Opens with Deployment Wizard , which lets you deploy content to the applicable endpoint. For additional information, refer to Deploying Content (Endpoint Details Page).

Enables the endpoint (if it is disabled). For additional information, refer to Enabling an Endpoint.

Disables the endpoint (if it is enabled). For additional information, refer to Disabling an Endpoint.

Defines the agent version(s) that can be installed on an endpoint. For additional information, refer to Upgrading the Agent on a Single Endpoint.

Opens the Add/Remove Modules dialog, which lets you manage agent features for modules install on Ivanti Endpoint Security. For additional information, refer to Managing Endpoint Modules.

Opens the Scan Now menu.

Prompts the Discover Applicable Updates task to immediately check the endpoint. For additional information, refer to Using Scan Now (Endpoint Details Page).

Prompts the selected endpoint to reboot. For additional information, refer to Rebooting Endpoints.

Updates AntiVirus definitions. For additional information refer to Updating AntiVirus Definitions.

Opens the Manage Remotely menu. For additional information, refer to Management Options.

Launches the log in page for the Windows Remote Desktop Connection (RDC), which allows you to connect to a computer in another location. For additional information, refer to Starting the Remote Desktop Connection.

Launches the Microsoft Management Console (MMC), which allows you to manage and monitor Windows systems. For additional information, refer to Starting the Microsoft Management Console.

Launches the NSLookup MS-DOS command to the endpoint. For additional information, refer to Accessing the NSLookup MS-DOS Command.

Launches the Ping MS-DOS command to the endpoint. For additional information, refer to Accessing the PING MS-DOS Command.

Launches PuTTY, a remote management tool that allows you to remotely control target computers over the Internet. For additional information, refer to Starting the PuTTY Communication Tool.

Launches the log in page for the Virtual Network Connection (VNC), which allows you to remotely access another computer. For additional information, refer to Starting the Virtual Network Connection Tool.

Wakes the endpoint. For additional information, refer to Waking Endpoints from the Information Tab.

The name of the endpoint.

The DNS name of the endpoint.

Alternate name or phrase (up to 50 characters) for the endpoint to help you identify and distinguish it. Endpoint decision-making information you can provide here includes what system it belongs to, where it is located, and what it is used for.

The Display Name will appear as a tool-tip when you hover over the Endpoint Name in the on the Manage > Endpoints page and Manage > Groups page (Endpoint Membership view).

The IP Address of the endpoint.

The MAC address of the endpoints.

The description of the endpoint, if available.

The abbreviated name of the operating system detected on the endpoint.

The version number of the operating system running on the endpoint.

The service pack level of the endpoint.

The version of the agent that the endpoint is currently running.

A icon next to an agent version indicates that an upgrade of the agent was requested. Click the icon to display additional agent version details.

The date and time on the server when the agent registered with Ivanti Endpoint Security. This is typically the date the agent was installed on the endpoint.

Indicates the status of the endpoint. The following list defines column values:

Online: The agent is able to communicate with the Ivanti Endpoint Security server in the predefined time period. Refer to Configuring the Agents Tab for additional information on configuring agent default behavior.

Offline: The agent is unable to communicate with the Ivanti Endpoint Security server in the predefined time period. In an Offline status, the agent still enforces all policies.

A Warning () icon next to an Offline status indicates that the Endpoint Distribution Service (EDS) the endpoint connects to is offline. Click the icon to find out additional status details.

Disabled: The agent will no longer enforce any module policies or complete tasks. All endpoints must show a Disabled status in order to delete the endpoint. Refer to Disabling the Ivanti Endpoint Security Agent.

The date and time on the server that the agent last communicated with Ivanti Endpoint Security.

The status of the Endpoint Distribution Service on the server. Service statuses include Started and Stopped.

The Patch and Remediation status for the endpoint.

The status of the Discover Applicable Updates (DAU) scan when last run. The status also serves as a link to the Deployment Results page. Status values include: Success, Failure followed by the failure code, and Not Available, which indicates that the endpoint has not checked in.

The Not Available Last DAU Status does not serve as a hyperlink.

The time of the last successful DAU scan. A value of Not Available indicates the endpoint has not completed a DAU scan.

Indicates the name of the applicable module.

Indicates whether the module is installed on the endpoint. Values include:

Yes: The module is installed.

No: The module is not installed.

Pending Install: The module is in the process of installing.

Pending Uninstall: The module is in the process of uninstalling.

Pending Reboot: The module has been installed, but the endpoint needs to reboot to complete installation.

Error: There was an error while installing or uninstalling the module. Click the for additional information about the error.

Expired: The module license has expired.

Indicates the date and time on the server that the user initiated a module install.

Indicates the version of the module installed on the agent.

The group that the endpoint holds membership in, either through direct assignment or inheritance. Click the group name to open Group Information page.

The name of the group in the parent hierarchy from which the endpoint inherits membership. If the endpoint is directly assigned to a group, the value displayed is Direct Assignment.

