# DEVICES

The Devices section provides a centralised view of devices registered with the GuardWare server across licensed products. Administrators can monitor device status, manage assignments, and send commands directly from this section.

{% hint style="info" %}
Devices are displayed according to the products licensed for the organisation. If a product is not licensed, its associated device data will not appear.
{% endhint %}

### View Devices

The device list shows devices that register with the server when the relevant GuardWare agent is installed. Use this view to monitor agent status, verify assigned settings, and identify devices that need attention, such as devices that have not been online recently or are running an outdated agent version.

<figure><img src="/files/YhttgvxOZwgjv2UQdIpx" alt=""><figcaption></figcaption></figure>

<table><thead><tr><th width="236">Column</th><th>Description</th></tr></thead><tbody><tr><td><strong>Device Name</strong></td><td>The hostname of the device.</td></tr><tr><td><strong>User Name</strong></td><td>The user currently or last logged in to the device.</td></tr><tr><td><strong>Serial Number</strong></td><td>The device serial number.</td></tr><tr><td><strong>IP</strong></td><td>The device IP address.</td></tr><tr><td><strong>Setting Assigned</strong></td><td>The Advanced Setting currently assigned to the device.</td></tr><tr><td><strong>Location</strong></td><td>The physical or network location of the device.</td></tr><tr><td><strong>OS</strong></td><td>The operating system installed on the device.</td></tr><tr><td><strong>Last Online Time</strong></td><td>The date and time the device last communicated with the server.</td></tr><tr><td><strong>Hardware</strong></td><td>Hardware specification reported by the device.</td></tr><tr><td><strong>Software</strong></td><td>Applications reported as installed on the device.</td></tr><tr><td><strong>Agent Installation</strong></td><td>The installation status of the INSIGHT agent.</td></tr><tr><td><strong>Agent Version</strong></td><td>The version of the INSIGHT agent installed on the device.</td></tr></tbody></table>

{% hint style="info" %}
Report packet size, client status interval, settings interval, and command interval are configured under **INSIGHT** > **Advanced Settings** > **Report Upload and Communication Settings**.
{% endhint %}

#### Export Devices List

The device list can be exported in PDF or CSV format.

1. Navigate to **DEVICES**.
2. On the top-right,
   1. Click the **Excel icon** <i class="fa-file-excel">:file-excel:</i> to download the files in a `.csv` format.
   2. Click the **PDF icon** <i class="fa-file-pdf">:file-pdf:</i> to download the files in a `.pdf` format.

<figure><img src="/files/Ac5e3hMmwhk7TXPn3mhe" alt="" width="563"><figcaption></figcaption></figure>

### Assign an Advanced Setting

An Advanced Setting defines the monitoring policy and configuration applied to a device. Assigning the correct setting ensures each device is monitored in line with organisational requirements, whether that means applying stricter policies to high-risk user groups or adjusting communication intervals to suit specific network conditions.

Each device can hold one Advanced Setting at a time. A single setting can be assigned to multiple devices. When a new setting is assigned to a device, the existing setting is automatically removed and replaced.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list.
3. Click **Assign Advanced Setting**.<br>

   <div align="left"><figure><img src="/files/ozUTzUI730AU9ao9IUGx" alt="" width="519"><figcaption></figcaption></figure></div>
4. In the side drawer, select an Advanced Setting from the list to assign to the selected devices.<br>

   <div align="left"><figure><img src="/files/N2TyMRi8cxxEFpCyU3mS" alt="" width="491"><figcaption></figcaption></figure></div>
5. Click **Confirm**.

{% hint style="info" %}
If no Advanced Settings have been created yet, create an [**Advanced Setting**](/insight/guardware-insight/insight-v5/advanced-settings.md#create-an-advanced-setting) first. After creating, assign the setting here, or from the [**Assign Devices**](/insight/guardware-insight/insight-v5/advanced-settings.md#assign-devices) action in Advanced Settings.
{% endhint %}

### Assign a Command

Commands allow administrators to act on devices immediately, outside of normal scheduled intervals. This is useful when a change needs to take effect without waiting for the next settings sync, when troubleshooting a specific device, or when preparing a device for decommissioning.

