Keep watch on the status of your managed systems and any threats in your environment using your customizable dashboard.
Dashboards are collections of monitors that track activity in your Trellix ePO - On-prem environment.
Default dashboards and monitors
The Common module provides several dashboards that include monitors from other modules.
Dashboard | Monitor | Description | Installed by module |
|---|---|---|---|
Endpoint Security: Compliance Status | Whether the enabled state in the policy matches the enabled state on the client system. If the technology is enabled in policy and disabled on the client, the system is noncompliant. | Common | |
Endpoint Security: Policy Compliance by Policy Name | Policies that are up to date, including the number of systems. | Common | |
Endpoint Security Common: Self Protection Compliance Status | Number of systems with Self Protection compliant or noncompliant:
| Common | |
Endpoint Security: Policy Compliance by Computer Name | Systems where the policies are up to date, including the number of policies. | Common | |
Endpoint Security Threat Prevention: Access Protection Compliance Status | Number of systems with Access Protection compliant or noncompliant:
| Threat Prevention | |
Endpoint Security Threat Prevention: AMCore Content Compliance Status | Number of systems with AMCore content compliant or noncompliant:
| Threat Prevention | |
Endpoint Security Threat Prevention: Exploit Prevention Compliance Status | Number of systems with Exploit Prevention compliant or noncompliant:
| Threat Prevention | |
Endpoint Security Threat Prevention: On-Access Scan Compliance Status | Number of systems with on-access scanner protection compliant or noncompliant:
| Threat Prevention | |
Endpoint Security Firewall: Compliance Status | Number of systems with Firewall compliant or noncompliant:
| Firewall | |
Endpoint Security Web Control: Compliance Status | Number of systems with Web Control compliant or noncompliant:
| Web Control | |
Endpoint Security: Detection Status | Threats detected for the previous 24 hours and 7 days. | Common | |
Endpoint Security: Threats Detected in the Last 24 Hours | Number of threat events in the last 24 hours, including the time of detection. | Common | |
Endpoint Security: Threats Detected in the Last 7 Days | Number of threat events in the last 7 days, including the time of detection. | Common | |
Endpoint Security: Summary of Threats Detected in the Last 24 Hours | Names of threats detected in the last 24 hours, including the number of threat events. | Common | |
Endpoint Security: Summary of Threats Detected in the Last 7 Days | Names of threats detected in the last 7 days, including the number of threat events. | Common | |
Endpoint Security: Environmental Health | Protection status of deployed Endpoint Security modules. | Common | |
Endpoint Security: Currently Enabled Technology | Number of systems that have a module or feature enabled, including the number of systems and percentage. For each technology, this monitor shows:
| Common | |
Endpoint Security: Installation Status | Whether a module is installed. | Common | |
Endpoint Security: Installation Status Report | Number of systems with Endpoint Security deployed, by module, including version details. | Common | |
Endpoint Security Platform: Hotfixes Installed | Number of systems with hotfixes installed, by module, including hotfix version numbers. | Common | |
Endpoint Security Threat Prevention: Hotfixes Installed | Number of systems with Threat Prevention hotfixes installed, including hotfix version numbers. | Threat Prevention | |
Endpoint Security Firewall: Hotfixes Installed | Number of systems with Firewall hotfixes installed, including hotfix version numbers. | Firewall | |
Endpoint Security Web Control: Hotfixes Installed | Number of systems with Web Control hotfixes installed, including hotfix version numbers. | Web Control | |
Endpoint Security: Threat Behavior | Threat activity and the spread of infection in the environment. | Common | |
Endpoint Security: Top Threats in the Last 48 Hours | Top 5 virus threats by number of events detected in the last 48 hours, including the total number of events and total number of infected users and systems. For each threat incident, this monitor shows:
| Common | |
Endpoint Security: Duration before Detection on Endpoints in the Last 2 Weeks | How long a particular threat was on the system before being detected, including:
For each duration, this monitor shows:
| Common | |
Endpoint Security: Top 10 Attacking Systems in the Last 7 Days | Top 10 systems that are infecting other systems (system name, IP address, and MAC address) and number of threat events per system. | Common | |
Endpoint Security: Threat Event Origins | How threats are entering the environment. | Common | |
Endpoint Security: Primary Vectors of Attack in the Last 7 Days | Primary vectors of attack, such as web or instant message, and includes:
For each vector, this monitor shows:
| Common | |
Endpoint Security: Top Infected Users in the Last 7 Days | Top 10 infected users, including the number and percentage of threat events per user. | Common | |
Endpoint Security Threat Prevention: Applications with the Most Exploits in the Last 7 Days | Applications with the most buffer overflow exploits, including the number of detections. | Threat Prevention | |
Endpoint Security Web Control: Web Content Categories that Caused the Most Infections in the Last 7 Days | Top 10 categories of websites that cause the most infections in the environment. | Web Control |
Custom dashboards (Trellix ePO - On-prem)
Depending on your permissions, you can create custom dashboards and add monitors using default Endpoint Security queries.
For information about dashboards, see theTrellix ePO - On-prem documentation.