Endpoint Manager

• Introduction To Endpoint Manager
  • Key Concepts
  • Best Practices
  • Quick Start
  • Login Into The Admin Console
• The Admin Console
• The Dashboard
• Devices And Device Groups
  • Manage Device Groups
    • Create Device Groups
    • Edit A Device Group
    • Assign Configuration Profiles To A Device Group
    • Remove A Device Group
    • Run Procedures On Customer Groups
  • Manage Devices
    • Add New Devices
    • Manage Windows Devices
      • View And Edit Device Name
      • View Summary Information
      • View Hardware Information
      • View Network Information
      • View Maintenance Windows Associated With Device
      • View And Manage Profiles Associated With A Device
      • View And Manage Applications Installed On A Device
      • View The Files On A Device
      • View Exported Configurations And Import Profiles
      • View MSI Files Installed On A Device Through Endpoint Manager
      • View And Manage Patches For Windows And 3rd Party Applications
      • View Antivirus Scan History
      • View And Manage Device Group Memberships
      • View Device Logs
    • Manage Mac OS Devices
      • View And Edit Mac OS Device Name
      • Summary Information Of Mac Device
      • View Installed Applications
      • View Quarantined Files On Mac OS Device
      • View And Manage Profiles Associated With A Device
      • View Packages Installed On A Device Through Endpoint Manager
      • View And Manage Device Group Memberships
      • View Mac Device Logs
    • Manage Linux Devices
      • View And Edit Linux Device Name
      • Summary Information Of Linux Device
      • View Network Information Of A Linux Device
      • View And Manage Profiles Associated With A Linux Device
      • View Linux Packages Installed On A Device Through Endpoint Manager
      • View And Manage Device Group Memberships
    • Manage Android Devices
      • View And Edit Device Name
      • View Summary Information
      • Manage Installed Applications
      • View And Manage Profiles Associated With A Device
      • View Sneak Peek Pictures To Locate Lost Devices
      • View The Location Of The Device
      • View And Manage Device Group Memberships
    • Manage IOS Devices
      • View And Edit Device Name Of An IOS Device
      • View Summary Information Of An IOS Device
      • View Applications Installed On An IOS Device
      • View And Manage Profiles Associated With An IOS Device
      • View The Location Of An IOS Device
      • View And Manage Group Memberships Of An IOS Device
    • View User Information
    • Remove A Device
    • Remote Management Of Windows And Mac OS Devices
      • Transfer Items To / From The Remote Computer
    • Remotely Manage Folders And Files On Windows Devices
    • Manage Processes On Remote Windows Devices
    • Manage Services On Remote Windows Devices
    • Use The Command Prompt On Remote Windows Devices
    • Apply Procedures To Windows And Mac Devices
    • Remotely Install And Manage Packages On Windows Devices
    • Remotely Install Packages On Mac OS Devices
    • Remotely Install Packages On Linux Devices
    • Send Enrollment Link To IOS Devices
    • Install Apps On Android/iOS Devices
    • Generate An Alarm On Android Devices
    • Remotely Lock Mobile And Mac OS Devices
    • Wipe Selected Mobile And Mac Devices
    • Assign Configuration Profiles To Selected Devices
    • Set / Reset Screen Lock Password For Mobile Devices
    • Update Device Information
    • Send Text Messages To Mobile Devices
    • Restart Selected Windows Devices
    • Shutdown Windows Devices
    • Wake Offline Device
    • Change A Devices Owner
    • Change The Ownership Status Of A Device
    • Add Custom Notes And Tags On Devices
    • Generate Device List Report
  • Bulk Enrollment Of Devices
    • Enroll Windows, Mac OS And Linux Devices By Installing The Communication Client
      • Enroll Windows Devices Via AD Group Policy
      • Enroll Windows, Mac OS And Linux Devices By Offline Installation Of Agent
      • Enroll Windows Devices Using Auto Discovery And Deployment Tool
    • Enroll The Android And IOS Devices Of AD Users
  • Download And Install The Remote Control Tool
• Users And User Groups
  • Manage Users
    • Create New User Accounts
      • Manually Add Users
      • Import Users From A CSV File
    • Enroll User Devices For Management
      • Enroll Android Devices
      • Enroll IOS Devices
      • Enroll Windows Endpoints
      • Enroll Mac OS Endpoints
      • Enroll Linux OS Endpoints
    • View User Details
      • Update The Details Of A User
    • Assign Configuration Profiles To A Users Devices
    • Remove A User
    • Generate New Password For A User
    • Reset Two Factor Authentication Token For A User
    • Run Procedures On User Devices
  • Manage User Groups
    • Create A New User Group
    • Edit A User Group
    • Assign Configuration Profiles To A User Group
    • Remove A User Group
    • Run Procedures On Group Devices
  • Configure Role Based Access Control For Users
    • Create A New Role
    • Manage Permissions And Users Assigned To A Role
    • Remove A Role
    • Manage Roles Assigned To A User
• Configuration Templates
  • Create Configuration Profiles
    • Profiles For Android Devices
    • Profiles For IOS Devices
    • Profiles For Windows Devices
      • Create Windows Profiles
        • Associated Devices Settings
        • Antivirus Settings
        • Communication Client And Xcitium Client - Security Application Update Settings
        • File Rating Settings
        • Firewall Settings
        • HIPS Settings
        • Containment Settings
        • Maintenance Window Settings
        • VirusScope Settings
        • Global Proxy Settings
        • Client Proxy Settings
        • Agent Discovery Settings
        • Communication Client And Xcitium Client - Security Application UI Settings
        • Logging Settings
