Introduction

The Appliance Dashboard allows you to log into your network appliance and view the telemetry stored on it. The data stored on the appliance is quite rich what Field Effect uses to analyze your threat surface and react according, be it through ARO, response action, or report. While this data is read only, it offers much deeper insights into the telemetry than offered in the Field Effect MDR Portal. This is intentional, leaving the MDR Portal as a place to receive AROs, view reporting, and configure the features included in your MDR service. 

The Appliance Dashboard's more technical data helps you drill into investigations, see low-level details about a particular host, request, process, and gain insights into the traffic we analyze and use to generate AROs.

Whether you have a physical or virtual (self-hosted or Field Effect hosted) deployed, you can access the Appliance Dashboard. To learn how to log in, visit Accessing the Appliance Dashboard.

This article introduces and outlines the dashboard’s homepage. Beyond the Homepage, the following views are available in the dashboard:

• Alerts
• Endpoint:
  • Agents
  • Software
  • Users
  • Files
• Network:
  • Sensors
  • DNS Activity
  • Local Systems
  • Network Activity
  • DNS Reports
  • PCAPs
  • TLS Activity

The Homepage

Once logged in, you will be taken to the homepage, which has high-level data about your organization’s endpoints, sensors, and recent traffic.The content 

Clicking the arrow will make the sidebar collapsible, and hovering over the sidebar will reopen it. To pin the sidebar back open, click the same arrow.

The Endpoints Pane

From the endpoints pane, you can quickly see the number of endpoints that are online, devices that have recently installed an endpoint, and the total number of installed endpoints. Clicking the pane will take you to the Endpoints page, where you can drill into each endpoint and see more granular data.

The Sensors Pane

The sensors pane displays high-level data about the network appliance(s) deployed across an organization. Any connectivity issues with a sensor will be shown in this pane. Clicking on an endpoint’s hostname will take you to a drilled in view of the endpoint on the Sensors page (Network section).

The Recent Traffic Pane

The recent traffic pane includes a graph that shows network traffic (upload and download) observed on the network. The green line represents download traffic, and the blue line represents upload traffic. In the example below, we can see several spikes in download traffic, which may warrant a deeper investigation.