Online Help Center Home
Privacy and Personal Data Collection Disclosure
- Pre-release Disclaimer
- Pre-release Sub-feature Disclaimer
Trend Vision One Data Privacy, Security, and Compliance
What's New
- May 2023
- April 2023
- March 2023
Introduction
- Trend Vision One
- Checking the Trend Vision One Service Status
  - SERVICE LEVEL OBJECTIVES FOR TREND VISION ONE (herein this “SLO”)
Getting Started
- Getting Started with Trend Vision One
- Getting Started with Vulnerability Prioritization and Assessment
Risk Insights
- Executive Dashboard
- Attack Surface Discovery
- Operations Dashboard
- Security Dashboard
  - Customizing the Security Dashboard
- Report Management
XDR Threat Investigation
- Detection Model Management
- Workbench
  - Alert View
  - Incident View
- Search App
- Observed Attack Techniques
- Targeted Attack Detection
- Forensics and Analysis
  - War Room Tab
    - Workspaces
      - Adding Elements to an Investigation Timeline
  - Packages Tab
    - Evidence Collection
      - Manual Evidence Collection
      - Supported Evidence Types
- Managed Services
Threat Intelligence
- Campaign Intelligence
  - Threat Information Screen
- Intelligence Reports
- Suspicious Object Management
  - Suspicious Object List
  - Exception List
    - Adding Exceptions
- Sandbox Analysis
- Third-Party Intelligence
  - TAXII Feeds
    - Configuring a TAXII Feed
  - MISP Feeds
Workflow and Automation
- Security Playbooks
- Response Management
  - Response Actions
  - Response Data
- Third-Party Integration
- API Automation Center
- Service Gateway Management
Zero Trust Secure Access
- Getting Started with Zero Trust Secure Access
- Secure Access Overview
- Secure Access Rules
- Secure Access Resources
- Secure Access History
- Secure Access Configuration
- Troubleshooting Zero Trust Secure Access
Assessment
- Security Assessment Service
Endpoint Security Operations
- Endpoint Inventory 2.0
- Endpoint Inventory
  - Getting Started with XDR for Endpoints
  - Managing the Endpoint List in Endpoint Inventory 1.0
    - Endpoint List Settings in Endpoint Inventory 1.0
- Endpoint Policies
- Trend Cloud One - Endpoint & Workload Security
Network Security Operations
- Network Inventory
- Network Intrusion Prevention
Email Security Operations
- Email Account Inventory
  - Email Sensor Management
Mobile Security Operations
- Getting Started with Mobile Security
- Mobile Inventory
- Mobile Detection Logs
- Mobile Policy
  - Mobile Policy Data
  - Configuring Mobile Policies
- Risky Mobile Apps
  - Risky Mobile App Data
  - Approved List Data
Point Product Connections
- Product Connector
  - Connecting a Product
  - Required Settings on Supported Products
Account
- Single Sign-On
  - Configuring SAML Single Sign-On
- User Accounts
- User Roles
  - Configuring Custom User Roles
  - Predefined Roles
- Notifications
- Audit Logs
  - User Logs
    - User Log Data
  - System Logs
    - System Log Data
- Console Settings
- License Information
- Credit Usage
- Support Settings
Getting Help and Troubleshooting
- Help Kit
  - Toolbox Resources
  - Simulations
- Self-Diagnosis

Devices Tab

View information about devices and manage devices on the Devices tab.

You can view the following information on the Devices tab.

Data	Description
Device	Device information in the following format: Owner's name + Brand + Model Example: `John Doe's Apple iPhone 7` Click the device name to view detailed information in the device details panel.
Agent status	The status of the Mobile Agent Normal The Mobile Agent is connected to the server and has retrieved the latest policy information. Outdated The Mobile Agent is connected to the server and has not retrieved the latest policy information. Inactive The Mobile Agent is not connected to the server and has not reported any data for 30 consecutive days.
Operating system OS version	The operating system running on the device When using Intune integration, Operating system also includes the enrollment profile type of the device running Android. Note: Mobile Security supports the following Android management solution and enrollment profile types: Android Enterprise: Personally-owned devices with work profile, Corporate-owned dedicated devices, and Corporated-owned, fully managed user devices Android device administrator
Ownership	Whether the device is corporate-owned or personally-owned in Intune integration
Risk level	The risk level that Mobile Agent assigns to the device based on the scan result Low Mobile Security detected slightly suspicious characteristics of threats in the last scan. For example, the developer mode or USB debugging is enabled or the operating system is out of date. Medium Mobile Security detected moderately suspicious characteristics of threats in the last scan, such as potentially unwanted apps and malicious Wi-Fi networks. High Mobile Security detected highly suspicious characteristics of threats in the last scan, such as malicious apps, malicious iOS/iPadOS profile, or rooted device.
Policy	The policy that the device applies
User	The owner of the device
Last scanned	The time when the device was last scanned

You can perform the following actions on the Devices tab.

Action	Description
Filter device data	Use the following drop-down lists and the search box to locate specific device data: Agent status Operating system Risk level
Unenroll devices	Select one or more devices from the list and click Unenroll Device. Note: Trend Micro recommends unenrolling devices that have been transferred to other users or made obsolete.
View device details	Click a device name. View information about the device hardware, operating system, and security profile. You can also click the links to access information about the most recent detections. If a device's risk level is Medium or High, you can click to view the scan result of the device.
Wipe devices	Click the Wipe action icon corresponding to a device. This action applies to Android devices using Intune integration only. The Wipe action restores devices to their factory defaults, permanently deletes all data from the devices, and removes the devices from the Mobile Inventory list. Note: Mobile Security cannot remotely wipe Android devices with the Personally-owned devices with work profile type.
Lock devices	Click the Remote Lock action icon corresponding to a device. This action applies to Android devices using Intune integration only. The Remote Lock action locks a device. To unlock the device, the device owner needs to enter their passcode. Note: Mobile Security cannot remotely wipe Android devices that do not have a PIN or password configured.