Agents

The Agents Overview reports which Threat Prevention agents have successfully sent events to Threat Manager. This requires a minimum version of Threat Prevention7.5. This section may be used to troubleshoot or diagnose agent issues by indicating the connectivity of the Threat Prevention agent to the Threat Manager server.

Clicking Decommission removes an agent from the Threat Manager agent list.

If an active agent has not contacted the Threat Manager server for 10 minutes, it is placed into offline mode. This generates an alert in Threat Manager. If an agent has become unresponsive, a magenta alert banner displays just below the navigation header.