Cloud Control Center Dashboards

Elisity Cloud Control Center provides multiple dashboard views designed to meet the needs of different audiences—from executives seeking high-level network health summaries to operators requiring detailed, customizable operational views. Each dashboard is purpose-built to deliver the right information at the right level of detail.

This article covers the two primary dashboard types available in Cloud Control Center: the Overview Dashboard for customizable operational monitoring and the Executive Summary Dashboard for strategic, high-level visibility into network security posture.

For detailed analytics and traffic flow analysis, see the Cloud Control Center Traffic Analytics article.

Overview Dashboard

The Overview Dashboard serves as the primary operational workspace in Cloud Control Center, providing real-time visibility into network activity, device distribution, policy deployment, and infrastructure health. Unlike the Executive Summary Dashboard, the Overview Dashboard is fully customizable, allowing each user to arrange widgets and data views according to their specific operational priorities.

Location: Navigate to Dashboards → Overview from the main navigation menu.

Top-Level Site Filter

A critical feature of the Overview Dashboard is the top-level site filter located in the header (top-right corner). This global filter controls which sites' data is displayed across ALL widgets on the Overview Dashboard.

How the Site Filter Works:

  • Site Selection: Click on "SELECTED SITES" in the header to open a dropdown showing all available sites with checkboxes
  • Multi-Site Selection: Check one or more sites to display data only from those locations. The number of selected sites appears in the button (e.g., "SELECTED SITES (2)")
  • All Sites Option: Check "All Sites" to view aggregated data across your entire deployment
  • Global Impact: All widgets on the Overview Dashboard automatically update to display data only from the selected site(s). This includes summary metrics, device types, Virtual Edge Nodes, and Policy Groups
  • Filter by Tags: Use the "Filter by Tags" dropdown to quickly select sites based on configured site tags
  • Search Functionality: Use the search bar within the site selector to quickly find specific sites in large deployments

The top-level site filter is essential for multi-site deployments and permeates through various components of the platform, including Devices and Virtual Edges.

RBAC Site Label Filtering Dependency: For roles with limited Site Permissions (restricted to specific sites rather than all sites), the Site Labels filter in the top-level site selector requires the View Site Labels permission. Without this permission, users see a disabled Site Labels dropdown displaying "NO SITE LABELS" and cannot filter by site.

To enable Site Label filtering, ensure View Site Labels is enabled under the Site Labels and Distribution Zones privilege section in the role configuration. See the RBAC Privilege Reference for details.

Dashboard Components

The Overview Dashboard consists of modular widgets that display key metrics and provide quick navigation to detailed views. Each widget can be repositioned, resized, and customized to create a personalized operational view. All widgets respect the top-level site filter, showing data only for currently selected sites.

Summary Widgets

The top row of the dashboard displays high-level metric cards showing counts and status indicators for the selected site(s). Total Sites shows the number of active sites (if viewing "All Sites", shows total site count; if specific sites are selected, shows count of selected sites). Total Devices displays the count of all discovered devices across the selected site(s). Total Policy Groups indicates the number of configured Policy Groups containing devices from the selected site(s). Total Policies shows the count of policies (both active and simulated) deployed in the system (global count, not site-specific). Active Virtual Edges displays the number of Virtual Edge appliances currently online and reporting from the selected site(s).

These metric cards are clickable, providing direct navigation to the corresponding detail pages (Devices, Policy Groups, Policies, Virtual Edges) with the selected site filter automatically applied.

Top Device Types

This widget provides a bar chart visualization of the most common device types in the selected site(s). Device types are determined through Elisity's IdentityGraph engine, which analyzes traffic patterns, connector data, and identity attributes to classify devices. The widget supports filtering by connectivity status (ALL, ONLINE, OFFLINE), allowing operators to focus on active devices or identify offline assets at the selected site(s) that may require attention.

Administrators can identify the dominant device types at specific sites (workstations, servers, IoT devices, medical devices), compare device type distribution across different sites by changing the site filter selection, monitor changes in device type distribution over time at particular locations, and quickly assess the composition of a specific site's network for security posture reviews. Clicking on a device type filters the Devices page by that category while preserving the site filter in navigation.

Top Sites

This widget displays sites ranked by device count. When the top-level site filter is set to "All Sites," this widget shows all sites in the deployment. When specific sites are selected in the top-level filter, this widget shows only those selected sites with their device counts.

The widget sorts by device count (highest to lowest) and provides a visual bar chart representation showing relative device population per site. Click VIEW SITE DETAILS to access comprehensive site information including device details, Virtual Edge assignments, and connectivity status. Site health indicators (if configured) show connection status. This widget is particularly useful for multi-site deployments where understanding device distribution across locations is critical for network operations. Use the top-level site filter to focus on specific regions or site groups.

