Administration

Cylance Endpoint Security

Administration

The Administration Guide focuses on the day-to-day management of Cylance Endpoint Security services. Click a block below to jump to that section of the complete guide. If you are looking to set up services or features, see the Setup Guide.

Dashboards and user management

Using dashboards

Use visuals and statistics to assess your enviroment

Managing aggregated alerts

Use the unified alerts view to investigate alerts detected across multiple services

Managing users, devices, and groups

Manage user accounts, Cylance Endpoint Security devices, and groups

CylancePROTECT

Managing threats detected by CylancePROTECT Desktop

Monitor and respond to device threats

Managing threats detected by CylancePROTECT Mobile

Monitor and respond to mobile threats

Managing safe and unsafe lists

Allow or restrict files, certificates, apps, IP addresses, and domains

CylanceOPTICS

Analyzing CylanceOPTICS data

Review and interpret CylanceOPTICS data

Using CylanceOPTICS to detect and respond to events

Detect and respond to threats

CylanceGATEWAY

Monitoring network connections with CylanceGATEWAY

Monitor CylanceGATEWAY alerts and events

CylanceAVERT

Monitoring sensitive files with CylanceAVERT

Monitor activity and events associated with sensitive files

Auditing

Managing device vulnerabilities

Investigate OS vulnerabilities

Auditing administrator actions

Monitor administrator activities

Managing logs

Configure logging

Sending events to SIEM or syslog

Send Cylance Endpoint Security events to security software

Integrations

Enable access to the Cylance User API

Use third-party programs to manage Cylance Endpoint Security

Troubleshooting

Troubleshooting CylancePROTECT Desktop

Troubleshoot CylancePROTECT Desktop issues, uninstall instructions

Troubleshooting CylanceOPTICS

Troubleshoot CylanceOPTICS issues, uninstall instructions

Removing the BlackBerry Connectivity Node

Remove the BlackBerry Connectivity Node