Endpoint Protection

Anyone else seeing this after upgrading to v.12.1? Many of the email alerts I get have multiple/same attachments (reporttile.gif, reportbanner.gif, etc.), sometimes around 40-80 individual attachments with the same names. This causes the emails to be anywhere from 4MBs up to over 10MBs in size, which is ridiculous, particularly on a mobile device.  Some emails come through normally, though, with only a few attachments.

I've deleted and recreated all the rules, but the problem persists.  I''ve had a support case open for almost a month and have gotten nowhere other than the suggestion to rebuild everything from scratch (the party line). They're blaming database corruption for the huge email alerts, though I'm skeptical.

Is anyone else seeing this? Is this a common issue?  I've been using SEP since v.7 so I'm not a newbie.

Can you check the preferences of your reports?

Hi ,

Check your reports and notification settings.

Regards

Santhosh

Read this one & check the reporting

https://www-secure.symantec.com/connect/forums/configuring-alert-notifications-email-parameters-symantec-antivirus-10x-reporting

One possibility : are your emails because of ADC events?  You may wish to vote here:

Prevent Info-Level "Application and Device Control is ready" events from triggering Notifications
 https://www-secure.symantec.com/connect/ideas/prevent-info-level-application-and-device-control-ready-events-triggering-notifications

The link you provided is for SAV v.10 and only applies to configuring a batch file to execute. Nothing in the KB article is relevant to my situation.

Thanks, Mick.  Yes, these are a small part of my problem and I've voted for this feature request.

When folks say, "check your settings" please provide specifics as to what to check for.

Thank you.

Hi Justin,

I think I've got some good news- this sounds like a known issue that has been identified in SEP 12.1 RU1.  Here's the official article on the subject.

Symantec Endpoint Protection Manager 12.1 RU1 Notifications ignore time filter and email a full report
Article: TECH178317   |  Created: 2012-01-05   |  Updated: 2012-01-27   | 
Article URL http://www.symantec.com/docs/TECH178317 
 

This is expected to be fixed in the next release of SEP 12.1, which should be out in Spring 2012.

Please do update the thread with news of whether or not this sounds like what you're seeing. &: )

Thanks and best regards,

Mick

Hello,

This seems to be a great news.

Thank you very much for updating this wonderful news.

Hope this helps ALL!!!

Great News..Thanks..Vote Up..Mick..

Hi Justin.

Just wondering if you had the chance to check this out.

Feel free to PM me the case number and I will have a quick look.

Best regards,

Mick