Detailed device view

Click on each device to display the device detail page.

1
Top level filters: Filter based on users, endpoints, and date range filter the device specific records.

2-3
Device overview: Displays the number of unique users, endpoints, applied custom rules, and the volume of read-write on the device. A time line plot for the selected device shows the volume of data read from or written to the device for the selected period.
4
Device activity: Displays the log of device access and use over a selected period along with the user and endpoint details.
  • Activity details: Displays all the alerts received from Forcepoint DLP and Neo for the device activity recorded and the permission allowed on the device.

  • File transfer: Displays information on list of files read, copied from, or copied to the removable storage. Only the top 50 files are displayed, and the rest of the list can be downloaded in JSON format using the download button.

    Note: Copying files from removable storage is only applicable for Windows.

For users logged in as analyst, the Endpoint field under the Activity details will be anonymized.

Export PDF reports for specific devices using the icon. For more details, refer the section Export data from Forcepoint Neo portal.