First-Time Device Connection Report / Dashboard

Products Endpoint Protector Ideas
,
1

What is a one sentence summary of your feature request?

Have access to a report or dashboard that identifies devices connected for the first time to protected computers within a selected time period (day/week/month/etc.).

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

Visibility into newly introduced devices in the environment is needed to support security monitoring, auditing, and compliance use cases. Currently, Device Control only provides a cumulative list of all devices ever connected (List of Devices) and a Logs Report with events related to devices connected to protected computers (Connected, Blocked, Unblocked, Disconnected, etc.), but neither can be filtered to isolate first-time connections within a defined timeframe.

This creates a gap in identifying newly used or potentially unauthorized devices. A dedicated report or dashboard that highlights devices whose first recorded connection falls within a selected period would solve this problem efficiently. Ideally, this feature would include filtering options (time range, device type, computer, user) and could be visualized in a dashboard widget and exportable report.

This approach removes the need for manual comparison and provides immediate, actionable insight into new device activity, improving both operational efficiency and security posture.

How do you currently solve the challenges you have by not having this feature?

Currently, EPP admins must export the full device inventory (List of Devices) at two different points in time (e.g., today vs. last week/month) and manually compare the datasets to identify newly connected devices. This process is time-consuming, error-prone, and not scalable.

2

Hi Oana,

Thanks for writing this up so clearly. I think this is a fair callout.

What you’re asking for goes beyond the current cumulative device inventory and standard event logs. The important part here is not just seeing connection activity, but being able to identify which devices were first introduced during a selected time window and use that directly for monitoring, auditing, and export.

We do have related discussions internally around detecting when a device is seen for the first time, and your request helps highlight that the reporting side is just as important as the alerting side. A dedicated report or dashboard for newly introduced devices, with filtering and export options, would be a meaningful improvement.

We’ve captured this and will keep it under review as we evaluate improvements in this area.

Best,
Mihai