        • Client Access Control
        • External Devices Control Settings
        • Monitors
        • Procedure Settings
        • Remote Control Settings
        • Remote Tools Settings
        • Miscellaneous Settings
        • Script Analysis Settings
        • Data Loss Prevention Settings
        • Patch Management Settings
        • Performance Settings
      • Import Windows Profiles
    • Profiles For Mac OS Devices
      • Create A Mac OS Profile
        • Antivirus Settings For Mac OS Profile
        • Certificate Settings For Mac OS Profile
        • Restrictions Settings For Mac OS Profile
        • VPN Settings For Mac OS Profile
        • Wi-Fi Settings For Mac OS Profile
        • Remote Control Settings For Mac OS Profile
        • External Device Control Settings For Mac OS Profile
        • Valkyrie Settings For MacOS Profile
        • Procedure Settings For Mac Profiles
        • Monitor Settings For Mac OS Profile
    • Profiles For Linux Devices
      • Create A Linux Profile
        • Antivirus Settings For Linux Profile
        • Communication Client And Comodo Client - Security Application Update Settings For Linux Profile
        • User Interface Settings For Linux Profile
        • Logging Settings For Linux Profile
        • Clients Access Control Settings For Linux Profile
        • Valkyrie Settings For Linux Profile
  • View And Manage Profiles
    • Export And Import Configuration Profiles
    • Clone A Profile
  • Edit Configuration Profiles
  • Manage Default Profiles
  • Manage Alerts
    • Create A New Alert
    • Edit / Delete An Alert
  • Manage Procedures
    • View And Manage Procedures
    • Create A Custom Procedure
    • Combine Procedures To Build Broader Procedures
    • Review / Approve / Decline New Procedures
    • Add A Procedure To A Profile / Procedure Schedules
    • Import / Export / Clone Procedures
    • Change Alert Settings
    • Apply Procedures To Devices
    • Edit / Delete Procedures
    • View Procedure Results
  • Manage Monitors
    • Create Monitors And Add Them To Profiles
      • Monitors For Windows Devices
      • Monitors For Mac OS Devices
    • View And Edit Monitors
  • Data Loss Prevention Rules
    • Create DLP Discovery Rules And Add Them To Profiles
    • View And Edit DLP Discovery Rules
    • Create DLP Monitoring Rules And Add Them To Profiles
    • View And Edit DLP Monitoring Rules
• Security
  • Endpoint Security Status
    • Run Antivirus And/or File Rating Scans On Devices
    • Handle Malware On Scanned Devices
    • Update Virus Signature Database On Windows, Mac OS And Linux Devices
  • Security Events
    • View Security Events By Time
    • View Security Events By Files
    • View Security Events By Device
    • View Android Threat History
  • View And Manage Blocked Threats
  • View And Manage Quarantined Threats
  • View Contained Threats
  • HIPS Events
  • Firewall Events
  • View And Manage Autorun Alerts
  • Manage File Trust Ratings On Windows Devices
    • File Ratings Explained
  • View List Of File Verdicts
  • View History Of External Device Connection Attempts
  • Data Loss Prevention Scans
    • DLP Logs
    • DLP Quarantined Files
• Network Management
  • Create And Run Network Discovery Tasks
  • Manage Profiles For Network SNMP Devices
  • Manage Network Devices
    • Manage SNMP Devices
      • SNMP Device Details Interface
    • Discovered Devices
  • Manage Network Monitors
• Application Store
  • IOS Apps
    • Add IOS Apps And Install Them On Devices
    • Manage IOS Apps
  • Android Apps
    • Add Android Apps And Install Them On Devices
    • Manage Android Apps
  • Windows Apps
    • Install Windows Apps On Devices
• Applications
  • View Applications Installed On Android And IOS Devices
    • Blacklist And Whitelist Applications
  • Patch Management
    • Manage OS Patches On Windows Endpoints
    • Install 3rd Party Application Patches On Windows Endpoints
      • EM Supported 3rd Party Applications
  • View And Manage Applications Installed On Windows Devices
    • Uninstall A Windows Application From Selected Devices
    • Uninstall A Windows Application From All Devices
  • Vulnerability Management
• License Management
  • Manage Your Licenses
  • Manage License Allocation
  • Bill Forecast
• Configure Endpoint Manager
  • Email Notifications, Templates And Custom Variables
    • Configure Email Templates
    • Configure Email Notifications
    • Create And Manage Custom Variables
    • Create And Manage Registry Groups
    • Create And Manage COM Groups
    • Create And Manage File Groups
    • View And Manage Pattern Variables
    • View And Manage Keyword Groups
  • Endpoint Manager Portal Configuration
    • Import User Groups From LDAP
    • Configure Communication And Security Client Settings
    • Configure The EM Android Client
      • Configure Android Client General Settings
      • Configure Android Client Antivirus Settings
    • Add Apple Push Notification Certificate
    • Configure Windows Clients
      • Configure Communication Client Settings
      • Configure Client Security Settings
    • Manage Endpoint Manager Extensions
    • Configure Endpoint Manager Reports
    • Device Removal Settings
    • Account Security Settings
    • Set-up Administrators Time Zone And Language
    • Configure Audit Log Settings
  • Integrate Apple Business Manager With Endpoint Manager
    • Link Endpoint Manager With Apple Business Manager
    • Manage Apple Business Manager Devices
    • Manage Apple Business Manager Profiles
    • Configure Apple Business Manager Notifications
  • View Version And Support Information
• Appendix 1a - Endpoint Manager Services - IP Nos, Host Names And Port Details - EU Customers
• Appendix 1b - Endpoint Manager Services - IP Nos, Host Names And Port Details - US Customers
• Appendix 2 - Endpoint Manager License Types
• Appendix 3 - Pre-configured Profiles
• About Comodo Security Solutions

