topic Re: Endpoint Reporting in Endpoint

Endpoint Reporting

Tony_Graham — Mon, 27 Feb 2023 19:18:12 GMT

Is there a way to see Endpoint users connection status like Connect has? If not, can we get an item in Asset Management that we can add in the interface that says 'Connected' as a category in the title bar with a green or grey orb like Connect has? Maybe a red orb if there is a client issue that needs remediation? I can of course run queries but having a default overview in Asset Manager that I can immediately see status like Connect would be amazing. It would also be nice if we could customize the main overview screen like VMware allows with vCenter.

In general Connect is much easier to use. You get reports that show what things are getting around your in-place protections. I had an instance where several malware services were being allowed but Connect flagged them as high risk (and appeared in my weekly report I get...automatically). I was able to add the URL of the offenders to a block list. Problem solved. With Endpoint you are flying blind. I have not figured out a way to get Endpoint to even send me a basic report.

Re: Endpoint Reporting

PhoneBoy — Fri, 03 Mar 2023 22:44:10 GMT

I don't know that we collect "connected status" with Endpoint the same way we do with Connect.
Are both services managed through Infinity Portal or are you using on-prem Endpoint?

Re: Endpoint Reporting

Tony_Graham — Mon, 06 Mar 2023 17:08:07 GMT

Management is through Infinity Portal. I also note that the emailed reports provided via Connect have links to collect the report in Infinity Portal. The same report provided by Endpoint does not which limits the emails usefulness in drilling for more details.

I actually prefer getting the report itself emailed to me like I used to get with Connect (that functionality was changed recently). I can see where it might create certain issues in some cases but I liked it better as it required less involvement on my part to peruse my security posture over the given timeframe. Would be nice to see report generation and inclusion instead of just a link to be an option.