Multi-Tenant Management — Task Results

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EDR This topic applies to the WatchGuard EDR endpoint security product., WatchGuard EPP This topic applies to the WatchGuard EPP endpoint security product.

To open the multi-tenant management UI for endpoint security, your Service Provider account must have an active WatchGuard Endpoint Security product license in its inventory.

To review the results of published multi-tenant tasks, on the Tasks page, click View Results. The Task Results page includes Client, Group, and Detections or Patches Installed columns.

To see individual task details, you must open the Endpoint Security management UI for the client account.

Scan tasks only affect client accounts and account groups with WatchGuard Advanced EPDR, EPDR, or EPP installed.

Patch installation tasks only affect client accounts and account groups with a Patch Management license on Windows and macOS endpoints. For information on patch installation options, go to Configure Patch Management Settings.

Automatic Adjustment of Task Recipients

Task management in the multi-tenant management UI for endpoint security synchronizes task creation, status changes, and task results with the Endpoint Security management UI for the managed account. As a Service Provider, when you select a managed account or account group as the recipient of a task, the endpoints that eventually run the task might differ from the account or account group you initially selected. This is because membership in groups is dynamic. This means that task recipients can change if group membership changes between the time when the task was created and the time when the task runs.

When membership in a group changes, the effects in the multi-tenant management UI and the endpoint security product installed on the network are different for unpublished and published tasks.

Unpublished Tasks

When you publish the task, WatchGuard Endpoint Security sends the task to the updated list of recipients.

Published Tasks

There are various scenarios to consider when you publish a task in the multi-tenant management UI and the recipients in an account group change.

Clients Added to a Group Assigned to a One-Time Scheduled Task

The task is not created for new clients.

Clients Added to a Group Assigned to a Recurring Scheduled Task

Changes made to the group members apply the next time the task runs. The clients that were added to the group receive the task in the Endpoint Security management UI.

Clients Added to a Group Assigned to a Canceled Task

The task is not created for the new clients. The canceled task does not run again.

Clients Added to a Group Assigned to an Unpublished Task

The task is created for the new clients and runs when scheduled.

Clients Removed from a Group Assigned to an In-Progress Task

The task added to the Endpoint Security management UI continues to run. The task is no longer associated with the multi-tenant management UI. The task is no longer read-only and the Service Provider label is removed in the Endpoint Security management UI.

Task results that were generated by clients that left the group are deleted from the multi-tenant management UI.

Clients Removed from a Group Assigned to an Unpublished or Canceled Task

The task and associated results (if any) are deleted from the Endpoint Security management UI.

Task results that were generated by clients that left the group are deleted from the multi-tenant management UI.

Related Topics

About Multi-Tenant Management in WatchGuard Endpoint Security