Device Client Data Collection - Netskope Technical Documentation

The Advanced Analytics Device Client Data collection and accompanying dashboards provide an overview of the most recent organization wide client status.

Client version management ensures your clients are updated with the supported versions, which includes enhancements and future patches. In addition, a dashboard filter, ‘Client Update Reason’ provides insight to the reasons why clients are disabled.

This data collection provides the following key benefits:

Current Device Status: What is the current status of devices?
Client Versions in Use: Which client versions are in use? How many devices are on unsupported, supported, or Golden release versions?
Device Investigation & Troubleshooting: How many times has a user disabled their client? What is the history of client changes for a given user/device? What are the reasons that a client was disabled?

Current Device Status

This dashboard provides the following:

# Devices: total number of installed devices
# Users: total number of users with the client installed
# Users With Currently Disabled Devices: total number of users that do not have an active client enabled
# Users Who Turned Off Their Clients: total number of user that disabled their clients manually
Client Status (# of Users): percentage breakdown of users that have disabled clients or enabled clients. To learn more: Client Status
Internet Security Status: Type of client status. To learn more: Internet Security Service Status
Private Access Status: Type of client status. To learn more: Private Access Apps Status

Client Status

There are several Client Status fields that display to differentiate among Client Status (overall status), Internet Security Status, and NPA Status.

For each row of data, you may see the following statuses:

Client Supported Status: Shows the last updated status at a moment in time (i.e. timestamp date); you’ll see this value change for different event timestamps.

Current Client Version: Status of the client at the moment the query runs. This is the same record repeated multiple rows at different event timestamps, until the status changes.
Historical Client Status: This field contains data if the status changed for that particular record at a moment in time.
Null: A ‘null’ client status/internet security/private access value means the service is not active or is not activated for the device.

Client Versions in Use

The Devices by Current Version widget is updated to show the status of the latest supported and unsupported client versions. The widget is color-coded based on the ‘Client Supported Status’ and is automatically updated in the future. This dashboard identifies any unsupported client versions in use. Best practice is to upgrade the devices listed as ‘Unsupported’ to supported client versions.

This widget provides the following:

Current Client Version
Colored column: color-coded based on the ‘Client Supported Status’.
Client Supported Status: Supported – Golden Release, Supported- Latest Release, Supported, Unsupported
# Devices
# Hostnames
# Users

In addition, you can drilldown to view details such as ‘Why were clients disabled?’ and ‘Top Users Disabling Devices.’

Client Version Trend

This dashboard provides the number of updated hostnames based on their major version, and the date on which the client version was updated.

Device Investigation & Troubleshooting

This set of dashboards helps to look at a particular device, hostname, or user and filter to view details such as:

Top Users By Update Events
Top Users Disabling Devices
Overall Device Status & Change Reasons (# Events): This view is helpful to look at a single user’s device change history
Internet Security Status (# Events)
Private Access Status (# Events)
Device Events – Detailed View: Detailed view of a single user’s device change history

Top Users By Update Events

Top Users Disabling Devices

Overall Device Status & Change Reasons (# Events)

This view is helpful to look at a single user’s device change history.

To learn more: Client Status

Internet Security Status (# Events)

To learn more: Device Custom Filters

Private Access Status (# Events)

To learn more: Device Custom Filters

Device Events – Detailed View

This is a detailed view of a single user’s device change history.

Monitoring and Troubleshooting

The information provided by the Advanced Analytics device client data collection and accompanying dashboards help to monitor and troubleshoot the overall performance and health of your network.

Advanced Analytics data has a roughly ~1 hour data lag, please keep this in mind as you look at the “current status” information.

Data Retention

The system enforces data retention based on your licensing. To learn more: Advanced Analytics Data Retention

Key Fields

The following table lists and describes the various fields that appear in the Advanced Analytics Device Client Data collection and accompanying dashboards.

