When you are installing Application Control on a VM client node, the Cloud Workload dashboard reports the VM as App Control enabled in ePolicy Orchestrator (ePO). But, the Endpoint Security (EPS) Report shows the same VM as Unprotected. You see this result when only Application Control is installed on the client node.

NOTE: Application Control is one of the antimalware solutions from McAfee.

The following are two new queries with the Cloud Workload dashboard for vSphere:

• Endpoint Scan Report - Retrieve the Endpoint Scan Report for all registered endpoints.
• Endpoint Security Report - Retrieve the Endpoint Security Report for all registered endpoints.

For details about these queries, see the Cloud Workload dashboard for vSphere product guides.

• The Endpoint Security report displays that the VMs have firewall protection by the MOVE Firewall product. 
• The Cloud Workload dashboard shows that the VM does not have firewall protection.

You see this issue when you configure the MOVE Firewall to protect the VMs under the registered vCenter account.