Endpoint Protection

 View Only
  • 1.  find out the SEP Client Mac Address

    Posted Sep 15, 2014 01:36 AM

    Query or another way to find out the SEP Client Mac Address via Symantec Server?



  • 2.  RE: find out the SEP Client Mac Address
    Best Answer

    Posted Sep 15, 2014 01:40 AM

    You can export the computer status report from SEPM Montior Tab.

    login Console -> Monitors -> Logs -> Computer status

    Save it and sort with Mac.

    https://www-secure.symantec.com/connect/forums/search-sep-clients-mac-address-sepm



  • 3.  RE: find out the SEP Client Mac Address

    Posted Sep 15, 2014 01:46 AM

    Article - https://www-secure.symantec.com/connect/articles/compilation-sql-queries-sepm-database

    ► SEP Client Information Query. Query result shows:
    ♦ SEP Computer name
    ♦ Installed SEP Version
    ♦ AV definition revision with the timestamp of the last update
    ♦ Assignement to SEPM Group
    ♦ Operating System
    ♦ Logged-on User
    ♦ MAC address
    ♦ IP address

    select i.COMPUTER_NAME
    , AGENT_VERSION
    , pat.version as AV_REVISION
    , dateadd(s,convert(bigint,LAST_UPDATE_TIME)/1000,'01-01-1970 00:00:00') LASTUPDATETIME
    , g.name as GROUP_NAME
    , i.OPERATION_SYSTEM
    , i.CURRENT_LOGIN_USER
    , i.MAC_addr1 "MAC Address"
    , IP_ADDR1_TEXT "IP Address"
    , i.DELETED "Marked for deletion"
    from sem_agent as sa with (nolock) left outer join pattern pat on sa.pattern_idx=pat.pattern_idx
    inner join v_sem_computer i on i.computer_id=sa.computer_id
    inner join identity_map g on g.id=sa.group_id
    inner join identity_map p on p.id=sa.last_server_id
    inner join identity_map s on s.id=sa.domain_id
    inner join identity_map q on q.id=sa.last_site_id
    where
    (sa.agent_type='105' or sa.agent_type='151') and sa.deleted='0' and I.DELETED = 0
    order by group_name, operation_system, i.COMPUTER_name