Endpoint

Use the Endpoint screen to manage all endpoints detected by the Endpoint Sensor server.

Note:

The following table lists the endpoint details available for review:

Table 1. Endpoint Details

Column Name

Description

Host Name

The computer name of the Windows endpoint running the Endpoint Sensor agent. This column also shows the status of the endpoint:

  • A green status indicator indicates that the endpoint is online

  • A gray status indicator indicates that the server has received no response from the endpoint for more than 15 minutes

IP Address

The IPv4 address of the agent endpoint.

Operating System

The Windows variant running on the endpoint.

Event Recording

The status of the agent if it is actively recording events.

Registered

The date and time when Endpoint Sensor first communicated with the agent.

Latest Response

The date and time when the agent last communicated with the Endpoint Sensor server.

Recording Exceptions

The number of objects to be excluded from recording.

Click on the value to view the list of recording exceptions for a specific endpoint.

Agent Version

The version of the Endpoint Sensor agent installed on the endpoint.

Asset Tag

A user-defined string that identifies the endpoint. Click Configure to add an Asset Tag to an endpoint.

Database Size

The maximum size allowed for the agent database. Once the agent database reaches this size, Endpoint Sensor purges old records to accommodate new ones.

Pattern

The version of the pattern deployed to the endpoint.

Rule

The monitoring rules enabled for the endpoint.

Select at least one endpoint to enable the following options:

  • Click Settings to set the properties for the selected endpoints. The following options are available:

    • Asset tag: Specify an asset tag for the endpoint. When multiple endpoints are selected, specifying an asset tag overwrites the existing asset tags of the selected endpoints. Leave the asset tag blank to keep the original tags of the selected endpoints.

    • Database size: Select a maximum size for the agent database. When multiple endpoints are selected, specifying a new size overwrites the existing database size of the selected endpoints.

    • Event recording: Toggles event recording for the selected endpoints. This is useful if the selected endpoint is undergoing maintenance (for example, installing system updates) and it is required to temporarily stop the agent. When multiple endpoints are selected, toggling event recording overwrites the existing setting of the selected endpoints.

    • Recording exceptions: Specify the full path to the object (.exe files only) to be excluded from event recording. Click Export to save the Recording exceptions list as a .csv file.

      When multiple endpoints are selected:

      • Recording exceptions does not display any data.

      • Append to existing lists adds any new exception specified to the existing exceptions of all selected endpoints. This is the default option.

      • Overwrite existing lists replaces the existing exceptions of all selected endpoints.

  • Click Remove to remove the endpoint from the list of managed endpoints.

    Note:
    • Once removed, Endpoint Sensor will not be able to manage the endpoint, and the endpoint will no longer be available for investigation purposes. If you need to re-register the endpoint, contact Trend Micro support.

    • Removing an endpoint from this list does not uninstall the agent on the endpoint. For details on uninstalling an agent, see the Endpoint Sensor Installation Guide.

  • Click Upgrade to upgrade all registered endpoints.

    Note:

    The upgrade feature is available for Endpoint Sensor servers with versions 1.6 Update 3 and later. Additionally, only Endpoint Sensor agents released after the 1.6 Update 3 (Build 3092) version can be automatically upgraded. To upgrade agents with versions lower than 1.6 Update 3 (Build 3092), reinstall the agents manually.

    • If the Endpoint Sensor server is integrated with OfficeScan, use the Trend Micro Endpoint Sensor Deployment Tool to manually install agents to selected endpoints.

      For details, see Installing the Trend Micro Endpoint Sensor Agent.

    • Other installation methods may be available depending on your environment. For assistance on other installation methods, contact Trend Micro support.

Use Search to locate a specific endpoint by using any of the following criteria:

  • Host Name: Specify the host name of the endpoint you want to locate.

  • IP Address: Specify a range of IP addresses to locate.

  • Asset Tag: Specify the asset tag of the endpoint you want to locate.

Use the following options to manage this list:
  • Use Filters to filter the list by tags. Select one or more tags to display only the endpoints with that tag.

  • Use the pagination control at the bottom of the list to display 10, 25, 50 or 100 endpoints at a time.