Viewing Computer Information

The Asset Management View

The view shows information on each computer, such as deployment status, active components on the computer, version installed on the computer and more.

Note - The General > Description at bottom pane shows the text entered in the Active Directory for the asset. If no text is entered, it is blank.

From the top menu Columns, select a preconfigured view:

  • Deployment

  • Compliance

  • Health

  • Full Disk Encryption

  • Anti-Malware

  • Host Isolation

  • Alternatively, click Custom and select the required columns.

Status Icon

The icon in the Status column shows the client or computer status.

Status Icon

Description

Indicates .

Indicates Harmony Browse client.

Indicates that the client connection is active.

Indicates that a new computer was discovered that has no client installed.

Indicates that the computer was deleted from the Active Directory or from the Organizational Tree.

Indicates a pending Network One-Time Logon or Network Password Change request from a user. For more information, see the Easy Unlock feature.

  1. Click the icon.

    The Respond to Request dialog box appears.

  2. Click Accept or Reject.

Notes:

  • You must refresh the table or the browser to view the icon.

  • This feature is available only to customers in the Early Availability program.

Filters

Use the Filters pane on the right side of the screen to filter the information in the table.

These are the main filters for this view:

  • Filter by computer property

  • Filter by Virtual Group

  • Filter by Organization Unit (this information is pulled from your Active Directory)

Working with the Computers Table

  1. Hover over the column and click .

  2. From the drop-down :

    • To freeze the column, click Pin.

    • To unfreeze the column, click Unpin.

    • Open the filter for the current column, click Filter and select the values.

    • To hide the column, click Hide.

    • To insert another column, click Add Column.

  3. To adjust the column position in the table, drag and drop the column to the required position.

  4. To copy the value of a cell to the clipboard, hover over a cell and click Copy.

  5. To copy the values of a row to the clipboard, hover over a row and click Copy row.

Managing Computers

Select the checkbox to the left of the applicable computers and right-click to perform these actions:

General Actions

You can view logs of computers based on it's IP address.

To view computer logs by it's IP address:

  1. Go to Asset Management > Computers.

  2. Select the applicable computer or user from the list.

  3. From the top toolbar, click .

  4. Select General Actions > View Computer Logs.

    The system opens the Logs menu and shows the computer logs.

You can create a virtual group. See Managing-Virtual-Groups.htm.

You can add computers to a new virtual group. See Managing-Virtual-Groups.htm.

You can add a computer to a virtual group (see Managing Virtual Groups).

When the Endpoint client is installed on a computer, information about the computer is sent to and stored on the Endpoint Security Management ServerClosed A Security Management Server that manages your Endpoint Security environment. Includes the Endpoint Security policy management and databases. It communicates with endpoint clients to update their components, policies, and protection data..

Resetting a computer means deleting all information about it from the server.

Resetting a computer does not remove the object from the Active Directory tree or change its position in the tree.

Important - You can only reset a computer if the Endpoint client is not installed. If you reset a computer that has Endpoint installed, important data is deleted and the computer can have problems communicating with the Endpoint Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server..

Computer reset:

  • Removes all licenses from the computer.

  • Deletes the settings of users that can log on to it.

  • Removes the computer from Endpoint Security Monitoring.

  • Marks the computer as unregistered.

After you reset a computer, you must reformat it before it can connect again to the Endpoint Security service.

You may decide to reset a computer if:

  • The Endpoint client was uninstalled or the computer is re-imaged.

  • It is necessary to reset the computer's configuration before a new Endpoint client is installed. For example, if the computer is transferred to a different person.

Removes the asset from the Local or Active Directory and adds it to Deleted Entities in the Organizational Tree. This operation discards the assets license information. You can use this operation when you remove an asset from your domain.

Note - If the Endpoint Security client is still installed on the asset, the client continues to receive the updates from the Endpoint Security Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..

To add the asset back to the Active Directory, see Recover.

Adds the deleted asset back to the Local or Active Directory from Deleted Entities in the Organizational Tree. The asset's status is not Active until its Endpoint Security client connects and synchronizes with the Endpoint Security Management Server. You can use this operation when you add an asset back to the domain.

Note - You can recover only a deleted asset.

Warning - Removes the asset from the Harmony Endpoint management permanently. You cannot recover a terminated asset. We recommend to terminate an asset only if it is discarded or disposed or the Endpoint Security client is uninstalled.

Harmony Endpoint can scan and import users, groups, Organizational units (OUs) and computers from multiple supported directory domains. See Managing Active Directory Scanners.

The Overview View

The Overview page shows a graphical summary of important information about the clients in your organization.

Operational Overview

The information in the Operational Overview appears in widgets described below. Each widget is clickable, and takes you to the relevant view based on the Computer Management view.

The information is presented in these widgets:

Widget

Description
All Endpoints

Shows the number of protected endpoints and the number of endpoints which report issues.

This widget is based on the Health view.
Desktops

Shows a division of the desktops by operating systems: Windows, macOS, and Linux.

This widget is based on the Health view.

This widget only includes protected entities.

Laptops

Shows a division of the laptops by operating systems: Windows, macOS, and Linux.

This widget is based on the Health view.

This widget only includes protected entities.

Deployment Status

Shows the deployment status of the devices according to these values:

  • Success - Devices with these Deployment Statuses: "Completed" in their status.

  • In progress - Devices with these Deployment Statuses: "Deploying", "Uninstalling", "Retrying", or "Downloading" in their status.

  • Failed - Devices with these Deployment Statuses: "Not Installed", "Not Scheduled" or "Unknown".

Health Status

Shows which computers have installed components that are not running.

Anti-Malware Update

Shows the time when updates were installed on the endpoint clients:

  • On the last 24h

  • On the last 72h

  • Over 72h ago

  • Never

  • Not installed or Unknown

This widget is based on the Anti-Malware update ON data in the Deployment Status.

Harmony Endpoint Version

Shows the client versions installed on the endpoint clients.

This widget is based on the Deployment view.

Operating System

Shows the type of operating system installed on the endpoint clients:

  • Windows

  • macOS

  • Linux

  • Other

In addition, in the top right section Active Alerts you can see alerts for the thresholds you created in the Endpoint Settings view > Alerts (see Monitoring Harmony Endpoint Deployment and Policy).

Reports

On the Reports page, you can download the reports in the pdf format:

  • Threat Extraction Report - Shows the insights on the downloaded files.

  • Check Point Cyber Security Report - Shows the latest security trends as per Check Point.

Generate Report

00:00: This video shows how to generate various reports about the security status of your endpoints. 00:07: Log in to the Infinity Portal. Access the Harmony Endpoint Administrator Portal and click "Overview" 00:14: Click Reports and select Generate Report. 00:17: Select the report you want to generate. 00:20: Click settings and select export report. 00:23: Select the time frame for the report and click Export. The report is generated and downloaded as a pdf. 00:30: If you want to schedule report generation automatically, click Reports and select Schedule Report. 00:36: Click Add to schedule the report. 00:39: Specify the details for the report and click Schedule. Harmony Endpoint generates the report at the scheduled time and emails the report to the specified recipients. 00:49: Thank you for watching the video!

To generate a report:

  1. Go to Overview > Reports > Generate Report.

  2. Select a report, click and select Export Report.

    The Export Report window appears.


  3. In the Time Frame list, select Last day, Last 7 days, or Last 30 days.

  4. Click Export.

Scheduled Reports

Scheduled Reports allows you to automatically generate reports at the specified date and time, and email it to the specified recipients.

Notes:

  • The report becomes effective 24 hours after you schedule it. For example, if you schedule for a new report today for 02:00 PM, then it is enforced from the next day at 02:00 PM.

  • This feature is not supported for Check Point Cyber Security Reports.

  • For performance reasons, it is recommended to schedule reports to run in off-peak hours. For example, during non-business hours.

  • The default time zone for the schedule report is Coordinated Universal Time (UTC). For example, to schedule the report at 1:00 AM EST, specify the time as 6:00 AM (depending on Daylight Savings Time).

To schedule a report:

  1. Navigate to Overview> Reports and do one of these:

    • From the Scheduled Reports page, click Add and from the Name list, select the report.

    • From the Generate Report page, select the report, click and select Schedule Report.

  2. From the Name list, select the report.

  3. From the Time Frame list, select the period for the report:

    • Last day

    • Last 7 days

    • Last 30 days

  4. From the Frequency list, select the frequency to generate the report:

    • To generate the report everyday, select the day of the week.

    • To generate the report weekly, select the day of the week.

    • To generate the report every month, select the date.

  5. In the Time field, specify the time for the system to generate the report and send it to the recipients. By default, the time is in UTC. For example, if you want to generate the report at 01.00 AM Eastern Standard Time (EST), you must specify the time as 06.00 AM UTC.

  6. In the Recipients field, enter the recipients for the report.

  7. Click Schedule.

    The schedule is added to the table. The report becomes effective 24 hours after you schedule it.

  8. To edit a scheduled report, select the report in the table and click Edit.

  9. To delete a scheduled report, select the report in the table and click Delete.

Announcements

The Announcements page shows the latest news and enhancements in .