All work Case study 02 Systems & platform design

Endpoint Insight PA Agent

An intelligent investigation workspace that helps IT admins detect endpoint issues 22% faster, resolve more of them on the first attempt, and reach the root cause in 26% fewer steps.

Endpoint Insight dashboard on a laptop resting on a chair
Root-cause analysis
−22% time to detect
Visual diagnostics
RolePrincipal UX Designer
OrganizationPalo Alto Networks
TypeEnterprise workflow design
Headline result−26% investigation steps
01Overview

Support teams were flying blind.

When information about endpoint health, user activity, system behaviour and historical issues is fragmented, support teams are forced to react after problems have already hit users.

Teams spent valuable time investigating issues that had already been solved, relied on repeated escalations, and performed redundant troubleshooting, even when a known solution already existed.

02The challenge

Reactive, slow and expensive.

01
Hard to predictDifficult to proactively identify issues before they impact users or operations.
02
Slow to troubleshootTeams had to investigate multiple sources of information to find the root cause.
03
Repeated escalationsKnown issues kept escalating because the relevant context wasn’t readily available.
04
CostlyLonger resolution times hurt productivity and satisfaction.
A climber on a steep climbing wall seen from belowAn uphill investigation
03Persona

Meet Chris, IT Administrator.

Responsible for endpoint health across a large fleet, Chris needs to spot issues early, find root causes fast, and coach end users without drowning in dashboards.

IT Administrator Persona card for Chris, IT Administrator: background, responsibilities, pain points, needs and technical environment
04Ideation

Six principles that shaped it.

Through collaborative brainstorming and design exploration, we aligned on the core principles behind the solution.

01
Surface the right insights firstPrioritize the health indicators that show what needs attention.
02
Enable proactive detectionHighlight anomalies, trends and risks before they escalate.
03
Provide contextual investigationBring endpoint, user, application and diagnostic data into one experience.
04
Reduce investigation timePresent correlated data in one place, with no tool switching.
05
Visualize impactShow clearly which users, devices or apps are affected to prioritize response.
06
Support faster decisionsMove progressively from overview to detailed diagnostics without overwhelm.
05The experience

From “something’s wrong” to “here’s why”.

Step through how an admin moves from overview to root cause to comparison.

endpoint management / agent issues
Endpoint Management landing with device, issue category and detection summaries Investigation view for an incident with root cause analysis panel Investigation view comparing impacted device groups
06Validation

Tested with the people who’d use it.

Once the end-to-end experience was complete, we ran usability testing with enterprise customers and internal Sales Engineers to evaluate the usability, effectiveness and value of Endpoint Insights during real investigations.

Remote sessionsTask-basedEnterprise customersInternal SEs
  • 01Investigate the root cause of endpoint issues
  • 02Compare healthy and impacted devices
  • 03Interpret diagnostic insights and visual indicators
  • 04Coach end users through resolution
  • 05Create support tickets with investigation details

What worked

  • Visual diagnostics
  • Side-by-side comparison views
  • The contextual investigation workflow

These insights directly informed the next iteration, refining the workflow so admins diagnose and resolve issues more efficiently.

07Final experience

Not a dashboard. A workspace.

By bringing together contextual insights, visual diagnostics and guided workflows, the solution reduces investigation time and minimizes unnecessary escalations.

Endpoint Insights evolved from a passive monitoring dashboard into an intelligent investigation workspace, helping support teams move from identifying problems to resolving them faster and with more confidence.

Interactive prototype

Explore Endpoint Insight yourself.

Walk through the investigation workflow in Figma.

Open in Figma
Investigation view comparing device groups
08Impact

Faster detection. Fewer steps.

Beyond monitoring, the Endpoint Insights Engine delivered value across users, support teams and the business.

Mean time to detect (MTTD)−%

Issues are spotted sooner.

First-time resolution+%

More issues solved on the first attempt.

Investigation steps−%

Less clicking between tools and screens.

User satisfaction (SUS/CSAT)18→

Satisfaction score after the redesign.

Got a complex problem? Let’s talk.

© 2026 Navaneethan Ganesan Back to top