Manage Devices

 

• Click 'Devices' > 'Device List' > 'Device Management'

Note: If you haven’t done so already, you should first enroll users then enroll their devices.

 

• The 'Device Management' screen is an inventory of all mobile devices and endpoints for a company.

• It shows each device's connection and patch status, which security components are enabled, recent activity, and more.
  
  

From this area you can:

• Enroll new devices for management (Windows, Mac, Linux, iOS and Android)

• Add or remove profiles on any selected device

• Install Comodo Client Security and other packages on Windows, Mac OS and Linux endpoint

• Take remote control of Windows and Mac OS devices

• Browse folders and files on Windows endpoints

• View and manage processes and services on Windows endpoints 

• View and manage currently running processes on Windows endpoints

• View applications installed on Windows endpoints

• Remotely uninstall applications from Windows endpoints

• Remotely run procedures on Windows endpoints

• Remotely install OS and third-party application patches on Windows endpoints

• Remotely restart Windows endpoints

• Sound an alarm on mobile devices

• Send custom text messages to mobile devices

• Remotely wipe mobile devices

• Remotely lock mobile and Mac OS devices

• Reset lock-screen passcodes

• View detailed information about any device by simply clicking the device name

• View and edit device owner information by clicking the owner's name

• View and manage device group memberships of a device

• Generate a device detail reports

Open the 'Device Management' interface

• Click the 'Devices' > 'Device List'

• Click the 'Device Management' tab at the top of the main configuration pane

The interface shows devices belonging to the company or group selected on the left.