Commands trigger one-off actions on selected devices without changing the assigned Advanced Setting. Use them to troubleshoot a device, force an update, collect current device data, or apply a temporary device action.

Assigned commands are picked up by the device agent during its next communication with the server. Only one command can be assigned per operation; however, multiple devices can be selected and assigned.

{% hint style="warning" %}
Review the effect of each command before assigning it broadly. Commands such as **Uninstall Client**, **Driver Options**, and **Network Monitoring Approach** can affect monitoring coverage, user experience, or device connectivity.
{% endhint %}

#### Before you assign a command

* Confirm the device has checked in recently.
* Select only the devices that need the action.
* Check whether the command is diagnostic, temporary, or permanent.
* Consider whether the command may interrupt the user or require follow-up.

<figure><img src="/files/la0m5at4hHgUSOHI4jHE" alt="" width="521"><figcaption></figcaption></figure>

1. Navigate to **INSIGHT** > **Devices**,
2. Select one or more devices, and click **Assign Command**.

<details>

<summary>Enable Test Communication Settings</summary>

Switches the device Communication Settings to a configuration optimised for fast settings downloads and report uploads. This is intended for testing and diagnostic purposes only.

Use this when validating connectivity, testing server communication, or checking whether a device can receive updates promptly.

{% hint style="info" %}
Applying this command to all devices simultaneously will overload the server. Use selectively on individual or small groups of devices.
{% endhint %}

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Enable Test Communication Settings**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Disable Test Communication Settings</summary>

Reverts the device Communication Settings to their default values, undoing any changes made by the [Enable Test Communication](#enable-test-communication-settings) Settings command.

Use this after testing is complete so the device returns to its standard communication behaviour.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Disable Test Communication Settings**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Update User Policies on Device</summary>

Instructs the agent to immediately apply the current policy and Advanced Settings, rather than waiting for the next scheduled settings interval.

Use this after changing an Advanced Setting or policy when you want the device to apply the latest configuration without waiting for the next scheduled sync.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Update Setting**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Application Scan</summary>

Instructs the agent to report all applications currently installed on the device. Use this command to retrieve an up-to-date software inventory outside of the normal reporting schedule, for example, after a suspected unauthorised installation.

Use this when software inventory needs to be refreshed after an installation, removal, or other application change on the device.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Application Scan**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Hardware Scan</summary>

Instructs the agent to report the device hardware specifications, installed peripherals, and available disk space. Use this command to get a current hardware snapshot when auditing or troubleshooting a device.

Use this when auditing device specifications or confirming changes to storage, peripherals, or other hardware components.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Hardware Scan**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Reresolve PC</summary>

Assigns a new unique identifier to the device. Send this command when a device has been provisioned from an image that had INSIGHT pre-installed. Without it, cloned devices may share the same identifier and conflict when communicating with the server.

Use this after imaging or cloning a machine if multiple devices appear to be reporting as the same endpoint.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Reresolve PC**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Reresolve User</summary>

Assign this command when the same non-Active Directory user account is shared across multiple devices. Without it, INSIGHT may treat those users as a single entity rather than separate individuals.

Use this when shared local accounts cause user activity to be grouped incorrectly across multiple devices.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Reresolve User**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Network Monitoring Approach</summary>

The Network Monitoring Approach command specifies the method INSIGHT uses to monitor network traffic. The default approach is Windows Filtering Platform (WFP). If a conflict exists with another network monitoring application on the device, an alternative approach can be selected to maintain compatibility.

