FirmGuard® SecureSense | Display Endpoint System Information and Resources

abstract tech background

Introduction

SecureSense provides detailed information about each individual endpoint related to the system, CPU, memory, storage and more.

This information provides the building blocks for FirmGuard analysis of endpoint health, status, and security posture. In addition, SecureSense data powers the FirmGuard dashboard and reporting engine and when combined with other FirmGuard metrics provides an unprecedented platform to manage various aspects of the endpoint including BIOS firmware security.

Legacy BIOS Mode Detection

SecureSense is not the primary feature within FirmGuard for BIOS firmware security (that responsibility belongs to SecureCheck) but it does provide one key BIOS firmware related metric called “Legacy BIOS Mode Detection.”

When the Windows operating system is installed on an endpoint there are two possible modes for the BIOS:

  1. UEFI mode or
  2. Legacy mode

UEFI mode is preferred because it is more modern and secure. In practice there is no reason for an endpoint to be in legacy mode and SecureSense will immediately alert an administrator if an endpoint is installed in “Legacy BIOS” mode. The administrator should take immediate action to mitigate this situation. There are two ways to solve the problem:

  1. Reinstall Windows and make sure to put it into UEFI mode or
  2. Retire the endpoint and replace it with a new machine. The latter is sometimes necessary because older endpoints may not support UEFI mode.
New FirmGuard dashboard light version

Note: BitLocker Status is another key endpoint metric that administrators often monitor and report on. SecureSense tracks the status of BitLocker for each endpoint under management.

bit locker status screen shot

Inventory Control: SecureSense provides conventional system information about an endpoint that can sometimes be obtained from other sources as well, but one set of metrics that FirmGuard customers often find helpful are the individual part or serial numbers of memory and physical storage on the endpoint. This is particularly important if you are providing custom hardware to clients and want to ensure that original parts are still present in the endpoint.

part number for inventory control

Want to see FirmGuard in action?

Book your free demo today or contact your Phoenix representative.

FirmGuard dashboard light