• Select 'Show All' to view every device enrolled to EM.

 

Column Heading	Description
OS	The operating system of the device.
Name	The label assigned to the device by the user. If no name is assigned, the device model number is used as the name. The device icon to the left of the name shows the device's connection status:        -  Device is not reachable. The connection might be down, or the endpoint is switched off.        - Slow connection. The device is connected but commands and messages may take some time to execute since the endpoint is busy.        - Good connection. Commands should be executed in real time.        -       -                   A device is marked as 'Old' if it does not connect to Xcitium for a certain number of days. You can set how many consecutive days of inactivity must pass before Xcitium marks a device as 'Old'. You can also tell Xcitium to remove devices that do not reconnect for a certain number of days after being marked 'Old'. See Configure Device Removal Settings to read more. This state indicates when a post-paid invoice is not paid for 14days, after that CCS installed devices can't be managed from platform(for example: No profile changes, no procedure execution etc., can be done) Note: All such devices are still fully protected as configured before blocking          - The device is a duplicate. Applies to Windows devices only. A duplicate device is one that has the same name and / or MAC address as one or more other devices. This could be because the same device was enrolled more than once, or because the same name was given to multiple devices. You can tell Xcitium to auto-remove duplicate devices or to selectively uninstall the clients. Alternatively, you could simply rename a device to remove the 'Duplicate' flag. See Configure Device Removal Settings to read more. Windows endpoints also have a shield icon to the right of their name. The shield has a colored circle on it which indicates the status of Xcitium Client Security (XCS): Yellow - XCS is not installed on the endpoint. Click the shield icon to remotely install XCS on the endpoint. The 'Install Additional Xcitium Packages' dialog will appear.  XCS requires the endpoint to be restarted in order for the installation to take effect. Configure the 'Restart' options and click 'Install'. See the explanation of remote installation of XCS in Remotely Install and Update Packages on Windows Devices for more details Gray - Outdated clients. Communication Client (CC) and/or Xcitium Client Security (XCS) on the endpoint require updates. Note. This status is only shown on endpoints that have CC 6.16 + and XCS 10.0 + installed. Red - The endpoint is at risk. One or more of security components (AV, FW or containment) may have been disabled by the user. Place your mouse over the icon to view the warning: Amber - The endpoint needs attention. The virus signature database might be out-dated or the endpoint needs to be re-started after installation of XCS. Place your mouse over the icon to view the full message Green - The endpoint is secure. All installed components are up and running. Blue - XCS is in 'Silent Mode'. Note: XCS lets users enable 'Silent Mode' if they do not want to be disturbed by product notifications. For example, when running a full-screen presentation. Alerts and notifications are suppressed and operations that could interfere with their work are postponed. - Communication with XCS on the endpoint has been lost. Click the device name to open the device details interface. See Manage Windows Devices, Manage Mac OS Devices, Manage Linux Devices, Manage Android Devices and Manage iOS Devices for more details.
Active Components	Indicates which modules are installed on the device. Possible components are 'Agent', 'Antivirus' (AV), 'Firewall' (FW) 'Containment', XCS, 'MDR', and EDR  Android devices - The agent will automatically install the AV (antivirus) component. iOS devices - Only the agent (Xcitium client) will be installed Windows endpoints - Available components are - Agent, AV, FW (firewall), Containment and EDR. These components are installed automatically when a profile featuring the components is installed. Mac OS and Linux endpoints - Available components are Xcitium Agent and AV Linux devices - Available Components are EM Agent, AV, MDR and XCS The color of the icon shows the status of the component: Green - Installed and active Gray - Installed but disabled by profile setting Blue (only applies to the 'Containment' module) - The containment module is baselining the device. During the baseline period, unknown files are auto submitted to Valkyrie for analysis, but are not placed in containment. See Baseline Settings in Containment Settings for help to configure baseline settings. Blank - Component is not installed.
Virtual Desktop	The status of the virtual desktop on the endpoints: Running - The virtual desktop is open on the endpoint Not Running - The virtual desktop is not open on the endpoint Unsupported - The version of the security and/or communication client on the endpoint does not support the virtual desktop. Alternatively, it can mean the security client is not installed at all.
Patch status	The number of patches available for Windows endpoints. Patch status icons are as follows: - No patches required. All patches are up to date. - Critical patches are available. The number to the right shows how many are pending. Click the number to view and manage the patches. See View and Manage Patches for Windows and 3rd Party Applications for more details. - Optional patches are available. Click the number to the right to view and manage the patches.
Customer	The company to which the device is enrolled. By default, it is your company.
Logged in User	The name of the user currently signed-in to the device. The username is prefixed with the active directory (AD) domain or workgroup that the user is currently logged-in to:  Active Directory - Name is shown as [AD domain name] / [username]  Workgroup - Name is shown as [workgroup name] / [username]  No network - Name is shown as [device name] / [username]  Click the  icon to copy the username to the clipboard.
Last Activity	The date and time at which the device last communicated with the Xcitium server.