DISPLAY NAME	GROUP	DESCRIPTION	TYPE
City	General	Location of user based on IP	String
Client Installation Date	General	Date of last successful client installation	Date
Client Installation Time	General	Time of last successful client installation	Time
Client Supported Status	General	This field shows the current client support status for the selected device client (e.g. Supported - Golden Release, Supported, Unsupported, etc.)	String
Client Version	General	Client version	String
Client Version (Major Release)	General	Current major client version	Number
Current Client Version	General	Current client version	String
Current Device Classification Status	General	Current device classification status	String
Current Device Make	General	Current manufacturer name (e.g. Dell, HP, Apple)	String
Current Device Management ID	General	Current device management ID	String
Current Device Model	General	Current device model (e.g. Inspiron, MacPro, MacMini)	String
Current Hostname	General	Current hostname	String
Current OS	General	Current OS	String
Device Classification Status	General	Device classification status	String
Device ID	General	Device ID	String
Device Make	General	Device manufacturer name (e.g. Dell, HP, Apple)	String
Device Management ID	General	Device management ID	String
Device Model	General	Device model ( e.g. Inspiron, MacPro, MacMini)	String
Hostname	General	Hostname	String
Last Event Actor	General	The source/actor that generated the event such as the system, user, or admin	String
Netskope Host POP	General	Netskope POP to which the client connected	String
OS	General	Operating system	String
OS Version	General	OS version	String
Client Status	Status	Last received device status	String
Client Status Update Reason	Status	Client status change reason	String
Current Client Status	Status	Current last received device status	String
Current Client Status Update Reason	Status	Current client status change reason	String
Current Internet Security Status	Status	Current internet security status	String
Current Private Access Status	Status	Current private access status	String
Current Service Name	Status	Shows which service the client status is associated with (e.g. Private Access, NPA, etc.)	String
Internet Security Status	Status	Display devices with respect to the internet security status such as Enabled, Disabled, Errored, Fail Closed, Backed Off, etc.	String
Private Access Status	Status	Last received Secure Access tunnel (Private Access)	String
Service Name	Status	Shows which service the Client Status is associated with (e.g. Private Access, NPA, etc.)	String
Historical Data Client Status	Historical	Client status at the last update time	String
Historical Data Client Status Update Date	Historical	Date when the Client Status was last updated	Date
Historical Data Client Status Update Reason	Historical	Client Status Update Reason at the last update time	String
Historical Data Client Status Update Reason Update Date	Historical	Date when the Client Status Update Reason was last updated	Date
Historical Data Client Status Update Reason Update Time	Historical	Date when the Client Status Update Reason was last updated	Date time
Historical Data Client Status Update Time	Historical	Date when Client Status was last updated	Date time
Historical Data Client Version	Historical	Client version at the last update time	String
Historical Data Client Version Update Date	Historical	Date when Client Version was last updated	Date
Historical Data Client Version Update Time	Historical	Date when Client Version was last updated	Date time
Historical Data Device Classification Status	Historical	Device classification status at the last update time	String
Historical Data Device Classification Status Update Date	Historical	Date when Device Classification Status was last updated	Date
Historical Data Device Classification Status Update Time	Historical	Date when Device Classification Status was last updated	Date time
Historical Data Event Actor	Historical	Event actor at the last update time	Date
Historical Data Event Actor Update Date	Historical	Date when Event Actor was last updated	Date
Historical Data Event Actor Update Time	Historical	Date when Event Actor was last updated	Date time
Historical Data Hostname	Historical	Hostname at the last update time	String
Historical Data Hostname Update Date	Historical	Date when Hostname was last updated	Date
Historical Data Hostname Update Time	Historical	Date when Hostname was last updated	Date time
Historical Data Internet Security Status	Historical	Internet security status at the last update time	String
Historical Data Internet Security Status Update Date	Historical	Date when Internet Security Status was last updated	Date
Historical Data Internet Security Status Update Time	Historical	Date when Internet Security Status was last updated	Date time
Historical Data OS Version	Historical	OS Version at the last update time	String
Historical Data OS Version Update Date	Historical	Date when the OS version was last updated	Date
Historical Data OS Version Update Time	Historical	Time when OS version was last updated	Date time
Historical Data Private Access Client Status	Historical	Private Access Client Status at the last update time	String
Historical Data Private Access Client Status Update Date	Historical	Date when Private Access Client Status was last updated	Date
Historical Data Private Access Client Status Update Time	Historical	Date when Private Access Client Status was last updated	Date time
Historical Data User	Historical	User assigned to the device at the last update time	String
Historical Data User Update Date	Historical	Date when User assigned was last updated	Date
Historical Data User Update Time	Historical	Date when User assigned was last updated	Date time