Create an inventory report

You can generate configurable device inventory reports and narrow down the displayed information to specific devices.

1. In the EAA Management Portal navigation menu, select Reports > Device Posture.
   This redirects you to the Device Inventory tab on the Device Posture Reports page.

2. To display complete unfiltered inventory data, click View Report.

3. To apply filters to your inventory report, from the Select Criteria drop-down list, select, for example, OS. Next, select macOS and Windows.

4. Click View Report.

📘

When you select more than one entry for the same criterion, the report includes devices that match any of the selected entries. Based on the following values, the report contains devices running either Windows or macOS.

5. To add more criteria, click advanced and from the Select Criteria drop-down list, select, for example, Firewall, and select Poor.

6. Click View Report.
   With these filtering settings, the inventory report includes devices that match both - the OS and the firewall -criteria. If you do not specify any criteria values, the inventory is not be filtered.

📘

Make sure multiple selections are not mutually exclusive. For example, if one criterion specifies that biometrics is enabled, make sure that any added criteria are applicable to mobile devices.

7. To save the report, enter a report name, and click Save.

8. To view details about the selected device in the report, click the device's name.
   This opens the Device Details report that contains the following sections:

   • Details. Displays signal data collected from the device.

   • Posture. Displays a list of tiers and tags that a given device is part of. In other words, the selected device meets the conditions of tiers and tags that you can find in this tab. In the Posture tab, you can also check remediation hints.

   • Integrations. Displays information about 3rd party integrations.
     This tab displays for devices that have installed EAA Client, Carbon Black, or CrowdStrike anti-malware software.

   • Threats. Displays vulnerabilities existing in the network.
     This tab displays for devices that run both EAA Client and ETP Client.

9. Click Close to exit the device details.

Create an inventory report for devices matching certificate profiles

You can use device inventory reports to identify devices that match configured certificate profiles.

Prerequisites

• Configure a certificate profile.

• Configure a tier or tag using the previously defined certificate profile as a criterion. See Define device risk tiers or Define device risk tags.

1. In the EAA Management Portal navigation menu, select Reports > Device Posture.
   This redirects you to the Device Inventory tab on the Device Posture Reports page.

2. To apply filters to your inventory report, from the Select Criteria drop-down list select Certificate Profile(s).

3. From the Certificate Profile(s) list, select the previously configured certificate profiles.
   You may select up to three certificate profiles.

4. Click View Report.
   The inventory report returns devices that match any of the selected certificate profiles.

Create a device history report

To monitor the history of signal changes (for example for troubleshooting) create a device signal history report for a given device and see when it sent signals to the Device Posture server for the list time. For example, see when firewall status changed from good to poor.

1. In the EAA Management Portal navigation menu, select Reports > Device Posture.
   This redirects you to the Device Inventory tab on the Device Posture Reports page.

2. Create a device inventory report that returns the searched device. Copy the Device ID of the searched device.

3. Go to the Device History tab.

4. In Device ID, paste the previously copied Device ID value and select Show Device History.
   This displays a device history report corresponding to the selected Device ID. Each entry represents the time and date when the signal for the selected device changed.

5. To find out when the firewall status changed, scroll through the paginated report results.

6. To view an application access report, click View Device Access Logs.

7. To save the report, enter a report name, and click Save.

Create a Device Posture blocked report

Two preset Device Posture Blocked reports provide information about access denials due to the Device Posture rules added to application ACLs:

• The Top Device Posture Blocked Applications report shows the applications to which access was denied and the number of access denials.

• The Top Device Posture Blocked Users report shows the users that were denied access and the number of times they were denied access.

1. In the EAA Management Portal navigation menu, select Reports > Activity.
   This redirects you to the Preset Reports tab on the Reports page.

2. In the Preset Reports tab, click the calendar icon. To select a date range click the calendar or select a predefined time frame (from Yesterday to This Year).

3. Click Apply.

4. In the Select Report menu, select Top Device Posture Blocked Applications or Top Device Posture Blocked Users.

5. Click View Report.
   The report displays a filtered list of results based on the provided report profile.

6. To save the report, enter a report name and click Save.

Create an application access denial report

You can create an access denial report to troubleshoot access problems. In situations when you are investigating security incidents, especially if there is a pattern of access denials, you can use this type of report to check device compliance with the application access controls rules. See Troubleshoot access denied issues for more information.

1. In the EAA Management Portal navigation menu, select Reports > Activity.
   This redirects you to the Preset Reports tab on the Reports page.

2. Go to the Application Access tab.

3. To select a date range click the calendar or select a predefined time frame (from Yesterday to This Year), and click Apply.

4. In Select Applications, check one or more applications.

5. In Select Criteria, select one or both of the following criteria entries:

6. Click View Report to display the report.
   The report displays a filtered list of results based on the provided report profile.

7. To save the report, enter a report name, and click Save.