Viewing endpoint status

Administrator Help | TRITON AP-DATA | Version 8.3.x

Endpoint running TRITON AP-ENDPOINT DLP test their connectivity and check for configuration updates at time intervals specified in the endpoint system settings. The Endpoint Status screen summarizes the results of these checks. You can filter down to locate servers which have not synchronized or run discovery for an extended period of time, and also view detailed information for a particular server.

To view the status of all installed DLP endpoints:

Select Main > Status > Endpoint Status.

The resulting screen lists all Forcepoint data endpoints registered with the TRITON management server. The list displays information for each endpoint, such as:

Hostname - hostname of the endpoint client machine

IP address - IP address of the endpoint client machine

Logged-in Users - users who are currently logged into the endpoint

Last Update - last time that the endpoint checked for updates from the management server

Profile Name - name of the endpoint profile assigned to the endpoint

Synchronized - lists whether endpoints are synchronized or not synchronized with the latest management server updates. The sync status shows an "X" when the policy or profile version is not synchronized with the management server or when the endpoint's profile name is out of sync.

Discovery Status - lists whether a discovery process is currently idle or running on the endpoint. The discovery status shows N/A for endpoints that are not used in discovery, such as Linux endpoints.

Client Status - lists whether endpoint clients are enabled or disabled (via the Bypass option).

To customize the information shown in each column or to view descriptions, click the Table Properties (

) button. There are many other options available than displayed in the table by default. See below for descriptions of the information you can display.

To drill down further on information for each endpoint, select an endpoint in the list. There you can view the profile name, fingerprinting version, and more.

To remove an endpoint from the list (such as one that no longer exists), select the endpoint and click Remove. If the endpoint is still active, it will automatically be added back when it sends status to the endpoint server.

From this screen you can also do the following:

To search for a specific endpoint in the list, in the Find host field enter the hostname and click the Find button.

Click Bypass Endpoint to temporarily disable the selected endpoint. For more information, see Bypassing endpoint clients.

Click Settings to view and edit the system settings for endpoints. For more information, see Configuring endpoint settings.


	Note After an endpoint client receives an update and displays the new updated time, it can still take up to a minute until all policies are updated.

Changing table properties

Click the Table Properties (

) button to customize the contents of your report. Select the properties to display and choose the column width for each


Column	Description
Client Installation Version	Version of the endpoint client software that is installed on the endpoint machine.
Client Status	Status of the endpoint client: enabled or disabled.
Discovery Status	The status of the discovery service on the endpoint.
Endpoint Server	Name of the server associated with this endpoint.
Files Scanned	The number of files that were scanned on the endpoint in the most recent scan.
Host Name	Host name of the endpoint machine.
IP Address	IP address of the endpoint machine.
Last Scan End Time	The time that the latest endpoint scan ended.
Last Scan Start Time	The time that the latest endpoint scan began.
Last Update	Last time the endpoint received updates from the management server (profiles, policies, etc.).
Logged-in Users	Users who have logged into the endpoint.
MAC Address	MAC address of the endpoint client machine.
Next Scan Time	The time scheduled for the next endpoint scan.
Policy Engine Version	Version of the policy engine machine that is associated with this endpoint.
Profile Name	The name of the endpoint profile on this machine.
Synced	Indicates whether the endpoint is updated with the latest settings. The sync status shows an "X" when the policy, fingerprint, or profile version is not synchronized with the management server or when the endpoint's profile name is out of sync.

Applying column filters

If you choose, you can sort, group, and filter items by column name. For example, you can sort by profile name or IP address.

To do so, click the down arrow by any column name and choose an option:


Field	Description
Sort Ascending	Select this option to sort the table by the active column in ascending alphabetical order.
Sort Descending	Select this option to sort the table by the active column in descending alphabetical order.
Filter by (column)	Select this option to filter the data in the table by the type of information in the active column, such as by description or task name.
Clear filter	Select this option to clear the filter and display all tasks.

To view the current filters in use, click the information icon

next to Column Filtering Activated.

Columns using a filter have a funnel icon

next to the column name.

To clear a filter from a column, click the down arrow by any column name and select Clear filter. Additionally, many screens have a Filter button: clicking this button enables you to clear a single filter or all filters.

If there are too many items to fit on the screen, you can also browse the list using the Next, Previous, First, and Last buttons.