Provides reference information about Endpoints in Cisco Secure Access. View a real-time summary of the health of your endpoints for faster troubleshooting and to take action to deliver a better, more secure experience for your end users.

View a real-time summary of the health of your endpoints for faster troubleshooting and to take action to deliver a better, more secure experience for your end users.

Navigate to Experience Insights > Endpoints.

By default, the Endpoints List is sorted by Experience score in the order of unhealthy, healthy, and then undetermined. For more information, see Experience score.

In the Endpoint list, click on the ellipsis to edit, disable, enable, and delete endpoints. Deleting an endpoint permanently removes it from both Secure Access and ThousandEyes.

In ThousandEyes, you can configure the Agent Status Settings to auto-disable, auto-delete, or auto-enable endpoint agents. These options allow you to configure the number of days after which the agents can be disabled or deleted. You can also configure the number of days an active but disabled agent can be re-enabled. For more information, see Auto - manage the status for Endpoint Agents in our ThousandEyes documentation.

Changes may take a couple minutes to reflect on the dashboard. Disabling or deleting an endpoint frees up a license that can be reassigned to another endpoint, such as a new device, or one with a lower-tier license. Upgrading an endpoint to a higher-tier license allows you to retain data for a longer period and run more tests.

Use the search and filter options to review endpoint table results by user name, device name, account group, impacted segment, experience score, or location. There are additional filters that can be selected: Gateway, VPN Target, BSSID, and SSID.

View Endpoint List

All : Use this filter to view endpoint connectivity across all currently running endpoint tests for each endpoint or select a specific running test. The experience score changes depending on the selected running test. The list shows only running endpoint tests and only endpoints that are included in those tests.
- HTTP test: selecting this test displays additional columns for response time and response code.
- Network test: selecting this test displays additional columns for latency, jitter, and loss.
Name: Displays the OS-authenticated user first and last name. If identity resolution criteria are not met, the table defaults to the ThousandEyes agent name.

Search by users or devices: Enter a first name and last name, ThousandEyes username, or device name into the search bar and press Enter to find matches. If there's an exact match, the endpoint table will update to show only that single endpoint. If your entry is not an exact match, the search will fail, and no endpoints will display in the table.

User Group: User group information is pulled directly from your customer active directory (AD) or identity provider (IDP) integration.
Account group column only appears when you have multiple ThousandEyes account groups selected in Account Management. For more information, see ThousandEyes Account Management in Experience Insights. An endpoint can only be registered to a single account group.
Impacted Segment: is a drop-down list to view specific impacted segments: Agent, Connection, Gateway, Proxy, VPN, or Application.
Experience Score: shows the overall health of an endpoint, categorized as Healthy, Unhealthy, or Undetermined. The score is calculated as the average of several scores including agent, connection, gateway, VPN, proxy, and applications. An endpoint with a score below 50 is marked Unhealthy. If there is not enough data to calculate a score, the status appears as Undetermined. For more information, see Experience Score.
Select Location: search by specific locations.
OS Type: The operating system of the user device.

Click Filters to select additional search criteria to narrow your search results.

Gateway: view the local network gateway or the router that provides connectivity for the endpoint.
SSID (Service Set Identifier): View the Wi-Fi network name end users see.
BSSID (Basic Service Set Identifier): View the unique identifier for a specific wireless access point broadcasting for the Wi-Fi network.
OS Version: view the specific operating system’s version.

This is a screenshot of the Endpoint list in Experience Insights. You can search and edit in this card.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.