The Terminals page gives you a real-time view of all devices enrolled in Secure Access Service Edge (SASE)—their online status, client version, network traffic, and more. From this page, you can:
Monitor how many devices are connected, broken down by operating system
Track online device trends over time
Manage registered devices: import corporate devices, configure sharing, collect logs, and respond to security incidents
Manage unregistered devices: add dumb terminals and maintain the username and password whitelist
Prerequisites
Before you begin, make sure the SASE client is installed on the devices you want to manage. SASE uses Alibaba Cloud Points of Presence (POPs) to route device traffic to your internal enterprise applications. Only devices with the client installed appear in the registered device list.
Open the Terminals page
Log on to the SASE console.
In the left navigation pane, choose Terminal Management > Terminals.
The page displays the registered device count, the Online Terminal Trend chart, and two device lists: Register Terminal and Unregistered Terminal.
View the registered device count
The device count is broken down by operating system: Total Terminals, Windows Terminals, macOS Terminals, Linux Terminals, Android Terminals, iOS Terminals, and WUYING Workspace.
View the online device trend
The Online Terminal Trend chart shows the number of online devices and the peak count for a selected time range.
Supported time ranges: Last 24 Hours, Last 7 Days, Last 1 Month, and Last 3 Months.
To change the time range, click the 
icon and select a range from the drop-down list.
The Last 1 Month and Last 3 Months ranges require Simple Log Service (SLS) to be enabled. For setup instructions, see Log analysis.
Manage registered devices
The Register Terminal list shows devices running Windows, Windows Wuying, macOS, Linux, iOS, Android, and HarmonyOS. Visible columns include Terminal Name, Terminal Tag, Operating System, Device Owner, Department, Owner, Sharing Settings, and MAC Address.
Import corporate devices
Click Import Enterprise Device.
In the Import Enterprise Device dialog box, click Download Import Template. Enter the MAC addresses of your corporate devices in the template, then upload the file using Drag and Drop File to Upload or by clicking View Local File. Click OK.
After the upload completes, click Imported MAC Addresses to verify the imported devices.
Customize displayed columns
Click the 
icon in the upper-right corner of the list. In the Default Display Configuration dialog box, select the columns to display—Terminal Name, Operating System, Operating System Version, Department, and Owner—then click OK.
Configure device sharing
Device sharing controls how many accounts can access the same office device.
| Setting | Behavior | How to apply |
|---|---|---|
| Global Sharing | Allows multiple employee accounts to log on to the same device | Click Global Sharing to enable for all devices |
| Disable Sharing | Restricts each device to the most recently logged-on account | Click Disable Sharing to disable for all devices |
| Per-device sharing | Overrides the global setting for a single device | Use the toggle in the Sharing Settings column |
Filter and search devices
Filter the device list by any of the following criteria:
| Filter | Description |
|---|---|
| Version number | Client version installed on the device |
| Device tag | Custom tags assigned to devices |
| Device status | Current status of the device |
| Device ownership | Whether the device is a corporate or personal device |
| Sharing status | Whether sharing is enabled or disabled |
| Username | The account currently logged on to the device |
| Department | The department the device owner belongs to |
| MAC address | The device's hardware MAC address |
| Device name | The name assigned to the device |
| Device IP address | The device's current IP address |
| Office zone | The office zone the device is assigned to |
| SN | System serial number of the device |
Export device information
| Method | Steps |
|---|---|
| Export all | Click the  icon in the upper-right corner to export information for all registered devices. |
| Batch export | Select devices on the current page, then click Batch Export to export only those devices. |
Collect device logs
Click Collect Logs in the device row to retrieve and download logs from that device.
Respond to a security incident
In the Actions column, click Terminal Handling, then select Lock or Mark as Lost.
| Action | Effect | How to restore access |
|---|---|---|
| Lock | SASE immediately disconnects the device from all internal enterprise applications | The employee must contact an administrator to unlock the device |
| Mark as Lost | SASE immediately disconnects the device from all internal enterprise applications | The employee can update the device status in the SASE client's device management section, or contact an administrator |
Perform batch operations
Select devices on the current page and click Batch Manage. Available actions:
| Action | Description |
|---|---|
| Batch Delete | Delete the selected devices |
| Batch Unbind | Unbind the selected devices |
| Enable Device Sharing | Enable sharing for the selected devices |
| Disable Device Sharing | Disable sharing for the selected devices |
| Batch Change Device Type | Change the device type for the selected devices |
| Batch Export | Export information for the selected devices |
View device details
Click the Terminal Name of the target device.
On the Details page, review the following tabs:
Tab Contents Basic Information Operating system, version, MAC address, current username, department, logon status, and historical logon accounts Software Information Software installed on the device: name, company, version, and installation time Online A heatmap showing the device's online activity over time Log Collection A list of log collection tasks. Click Collect to create a new task.
Software Information and Online are not available for iOS or Android devices.
The Online tab requires SASE client version 4.x or later.
Manage unregistered devices
The Unregistered Terminal list covers two device categories: dumb terminals and devices on the username and password whitelist.
Dumb terminals
Dumb terminals are devices without a full operating system—such as printers or IP phones—that cannot run the SASE client.
Click Dumb Terminal to filter the list to dumb terminals only.
Add a dumb terminal
Single device: Click Add Terminal and enter the MAC Address, MAC Address Mask, Device Vendor, Device Name, and Device Type.
Batch import: Click Import Devices and upload a file.
The MAC address mask uses a pattern match. For example, setting the MAC address tocc:46:d6:00:00:00and the mask toffff-ff00-0000matches all devices whose MAC address starts withcc:46:d6.
Edit a dumb terminal
Locate the device and click Edit in the Actions column.
Export dumb terminals
Click the 
icon to export information for all dumb terminals.
Disable a dumb terminal
Locate the device and click Disable in the Actions column.
Delete a dumb terminal
Locate the device and click Delete in the Actions column. To delete multiple devices at once, select them and use the batch delete option.
A deleted device must be re-registered before it can log on to the SASE client again.
Username and password whitelist
The username and password whitelist contains devices that authenticate using account credentials instead of the SASE client.
Click Terminal Whitelist to filter the list to whitelisted devices only.
Add a device
Single device: Click Add Account and Password and enter the MAC Address, Device Vendor, Device Name, Device Type, Account, and Password.
Batch import: Click Import Devices and upload a file.
Edit a device
Locate the device and click Edit in the Actions column.
Export whitelist devices
Click to export information for all whitelisted devices.
Delete a device
Locate the device and click Delete in the Actions column. To remove multiple devices at once, select them and use the batch delete option.
A deleted device must be re-registered to log on to the SASE client again.