Change this only when troubleshooting compatibility issues with another networking product or when instructed to do so during support.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Network Monitoring Approach** and select the monitoring approach (only one).
   1. **WFP** - Windows Filtering Platform. The default approach.
   2. **LSP** - Layered Service Provider. Use if WFP conflicts with another application.
   3. **OFF** - Disables network monitoring entirely.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Driver Options</summary>

Allows individual INSIGHT drivers to be disabled. Use this command to resolve driver conflicts or compatibility issues without affecting other components.

Disable individual drivers only for troubleshooting or compatibility testing. Disabling drivers may reduce monitoring visibility on the device.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Driver Options** and uncheck the box next to the driver to be disabled.
   1. Process Guardian- **GWPG**
   2. USB Monitoring- **GWScanner**
   3. USB File Transfers- **GWUSBMon**
   4. File Guardian- **GWDogFile**
   5. File System Monitoring- **GWChatDocMon**
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Refresh SSL Certificate</summary>

Renews the SSL certificate INSIGHT uses to monitor SSL traffic. Certificates are valid for **two years** and renew automatically on restart when close to expiry. This command allows renewal without restarting the agent, avoiding any interruption to the user.

Use this when SSL traffic monitoring needs to continue without restarting the agent or interrupting the user session.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Refresh SSL Certificate**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Enable SSL Cache</summary>

Re-enables SSL encryption key caching if it has previously been disabled. Use this command to restore the default SSL monitoring behaviour after a [Disable SSL Cache](#disable-ssl-cache) command has been applied.

Use this after troubleshooting is complete and normal SSL cache behaviour should be restored.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Enable SSL Cache**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Clear SSL Cache</summary>

The Clear SSL Cache command clears the SSL encryption keys cached by INSIGHT to speed up SSL traffic monitoring. If webpages are becoming corrupted for a user, clearing the cache will resolve the issue in most cases.

Use this as a first troubleshooting step when monitored web sessions become corrupted or pages do not render correctly.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Clear SSL Cache**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Disable SSL Cache</summary>

Disables SSL encryption key caching entirely. If webpage corruption is occurring on a regular basis and clearing the cache has not resolved the issue, disabling the cache will prevent it from contributing to the problem.

Use this only if repeated web corruption continues after clearing the SSL cache.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Disable SSL Cache**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Enable CLOSE_WAIT Management</summary>

Enables management of `CLOSE_WAIT` TCP connection states. `CLOSE_WAIT` occurs when the remote side of a connection initiates a close, but the browser fails to close the socket. This typically manifests as blank pages appearing in the browser. Enabling this command addresses the issue.

Use this when users report blank browser pages or symptoms that point to sockets remaining in a `CLOSE_WAIT` state.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Enable CLOSE\_WAIT Management**.
4. Click **Confirm** to assign the command.

</details>

<details>

<summary>Disable CLOSE_WAIT Management</summary>

Disables the management of `CLOSE_WAIT` TCP connection states.

Use this only if `CLOSE_WAIT` management was enabled for troubleshooting and is no longer required.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Disable CLOSE\_WAIT Management**.
4. Click **Confirm** to assign the command.

</details>

<details open>

<summary>Uninstall Client</summary>

The Uninstall Client command removes the INSIGHT agent from the selected devices.

Use this when permanently removing INSIGHT from a device, during device decommissioning, or before a clean reinstall.

1. Navigate to **INSIGHT** > **Devices**.
2. Select one or more devices from the list and click **Assign Command**.
3. Select **Uninstall Client**.
4. Select either **Immediate** or **Silent**.
   1. Selecting **Immediate** uninstalls the agent straight away. The user's session is interrupted and `explorer.exe` is restarted.
   2. Selecting **Silent** uninstalls the agent in the background. Cleanup completes on the next device restart with no user interruption.
5. Click **Confirm** to assign the command.

</details>

After assigning a command, verify the result from the device record. Check the last online time, reported hardware or software data, assigned settings, agent version, or the expected change in endpoint behaviour.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.guardware.com/insight/guardware-insight/insight-v5/devices.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.