Xcitium Enterprise Admin Guide - Monitors for Mac OS Devices

Introduction To Xcitium Enterprise - Endpoint Protection Platform
- Key Concepts
- Best Practices
- Login Into The Admin Console
- Upgrade To Full Version
The Admin Console
The Dashboards
CNAPP Dashboard
ROI Dashboard
Devices And Device Groups
- Manage Device Groups
- Manage Devices
- Bulk Enrollment Of Devices
  - Enroll Windows, Mac OS And Linux Devices By Installing The Communication Client
  - Enroll Android And IOS Devices Of AD Users
- Download And Install The Remote Control Tool
Cloud Workloads
Cloud Assets
Cloud Security
- View Vulnerabilities Findings
- Registry Scan
- CSPM Executive Dashboard
- Compliance Summary
- CWPP Dashboard
- App Behavior
- Manage Policies
- Remediation
- View Alerts
- Manage Triggers
- View Reports
Users And User Groups
- Manage Users
- Manage User Groups
- Configure Role Based Access Control For Users
Configuration Templates
- Create Configuration Profiles
- View And Manage Profiles
  - Export And Import Configuration Profiles
  - Clone A Profile
- Edit Configuration Profiles
- Manage Default Profiles
- Manage Alerts
  - Create A New Alert
  - Edit / Delete An Alert
- Manage Procedures
- Manage Monitors
  - Create Monitors And Add Them To Profiles
    - Monitors For Windows Devices
    - Monitors For Mac OS Devices
  - View And Edit Monitors
- Data Loss Prevention Rules
Security Systems
- View Alerts And Security Events
- Investigate Events
- Endpoint Security Status
- View And Manage Blocked Threats
- View And Manage Quarantined Items
- View Contained Threats
- View And Manage Autorun Items
- Manage File Trust Ratings On Windows Devices
  - File Ratings Explained
- View List Of File Verdicts
- View History Of External Device Connection Attempts
- Data Loss Prevention Scans
  - DLP Logs
  - DLP Quarantined Files
Network Management
- Create And Run Network Discovery Tasks
- Manage Profiles For Network SNMP Devices
- Manage Network Devices
  - Manage SNMP Devices
    - SNMP Device Details Interface
  - Discovered Devices
- Manage Network Monitors
Software Inventory
- View Applications Installed On Android And IOS Devices
  - Blacklist And Whitelist Applications
- Patch Management
  - Manage OS Patches On Windows Endpoints
  - Install 3rd Party Application Patches On Windows Endpoints
    - Xcitium Supported 3rd Party Applications
- View And Manage Applications Installed On Windows Devices
  - Uninstall A Windows Application From Selected Devices
  - Uninstall A Windows Application From All Devices
- Vulnerability Management
Management Settings
- Account Management
- License Management
Configure Xcitium Enterprise
- Email Notifications, Templates And Custom Variables
- Xcitium Enterprise Portal Configuration
- Dashboard Settings
- Cloud Security Settings
- Data Protection Templates
  - View And Manage Pattern Variables
  - View And Manage Keyword Groups
- View Version And Support Information
- Alert Notification Settings
Appendix 1a - Xcitium Services - IP Nos, Host Names And Port Details - EU Customers
Appendix 1b - Xcitium Services - IP Nos, Host Names And Port Details - US Customers
Appendix 2 - Pre-configured Profiles
Appendix 3 - Default Xcitium Security Policy Details
About Xcitium

Monitors for Mac OS Devices

Click 'Assets' > 'Configuration Templates' > 'Monitors'

Click 'Create Monitor'

Enter a label and description for the monitor

Select 'macOS' in the OS drop-down

Specify where to save the new monitor. You can create new sub-folders under 'My Monitors' if required.

Click 'Create'.

You will be taken to the monitor configuration screen:

Modify the following settings if required:

Trigger an alert if - Select when the alert should be sent to admins. The options are send alert when all conditions are met or when any condition is met.

Use Alert Settings - Select the alert that should be generated. The alert types listed here are defined in the 'Alerts' section. Make sure the alert is active to receive notifications. See 'Manage Alerts' for more details.

Click 'Save'

Click the 'Conditions' tab followed by 'Edit' to define monitor thresholds

Click 'Add Condition'

Choose the parameter you want to monitor

Available Monitors
Performance	Checks CPU, RAM and network usage and triggers an alert if certain conditions are met. You can specify thresholds for these parameters and the length of time the threshold can be continuously exceeded, before triggering an alert.
Disk	Checks free disk space, or for large changes to free disk space in short periods. Triggers an alert if disk space falls below a certain level, or if there are large alterations to disk space in a short time period.
Process	Checks whether or not a named process is running. Triggers an alert if the condition is met.
Device Status	Checks every managed device to see whether it has been online or offline for a certain length of time. You will receive an alert if the device has been offline/online for the length of time you specify. Background. Every minute, managed devices send a message to Xcitium to signal they are online. If Xcitium does not receive this signal for three minutes straight then the device status is set to 'Offline'. This condition will alert you if a device has been continuously 'Offline' (or 'Online') for the total length of time you specify.

Define the specifics of the condition. The type of information you need to provide depends on the condition. For example, if you select 'Disk' monitor, you have the option to specify conditions for three values. See the example image below.

Click 'Create' after specifying the conditions.

Repeat the process to add more conditions

To remove a monitoring condition, select the check box beside it and click 'Remove Condition' at the top.

Click 'Save' to apply your changes.

Xcitium Enterprise

Xcitium Enterprise Administrator Guide

English

Monitors for Mac OS Devices