Verify Agent/Mobile Connections
The
Connectivity > Agents
page displays Web Security Service
connections from devices that have an installed agent or VPN profile. You can view what type of device has passed traffic, who owns the device, and other information as described below. You can also block WSS
connections from suspicious devices, allowing you to investigate and take further action if necessary.At this time, you cannot verify connections from the
Cloud Connect Defense
(CCD) app.About Device Visibility
Installing an agent or VPN profile on a device does not cause immediate visibility on the
Agents
page. The client must first connect to WSS
and pass traffic. Also, by default the portal displays connections that occurred over the previous 24 hours. You can adjust the filter to view connections going back days, weeks, or years.View Devices
As
WSS
begins to receive traffic and build the reporting database, the portal displays each device in a row. You can search for terms, sort by columns, and take actions as necessary.
A: Authenticated User
—Who authenticated through the device (logged-in user).B: Device Name
—The name of the device as designated by IT at provisioning or customized by the owner of a personal device (mobile phone).C: Device ID
—The device's registration number.D: Agent Type
—The platform connecting to WSS
: - Android
- iOS
- WSS Agent
- Unified Agent
E: Client Version
—The version of the installed agent.F: Suppressed
—If your portal is configured to suppress personal identification information (PII), the table does not display information such as authenticated username or device identity. For more information, see Suppress Personal Information From Access Logs.
G: Egress IP
—The IP address of the network segment that connects to WSS
.H: Last Access
—The time stamp indicating when the device last connected to WSS
.I: Permission
—The Allowed
or Blocked
status for this device. Blocked
means the device cannot access the web through WSS
.J: Egress IP
—Allow
or temporarily Block
a device. Consider the following use case. You are suspicious about a specific device connection. You can block it, investigate, then return to this page and Reconnect
the device if it is legitimate.Because of a unresolved issue, manually click
Refresh
to see the Actions
column link.Page Options
The
Agents
page provides the following options:- Refreshthe table to obtain the most recent data.
- TheAgent Typefilter instructs the portal to display connections for a specific device type:
- Android
- iOS
- WSS Agent
- TheLast Accessfilter instructs the portal to display connections that occurred during a specific time period. The default is the previous 24 hours.
- Enter aSearch Termto filter by a specific name (applies to both user and device names).
See Also
- Apply or manage SSL Interception policy for mobile device connections. Create SSL Policy.