Viewing discovered computers

Computers discovered using network scanning or Active Directory are shown in the Unmanaged computers discovered list.

For more information about computer discovery methods, see Using the network to discover computers and Using Active Directory to discover computers.

There are two ways to access the Unmanaged computers discovered list:

  • Protection status widget: Go to the Status menu at the top of the console. Go to the Advanced EDR dashboard that contains the Protection status widget. At the bottom of the widget, find the following text: xx computers have been discovered that are not being managed by Advanced EDR. Click the link to open the Unmanaged computers discovered list.

  • Go to My lists in the side menu. Click the Add link. A window opens. Select the Unmanaged computers discovered list.

Unmanaged computers discovered list

This list shows all computers on the network that do not have Advanced EDR installed, and those computers where the protection is not working properly, despite being correctly installed.

Field Description Values

Computer

Name of the discovered computer.

Character string

Status

Indicates the computer status with regard to the installation process.

  • Unmanaged: The computer is eligible for installation, but the installation process has not started yet.

  • Installing: The installation process is in progress.

  • Installation error: A message specifying the type of error. For a description of error messages, see Computer notifications section (2). With errors whose origin is unknown, the associated error code will be displayed.

IP address

The computer’s primary IP address.

Character string

NIC manufacturer

Manufacturer of the discovery computer network interface card.

Character string

Active Directory path

Active Directory path where the computer was last discovered.

Character string

Last discovery computer

Name of the discovery computer that last found the unmanaged workstation or server.

Character string

Last seen

Date when the computer was last discovered.

Date

Fields in the Unmanaged computers discovered list

If the Status field shows the text Installation error and the origin of the error is known, a text string is added with a description of the error. For a list of the installation errors reported by Advanced EDR, see Computer notifications section (2).

Fields displayed in the exported file
Field Description Values

Client

Customer account the service belongs to.

Character string

Name

Name of the discovered computer.

Character string

IP

The computer’s primary IP address.

Character string

MAC address

The computer’s physical address.

Character string

NIC manufacturer

Manufacturer of the discovery computer network interface card.

Character string

Domain

Windows domain the computer belongs to.

Character string

Active Directory

Active Directory path where the computer was last discovered.

Character string

First seen

Date when the computer was first discovered.

Character string

First seen by

Name of the discovery computer that first found the user computer.

Character string

Last seen

Date when the computer was last discovered.

Date

Last seen by

Name of the discovery computer that last found the user computer.

Character string

Description

Description of the discovered computer.

Character string

Status

Indicates the computer status with regard to the installation process.

  • Unmanaged: The computer is eligible for installation, but the installation process has not started yet.

  • Installing: The installation process is in progress.

  • Installation error: A message specifying the type of error. For a description of error messages, see Computer notifications section (2).

Error

Error description.

For more information, see Computer notifications section (2) .

Installation error date

Date and time when the error occurred.

Date

Fields in the Unmanaged computers discovered list exported file

Filter tool
Field Description Values

Search

Search by computer name, IP address, NIC manufacturer, or discovery computer.

Character string

Status

Advanced EDR installation status.

  • Unmanaged: The computer is eligible for installation, but the installation process has not started yet.

  • Installing: The installation process is in progress.

  • Installation error: A message specifying the type of error.

Last seen

Date when the computer was last discovered.

  • Last 24 hours

  • Last 7 days

  • Last month

Discovery method

Method used to discover the computer

Filters available in the Unmanaged computers discovered list

Computer details page

Click any of the rows in the list to open the computer details page.

Discovered computer details

In the Unmanaged computers discovered list, click a computer to view its details page. This page is divided into three sections:

  • Computer alerts (1): Includes information on alerts or notifications to help you identify installation problems.

  • Computer details (2): Gives a summary of the computer’s hardware, software, and security settings.

  • Last discovery computer (3): Shows the discovery computer that last found the computer.

Discovered computer details

Computer alerts (1)

Status Type Recommended action

Error installing the Cytomic agent

This message specifies the reason why the agent installation failed.

Wrong credentials

Start the installer again with the required credentials to perform the installation.

Unable to connect to the computer

Make sure the computer is turned on and meets the remote installation requirements.

Unable to download the agent installer

Make sure the computer is turned on and meets the remote installation requirements.

Unable to copy the agent installer

Make sure the computer is turned on and meets the remote installation requirements.

Unable to install the agent

Make sure the computer is turned on and meets the remote installation requirements.

Unable to register the agent

Make sure the computer is turned on and meets the remote installation requirements.

Error installing the Advanced EDR protection

This message indicates the reason for the protection installation failure.

Insufficient disk space to perform the installation

To see the free space required for installing Advanced EDR, see Hardware requirements.

Windows Installer is not operational

Make sure the Windows Installer service is active. Stop and start the service.

Removal of the third-party protection installed was canceled by the user

Accept the removal of the third-party antivirus solution found.

Another installation is in progress

Wait for the current installation to finish.

Error automatically uninstalling the third-party protection installed

For a list of the third-party solutions that Cytomic can uninstall, see Supported uninstallers.

There is no uninstaller available to remove the third-party protection installed

Contact technical support to obtain the relevant uninstaller.

Installing the Cytomic agent

When the installation process is complete, the computer will no longer appear on the list of unmanaged computers discovered.

Unmanaged computer

The computer does not have the Cytomic agent installed. Make sure the computer is compatible with Advanced EDR and meets the requirements specified in Product features and requirements

Computer alerts

Computer details (2)

Field Description

Computer name

Name of the discovered computer.

Description

Enter a description for the unmanaged computer.

First seen

Date and time when the computer was first discovered.

Last seen

Date and time when the computer was last discovered.

Active Directory path

If the unmanaged computer was discovered using Active Directory, this field indicates the path where it was discovered.

IP address

IP address of the computer network interface card.

Physical addresses (MAC)

Physical address of the computer network interface card.

Domain

Windows domain the computer belongs to.

NIC manufacturer

Manufacturer of the computer network interface card.

Discovered computer details

Last discovery computer (3)

Field Description

Computer

Name of the discovery computer that last found the unmanaged computer.

Last seen

Date and time when the computer was last discovered.

Discovery method

Indicates whether the computer was discovered through Active Directory or network scanning.

Last discovery computer