Click the value to go to the Group Information page.

The group type, which can include:

• System Group: a group created by Ivanti Endpoint Security

• Custom Group: a group created by a user

• My Groups: an indication that the group is within the group hierarchy

Indicates that there are applicable deployments available for this endpoint.

The Ivanti Endpoint Security user who added the endpoint to the group. If the endpoint was added Ivanti Endpoint Security, the column contains a value of System.

The name of the policy applied to the endpoint.

The value of the policy applied to the endpoint.

Indicates the name of the antivirus policy.

Indicates if the antivirus policy type is a Recurring Virus and Malware Scan or a Real-time Monitoring Policy.

Indicates actions to take upon virus/malware detection.

Indicates real-time scan options for local users.

Indicates real-time scan options for services and remote users.

Indicates if path(s)/filename(s) will be excluded from the scan

Enables a selected disabled vulnerability. For additional information, refer to Enabling Content.

Disables a selected enabled vulnerability. For additional information, refer to Disabling Content.

Disables the selected patch for specific groups and endpoint that you select. For more information, see Disabling Content for Groups/Endpoints.

Updates the package cache for selected packages. For additional information refer, to Updating the Cache.

Opens the Deployment Wizard . For additional information, refer to Deploying Content (Endpoint Details Page).

Prompts the Discover Applicable Updates task to launch immediately and scan all agent-managed endpoints within your network for vulnerabilities. For additional information, refer to Using Scan Now (Endpoint Details Page).

Prompts the selected endpoint to reboot. For additional information, refer to Rebooting the Endpoint.

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

The content item status, which indicates when the server downloaded the content item metadata. For additional information, refer to Content Status and Type.

The cache status for the content item, which indicates if the server downloaded the content item packages. For additional information, refer to Content Icons and Descriptions.

The content item name, which links to the Patch Status of the item. For additional information, refer to The Patch Status Page.

Indicates the content item type. For more information, see one of the following topics:

• Vulnerabilities
• Software Content
• Other Content

The name of the vendor that created the software in the content item.

The date and time that the vendor released the software in the content item.

The number of endpoints patched with the content item.

The number of endpoints not patched with the content item.

The number of endpoints that the content item applies to.

The number of endpoints that administrators have created a patch exception for.

Indicates if the content item is in beta.

The date and time on which the content was downloaded.

The number of packages associated with the content item.

The cache status for the content item packages.

The Ivanti Endpoint Security identifier for the content item.

A listing of all Custom Patch Lists that the content item is included in.

The enabled/disabled/completed status of the content item.

The Ivanti Endpoint Security user who last disabled or enabled the content.

The date and time the content was disabled or enabled.

The reason the user provided for disabling or enabling the content. You can click the Edit link to change the reason.

The identifier given to the security content item by the vendor.

The date and time the vendor released the software in the content item.

The CVE number for the content.

A description of the vulnerability associated with the content item.

The reference text(s) associated with the content item vulnerability.

The narrative description of the distribution package. This section may include important notes about the content item and a link to more information.

Exports the security configuration assessment results in .csv file format. For additional information, refer to Exporting SCM Data to CSV.

Indicates the security configuration assessment benchmark applied to the endpoint through an agent policy set.

Indicates the benchmark profile applied to the endpoint.

Indicates the version number of the check tool in use at the time the benchmark was uploaded.

Indicates the date on which the endpoint was assessed.

Indicates the number of assessments that the endpoint passed.

Indicates the number of assessments that the endpoint failed.

Indicates the number of assessments that did not run.

A unique identifier for the assessment.

The value found on the endpoint by the assessment.

The mathematical operation between the actual value and the expected value that was performed during assessment.

The value that, if found, would result in a pass result.

Prompts the Discover Applicable Updates (DAU) task to launch on the endpoint. For additional information, refer to Using Scan Now (Endpoint Details Page).

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

The operating system installed on the endpoint.

The software programs installed on the endpoint. There's a row for each program.

An icon that depicts the Hardware Device Class.

Indicates the hardware devices found for the class.

The name of the service on the endpoint.

The file path that the service is running from.

The state that the service is in.

Enables the selected disabled deployment. For additional information, refer Enabling Deployments.

Disables the selected deployment. For additional information, refer to Disabling Deployments.

Cancels the deployment or task for any endpoints which have not already received the deployment package. For additional information, refer to Aborting Deployments.

Removes the deployment from your Ivanti Endpoint Security. For additional information, refer to Deleting Deployments.

Opens the Deployment Wizard . For additional information, refer to Deploying Content (Endpoint Details Page).

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

Contains Edit and Delete icons you can use to control packages in a deployment. For additional information see:

• Editing Package Deployment Options
• Deleting Deployments

The name of an individual package or task included in a deployment targeted at the endpoint (not the name of the deployment itself).

