ENDPOINT OPERATIONS
Fleet overview
Visibility and scan control for your Windows and Linux clients.
Administrator sign in
Use the password set during server installation.
Pilot deployment · ClamAV detections move to protected quarantine; failures remain unresolved. Real-time protection is shown separately.
Device fleet
Windows download: HO-managed antivirus and USB management. Linux download: near-default ClamAV, without HO enrollment or USB controls.
| Device | Status | Protection & policies | ClamAV / signatures | Last seen | Actions |
|---|
No devices enrolled. Download the installer and create a token to connect your first pilot client.
Security alerts
Defender reports real-time detections, including downloaded software and saved attachments. Additional ClamAV checks monitor new or changed completed downloads; they do not block execution or scan mail before delivery. Existing files remain covered by manual full scans.
| Client / engine | Threat / affected file | Detected | Action / review |
|---|
No detections reported yet. Check client monitoring status below; this does not certify files as safe.
Scan activity
Latest 200 jobs. Dispatched jobs are never automatically replayed.
| Device / path | Created | State | Result |
|---|
No scans yet. Choose an enrolled device and queue a scan.
Quarantine review
Detected files are isolated for administrator review. Restore only after checking that a file is safe; restored files may be detected again. Delete permanently removes the selected item. Client confirmation appears in Scan activity.
Endpoint groups & USB policy
Exempt a group of Windows or Linux PCs from USB storage blocking. All USB pen drives and external USB storage are allowed on exempt PCs. Other groups and ungrouped PCs remain blocked. Keyboards and mice are unaffected.
Assign PCs to a group
Select endpoint computers below, choose their group, and apply. Removing a PC from an exempt group reapplies USB blocking after client confirmation.
0 PCs selected
Client confirmation
Group changes may disconnect USB storage. Close files on affected drives before applying changes. Configured status confirms software policy; physical access tests are separate. These are Endpoint Console groups, independent of Active Directory.
Audit trail
Latest 50 administrative and device events.