Customizing the Security page display

You can customize the information that is displayed on the Security page.

From the Security page, you can view summary and detailed endpoint event information; view the status of the PowerSC Show/Hide Table Columns features; and you can view the status of patch updates on an endpoint. This can be a sizable amount of information. The Show/Hide Table Columns menu options allow you to control the information that is displayed.
  1. From the main page, select the Security tab. The Security page opens.
    Tip: An X in the column indicates that the sub-product is not running or installed on the endpoint. A dash in the column indicates that the sub-product is not applicable to the endpoint. A circled number in the column indicates the number of files with the related events. Click the number to display more information about the event.
  2. The FIM column in the endpoint table indicates whether RTC, auditd, or IBM® i audit is activated for the endpoint.

    The Total RTC Events , Total Auditd Events, and Total IBM i Audit Events sections in the dashboard banner collectively display the number of FIM events that have occurred for the currently selected group of endpoints.

    To toggle the display of the FIM information in the Security page, select Show/Hide Table Columns and turn FIM off.

  3. The Allow List column in the endpoint table indicates whether TE or fapolicyd is activated for the endpoint.

    The Total TE Events and Total fapolicyd Events sections in the dashboard banner collectively display the number of Allow List events that have occurred for the currently selected group of endpoints.

    To toggle the display of the Allow List information in the Security page, select Show/Hide Table Columns and turn Allow List off.

  4. The IDS column in the endpoint table indicates whether IDP or psad is activated for the endpoint.

    The Total IDS Events section in the dashboard banner displays the number of IDS events that have occurred for the currently selected group of endpoints.

    To toggle the display of the IDS information in the Security page, select Show/Hide Table Columns and turn IDS off.

  5. The Alerts column in the endpoint table indicates alerts. The alerts are categorized as high, medium, and low and counted. Click the alert results to open the Events Analysis Report.

    To toggle the display of the Alerts information in the Security page, select Show/Hide Table Columns and turn Alerts off.

  6. The TB column in the endpoint table indicates whether PowerSC Trusted Boot is available on the endpoint. A check mark in the TB column indicates that PowerSC Trusted Boot is available on the endpoint. An X indicates that PowerSC Trusted Boot is not available on the endpoint.

    The Trusted Boot section in the dashboard banner displays the percentage of endpoints in the currently selected group that have PowerSC Trusted Boot activated.

    To toggle the display of the Trusted Boot information in the Security page, select Show/Hide Table Columns and turn TB off.

  7. The TF column in the endpoint table indicates whether PowerSC Trusted Firewall is available on the endpoint. A check mark in the TF column indicates that PowerSC Trusted Firewall is available on the endpoint. An X indicates that PowerSC Trusted Firewall is not available on the endpoint.
    The Trusted Firewall (TF) section in the dashboard banner displays the percentage of endpoints in the currently selected group that have PowerSC Trusted Firewall activated.

    To toggle the display of the Trusted Firewall information in the Security page, select Show/Hide Table Columns and turn TF off.

  8. The TL column in the endpoint table indicates whether PowerSC Trusted Logging is available on the endpoint. A check mark in the TL column indicates that PowerSC Trusted Logging is available on the endpoint. An X indicates that PowerSC Trusted Logging is not available on the endpoint.

    The Trusted Logging (TL) section in the dashboard banner displays the percentage of endpoints in the currently selected group that have PowerSC Trusted Logging activated.

    To toggle the display of the Trusted Logging information in the Security page, select Show/Hide Table Columns and turn TL off.

  9. Click the vertical three-dot ellipse to open the endpoint Actions menu for a selected endpoint. See Monitoring endpoint security for a description of the actions you can perform on the endpoint.