Computers last connection issue

JSAVJSAV
in WatchGuard EPDR/EDR/EPP

I created a filter to use for automatic deletion of computer that last connected not within last 3 months. The issue is there are computers/servers that are currently in use that show they haven't connected for a lot longer than 3 months. When I connect to the computer and manually run the sync, it does update the last connected to current date of when I ran the sync. What could be some of the causes for this as it doesn't affect all computers/servers? From what I read they should pretty much always be connecting to watchguard servers. Open to ideas on this.

Comments

  • David_CarroDavid_Carro WatchGuard Representative
    edited October 18

    Hello, @JSAV

    You are absolutely right. Devices with Windows 7 and higher should be connecting to the cloud in a continuous manner. Agent is constantly checking for changes on settings in order to apply them at the shortest time possible after they are committed on the online console.

    In order to check if the device is connected to the console, you do have a button at the top right on each info screen for each device:

    That button is to be available at all times (the computer is switched on and connected).
    If that button is greyed out, check the device (it might be turned off, or with no internet, or it does not have the WG URLs whitelisted for a correct communication, or DNS are wrongly configured, or WG Agent is damaged...)

    The devices correctly connected will also show the Last Connection and the Last Settings Check:

    Which should fall into the last 4 hours (hour more, hour less) of switched on device.

    If you are still suspect the agent not to be working correctly, please send a request for help to our tech line in order to get specialised support on the matter.

    Hope this helps,

    David

    David Carro | Technical support
    WatchGuard Technologies, Inc. | www.watchguard.com

Sign In to comment.