ENDPOINT STATE
Is the device healthy?
CPU and RAM utilization, resource-intensive processes, client version, last seen, and last network.
Monitor endpoint state, network paths, and application experience from one Cloudflare One operations surface.
DEX brings endpoint state, Cloudflare One Client connectivity, network paths, and application responsiveness into one troubleshooting surface.
CPU and RAM utilization, resource-intensive processes, client version, last seen, and last network.
Client connectivity, colo context, latency, packet loss, jitter, and traceroute hops.
Scheduled HTTP checks expose availability and response-time trends from enrolled devices.
Start broad, then narrow by user, device, geography, network, or application. DEX helps determine whether an incident is local, regional, application-specific, or related to the Cloudflare path.
DEX observes whether work is responsive. Device Posture separately evaluates endpoint security requirements, then Access and Gateway can use those results when applying policy.
Endpoint state, connectivity, network path, and application responsiveness provide operational evidence—not a compliance verdict.
Policy can require posture for application access or traffic decisions. Enforcement remains outside DEX.
Run HTTP tests for application responsiveness and traceroute tests for path visibility. Target the right device population, then compare results across time, users, and networks.
Public SaaS, an Access-protected application, a Gateway-routed site, or an internal resource reached through Tunnel.
Use device settings profiles to control which enrolled clients run each test.
The same command center connects proactive rules with on-demand diagnostics. The user does not need to reproduce every problem manually for IT.
Watch test and connectivity conditions, then notify operations when experience degrades.
OPEN RULES ↗ →Compare affected devices, networks, locations, and applications before assigning ownership.
FLEET CONTEXTRun speed tests, collect PCAP inside or outside WARP, or retrieve recent client diagnostic logs.
RUN DIAGNOSTICS ↗ →Use path, endpoint, and application signals to route the issue to the correct owner.
DEVICE · ISP · APP · POLICYThis is verified account evidence: Cloudflare DEX MCP is READY, authenticated with OAuth, and attached to the configured opencode-team-mcp-portal.
These links open product-level views. They do not imply that a particular monitor, result, capture, or notification is configured.