Quick filters let you rapidly select and apply commonly used filters to search results. Database Entities quick filters groups are the entity status types, such as Disposition, Entity, and Endpoint State.
This group of filters displays results based on the chosen file disposition.
Lists the files that are flagged with disposition = Good.
Lists the files that are flagged with disposition = Bad.
Lists the files that are flagged with disposition = Suspicious.
Lists the files that are flagged with disposition = Unknown.
This group of filters displays results based on the chosen entity type.
Lists the endpoint entities.
Lists the file entities.
Lists the domain entities.
This group of filters displays results based on EDR status.
The client is enrolled with EDR 2.0.
ATP is in the process of provisioning the device for enrollment.
ATP finished provisioning the client for enrollment and sent the logon credentials to Symantec Endpoint Protection Manager. ATP waits for the client authentication process to complete so the enrollment process can finish.
The client had been enrolled with EDR, but it has subsequently been unenrolled.
This status can appear in any one of the following situations:
The client is running an older version of Symantec Endpoint Protection which does not meet the minimum version requirement. For EDR enrollment, the minimum supported version is SEP14.0 RU1.
This status can also mean that the endpoint entity is created from ATP:N traffic. So it doesn't have associated Symantec Endpoint Protection endpoint details.
The client operating system is not Windows (e.g., Mac).
This group of filters displays results based on the activity state of the Symantec Endpoint Protection client.
Lists the endpoint clients that are active.
Lists the endpoint clients that are not active.
Subscribing will provide email updates when this Article is updated. Login is required.