pangolin_mirror/docs-v2
1
0
Fork 0
mirror of https://github.com/fosrl/docs-v2.git synced 2026-02-07 21:46:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: add info on collected fingerprint/posture checks for clients

Browse Source
This commit is contained in:
Varun Narravula
2026-01-20 12:32:57 -08:00
committed by Owen Schwartz
parent f5bdf7549b
commit d8bb5b81bb
2 changed files with 100 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs.json
View File

@@ -69,7 +69,8 @@
"manage/clients/install-client",
"manage/clients/configure-client",
"manage/clients/update-client",
"manage/clients/credentials"
"manage/clients/credentials",
"manage/clients/fingerprinting"
]
},
"manage/domains",

98
manage/clients/fingerprinting.mdx Normal file
View File

@@ -0,0 +1,98 @@
---
title: 'Client Fingerprinting'
description:
'A summary of device information that is collected during the connection'
---
## Device Fingerprinting
Pangolin clients collect device fingerprinting information and can perform
security posture checks to help determine trusted devices. This information can
be used to enforce security policies, audit device configurations, or monitor
compliance with organizational requirements. Snapshots of device information are
collected periodically on each platform when clients are connected.
## Collected Fingerprint Information
The following device attributes are collected on each device when available:
- Username
- Hostname
- OS version
- Kernel version
- Architecture
- Device model
- Serial number
## Available Posture Checks
Posture checks are also collected on each platform; this is device state that
could potentially change, such as biometric availability, firewall settings, and
other related information if it is available.
Posture checks are supported on a per-platform basis.
### Windows
| Posture Check | What It Reports |
| --------------------- | ----------------------------------------------------------------- |
| Hard drive encryption | Whether the system disk and other disks are encrypted (BitLocker) |
| Screen lock | If a password is required to unlock the screen |
| Firewall | If the firewall (Windows or third party) is enabled |
| Antivirus | If antivirus (Windows or third party) is installed and active |
| Auto updates | If automatic updates are enabled |
| TPM availability | If a Trusted Platform Module is available |
| Windows Defender | If Windows Defender is enabled |
---
### macOS
| Posture Check | What It Reports |
| --------------------------------- | ----------------------------------------------------- |
| Hard drive encryption | If FileVault is enabled |
| Screen lock | If a password is required after sleep or screen saver |
| Biometric configuration | If Touch ID or Face ID is configured |
| Firewall | If the macOS firewall is enabled |
| System Integrity Protection (SIP) | Whether SIP is active |
| Gatekeeper | Whether Gatekeeper is active |
| Firewall stealth mode | Whether firewall stealth mode is enabled |
---
### Linux
| Posture Check | What It Reports |
| --------------------- | ------------------------------------------------ |
| Hard drive encryption | If LUKS devices are detected on the system |
| Firewall | Whether UFW, firewalld, or iptables are enabled |
| AppArmor | If AppArmor is active |
| SELinux | If SELinux is active |
| TPM availability | If a Trusted Platform Module device is available |
---
### iOS
| Posture Check | What It Reports |
| ----------------------- | ------------------------------------ |
| Screen lock | If a password or unlock is required |
| Biometric configuration | If Touch ID or Face ID is configured |
| Minimum OS version | If the OS version meets requirements |
---
### Android
| Posture Check | What It Reports |
| ----------------------- | -------------------------------------------------- |
| Screen lock | If any screen lock is configured |
| Biometric configuration | If fingerprint or facial recognition is configured |
| Hard drive encryption | If File-Based Encryption is enabled |
---
> Each fingerprint snapshot is uniquely identified and stored with a timestamp
> (`collectedAt`) to allow historical analysis and tracking of changes over
> time. These snapshots are deleted after a year. This will be configurable in
> the future.