The Connection column on the Endpoints page in OneView displays the endpoint's real-time WebSocket connection status. It does not indicate whether an endpoint is online or offline.
When an endpoint shows Inactive in the Connection Status column, that indicates the persistent WebSocket connection is temporarily inactive. The agent automatically reattempts to reconnect until the connection is re-established.
Keep the following in mind when interpreting the Connection status:
- Polling fallback: While Inactive, the endpoint switches to polling mode for policy updates, tasks, and check-ins. Console changes may take 5–10 minutes to apply rather than updating in real time.
- Protection is unaffected: Real-time protection, scanning, and local threat detection continue to function normally on the endpoint regardless of connection status. Only communication between the endpoint and OneView is affected.
- Proxy environments: Endpoints behind a proxy will always display an Inactive connection status. This is expected behavior. Use the Last Sync column to verify the endpoint is actively communicating with the console.
- Sync issues are separate: An Inactive status doesn't necessarily mean the endpoint has stopped syncing or that there is an issue to troubleshoot. If you are experiencing issues such as tasks expiring without being performed or events not reported to OneView, those are separate issues unrelated to the Connection status. For more information, see Endpoints not syncing with OneView.