Traffic, last 30 days
Requests and blocks reported by your nodes
Open alerts
Needs attention
Offline nodes and nodes with alerts
Customers
Created when a customer's first node enrols with a valid WEES Warden licence. Licence details come from the licence server or the nodes' reports.
Managed policy
Nodes with cloud.managed_policy: true take the most specific policy: their own, else their customer's, else global. Network, AD and listener settings always stay on the node. Every publish is a new version; roll back from the history.
This policy also has per-tenant sections. They're kept as they are; edit them in Advanced.
Groups
Who gets which policy, the same on site, on cloud nodes and for roaming laptops. Add security groups, users, device names (wildcards like IT-*), IP addresses or networks, and VLANs: matching any of them puts someone in the group. Works with or without Active Directory: without it, use device names, IP addresses and VLANs (and, for roaming laptops, the computer's own users and groups). Groups are checked from the top and the first one someone is in decides their policy.
Policies: what each group gets
Someone in no group gets the first policy whose own AD groups, networks or VLANs match, else the default policy below.
Every policy
Download cache
Big downloads (Windows and Office updates, consoles, game stores) come from the internet once, then from the site's own cache. Each site needs a cache server set on its node; nodes without one ignore this.
Public blocklists
Lists maintained by others, the kind pfBlockerNG and Pi-hole use. Each node downloads the ticked lists daily. Tick a list here, then block it in a policy above.
Your own lists
A name and the sites in it, one per line. Each list appears as a category in the policies above.
History
Upload a release
Sign on the build machine first: make sign VERSION=v1.4.0 in wees-warden, then paste the signature from the .sig.json. Unsigned builds are refused here and on every node.
Releases
WEES Cloud licence
This controller's own licence (product wees-cloud)
Administrators
Owner: everything. Admin: all but users. Operator: commands, policy and releases for their customers. Viewer: read-only. Limit operators and viewers to customers for MSP technicians or customer self-service.
API tokens
For automation (PSA/RMM, scripts). Needs the api_access licence feature.