CTP UI Update - What's New

[#1]

Version

Cb Defense (formerly Confer) - All

Topic

This document answers most commonly asked question regarding "differences" between old UI and new CTP (Combined Threats Page) UI.

Q/A

Question 1

What are the difference between old UI and new CTP UI?

Answer

Home Page

1. "THREATS" and "MALWARE" are combined as "ALERTS" page in new CTP UI.
2. Indicators of events change from three ("New Threats", "New Malware" and "Watched Apps") to TWO ("Threats" and "Monitored").
   Old UI:
   
   New UI:
   

New "ALERTS" page

1. Change “Response” and “Evaluate” to “Threat” and “Monitored”.
2. Add filter bar at left of console
3. Add "Status" field in threat info
   

   Pulse indicates "Ran"
   Tag indicates "Tags"
   Shield indicates "Policy applied"
   Note indicates "Notes")

4. Add Zip up function to show same threat on multiple devices in single threat item in ALERTS page.
5. Add threat info section above the list on clicking threat
6. Add "Dismiss on all devices" for bulk dismissing threats, in order to dismiss all same threat forever on all selected devices.
7. Add "Notes/Tags" function on threat info section, in order to help administrators leave notes and tags for annotation and classification.

Settings

"Alerts" in "Setting" button is replaced by "Notifications"

Important Note

The old threat data is preserved in the state it was in prior to the upgrade. Post upgrade, Confer is collecting more detailed and verbose information. The old threats before update will be hidden by default in "ALERTS" page and if you turn "Summary" Off, the old Alerts will come up and look similar to the pre-upgrade format. The Reputation Filter Metrics are not inclusive of data prior to the upgrade. An example of this is that you may have seen 40 PUPs prior to this upgrade, but now you only see new PUPs after CTP deployment by filtering "Pup" in Metrics.

Related Content

Cb Defense: "Dismiss on all devices" is not available for threats generated prior to CTP UI update