Overview
The NPAV EDR Centralized Management Console is a unified, web-based platform that enables administrators to deploy, configure, monitor, and manage endpoint security from a single interface. It provides centralized visibility into endpoint health, security events, policies, and threat activity while simplifying administration across distributed environments.
Designed for enterprise-scale deployments, the console supports on-premise implementation, role-based administration, multi-tenant management, scalable server architecture, centralized endpoint telemetry, threat hunting, customizable dashboards, and comprehensive agent management. With real-time monitoring and centralized policy enforcement, administrators can efficiently manage security operations, respond to incidents, and maintain complete control over all protected endpoints through a single management console.
On-Premise Deployment
NPAV EDR supports on-premise deployment, allowing organizations to host all management components within their own infrastructure. This ensures complete control over security data, system configuration, and compliance with internal and regulatory requirements.
Web-Based Management Console
The solution provides a browser-based management console that enables authorized administrators to securely access all management functions from any authorized machine without installing additional software.
The console supports:
- Endpoint deployment and management
- Security policy configuration
- Threat monitoring and investigation
- Reporting and analytics
- User and role-based administration
- Real-time endpoint status monitoring
Multi-Tenant Architecture
NPAV EDR supports a multi-tenant architecture, enabling organizations to manage multiple sites, departments, or customers from a centralized platform while maintaining logical separation of administrative access, policies, and endpoint groups.
Distributed management consoles can be deployed for individual sites, with all operational data synchronized to the primary management console for centralized visibility and administration.
Scalable Master-Slave Architecture
The solution supports a Master-Slave architecture for large-scale deployments.
Key capabilities include:
- Centralized management through a Master Server.
- Distributed endpoint communication via multiple Slave Servers.
- Load distribution across multiple servers.
- High scalability for enterprise environments.
- Centralized visibility and policy enforcement across all managed endpoints.
This architecture enables organizations to efficiently manage thousands of endpoints while maintaining optimal performance and reliability.
Native Endpoint Data Lake
NPAV EDR includes a native data repository for storing endpoint telemetry, security events, and operational logs. The centralized data store enables efficient processing, analysis, and long-term retention of endpoint information to support security operations, compliance, and forensic investigations.
Native Threat Hunting
The solution provides built-in threat hunting capabilities, allowing security analysts to perform searches across collected endpoint telemetry.
Supported capabilities include:
- Indicator of Compromise (IOC)-based searches.
- Historical endpoint event analysis.
- Endpoint activity investigation.
- Threat correlation and incident analysis.
- Rapid identification of suspicious activities across managed endpoints.
Customizable Dashboards
The management console offers interactive and customizable dashboards that provide real-time visibility into the security posture of the organization.
Dashboards include insights such as:
- Endpoint health and status.
- Security events and alerts.
- Threat detection statistics.
- Malware detection trends.
- Policy compliance.
- Queue and task status.
- Endpoint activity.
- Frequently targeted IP addresses.
- Suspicious domains.
- Email-related security events.
- Detection technologies and verdict statistics.
Administrators can customize dashboard views based on operational requirements and user roles.
Agent Management
NPAV EDR enables centralized management of endpoint agents directly from the management console.
Administrators can:
- Temporarily disable endpoint agents for troubleshooting or testing.
- Remotely uninstall agents from managed endpoints.
- Monitor agent health and connectivity.
- Configure agent policies and updates.
Endpoint Notifications
The management console allows administrators to publish customized alert messages and notifications directly to managed endpoints.
These notifications can be used to:
- Inform users about security incidents.
- Display maintenance announcements.
- Notify users about policy updates.
- Provide security awareness messages.
- Guide users during incident response activities.