Windows endpoints also have a shield icon to the right of their name. The shield has a colored circle on it which indicates the status of Comodo Client Security (CCS):

	Yellow	-	CCS is not installed on the endpoint.  Click the shield icon to remotely install CCS on the endpoint The 'Install Additional Comodo Packages' dialog will appear CCS requires the endpoint to be restarted in order for the installation to take effect Configure the 'Restart' options and click 'Install' See the explanation of remote installation of CCS in Remotely Install and Update Packages on Windows Devices for more details
	Gray	-	Outdated clients. Communication Client (CC) and/or Comodo Client Security (CCS) on the endpoint require updates Note. This status is only shown on endpoints that have CC 6.16 + and CCS 10.0 + installed
	Red	-	The endpoint is at risk. One or more of security components (AV, FW or containment) may have been disabled by the user Place your mouse over the icon to view the warning:
	Amber	-	The endpoint needs attention. The virus signature database might be out-dated or the endpoint needs to be re-started after installation of XCS. Place your mouse over the icon to view the full message
	Green	-	The endpoint is secure. All installed components are up and running.
	Blue	-	XCS is in 'Silent Mode'. Note: CCS lets users enable 'Silent Mode' if they do not want to be disturbed by product notifications. For example, when running a full-screen presentation. Alerts and notifications are suppressed and operations that could interfere with their work are postponed.
		-	Communication with XCS on the endpoint has been lost.

• Click the device name to open the device details interface. See Manage Windows Devices, Manage Mac OS Devices and Manage Android / iOS Devices for more details.

Active Components

Indicates which modules are installed on the device. Possible components are 'Agent', 'Antivirus' (AV), 'Firewall' (FW) 'Containment', XCS, and 'Socaap' (SOC)  

• Android devices - The agent will automatically install the AV (antivirus) component.

• iOS devices - Only the agent (EM client) will be installed

• Windows endpoints - Available components are - Agent, AV, FW (firewall) and Containment. These components are installed automatically when a profile featuring the components is installed.

• Mac OS endpoints - Available components are EM Agent and AV

• Linux devices - Available Components are EM Agent, AV, SOC and XCS

The color of the icon shows the status of the component:

• Green - Installed and active

• Gray - Installed but disabled by profile setting

• Blue (only applies to the 'Containment' module) - The containment module is baselining the device. During the baseline period, unknown files are auto submitted to Valkyrie for analysis, but are not placed in containment. See Baseline Settings in Containment Settings for help to configure baseline settings.

• Blank - Component is not installed.

Virtual Desktop  The status of the virtual desktop on the endpoints:

• Running - The virtual desktop is open on the endpoint

• Not Running - The virtual desktop is not open on the endpoint

• Unsupported – The version of the security and/or communication client on the endpoint does not support the virtual desktop. Alternatively, it can mean the security client is not installed at all.

Patch status

• The number of patches available for Windows endpoints. Patch status icons are as follows:

	-	No patches required. All patches are up to date.
	-	Critical patches are available. The number to the right shows how many are pending. Click the number to view and manage the patches. See View and Install Windows and 3rd Party Application Patches for more details.
	-	Optional patches are available. Click the number to the right to view and manage the patches.

