Comodo Endpoint Security Manager

• Introduction To Endpoint Security Manager – SME
  • Software Components And System Requirements
  • Removing Incompatible Products
  • Installing And Configuring The Service
  • Key Concepts
  • Best Practices
  • Quick Start Guide
• The Administrative Console
  • Logging-in To The Administrative Console
  • The Dashboard Area
    • Adding And Re-configuring Tiles
    • Quick Actions Tiles
    • Policy Status Tile
    • Endpoint Updates Tile
    • Endpoint Infections Tile
    • Connectivity Tile
    • Getting Started Tile
    • System Status Tile
    • License Status Tile
    • Software Tile
  • The Computers Area
    • Adding Endpoint Computers To ESM
      • Importing Computers By Automatic Installation Of Agent
      • Adding Computers By Manual Installation Of Agent And CIS
      • Updating Comodo Software On Managed Computers
    • Creating Endpoint Groups
    • Viewing Endpoints
    • Updating Endpoints
  • The Policies Area
    • Viewing Policies
    • Creating A New Policy
  • The Reports Area
    • Reports Gallery
      • Computer Details Report
      • CIS Configuration Report
      • Computer Infections Report
      • Quarantined Items Report
      • Antivirus Updates Report
      • CIS Log Report
      • Policy Compliance Report
      • Policy Delta Report
      • Malware Statistics Report
      • Top Ten Malware Report
    • Report Explorer
    • Report Settings
  • About
  • Logging Out Of ESM Console
• How To... Tutorials
  • How To Connect CIS To CESM At The Local Endpoint
  • How To Configure CIS Policies - An Introduction
  • How To Set Up External Access From The Internet
  • How To Install CIS
• Appendix 1 - The Service Configuration Tool
  • Start And Stop The ESM Service
  • Main Settings
  • Server Certificate
  • Internet And Mail Settings
  • Caching Proxy Settings
  • Viewing Database Event Log
• About Comodo

System Status Tile

 

 The 'System Status' tiles provide real time updates on critical network security data.

 

There are six types of 'System Status' tile:

• 'Outbreaks'- # of endpoints affected by malware within a threshold that indicates a potential virus outbreak

• 'Malware Found' - # managed computers with unhandled malware detections

• 'Non-reporting' - # of computers not reporting to ESM

• 'Non-compliant' - # computers that are not compliant with their assigned security policy

• 'Outdated' - # computers whose antivirus (AV) database is outdated

• 'Licensing' - # Number of days remaining on current license

 

Each tile will turn red as a warning if certain thresholds are exceeded. For example, if the number of non-compliant computers is greater than the defined values (default = 1).  

 

When you drag a system status tile onto the dashboard (See 'Adding a System Status Tile') you will be asked to:

• Choose the type of tile (select from the list of six types described above. Alternatively, select 'All').

• Specify an alert threshold number. The parameters of the threshold will vary depending on the type of tile. If the threshold is exceeded then the tile will turn red.

• Optional – specify that an email notification is sent should the threshold be reached.
  
  
  

The next section explains how to add a system status tile; contains a table that describes each tile and what happens when you click each tile and concludes with a quick example showing how to configure a system status tile.

Adding a System Status Tile

1. Click the ellipsis  button on the settings bar at the bottom left of the interface.

2. Drag the 'System Status' tile into the dashboard. The 'system status tile properties' dialog will appear.

3. Select the information to be displayed in the new tile from the 'Show:' drop-down.

Since the System Status tile also serves as an alert to indicate the occurrence of events that require immediate attention of the administrator, the administrator should configure the maximum permissible values for the parameters while adding the tile. See the System Status Tile - Table of Information Displayed and Configurable Parameters.

 

The administrator can also configure for ESM to send automated emails on occurrence of such events. If the check box 'Send email notifications' is selected, ESM will automatically send an alert email to the administrator on the occurrence of the events as specified. 

Note – if you select 'All' from the drop-down list you will need to go into each tab and specify thresholds.

