Platform / Endpoint security
Endpoint security
Keep your endpoint security servers healthy, understand every detection and apply the policy settings that close real gaps.
Healthy servers, tuned policies.
ZWatch checks your endpoint security management servers and recommends the policy settings that matter, in the order of their impact.
- Health check for each management server
- Outdated agents found automatically
- Recommended policy settings with impact
| Recommendation | Impact | Status |
|---|---|---|
| Turn on exploit prevention for all workstations | High | To do |
| Scan removable drives when connected | Medium | Applied |
| Block untrusted scripts on servers | High | To do |
| Update 31 agents running an old version | Medium | Overdue |
Detections in context.
A detection on a PC is linked to the VPN login, firewall traffic and email that came before it, so you see the whole story.
- Correlated with network and email events
- Plain-language explanation for each detection
- Incident case with the full timeline
- 03:12Login for j.doe from an unusual country, outside working hoursVPNInitial access
- 03:15Internal scan of 64 hosts from the VPN addressFirewallDiscovery
- 03:18Trojan detected and quarantined on FIN-PC-12Endpoint securityExecution
- 03:19Callback to a known malicious server blockedFirewallCommand and control
Built for the teams who run endpoint security.
Server health check
Service status, database, update distribution and agent coverage checked for each server.
Policy recommendations
Settings that close real gaps, ranked by impact, with a status for each.
Detections explained
Each detection described in plain words, with the device, user and action taken.
Linked to the network
Detections connected to firewall, VPN and email events in one incident.
Syslog-based
Events arrive by syslog from the management server. No agent on your endpoints.
Licensed per server
Licensing counts endpoint security servers, not individual endpoints.
See ZWatch on your own network.
Ask for a trial licence and we will help you connect your first devices.