Viewing the Endpoint Sensors table on a standalone Central Node server with KSC integration

If you have configured integration with KSC, the table of hosts with the Endpoint Sensors component is located in the Endpoint Sensors section of the program web interface window.

The Endpoint Sensors section includes the following tabs:

• Central Node. Displays information about hosts with the Endpoint Sensors component that are connected to this Central Node server.
• KSC. Displays information about all hosts connected to KSC.

The Central Node tab can display the following information:

• Host—Host name with the Endpoint Sensors component.
• IP—IP address of the computer where the Endpoint Sensors component is installed.
• OS—Version of the operating system that is installed on the computer with the Endpoint Sensors component.
• Version—Version of the Endpoint Sensors component installed.
• Activity—Activity indicator of the Endpoint Sensors component. Possible values:
  • Normal activity for hosts from which latest data was recently received.
  • Warning for hosts from which latest data was received a long time ago.
  • Critical inactivity for hosts from which latest data was received an extremely long time ago.

The KSC tab can display the following information:

• Host—Host name with the Endpoint Sensors component.
• IP—IP address of the computer where the Endpoint Sensors component is installed.
• OS—Version of the operating system that is installed on the computer with the Endpoint Sensors component.
• Endpoint Sensor—Type of component used as an Endpoint Sensors component.

  A component may be one of the following types:

  • Endpoint Sensor.

    The Endpoint Sensors component that was installed from the Kaspersky Anti Targeted Attack Platform package.

  • Built-in KES.

    The Endpoint Sensors component that is included in Kaspersky Endpoint Security for Windows.

• Version— version of the Endpoint Sensors component installed.
• Server—Name of the server with the Central Node component.
• Sensor state—Status of the Endpoint Sensors component installed on the computer.

  An Endpoint Sensors component can have one of the following statuses:

  • Running.
  • Stopped.
  • Failure.
  • Not installed.
• Host state—Host status of the computer with the Endpoint Sensors component.

  A host can have one of the following states:

  • Offline
  • Online
• Errors—Error status in the operation of the Endpoint Sensors component. The status can take the value No errors or can contain information about the type of error in the operation of the Endpoint Sensors component.

Clicking any column of the table opens a list in which you can select one of the following actions:

• Filter by this value.
• Exclude from filter.
• Copy value to clipboard.

By clicking the link with the IP address of the computer where the Endpoint Sensors component is installed, you can also choose the Navigate to alerts filtered by this value action.

Clicking the link with the name of the host on which the Endpoint Sensors is installed allows you to select the following actions:

• Isolate from network.
• Find events.
• Find alerts.

See also Managing the Endpoint Sensors component Viewing the Endpoint Sensors table on a standalone Central Node server Viewing the Endpoint Sensors table in distributed solution and multitenancy mode Viewing information about a host Filtering and searching Endpoint Sensors by host name Filtering and searching Endpoint Sensors that have been isolated from the network Filtering and searching Endpoint Sensors by PCN and SCN server names Filtering and searching Endpoint Sensors by computer IP address Filtering and searching Endpoint Sensors by operating system version on the computer Filtering and searching Endpoint Sensors based on the Endpoint Sensor component version Filtering and searching Endpoint Sensors based on their activity Filtering and searching Endpoint Sensors by operating errors of the component Quickly creating a filter for computers with the Endpoint Sensors component Clearing the Endpoint Sensors filter Configuring Endpoint Sensors activity indicators Supported interpreters and processes

Page top