 

 System Status Tile - Table of Information Displayed and Configurable Parameters

 

Information	Description	Configurable Parameters	Shortcut to...
All	Creates a tile that displays all possible 'System Status' information. The tile turns red to alert the administrator if one or more monitored settings (indicates as bold) of the parameter exceeded the set permissible value.	The administrator has to configure the maximum permissible values for all the items. Refer to the rows below for more details.	NA
Outbreak	Displays the number of endpoints infected by virus or other malware.	Number of PC's have to be infected – The administrator can specify the number of endpoints so that if the number of endpoints infected by malware equals to or exceeds this value, the tile alerts the administrator. Default = 1 Infections occur within total number of minutes – The administrator can specify the period (in minutes) for generating the alert after the first infection. Default = 15	Clicking the 'Outbreak' tile will open the 'Computer Infections Report' which lists the endpoints affected along with the name and location of the malware. Refer to Computer Infections Report for more explanation of these reports.
Malware Found	Displays the number of malware identified and not handled by the local CIS installation in the endpoint(s).	Number of infected computers - The administrator can specify the number of endpoints so that if the number of endpoints infected by malware equals to or exceeds this value, the tile alerts the administrator. Default = 1	Clicking the 'Malware Found' tile will open the 'View All Computers' interface with 'Infected' category preselected, which lists the endpoints affected along with the name and location of the malware. Refer to Viewing Endpoints for more details.
Non-Reporting	Displays the number of connected endpoints that do not report to the ESM console.	Number of non-reporting computers - The administrator can specify the  number of endpoints  so that if the number of  non-reporting endpoints equals to or exceeds this value, the tile alerts the administrator. Default = 1 Minutes idle – The administrator can specify the period (in minutes) for which ESM can wait after the endpoint has gone non-reporting, before the tile alerts the administrator. Default = 1020.	Clicking the 'Non-Reporting' tile opens the 'View All Computers' interface with 'Unassigned' group preselected which displays a list of all non-reporting endpoints. Refer to Viewing Endpoints for more details.
Non- Compliant	Displays the number of  connected endpoints that are not compliant with the CIS policy applied to them.	Number of non-compliant computers - The administrator can specify the number of endpoints so that if the number of non-compliant endpoints equals to or exceeds this value, the tile alerts the administrator. Default = 1	Clicking this tile will open a Policy Compliance report which displays a list of all non-compliant endpoints and endpoint groups. Refer to Policy Compliance Report for more details.
Outdated	Displays the number of  connected endpoints which are currently using an outdated antivirus (AV) database.	Number of AV outdated - The administrator can specify the  number of endpoints so that if the number of outdated endpoints equals to or exceeds this value, the tile alerts the administrator. Default = 1	Clicking the 'Outdated' tile opens Antivirus Updates Report that shows the AV signature database update status of all the endpoints. Refer to Antivirus Updates Report for more details.
Licensing	Displays the number of days remaining for the license to expire.	License expiration days – The administrator can specify the number of days before the expiration day for the tile to alert. Default = 30.   Unused endpoints threshold, % - The administrator can specify the percentage of endpoints so that if the remaining number of endpoints that can be connected to ESM equals or exceeds this value, the tile alerts the administrator that the licensing limit is approaching. For example, if the license is valid for 100 endpoints and when 90 endpoints are added, the tile alerts the administrator if the threshold is set at 10%. Default = 10	Clicking the 'Licensing' tile will start the License Upgrade Wizard that allows you to view and change you license.

 

4. Select the check box 'Send email notification' if you wish to generate email notification when certain conditions are met (for example, if a virus is detected or if a machine does not report for a certain period of time).

5. Click 'Save'. The new tile will be added to the dashboard area. You can add as many 'System Status' tiles as as you wish for the information you wish to have, to the dashboard.

6. To change the type of information for a particular tile, click the words 'System Status' at the bottom of the tile then the icon: . To remove the tile, click the icon: .

Example:

 

If the administrator wishes to add a 'System Status' tile to (1) display the number of endpoints whose AV database is outdated, (2) for the tile to turn red when the number of outdated systems is equal to or exceeds two, (3) Receive an email notification when the number equals to or exceeds two, then:

1. Click the ellipsis  button on the settings bar at the bottom left of the interface.

2. Drag the System Status tile to the dashboard. The 'System Status Tile Properties' dialog will appear.

3. Select 'Outdated' from the 'Show:' drop-down. The 'Outdated' tab will appear beneath the 'Show:' drop-down.

4. Enter 2 in the Number of 'AV outdated:' text field.

5. Select 'Send email notifications' checkbox.

6. Click 'save'.

A new 'System Status' tile will be added to the Dashboard which will display the number of endpoints whose AV database is outdated in real time. The example to the left shows a gray tile with zero outdated endpoints (everything's fine).

 

If the number of outdated endpoints equals or exceeds two, the tile will turn red to alert the administrator and an email notification will also be sent out.