Agents

The Agents Overview reports which Threat Prevention agents have successfully sent events to Threat Manager. This requires a minimum version of Threat Prevention7.5. This section may be used to troubleshoot or diagnose agent issues by indicating the connectivity of the Threat Prevention agent to the Threat Manager server.

Clicking Decommission removes an agent from the Threat Manager agent list.

If an active agent has not contacted the Threat Manager server for 10 minutes, Threat Manager places it into offline mode and generates an alert. If an agent becomes unresponsive, a magenta alert banner displays just below the navigation header.