About Monitors

  • Article

Applies To: Forefront Endpoint Protection

Monitors use captured data in order to determine the health state of an object. The monitor then displays the state of the object (Healthy, Warning, or Critical). Additionally, FEP monitors can also generate alerts. Information that is displayed by monitors is event-driven. The FEP Security Management Pack contains four types of monitors: Vulnerability, Security State, Overall Health, and Deployment. For more information about FEP Security Management Pack monitors, see Security Management Pack Monitors.

Security Management Pack Monitor Types

Vulnerability Monitors

Vulnerability monitors track the settings and dynamic statuses of FEP clients. These monitors can be used to identify possible security vulnerabilities. The FEP Security Management Pack contains the following Vulnerability monitors:

  • Antimalware Engine

  • Antimalware Definitions Age

  • Antimalware Definitions

  • Vulnerability Protection

  • Real-time Protection

  • Windows Firewall

Security State Monitors

FEP Security State monitors monitor the security state of FEP clients. The FEP Security Management Pack contains the following Security State monitors:

  • Active Malware

  • Additional Actions Pending

Overall Health Monitor

The FEP Overall Health monitor reflects the overall health of all protected systems running FEP client software. This monitor is not visible, but is used to generate alerts when the overall health of monitored protected clients is unsatisfactory. The FEP Security Management Pack contains the following Overall Health Monitor:

  • Malware Outbreak

Deployment Monitor

The FEP Deployment monitor reflects the deployment status of protected and unprotected clients. This monitor can be viewed in the Endpoints without FEP view. The FEP Security Management Pack contains the following Deployment monitor:

  • Deployment Failure