Enable Aurora Managed Endpoint Defense for tenants

You can now enable Aurora Managed Endpoint Defense for tenants that you manage. When you enable Aurora Managed Endpoint Defense for a tenant, you begin the process of tuning the tenant and prepare it for Arctic Wolf cSOC monitoring. Metrics and data are gathered to help you tune the tenant appropriately. For more information, see Enable Aurora Managed Endpoint Defense for a tenant.

January 2026

Monthly and quarterly reports for Aurora Managed Endpoint Defense tenants

You can now view or download monthly and quarterly Aurora Managed Endpoint Defense reports for Aurora Managed Endpoint Defense tenants that you manage from the Aurora Multi-Tenant Console console.

December 2025

New dashboard widgets

This Aurora Managed Endpoint Defense update introduces two new widgets to help you stay informed about the device health scores of tenants that you manage, and whether the average tenant incident volumes are not within an expected range.

Device health score by tenant — The Device Health Score by Tenant widget is available on the Managed Endpoint Defense - Executive Summary dashboard page in the Aurora Managed Endpoint Defense console and the Aurora Multi-tenant Console (MTC). It lists the Aurora Endpoint Defense tenants that you manage with each of their health scores against their score baseline. If a tenant's health score is below the baseline, the score is marked in red and an email notification is sent to the tenant's critical escalation group. Scores need to be improved to at least meet the baseline, for example, by updating to the latest agents on the devices registered with the tenant.

Tenant incident volume — The Tenant Incident Volume widget is available on the Managed Endpoint Defense - Executive Summary dashboard page in the Aurora Managed Endpoint Defense and the Aurora Multi-tenant Console (MTC). The widget lists the average incident volume over the last 7 days and the total number of incidents for each of the managed tenants. If the average incident volume is higher than expected, based on the number of devices registered with the tenant, or if there were no incidents within the last 24 hours, then the number beside the tenant is red.

July 2025

Health reports are available globally

You can now generate monthly health reports for the tenants that you manage in any region. A separate report is generated for each tenant and can be shared with customers individually. The reports include a summary of activities such as the number of identified and quarantined threats, the number of threat intelligence rules created to help block suspicious and known threats, the number of preventative measures and investigations taken, and the number of identified business applications and services to help minimize business disruptions.

The reports are available in English only.

For more information, see Create a report.

December 2024

Manage Aurora Managed Endpoint Defense escalation groups

You can now add partner administrators to Aurora Managed Endpoint Defense escalation groups so that when an Aurora Managed Endpoint Defense analyst escalates an incident, the appropriate partner administrators are notified based on the severity status of the incident. For example, when the severity of an incident is set to High, members that are in the "-High" escalation group receive a notification.

November 2024

Bug fixes

For more information, see fixed issues.

November 2024

Aurora Managed Endpoint Defense support

Partner users can now easily manage Aurora Managed Endpoint Defense customers from the Dashboard and Incidents pages in the Aurora Multi-Tenant Console.

• The dashboard pages for Aurora Managed Endpoint Defense have an interactive layout that visually displays the various types of alerts that were escalated to organizations you manage, as well as top threats by alert type or target. You can filter the data by organization and timeframe to limit the data presented on the dashboard.
• The Alert > Incidents page lists the incidents that Aurora Managed Endpoint Defense analysts have escalated and require attention from the organization. You can filter and sort the list from the column headings. For example, by the tenant organization name.

November 2024

Bug fixes

For more information, see fixed issues.

August 2024

Health reports

You can generate monthly health reports for the tenants that you manage. A separate report is generated for each tenant and can be shared with customers individually. The reports include a summary of activities such as the number of identified and quarantined threats, the number of threat intelligence rules created to help block suspicious and known threats, the number of preventative measures and investigations taken, and the number of identified business applications and services to help minimize business disruptions

For more information, see Create a report

July 2024

Duo Universal MFA

You can add Duo Universal MFA for multi-factor authentication. Duo has ended support for their Duo Traditional Prompt. For more information, see the Duo Knowledge Base. If you already have the now deprecated Duo MFA authenticator configured, you must add the new Duo Universal MFA authenticator or users might not authenticate successfully. The configured Duo MFA authenticator will be displayed as read only in the Endpoint Defense console.

For more information, see Add an authenticator in the Cylance Multi-Tenant Console administration content.

July 2024

Aurora Multi-Tenant Console experience update

July 2024

Bug fixes

For more information, see fixed issues.

June 2024

Bug fixes

For more information, see fixed issues.

February 2024