Top Virtual Edge Nodes

This widget shows Virtual Edge Nodes (VENs) ranked by the number of devices they manage at the selected site(s). Virtual Edge Nodes are switches that have been onboarded to Elisity Virtual Edge and are actively enforcing policies at the network access layer.

The widget displays VEN name or IP address, the number of devices connected through each VEN at the selected site(s), health status indicators (online, offline, warning states) shown as colored dots next to VEN names, and a horizontal bar chart showing relative device count per VEN. The widget supports connectivity filtering (ALL, ONLINE, OFFLINE), allowing you to quickly identify VENs with connectivity issues at specific sites. Operators use this widget to identify heavily utilized VENs, monitor infrastructure health at specific locations, and quickly navigate to VEN configuration pages for troubleshooting or policy updates.

Top Policy Groups

This widget presents a breakdown of Policy Groups containing devices from the selected site(s). Policy Groups are logical groupings of devices based on identity attributes, device types, or organizational roles. Policy Groups form the foundation of Elisity's identity-based policy framework.

Sort by DEVICES to see which Policy Groups contain the most assets from the selected site(s), or sort by POLICIES to see which Policy Groups have the most policy rules governing their communications. This widget helps administrators quickly identify large Policy Groups at specific sites that may need subdivision, spot unclassified device groups at particular locations, and navigate to Policy Group details for configuration adjustments. When viewing all sites, this provides a deployment-wide view of Policy Group distribution.

Using the Site Filter for Operational Workflows

The top-level site filter enables powerful site-specific operational workflows without navigating away from the Overview Dashboard.

Example: Site-Specific Health Check. Click "SELECTED SITES" in the header and select a specific site that requires investigation (e.g., "Hospital"). All dashboard widgets instantly update to show only data from that site. Review summary metrics to understand total devices, active Virtual Edges, and policy deployment at that location. Check Top Device Types to see the device composition at that specific site, review Top Virtual Edge Nodes to verify infrastructure health at that location, and examine Top Policy Groups to ensure proper device classification for that site's assets. Click on any widget element to drill down to detailed views with the site filter preserved.

Example: Multi-Site Comparison. Select "All Sites" to view deployment-wide data. Note the device count, active VEs, and Policy Group distribution. Change site filter to select only "Site A" and review metrics specific to Site A. Change site filter to select only "Site B" and compare metrics between sites to identify discrepancies or issues requiring attention.

Filter Persistence: The site filter selection persists as you navigate to other pages in Cloud Control Center. For example, if you select "Hospital" in the Overview Dashboard and then navigate to the Devices page, the Devices page will automatically filter to show only devices from the Hospital site. To clear the site filter, return to the Overview Dashboard and select "All Sites."

Overview Dashboard Customization

Cloud Control Center offers users Overview dashboard customization capabilities, allowing users to personalize their operational workspace based on their specific monitoring priorities and preferences.

Widget Repositioning

Each widget features a six-dot drag handle in the top-right corner. Click and hold this handle to drag the widget to any position on the dashboard grid. The dashboard uses an intelligent grid system that automatically snaps widgets into alignment, ensuring a clean, organized layout.

Best Practices: Place your most frequently referenced widgets in the top-left quadrant for quick visibility. Group related widgets together (e.g., place Top Sites and Top Virtual Edge Nodes side-by-side for infrastructure monitoring). Arrange widgets vertically or horizontally based on your screen resolution and viewing preferences.

Widget Resizing

Click and drag the bottom-right corner of any widget to adjust its size. Widgets can be resized both horizontally and vertically, with the grid system ensuring consistent spacing and alignment. Larger widgets display more data points or provide enhanced visualizations, while smaller widgets conserve screen space for frequently monitored metrics that don't require detailed views.

Size Recommendations: Summary Metric Widgets can remain small (1x1 or 2x1 grid cells) as they display single values. Chart Widgets (Top Device Types, Top Sites) benefit from medium sizes (2x2 or 3x2 grid cells) for better data visibility. Table Widgets (Top Policy Groups, Top VENs) work best at larger sizes (3x3 or 4x3 grid cells) to display more rows without scrolling.

Saving and Resetting Layouts

Dashboard customizations are automatically saved per user. Each Cloud Control Center user maintains their own personalized Overview layout, which persists across login sessions. Changes made by one user do not affect the dashboard views of other users.

Accessing Layout Controls: Click the More Actions menu (three vertical dots) in the top-right corner of the dashboard to access layout management options. Refresh View reloads widget data without refreshing the entire page. Reset to Default restores the dashboard to its original factory layout, removing all customizations. The reset option is useful when you want to start fresh after extensive customization experiments or when troubleshooting layout-related display issues.

Per-User Personalization: Each administrator can create a unique dashboard layout optimized for their role. For example, network operations staff might prioritize Virtual Edge and site widgets, while security analysts might focus on Policy Group and device type distributions. This flexibility ensures each user has immediate access to the most relevant operational data.

