Dashboards, monitors, and Threat Prevention

Endpoint Security: Compliance Status

Whether the enabled state in the policy matches the enabled state on the client system. If the technology is enabled in policy and disabled on the client, the system is noncompliant.

Endpoint Security Threat Prevention: Access Protection Compliance Status

Number of systems with Access Protection compliant or noncompliant:

Endpoint Security Threat Prevention: AMCore Content Compliance Status

Number of systems with AMCore content compliant or noncompliant:

Endpoint Security Threat Prevention: Exploit Prevention Compliance Status

Number of systems with Exploit Prevention compliant or noncompliant:

Endpoint Security Threat Prevention: On-Access Scan Compliance Status

Number of systems with on-access scanner protection compliant or noncompliant:

Endpoint Security: Content Status

Versions of the content files and engine.

Endpoint Security Threat Prevention: Content Status

Version of the AMCore Content and the number of systems with that version installed.

Endpoint Security Threat Prevention: Exploit Prevention Content Status

Version of the Exploit Prevention Content and the number of systems with that version installed.

Endpoint Security: Installation Status

Whether a module is installed.

Endpoint Security Threat Prevention: Hotfixes Installed

Number of systems with Threat Prevention hotfixes installed, including hotfix version numbers.

Endpoint Security: Scan Duration

Average time for system scans.

Endpoint Security Threat Prevention: Duration of Completed Full Scans in the Last 7 Days

Number of completed Full Scan system scans by time in hours (from less than 1 hour to greater than 12 hours) and the number of systems per duration.

For each duration, this monitor shows:

Endpoint Security Threat Prevention: Duration of Completed Quick Scans in the Last 7 Days

Number of completed Quick Scan system scans by time in hours (from less than 10 minutes to greater than an hour) and the number of systems per duration.

For each duration, this monitor shows:

Endpoint Security: Threat Event Origins

How threats are entering the environment.

Endpoint Security Threat Prevention: Applications with the Most Exploits in the Last 7 Days

Applications with the most buffer overflow exploits, including the number of detections.

Endpoint Security: Protection Summary (Only in Trellix ePO - SaaS)

Displays information on the number of nodes installed, protected, and whether the content is up to date (i.e., less than a week old).

Protection Status

There is also an option to start the Install Protection workflow from this monitor.

In this monitor, the criteria for Installed, Protected, and Up-to-date count is as follows: