Dashboard Widgets

After the Device Control Server module is installed, two new widgets are available to display on the Endpoint Security Dashboard.
Both of these widgets display information from your Device Event Log Queries. You can view these queries from Review > Device Event Log Query.

Devices Connected to Endpoints Widget

This widget displays the number of devices that have connected to your endpoints over the last week, organized by device class. The number of devices displayed in this widget stays relatively consistent.

If you notice the number of devices fluctuating quickly, you should investigate. For example, if you usually you have no previous records of an external hard drive connecting to your endpoints, and then this widget suddenly displays that an external hard drive is being connected, you should investigate.

Click the graph bars to view data that shaped the total, including endpoint and user name.

Device Control Denied Actions Widget

This widget totals:

• The number of read-denied events logged.
• The number of write-denied events logged.
• The users with the highest event totals.

This information alerts you that either a user is trying to legitimately use devices and a policy adjustment should be made, or that a user is attempting to connect prohibited devices and warrants further investigation.

These widgets omit built-in users and group data so that only actual user data is displayed (instead of unused system accounts).