Verify Agent/Mobile Connections

The
Connectivity > Agents
page displays
Web Security Service
connections from devices that have an installed agent or VPN profile. You can view what type of device has passed traffic, who owns the device, and other information as described below. You can also block
WSS
connections from suspicious devices, allowing you to investigate and take further action if necessary.
At this time, you cannot verify connections from the
Cloud Connect Defense
(CCD) app.

About Device Visibility

Installing an agent or VPN profile on a device does not cause immediate visibility on the
Agents
page. The client must first connect to
WSS
and pass traffic. Also, by default the portal displays connections that occurred over the previous 24 hours. You can adjust the filter to view connections going back days, weeks, or years.

View Devices

As
WSS
begins to receive traffic and build the reporting database, the portal displays each device in a row. You can search for terms, sort by columns, and take actions as necessary.
A: Authenticated User
—Who authenticated through the device (logged-in user).
B: Device Name
—The name of the device as designated by IT at provisioning or customized by the owner of a personal device (mobile phone).
C: Device ID
—The device's registration number.
D: Agent Type
—The platform connecting to
WSS
:
  • Android
  • iOS
  • WSS Agent
  • Unified Agent
E: Client Version
—The version of the installed agent.
F: Suppressed
—If your portal is configured to suppress personal identification information (PII), the table does not display information such as authenticated username or device identity.
G: Egress IP
—The IP address of the network segment that connects to
WSS
.
H: Last Access
—The time stamp indicating when the device last connected to
WSS
.
I: Permission
—The
Allowed
or
Blocked
status for this device.
Blocked
means the device cannot access the web through
WSS
.
J: Egress IP
Allow
or temporarily
Block
a device. Consider the following use case. You are suspicious about a specific device connection. You can block it, investigate, then return to this page and
Reconnect
the device if it is legitimate.
Because of a unresolved issue, manually click
Refresh
to see the
Actions
column link.

Page Options

The
Agents
page provides the following options:
  • Refresh
    the table to obtain the most recent data.
  • The
    Agent Type
    filter instructs the portal to display connections for a specific device type:
    • Android
    • iOS
    • WSS Agent
  • The
    Last Access
     filter instructs the portal to display connections that occurred during a specific time period. The default is the previous 24 hours.
  • Enter a
    Search Term
     to filter by a specific name (applies to both user and device names).

See Also

  • Apply or manage SSL Interception policy for mobile device connections. Create SSL Policy.