General

General

• Hostname: Appears in the Name column on the Computers page. The name must be either the IP address of the computer or the hostname of the computer. (Either a fully qualified hostname or a relative hostname may be used if a hostname is used instead of an IP address.)
• Display Name: Appears in the Display Name column and in brackets next to the Hostname value.
• Description: a description of the computer.
• Platform: Details of the computer's OS will appear here.
• Group: The computer group to which the computer belongs appears in the drop-down list. You can reassign the computer to any other existing computer group.
• Policy: The Policy (if any) that has been assigned to this computer.
  Keep in mind that if you unassign a Policy from a computer, Rules may still be in effect on the computer if they were assigned independently of the Policy.
• Asset Importance: Vulnerability ProtectionDeep Security Manager uses a ranking system to quantify the importance of Security Events. Rules are assigned a Severity Level (high, medium, low, etc.), and Assets (computers) are assigned an "Asset Importance" level. These levels have numerical values. When a Rule is triggered on a computer the Asset Importance value and the Severity Level value are multiplied together. This produces a score which is used to sort Events by importance. (Event ranking can be seen in the Events pages.) Use this Asset Importance drop-down list to assign an Asset Importance level to this computer. (To edit the numerical values associated with severity and importance levels, go to Administration > System Settings > Ranking.)
• Download Security Updates FromDownload Software Updates From: Use the dropdown list to select which Relay Group the Agent/Appliance on this computer will download SoftwareSecurity Updates from. (Not displayed if Agent is acting as a Relay.)

Status

Computer Status

The Status area displays the latest available information about the computer and the Protection Modules in effect on it. Whether the computer is protected by an Agent or an Appliance (or both in the case of Combined Mode) is displayed in the top row.

• Status:
  • When the computer is unmanaged the status represents the state of the Agent/Appliance with respect to activation. The status will display either "Discovered" or "New" followed by the Agent/Appliance state in brackets ("No Agent/Appliance", "Unknown", "Reactivation Required", "Activation Required", or "Deactivation Required").
  • When the computer is managed and no computer errors are present, the status will display "Managed" followed by the state of the Agent/Appliance in brackets ("Online" or "Offline").
  • When the computer is managed and the Agent/Appliance is in the process of performing an action (e.g. Integrity Scan in Progress", "Upgrading Agent (Install Program Sent)", etc.) the task status will be displayed.
  • When there are errors on the computer (e.g., "Offline", "Update Failed", etc.) the status will display the error. When more than one error is present, the status will display "Multiple Errors" and each error will be listed beneath.

Protection Module Status

The software that implements Deep Security 9.5 or later Protection Modules is installed deployed to Agents on an as-needed basis. Only core functionality is included when an Agent is first installed.

The Status area provides information about the install state of the Vulnerability ProtectionDeep Security modules. The status reflects the state of a module on the Agent as well as its configuration in Vulnerability ProtectionDeep Security Manager. A status of "On" indicates that the module is configured in Vulnerability ProtectionDeep Security Manager and is installed and operating on the Vulnerability ProtectionDeep Security Agent.

A green status light is displayed for a module when it is "On" and working. In addition, modules that allow individual rule assignment must have at least one rule assigned before they will display a green light. For example, in the image above, the Integrity Monitoring module is on and its light is green because a rule has been assigned to it.

• Anti-Malware: When Anti-Malware protection is on, the Anti-Malware status light is green. When it is off, the Anti-Malware status light is gray.
• Web Reputation: Whether Web Reputation is on or off.
• Firewall: Whether the Firewall is on or off and how many rules are in effect.
• Intrusion Prevention: Whether Intrusion Prevention is on or off and how many rules are in effect.
• Integrity Monitoring: Whether Integrity Monitoring is on or off and how many rules are in effect.
• Log Inspection: Whether Log Inspection is on or off and how many rules are in effect.
• SAP: Whether the SAP integration module is on or off.
• Online: Indicates whether the Manager can currently communicate with the Agent/Appliance.
• Last Communication: The last time the Manager successfully communicated with the Agent/Appliance on this computer.
• Check Status: This button allows you to force the Manager to perform an immediate heartbeat operation to check the status of the Agent/Appliance. Check Status will not perform a security update of the Agent/Appliance. (If an update is required click the Update Now button on the Actions tab.) When Manager to Agent/Appliance Communications is set to "Agent/Appliance Initiated" the Check Status button is disabled. (Checking status will not update the logs for this computer. To update the logs for this computer, go to the Actions tab.)
• Clear Warnings/Errors: Dismisses any Alerts or errors on this computer.
• ESXi server: If the computer is a virtual machine protected by a Virtual Appliance, the hosting ESXi server is displayed.
• Appliance: If the computer is a virtual machine protected by a Virtual Appliance, the protecting Appliance is displayed.
• ESXi Version: If the computer is an ESXi server, the ESXi version number is displayed.
• Filter Driver version: If the computer is an ESXi server, the Filter Driver version number is displayed.
• Guests: If the computer is an ESXi server, the Virtual Appliance and Guests are displayed.
• Appliance Version: If the computer is a Virtual Appliance, the Appliance version number is displayed.
• Anti-Malware Ready: If the computer is a virtual machine, Anti-Malware Ready indicates whether or not the VMware vShield Endpoint Thin Client has been installed. If the computer is a Virtual Appliance, Anti-Malware Ready indicates whether or not the VMware vShield Endpoint driver has been installed on the hosting ESXi server.
• Protected Guests On: If the computer is a Virtual Appliance, the IP of the ESXi server and the protected Guest are displayed.