Viewing endpoint status

Endpoint devices running Forcepoint DLP Endpoint test their connectivity and check for configuration updates at time intervals specified in the endpoint system settings. The Endpoint Status screen summarizes the results of these checks. Filter down to locate servers that have not synchronized or run discovery for an extended period of time, and also view detailed information for a particular server.

To view the status of all installed DLP endpoints:

1. In the Forcepoint Security Manager, go to the Data > Main > Status > Endpoint Status page.

   The resulting screen lists all Forcepoint data endpoints registered with the management server. The list displays information for each endpoint, such as:

   • Hostname of the endpoint client machine
   • IP address of the endpoint client machine
   • Logged-in Users (users who are currently logged into the endpoint)
   • Last Update (last time that the endpoint checked for updates from the management server)
   • Profile Name (name of the endpoint profile assigned to the endpoint)
   • Whether endpoint clients are Synchronized or not synchronized with the latest management server updates. The sync status shows an “X” when the policy or profile version is not synchronized with the management server or when the endpoint’s profile is not as it was set in the Manager.
   • Discovery Status (whether a discovery process is currently idle or running on the endpoint)

     The discovery status shows N/A for endpoints that are not used in discovery, such as Linux endpoints.

   • Client Status (whether endpoint clients are enabled or disabled via the Bypass option)

   There are many other options available than displayed in the table by default. To customize the information shown in each column, or to view descriptions of the available data, see Changing table properties section.

   There are also many options for filtering the data in the table. See Applying column filters section.

2. To drill down for further information about each endpoint, select an endpoint in the list. The profile name, fingerprinting version, and more are displayed.
3. To remove an endpoint from the list (such as one that no longer exists), select the endpoint and click Remove. If the endpoint is still active, it will automatically be added back when it sends status to the endpoint server.

Click Settings (see Configuring endpoint settings).