Configuring Your Landing Page

Cloud Control Center allows each user to configure which dashboard appears as the landing page after authentication. The dashboard pills displayed in the top navigation bar can be reordered using drag-and-drop. The leftmost dashboard in the order becomes the landing page when the user logs in.

To set a preferred landing page, drag a dashboard pill to the leftmost position in the navigation bar. The new order saves automatically and persists across sessions. Each user maintains an independent dashboard order, so changes do not affect other users.

CCC dashboard navigation pills showing drag-and-drop reorder capability

If a user loses access to their configured landing page due to role-based access control (RBAC) changes, Cloud Control Center automatically displays the next accessible dashboard in the configured order.

Executive Summary Dashboard

The Executive Summary Dashboard provides a high-level, strategic view of network health, security posture, and operational metrics designed specifically for executives, stakeholders, and leadership teams who need comprehensive visibility without operational details.

Location: Navigate to Dashboards → Executive Summary from the main navigation menu.

Time Filtering

The Executive Summary Dashboard includes time-based filtering through the Active Site Range dropdown located in the upper-right corner of the dashboard. This allows you to view metrics and trends across different time periods.

Available Time Filter Options:

  • Last Week - View metrics for the previous 7 days
  • Last Month - View metrics for the previous 30 days
  • Last Year - View metrics for the previous 12 months
  • Active Site Range - View metrics based on the active deployment period
  • Custom Range - Select a specific date range for analysis

All dashboard widgets, charts, and metrics update dynamically when the time filter is changed, allowing you to analyze deployment progress, policy trends, and security metrics across different time horizons. Historical trend lines adjust automatically to match the selected time period.

Unlike the customizable Overview Dashboard, the Executive Summary Dashboard uses a fixed layout optimized for executive reporting and strategic decision-making. The dashboard is divided into several key sections, each providing critical visibility into different aspects of the Elisity deployment and how it is progressing over time.

Active Sites

The Active Sites section displays the total count of sites in the deployment where Elisity Virtual Edge infrastructure is deployed and operational. In addition to the current number of active sites, the dashboard shows a historical trendline and a separate target site count that can be defined by the organization. This allows teams to compare their actual rollout progress against planned deployment milestones on a month-by-month basis.

Executives can quickly see whether the deployment is tracking to plan, accelerating, or lagging behind expectations, making it easier to plan resourcing and prioritize onboarding efforts across the environment.

Sites with Activated Policies

The Sites with Activated Policies section focuses on where Elisity is not only deployed but actively enforcing policy. It shows how many sites have at least one activated policy applied, as well as the target number of policy-enabled sites for the selected timeframe. A dedicated trend chart highlights the progression of policy-enabled sites over time.

This provides a clear view into the adoption of enforcement, helping leadership distinguish between infrastructure rollout (Active Sites) and true policy coverage. Gaps between active sites and policy-enabled sites indicate where policy work remains, even if the underlying infrastructure is already in place.

Policies

The Policies section provides a consolidated view of policy posture across the environment. It displays the Aggregate Policy Deployment score for the deployment, the total number of activated policies, and the number of simulated policies currently in use. Each tile includes a month-over-month delta, making it easy to see if policy coverage is growing, shrinking, or holding steady.

A time-series view charts activated and simulated policies over the selected period. As a deployment matures, organizations should expect to see activated policies increase and simulated policies either transition to enforcement or stabilize at a lower baseline. This progression reflects increased confidence in policy behavior and more comprehensive microsegmentation coverage.

For more detail, see: Elisity Deployment Score and Policies Dashboard.

Traffic Vectors

Traffic Vectors represent unique communication relationships observed between devices or Policy Groups. The Traffic Vectors section presents the total number of unique vectors discovered in the environment and the number of vectors that have been blocked by policy. Month-over-month indicators highlight how observed communications and blocked activity are evolving as segmentation becomes more mature.

The Top Traffic Vectors chart provides a view-toggle allowing you to switch between Policy Groups and Devices perspectives:

  • Policy Groups view - Displays traffic vectors aggregated by Policy Group pairs, showing allowed and denied communication between Policy Groups. This strategic view helps leadership understand policy coverage and enforcement patterns at the policy level.
  • Devices view - Displays traffic vectors grouped by individual IP addresses, providing granular visibility into which specific devices or endpoints are generating the most traffic. This tactical view is useful for identifying high-traffic devices and understanding communication at the IP level.

This dual-view capability helps leadership understand not just where communication is occurring, but how frequently Elisity is actively enforcing segmentation decisions. It provides a high-level view of the ratio of allowed versus denied communications and shows how policy design is shaping real network behavior.

For deeper analytics and drill-down capabilities, see: Visibility and Traffic Analytics.

