When you're installing Application Control on a Virtual Machine (VM) client node, the Cloud Workload dashboard reports the VM as App Control enabled in ePolicy Orchestrator (ePO). But, the Endpoint Security (ENS) Report shows the same VM as Unprotected. You see this result when only Application Control is installed on the client node.

NOTE: Application Control is one of the antimalware solutions from Trellix.

The following are two new queries with the Cloud Workload dashboard for vSphere:

• Endpoint Scan Report - Retrieve the Endpoint Scan Report for all registered endpoints.
• ENS Report - Retrieve the ENS Report for all registered endpoints.

For details about these queries, see the Cloud Workload dashboard for vSphere product guides.

• The ENS report displays that the VMs have firewall protection by the MOVE Firewall product. 
• The Cloud Workload dashboard shows that the VM doesn't have firewall protection.

You see this issue when you configure the MOVE Firewall to protect the VMs under the registered vCenter account.