Click the name display Deployment Details. For more information, see The Deployment Details Page.

The date and time a user scheduled the package or task to deploy.

An icon that indicates the status of the package deployment. For information on what each icon means, see Deployment Status Icons.

The total number of endpoints and groups that finished the deployment successfully.

The total number of endpoints and groups that finished the deployment unsuccessfully.

The total number of endpoints and groups that are assigned to the deployment.

The total number of endpoints and groups that are receiving the deployment.

If you deploy to a group using Agent Local Time, the deployment remains in progress until all time zones have passed. This behavior ensures any endpoints added to the group following deployment start also receive content. This behavior does not occur when using Agent UTC Time.

The total number of endpoints and groups that were excluded from the deployment (because the package was already applied, not applicable, or marked Do Not Patch).

The total number of endpoints and groups that finished the deployment.

Opens the Virus and Malware Scan Wizard. This enables an administrator to react to incoming alerts with an immediate scan on the endpoint. When configured appropriately, this scan can eliminate the problem by cleaning or deleting the infected files. For more information on running these scans, see Using the Virus and Malware Scan Wizard.

Removes the selected event alert(s) from the list.

The name of the virus or malware detected.

If a virus or malware is detected by behavior-based techniques such as Sandbox, it will not have a unique name. Instead, the column will indicate how the malware was identified.

Each example links to the relevant entry in the Virus/Malware Details page.

The type of scan that generated the alert:

• Real-time Monitoring Policy
• Recurring Virus and Malware Scan
• Scan Now

The message related to the alert status:

• (Cleaned)
• (Deleted)
• (Not Cleaned)
• (Quarantined)

Both the Cleaned status and Deleted status use the same icon because in both cases the malicious code has been removed and no longer presents a danger.

The name of the file in which the malware was detected.

The file path of the file in which the malware was detected.

Enables you to create a Recurring Virus and Malware Scan policy or a Real-time Monitoring Policy.

Assigns the selected policy to one or more endpoints or groups.

Un-assigns the selected policy from one or more endpoints or groups.

Exports the selected policy to a comma separated value (.csv) file. See Exporting DataExporting Data for more information.

Select this check box to perform an action on the policy.

An icon representing whether the policy is enabled or disabled.

The name given by the policy creator.

• Recurring Virus and Malware Scan
• Real-time Monitoring Policy

Defines whether the policy is assigned or inherited.

Opens the Authorize Selected Files dialog, which you can use authorize the selected files for the applicable endpoint. For additional information, refer to Authorizing Selected Files in Application Library.

Opens the Deny Selected Files dialog, which you can use to deny the selected files for the applicable endpoint. For additional information, refer to Denying Selected Files in Application Library.

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

Indicates whether the file has been assessed by the Ivanti Endpoint Integrity Service.

The file name, including extension.

File version number.

The path where the file was first discovered by Application Control.

The company that created the file.

The product that the file is part of.

The status of the file's certificate (if it has one):

• None - there is no certificate.
• Present - there is a certificate but it is not yet verified.
• Valid - certificate is verified and not expired.
• Expired - certificate was verified but is now expired.

Opens the Create menu.

Opens the Trusted Publisher dialog, which you can use to create trusted publisher policies.

Opens the Trusted Updated dialog, which you can use to create trusted updater policies.

Opens the Easy Auditor dialog, which you can use to create easy auditor policies.

Opens the Easy Lockdown dialog, which you can use to create easy lockdown policies.

Opens the Assign menu.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Opens the Assign Policy dialog, which you can use to assign a policy to groups or endpoints.

Unassigns the selected policy (or policies) from the applicable groups and endpoints.

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

Removes the policy from the applicable groups and endpoints.

Indicates the status of the policy (Enabled or Disabled).

Indicates the policy name.

Indicates the policy type (Trusted Publisher, Trusted Path, Trusted Updater, Local Authorization, Denied Applications, Easy Auditor, Easy Lockdown, or Supplemental Easy Lockdown/Auditor).

Indicates the policy source.

Displays a drop-down menu that allows you to select the type of policy to create.

A user should have Manage Centralized DC Policies access rights to access this functionality.

Opens the Assigned Users and Endpoints dialog for the selected policy.

This button is enabled only if the user has Assign Centralized DC Policies access rights and a policy is selected from the list.

Allows you to unassign the selected policy.

This button is enabled only if the user has Assign Centralized DC Policies access rights and an assigned policy is selected from the list.

Allows you delete the selected policy.

This button is enabled only if the user has Manage Centralized DC Policies access rights.

Opens the respective policy wizard with the policy details.

This button is enabled only if the user has Manage Centralized DC Policies access rights.

Allows you enable a policy that is currently disabled.

Allows you disable a policy that is currently enabled.

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop-up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

The enabled or disabled status of the policy.

The name of the policy.

The assigned or unassigned status of the policy.

The device class to which the policy applies.

The device collection to which the policy applies.