_W_Albrecht, I didn't notice.

I will pay attention next time.

Re: SmartEndpoint changing the number of total endpoints

Herson_A — Thu, 12 Sep 2019 10:17:44 GMT

Well all of them were connected and suddenly the number of machine has changed in a time period of a week.

I had 2204 machine installed with SandBlast Endpoint and now more than 100 machines are missing.

Is there a funtionality were checkpoint detach a machine from smartendpoint if that machine does not respond to heartbeat like in symantec? I remember symatec had 90 days rule to detach a machine.

Re: SmartEndpoint changing the number of total endpoints

G_W_Albrecht — Thu, 12 Sep 2019 10:24:25 GMT

So i would use the Activity Reports group that includes these endpoint and Endpoint Policy Server status reports:

• Endpoint Connectivity - Shows the last time each endpoint computer connected to the network.

• Endpoints with Not Running Blades - Shows the status of components for users and endpoint computers. You can use this report to see which components are running or not running.

• Protected by Endpoint Security - Shows if endpoint computers are protected by Endpoint Security.

You can sort by status:

• Unprotected Computers - Computers that do not have the Endpoint Agent installed.

• Unassociated Users - Users who were identified in the Directory scan but did not log on to a computer with Endpoint Security.

• Endpoint Installed - Computers that have the Endpoint Agent installed.

• Endpoint Policy Server Status - Shows Endpoint Policy Server status (Active or Not Active)

• Endpoint Connectivity by External Policy Server - Shows which Endpoint Policy Server each endpoint communicates with.

See Endpoint Security Administration Guide R80.30 p.34f for details.

Re: SmartEndpoint changing the number of total endpoints

PhoneBoy — Thu, 12 Sep 2019 16:14:57 GMT

We do remove systems we haven't seen in 30+ days.