Hosts

This section discusses the following topics:

Managing Hosts in the ETM Dashboard

The Hosts view in the ETM Dashboard lets you view the Internet activity of host devices on your networks. You can view additional details of hosts that Webroot Endpoint Protection or Malwarebytes protect.

To view additional host details, you must configure a connection with the Webroot or Malwarebytes Cloud Management system. See Managing Endpoints Via Malwarebytes Integration and Managing Endpoints via Webroot Integration for more details.

This information is queried and updated daily.

Viewing Hosts

To view activities and other details of host devices, click Hosts. The Hosts table in the left pane provides details about each host.



You can hide columns, sort, or filter any details by clicking the three stacked horizontal lines at the right-hand side of each column header and choosing an action.



The available columns for each host include:
  • Endpoint Security Association icon
  • Hostname
  • IP address
  • Mac Address
  • Mac Address vendor
  • Appliance
  • UID
  • Operating System
  • Quota and Quota usage
  • License entitlement
  • Date creation
  • Date updated

Click a specific host to view additional details.

Summary

By selecting a host, you can view a summary of the host in the Host Details panel at the bottom. The summary includes the same information as the details in the host's table.


Endpoint Security Details

The Endpoint Security tab shows details related to the endpoint security software, including the engine version and when it was last seen on the network.

You can click the link at the top of the screen to launch the web console for the corresponding endpoint management system for more details and actions.


Installed Software

You can see software installed on the endpoint using the Installed Software tab.


Sessions

You can click Sessions at the bottom of the Host Details panel to view all active sessions from that host.



The available details for each session include the following:
  • Timestamp
  • Protocol
  • Hostname
  • Client Port
  • Server
  • Server Port
  • Server Country
  • End Time
  • License entitlement
  • Bypass status
  • Tags

You can hide columns and sort any details by clicking the three stacked horizontal lines at the right-hand side of each column header and choosing an action.

Web Events

By clicking Web Events, you can view all URLs currently visited by the selected host.



The available details for each web event include:
  • Timestamp
  • Hostname
  • Client Port
  • Server
  • Server Port
  • Domain
  • Host
  • URI
  • Method
  • Category
  • Blocked
  • Flagged
  • Reason

You can hide columns and sort any details by clicking the three stacked horizontal lines at the right-hand side of each column header and choosing an action.



The available details for each application connection include:
  • Application - The detected application is based on the connection characteristics.
  • Server - The IP address of the remote server.
  • Server Country - The inferred location of the remote server is based on the IP address.
  • Category - The application category.
  • Confidence - A confidence level related to the accuracy of the detection.
  • Details - Identifiable metadata associated with the network traffic.
  • Sent - The amount of transferred data during the connection.
  • Received - The amount of received data during the connection.
  • Total - The total volume of transferred data during the connection.
  • Is Bypassed - Was the connection excluded from app management?
  • Is Blocked - Whether the connection was blocked.
  • Is Flagged - Was the connection flagged?
  • Tags - Any tags that may be associated with the connection.

Managing Endpoints via Bitdefender GravityZone Integration

The ETM Dashboard integrates with Bitdefender GravityZone to extend the host management capabilities in the ETM Dashboard. In the Hosts screen in the ETM Dashboard, you can see additional information about each host and perform specific actions.

Connecting your GravityZone Account

To connect your GravityZone account, you need the following details:
  • Access URL - The Access URL defines the region of your account.
  • API Key - An API Key allows the ETM Dashboard to authenticate to your account to retrieve information about the endpoints you manage.
To obtain an API key and the Access URL from your GravityZone account:
  1. Log in to GravityZone Control Center.
  2. Go to My Account.
  3. Under Control Center API, locate your Access URL.
  4. Under the API keys section, click Add.
  5. Choose Licensing API and Network API permissions.
  6. Click Save.
For easy reference, the Access URLs for US and EU regions are provided below:

Configuring your API Key in the ETM Dashboard

To select Bitdefender integration, connect your ETM Dashboard account to your GravityZone account.
  1. Log in to ETM Dashboard.
  2. Go to My Organization.
  3. Click Integrations > Bitdefender Endpoint Security .
  4. Enter your GravityZone Access URL.
  5. Enter your GravityZone API Key.
  6. Click Save.

After you connect your GravityZone account, you can manage endpoints from the Hosts screen. Hosts which have Bitdefender endpoint security software installed display the Bitdefender logo.


Managing Endpoints via Webroot Integration

The ETM Dashboard integrates with Webroot Endpoint Protection to extend the host management capabilities in the ETM Dashboard. In the Hosts screen in the ETM Dashboard, you can see additional information about each host and perform specific actions.

Connecting your Webroot Account

Connect your ETM Dashboard account to your Webroot account to select Webroot integration. This requires a Parent keycode that you can locate in your Webroot account.

To obtain your Parent keycode:
  1. Log in to your Webroot account and select your site.
  2. Navigate to Settings > Account Information .
  3. Copy the Parent Keycode.

After you obtain the keycode, you can set up your Webroot account connection in the ETM Dashboard.

To configure your Webroot account connection:
  1. Log in to ETM Dashboard.
  2. Go to My Organization > Integrations .
  3. Enter your Webroot account credentials and the Parent keycode.
  4. Click Save.

After connecting your account, you can manage your Webroot endpoints in the Hosts screen.

Managing Endpoints via Malwarebytes Integration

The ETM Dashboard integrates with Malwarebytes to extend the host management capabilities in the ETM Dashboard. In the Hosts screen in ETM Dashboard, you can see additional information about each host and perform specific actions.

Connecting your Malwarebytes Account

To select Malwarebytes integration, you must connect your ETM Dashboard account to your Malwarebytes account.
  1. Log in to ETM Dashboard.
  2. Go to My Organization.
  3. Click Integrations.
  4. Enter your Malwarebytes account information.
  5. Click Save.

Managing Endpoints

After you connect your Malwarebytes account, you can manage endpoints from the Hosts screen. Hosts which have Malwarebytes endpoint security software installed display the Malwarebytes logo.