Virtual Edges

The Virtual Edges section summarizes the enforcement infrastructure supporting the deployment. It displays the total number of Virtual Edge Nodes in use, with a breakdown by node type:

  • Aggregation Nodes - Virtual Edge Nodes deployed in aggregation mode that can enforce policy and optionally support connected Visibility Nodes
  • Visibility Nodes - Visibility-only Virtual Edge Nodes that provide device discovery and telemetry enrichment without policy enforcement, connected to Aggregation Nodes

The section also provides a breakdown of deployed Virtual Edge models through a donut chart visualization, allowing organizations to quickly understand how their hardware footprint is distributed across the network.

This section is primarily used for capacity planning and lifecycle management. It answers questions such as how many enforcement points are deployed, what types of nodes are in use (enforcement vs visibility-only), where various hardware platforms are used, and whether the mix of hardware aligns with the organization's design standards. In large environments, this helps teams identify where they may be standardizing on newer platforms or where legacy platforms still require attention.

For more information on Visibility Nodes, see: Visibility-Only Virtual Edge Nodes. For supported platforms and validated switch models, see: Hardware Compatibility Matrix.

Identity Graph

The Identity Graph section provides a high-level summary of discovered devices and identity enrichment sources across the deployment. It includes:

  • Total Devices - The complete count of devices discovered across all sites
  • Online Devices - Devices currently active and communicating on the network
  • Offline Devices - Devices that have been discovered but are not currently active
  • Policy Groups - The total number of Policy Groups defined across the entire deployment (global count)

Month-over-month indicators highlight how the device population and classification coverage are changing over time. This section gives leadership a quick sense of the scale of the environment and how well devices are being incorporated into policy. An increase in total devices without a corresponding increase in Policy Groups or enforcement coverage may signal the need for additional classification or policy work.

Active Connectors: A donut chart visualization displays the breakdown of active connector integrations by type, showing which identity and enrichment sources are currently in use. This includes both third-party connectors (such as Armis, CrowdStrike, Dragos, Nozomi Networks, SentinelOne, and ServiceNow) and custom connectors. The Active Connectors view helps leadership understand the diversity of enrichment sources contributing to device identity and context.

For more information on configuring connectors, see: Custom Connectors and Third-Party Integrations.

Policy Summary Over Time

The Policy Summary chart visualizes activated and simulated policies over time. It is intended to show how segmentation coverage expands as the deployment progresses and more traffic paths are brought under explicit control. A healthy trend typically reflects a steady increase in activated policies, with simulated policies used as a staging step before enforcement rather than a long-term state.

This view is useful during program reviews and governance meetings, where teams need to demonstrate that policy coverage is growing and that simulated policies are being actively evaluated and promoted to enforcement.

Site KPIs

The Site KPIs table provides a per-site breakdown of critical deployment and security metrics in a sortable, filterable, and exportable format. For each site, the table shows key values such as:

  • Online Devices - Number of active devices at the site
  • Virtual Edge Nodes - Count of VE Nodes deployed at the site
  • Local Policy Groups - Number of Policy Groups defined or used at the specific site (per-site count, distinct from the global Policy Groups metric in Identity Graph)
  • Simulated Policies - Policies in simulation mode at the site
  • Activated Policies - Policies actively enforcing at the site
  • Policy Deployment Score - The site's deployment score reflecting policy coverage effectiveness

This view is particularly valuable for multi-site environments where some locations are further along in deployment than others. By comparing metrics across sites, leadership can quickly identify locations that are ahead of plan, those that are lagging, and where additional engineering or operational focus may be required. The ability to export the table supports external reporting, executive presentations, and deeper analysis outside the Cloud Control Center.

For more information on the Policy Deployment Score calculation, see: Elisity Deployment Score.

Dashboard Comparison

Cloud Control Center includes multiple dashboards designed for different audiences and levels of detail. Understanding how the Overview Dashboard compares to the Executive Summary Dashboard helps users select the correct interface for operational visibility or high-level executive reporting.

Feature Overview Dashboard Executive Summary Dashboard
Primary Audience Network operators, security analysts, system administrators Executives, leadership, stakeholders
Customization Customizable layout and widget placement Fixed layout optimized for executive visibility
Site Filtering Global site filter applies to all widgets Displays deployment-wide data (no filtering)
Level of Detail Operational detail suitable for daily visibility and environment monitoring High-level deployment-wide metrics and summaries
Use Cases Operational monitoring, environment health overview, general visibility Executive reporting, leadership briefings, strategic tracking of deployment progress
Drill-Down Navigation Available on supported widgets; links to detailed pages where applicable Not interactive; panels do not link to detailed operational views
Data Export No export functionality available Export available for Site KPIs table
Best For Users needing operational insights or environment-wide status at a detailed level Users needing high-level summaries without operational detail
Was this article helpful?
1 out of 1 found this helpful