Endpoint Protection

Hello,

I'm working on a pilot for a customer and I received a question about the way SEP Manager console identifies the client machines.

The customer is asking what happens if  you format a machine with the client installed and then reinstall the agent.

More in deep, which is the unique identifier that the SEP Manager uses to identify a client machine? Is the IP Address, the hostname or the MAC Address?

Thanks in advance.

Best regards,

Alex.

The sephwid.xml file contains the unique hardware identifier for the SEP client.

http://www.symantec.com/docs/HOWTO54706

If you format the drive, you're wiping everything so you would just need to delete the client from the SEPM.

Once re-installed, a new sephwid.xml file will be generated

Hello Brian81,

thanks for helping me.

Does this mean that, running the tool and following the procedure, as soon as the agent will get connected with the SEP Manager, will impersonate the old agent? Is this possibile to do (this is the customer desiderata).

On which criterias the HardwareId is generated?

Please, help me to understand.

Thanks again

Alex.

To my knowledge it is a proprietary algorithm which generates a 32 character hardware ID. It generates it based on the MAC address and hardware of the machine.

Are you imaging or just formatting the drive and re-installing?

Thanks a lot,

I will formatting the drive and re-installing the client.

Alex.

Dear Alex,

as explained by Brian, SEP clients are identified by a proprietary hardware ID generated at SEP installation. If the hardware does not change, you should get the same ID; if it does not happen, I don't see any real concern... a formatted system is a system with a new story without connections to its past hence I don't spot valid reasons to have the new system "linked" to the story of the old one in the SEPM.

Thanks,

I agree with you Giuseppe, a formatted system has a new story without connection to its past.

I will have to make the customer understand this concept.

Ciao

Alex.

You are welcome,

 just remember to flag the discussion as resolved when it is.

Saluti,

Giuseppe

Which post helped? Can you mark the right one?

Done,

I apologize for the mistake.

Regards,

Alex.