Discovering Machines without AV through SSIM
Created: 18 Dec 2012 | 6 comments
I have an environment with about 50.000 machines (workstations and servers) and I would like to discover which ones does not have Anti-Virus installed using SSIM.
The AV Product is Symantec Endpoint Protection.
I have already used Unmanaged Detector, but it shows all types of devices as printers and so on.
How to correlate this event with other to find out only MACHINES without AV, please?
I think about "LookUpTable", but this resource is limited (1024 machines) and I have much more than it, so it is not possible to use it.
Thanks in advanced!