FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
FortiKoala
Staff
Staff
Article Id 197692
Description

Agents are showing as 'inactive'


Scope

Troubleshooting


Solution

An endpoint shows as inactive if ZoneFox has not received any events from it within the time period you've selected on the Endpoints page. This could be for a number of reasons:



- The endpoint agent has been removed from the endpoint.
- The endpoint cannot connect to the ZoneFox Collector Server - perhaps because of a network misconfiguration, IP block or DNS issue.
- The endpoint has not generated events - it may have been turned off for an extended period of time.






Contributors