WatchGuard Cloud Inspector Summary
Summary
| Property | Value |
|---|---|
| Production Status | Labs |
| Category | Cloud |
| Discovers | One child launchpoint per managed Customer account, plus one for the Service Provider's own account |
Description
Monitors a WatchGuard Cloud Service Provider account and every Customer account it manages through the WatchGuard Cloud APIs: managed accounts, licence allocations, and Service Provider operators at the Parent; Fireboxes and access points with firmware and state, hardware licence expiration, WatchGuard Endpoint Security devices with protection and isolation status, endpoint licences, and operators with MFA state per Customer.
Asset Mapping: No asset-inventory mappings ship with this inspector.
Data View Information
Parent Overview Table
- WatchGuard Cloud Account
- Account Name
- Account ID
- Account Type
- Region
- Managed Accounts
- Subscriber Accounts
- Sub-Service Providers
- Allocations Expiring Within 30 Days
- Operators
- Operators Without MFA
- Skipped Collections
Parent Data Tab Headers
- Overview
- Managed Accounts — 8 columns
- Licence Allocations — 10 columns
- Operators — 5 columns
Child Overview Table
- WatchGuard Cloud Account
- Account Name
- Account ID
- Fireboxes
- Fireboxes Offline
- Access Points
- Hardware Licences Expiring Within 30 Days
- Endpoint Devices
- Endpoints Without Full Protection
- Isolated Endpoints
- Endpoints Not Seen in 7 Days
- Endpoint Licence Days Until Expiry
- Operators
- Operators Without MFA
- Skipped Collections
Child Data Tab Headers
- Overview
- Fireboxes & Access Points — 11 columns
- Hardware Licences — 7 columns
- Endpoints — 14 columns
- Endpoint Licences — 6 columns
- Operators — 5 columns
Metrics
| Metric | Description |
|---|---|
| WatchGuard Cloud: Managed Account Count | Accounts managed by this Service Provider, at any depth. Empty for a Subscriber account. |
| WatchGuard Cloud: Subscriber Account Count | Managed Subscriber (Customer) accounts. Empty for a Subscriber account. |
| WatchGuard Cloud: Managed Account List | Managed account names, for change detection. |
| WatchGuard Cloud: Allocations Expiring Within 30 Days Count | Licence allocations to managed accounts that expire within 30 days or have expired. Empty when any product family could not be read. |
| WatchGuard Cloud: Service Provider Operator Count | Operators on the parent WatchGuard Cloud account. |
| WatchGuard Cloud: Service Provider Operators Without MFA Count | Operators on the parent WatchGuard Cloud account with MFA disabled. |
| WatchGuard Cloud: Firebox Count | Fireboxes and FireClusters connected to the account. Empty when the device list could not be read. |
| WatchGuard Cloud: Fireboxes Offline Count | Fireboxes and FireClusters in state offline. |
| WatchGuard Cloud: Firebox List | Firebox and FireCluster names, for change detection. |
| WatchGuard Cloud: Firebox Firmware | Firebox name and Fireware version pairs, for change detection. |
| WatchGuard Cloud: Access Point Count | Access points connected to the account. |
| WatchGuard Cloud: Hardware Licences Expiring Within 30 Days Count | Firebox and access point licences that expire within 30 days or have expired. Empty when a licence list could not be read. |
| WatchGuard Cloud: Endpoint Count | WatchGuard Endpoint Security devices. Empty when the account has no WatchGuard Endpoint Security or it could not be read. |
| WatchGuard Cloud: Endpoints Without Full Protection Count | Endpoints whose overall protection status is not Enabled. Empty when protection status could not be read. |
| WatchGuard Cloud: Isolated Endpoint Count | Endpoints isolated or being isolated. |
| WatchGuard Cloud: Endpoints Not Seen in 7 Days Count | Endpoints whose last connection is more than 7 days old. |
| WatchGuard Cloud: Endpoint Licence Days Until Expiry | Days until the earliest WatchGuard Endpoint Security licence expires (negative once expired). |
| WatchGuard Cloud: Operator Count | Operators on the account. |
| WatchGuard Cloud: Operators Without MFA Count | Operators on the account with MFA disabled. |
| WatchGuard Cloud: Operator List | Operator user names, for change detection. |
Actionable Alerts
All rules ship turned off. Turn on the ones you want under Admin > Actionable Alerts.
| Rule | Trigger | Severity |
|---|---|---|
| WatchGuard Cloud | Firebox Offline | One or more of this account's Fireboxes is offline in WatchGuard Cloud. | High |
| WatchGuard Cloud | Hardware Licence Expiring Within 30 Days | A Firebox or access point licence on this account expires within 30 days or has expired. | High |
| WatchGuard Cloud | Endpoint Without Full Protection | One or more endpoints on this account are not fully protected. | High |
| WatchGuard Cloud | Endpoint Licence Expiring Within 30 Days | A WatchGuard Endpoint Security licence on this account expires within 30 days or has expired. | High |
| WatchGuard Cloud | Operator Without MFA | One or more WatchGuard Cloud operators on this account have MFA disabled. | High |
| WatchGuard Cloud | Service Provider Operator Without MFA | One or more operators on the Service Provider account have MFA disabled. | High |
| WatchGuard Cloud | Firebox Inventory Changed | A Firebox or FireCluster was added to or removed from this account. | Medium |
| WatchGuard Cloud | Endpoint Isolated | One or more endpoints on this account are isolated or being isolated. | Medium |
| WatchGuard Cloud | Endpoint Not Seen in 7 Days | One or more endpoints on this account have not connected in more than 7 days. | Medium |
| WatchGuard Cloud | Operator List Changed | An operator was added to or removed from this WatchGuard Cloud account. | Medium |
| WatchGuard Cloud | Managed Account List Changed | An account was added to or removed from this Service Provider account. | Medium |
| WatchGuard Cloud | Licence Allocation Expiring Within 30 Days | A licence allocated to a managed account expires within 30 days or has expired. | Medium |
| WatchGuard Cloud | Firebox Firmware Changed | The Fireware version of one of this account's Fireboxes changed. | Low |
Updated 3 days ago
Did this page help you?