SonicWall Endpoint Security Administration Guide

Endpoints

All Endpoints are listed in a table at Endpoint page. The table lists the Tenant (Tenant view only), Group, Hostname, Machine GUID, Local IP, OS, Agent Version, Device Isolation status, Connection status and Created At.

Admin can select the Active list of end points by clicking the Active button and Archived endpoint list can also be available by clicking Archived button.

The table below shows the Endpoints categories in detail:

Options Description
Tenant Displays the tenant's details.
Group Displays the group's details.
Hostname Displays the Host name of the Agent.
Machine GUID

Displays the GUID.

Local IP Displays the local IP address.
OS Supported OS version.
Agent Version Displays the Agent Version.
Device Isolation Displays the Device Isolation status (Enabled or Disabled).
Connection Status Displays the Connection status (Online or Offline).
Created At Displays the date and time the endpoint record was created.

To refine the search for specific issues, click on the Filter icon. It expands, and you can select a combination of parameters to filter against.

You have two options:

  1. Active tab: Select the active endpoints and click the Action drop-down in the Endpoints view provides all endpoint management operations in one place.
    1. Archive Device

      Select the active endpoint and click the Action to choose Archive Device

      Remove the endpoint from the active list without deleting its data.

      You can archive the endpoints at the tenant level only. Archived endpoints will be automatically removed if they don’t reconnect within the configured time. If they reconnect, they will be restored automatically. You can also choose to delete them manually from the archived list anytime.

    2. Endpoint Scan
      1. Check the Full Scan check box and provide the path.

        Trigger an on-demand full scan on the selected endpoint(s).

        It is recommended not to use wildcard (*) in the path. For example: C:\Users\*\Downloads\.

      2. Click Confirm.

    3. Isolate Device
      1. Click Confirm to isolate the endpoint.

        Cut the endpoint off from the network while keeping the agent active.

    4. Unisolate Device

      Restore normal network connectivity to an isolated endpoint.

    5. Uninstall Agent
      1. Click Confirm to uninstall the selected Agent.

        Push a remote uninstall command to the selected endpoint(s).

    6. Move to Group

      Reassign the endpoint to a different group (within the same or a different tenant).

      For detailed steps, see Moving Endpoints Between Groups

  2. Archived tab: Select the Archived endpoint and click the Action to choose the following actions.
    1. Unarchive Device

    2. Delete Archived

  3. Download: Click Download to get the endpoints detail in CSV file.
  4. Clear: Click Clear to refresh data.