Access Monitoring

This lab we will leverage TestDrive as there is pre-populated data for us to easily see more information coming from Access into WorkspaceONE Intelligence.

This lab will demonstrated how Workspace ONE Intelligence can be leveraged to monitor user authentication behaviour and application adoption. This data will be fed into Intelligence from WorkspaceONE Access.

This lab can be done on your local device and does not require the VMware Learning platform Labs

Part 1: Dashboards & Widgets User Authentication Behaviour

  1. Open the browser of your choice on your local machine and navigate to https://portal.vmwdemo.com
    1. Authenticate using your username and password and click ENTER. If you don't have one click DON'T HAVE AN ACCOUTN? SIGN UP
  1. Once authenticated make sure you are in the Digital Workspace Tab at the top and click on the drop down Next to Workspace ONE.
    1. Note your credentials here as you will need these for the next authentication.
    2. Click on LAUNCH in the VMWARE Workspace ONE card
  1. You will redirected to https://testdrive.vidmpreview.com in  a new tab. Here enter the username noted in step 2.
    1. Click Next to procede
  1. Enter the password for the user account and click Sign in.
    1. If you don't remember the password flip back to the previous tab and look in the credentials box as explained in step 2.
  1. Once in the Intelligent Hub click on the Workspace ONE UEM Admin tile.
    • Note: If you do not see the tile click on Apps and search for UEM.
  1. You should now be authenticated to Workspace ONE UEM
  1. In the top right corner click on the drop down next to your administrator name.
    1. Then click on the Account Role drop down and change it to Intelligence & Tenant Administrator at TestDrive if its not already.
  1. Click on MONITOR then Intelligence, then LAUNCH to open Workspace ONE Intelligence console.
  1. You should now be in the Intelligence Console. In the Workspace ONE Intelligence console click Dashboards and then click ADD DASHBOARD
  1. Name the dashboard {Your name} Access Dashboard. Then click SAVE at the bottom right corner.
    1. Note due to the heavy use of this environment you may get a message as shown below.
  1. You may encounter the above error if there are too many dashboards configured in the environment. You can delete a dashboard you know is not being used or simply use an existing dashboard you can add widgets to. Otherwise look at Mike Access Dashboard as an example and follow the steps below.
  1. Now that the Dashboard has been created (or an existing one being used), we can add widgets. Click ADD WIDGET
  1. In the Add Widget screen notice all the pre-loaded widgets available.
    1. Click on Integrations and then select Workspace ONE Access
  1. Notice the pre-set widgets that give you various parameters for insight into Access. These can be used to monitor your environment for potential failed logins or even authentication methods or Top 5 App used.
  1. Click on PREVIEW on the Top 10 Users with Failed Logins Last week by Username Widget to see the right side panel pop out a preview of that widget.
    1. The preview feature let's you quickly determine wether this widget gives you the data you are looking for.
    2. Click START on the Side pop our Preview window.
  1. The Measure Count is UDID
    1. Notice the criteria to group the widget is by username
    2. The filter for the data is that success status equals false
  1. Click SAVE at the bottom right hand side of the page.
  1. This widget will give you a break down of the Top 10 users with the most failed login attempts
  1. Click SAVE when back on the Access Dashboard screen.
  1. On the widget you just created click VIEW
  1. This is the detailed view of the widget and lets you actually see a bit more about specific users and their login behaviour.
    1. As one of the criteria for the widget is "Success Status" = false we are only seeing authentications that have failed.
    2. Notice some of the other parameters in the tabe section of the widget. These can all be helpful to troubleshoot login failures or detect suspicious behaviour.
      1. Authentication Method
      2. Error Message
      3. Source IP Address

Part 2: Dashboard & Widgets Application Adoption

In addition to data from login parameters, Access can also send Application Usage information to Workspace ONE intelligence. The widget we will configure in Part 2 will look at application adoption

  1. Let's add another Widget to the dashboard we used above.
    1. Click ADD WIDGET on your Access Dashboard page.
  1. Click Integrations and then select Workspace ONE Access from the dropdown.
  1. Click the PREVIEW on the Top 5 Apps Launched By total Launches and click START
  1. Note the Category: Workspace ONE Access: App Launch, which give us the indicator that this data is coming from Access.
    1. Leave the widget settings as default and click SAVE at the bottom right side of the page.
  1. Now click SAVE on the Access Dashboard page where you added the two widgets.
  1. Click VIEW on the widget you just created, to analyze and see further details.
  1. In the details of the widget we see the data that is relavent for an administrator to understand which applications are trending in the organization.
    1. We can see the following in the table below the infographic that that may:
      1. Username
      2. App Name
      3. Source IP Address
  1. The infographic is also dynamic. Click on the most used application in the info-graph in my case Workspace ONE UEM Admin is the name of the app(in light blue on my graph) and notice a new info graph is created.
  1. This info-graph gives us more insight into how the Workspace ONE UEM Admin app is being consumed and how many unique launches we have within a give amount of time.

This concludes the Analytics lab for WorkspaceONE Access.

The Workspace One Intelligence platform is already a huge value add for all things analytics for the Digital Workspace. It will continue to be built out and integrate in a stronger way with our Trust Network partners. If you would like to continue working on getting to know Workspace ONE Intelligence, below is a walkthrough tutorial to become familiar with the platform using TestDrive.

https://kb.vmtestdrive.com/hc/en-us/articles/360002445574-Workspace-ONE-Intelligence-Overview

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.