Customer

The name of the company to which the device is enrolled.

• Comodo One MSP customers can enroll devices to any of the companies they have created in C1.

• Comodo One Enterprise customers / EM standalone customers can only use the 'default company'.

Logged in User

The name of the user currently signed-in to the device. 

• The username is prefixed with the active directory (AD) domain or workgroup that the user is currently logged-in to: 

• Active Directory - Name is shown as [AD domain username]

• Workgroup - Name is shown as [workgroup name]

• No network - Name is shown as [device username] 

• Click the icon to copy the username to the clipboard.

Last Activity

 The date and time at which the device last communicated with the EM agent.

 

• Click a column header to sort items in ascending/descending order of entries in that column.

• Use the search box at the top to filter devices by any parameter in the table.

• Click the funnel button on the right to view more filters.

You can search using the following criteria:   

• OS - Enter the operating system of the devices you wish to view. 

• Online/Offline status - Type 'Online' or 'Offline' 

• Name - Enter the name of the device in part or full 

• Logged in User - Enter the name of the end-user who is currently logged-in to the device. 

• CSS Status - Type one of the following values as required: 

• Not installed 

• Not supported 

• Secure 

• Silent mode 

• Need attention 

• At risk 

• Edr is not installed 

• Device is not Managed 

• Customer - Enter the customer's company name. Start typing to view auto-complete suggestions. 

• Owner - Enter the name/email address of the device owner in part or full 

• Last Activity - Enter a date in YYYY/MM/DD format to filter devices by the time of their last connection with EM. 

• You can use operators such as '<, '>', '<=' and '>=' to view devices before or after the date. 

• To view devices within a range, enter start and end dates as follows: YYYY/MM/DD - YYYY/MM/DD 

• You can also access filters by clicking the funnel button on the right: 

• To view devices within a range, enter start and end dates as follows: YYYY/MM/DD - YYYY/MM/DD 

You can also access filters by clicking the funnel button  on the right: 
 
 

 

 
 

• EM shows 20 results per page by default. Click the arrow next to 'Results per page' to increase this to a max. of 200. 

• Use the left and right arrows and the page numbers to navigate to the page you want to view.

• Click 'Table filter Clear' icon to clear all the selected filters. 

• When you click "clear filter icon" in device list, all the filled text fields, checkboxes, date ranges, and selected combo boxes will be cleared in filter menu, and the user will return to default (unfiltered) device List 

 
 

 Please use the following links to find out more:

• Add New Devices

• Manage Windows Devices

• View and Edit Windows Device Name

• View Summary Information

• View Hardware Information

• View Network Information

• View Maintenance Windows Associated With Device 

• View and Manage Profiles Associated with Windows Device

• View and Manage Applications Installed on a Device

• View List of Files in the Device

• View CCS Configuration Exported from the Device

• View MSI Files Installed on the Device through Endpoint Manager
  

• View and Install Windows Patches 

• View Antivirus Scan History 

• View and Manage Device Group Memberships 

• View Device Logs

• Manage Mac OS Devices

• View and Edit Mac OS Device Name

• View Summary Information

• Manage Installed Applications

• View and Manage Profiles Associated with the Device

• View Mac OS Packages Installed on the Device through Endpoint Manager
  

• View and Manage Device Group Memberships

• Manage Linux Devices

• View and Edit Linux Device Name

• Summary Information of Linux Device

• View Network Information of a Linux Device

• View and Manage Profiles Associated with a Linux Device

• View Linux Packages Installed on a Device through Endpoint Manager
  

• View and Manage Device Group Memberships

• Manage Android Devices

• View and Edit Device Name

• View Summary Information

• Manage Installed Applications
  

• View and Manage Profiles Associated with a Device
  

• View Sneak Peek Pictures to Locate Lost Devices
  

• View the Location of the Device

• View and Manage Device Group Memberships
  

• Manage IOS Devices

• View and Edit Device Name of an iOS Device

• View Summary Information of an iOS Device

• View Applications Installed on an iOS Device

• View and Manage Profiles Associated with an iOS Device

• View The Location of an iOS Device

• View And Manage Group Memberships of an iOS Device