Endpoint Protection

Hey Guys, whats the best recomendation to get an alert (notification) / report that one of the servers in my SEPM is not talking to the SEPM management server. We got burned yesterday where one terminal server at a customer was not talking to SEPM so users started getting they yellow exclamation points on the tray icon. I am hoping to exclude workstations from the notification. Any ideas would be appreciated. A reboot of the server fixed the issue. Just need to get alerted to the condition.

Hello, 

You can create a "Unmanaged Computers" Notification. 

Check the Screenshot:

Also check the Articles below:

About log types

About the different types of Symantec Endpoint Protection Manager Reports

About Computer Status reports and logs

 

http://www.symantec.com/docs/TECH95541

 

Also, check the Screenshots with Steps on how to create a Custom Report for Offline Clients.

 

Step 1: Create Filter

 

 

 

 

 

Step 2: Save Filter

 

 

 

Step 3: Create a Schedule Report with the Help of the Filter Created.

 

 

 

 

Hope that helps!!

So does this apply to the scenario of protecting me from a client machine that was already in a managed state. I think that this notificaiton condition applies to when an unmanaged machine gets detected...

Hello,

I apologize, I just updated the above comment for creating a Scheduled Report for Offline Clients.

Hope that helps!! 

Yeah I actually ended up with the Client Status Report "Computers Not Checked into Server" The filter of "Windows 2003" Servers isolated this for me. Thanks a lot I am in good shape.

Monitors-logs

computer status report

click on advanced option

you can select; clients OFFLINE option too, it will show those which are not talking