Endpoint Protection

 View Only
  • 1.  Monitoring of user applications

    Trusted Advisor
    Posted Oct 24, 2012 06:49 AM

    I'm looking for a way of monitoring a users machine for applications or programs they are running. Say if they were online gaming in work etc, is there a way to find out if that machine was placed in it's own group? So the program/application could be blocked?



  • 2.  RE: Monitoring of user applications

    Posted Oct 24, 2012 07:08 AM

    Hi

    Check this artical

    Monitoring the applications and services that run on client computers

    http://www.symantec.com/business/support/index?page=content&id=HOWTO55218

    Configuring the management server to collect information about the applications that the client computers run

    http://www.symantec.com/business/support/index?page=content&id=HOWTO55219#v40608257

     

    You can perform several tasks to set up and use learned applications.

    Table: Steps to monitor the applications

    Steps

    Description

    Enable learned applications

    Configure the management server to collect information about the applications that the client computers run.

    See Configuring the management server to collect information about the applications that the client computers run.

    Search for applications

    You can use a query tool to search for the list of applications that the client computers run. You can search on application-based criteria or computer-based criteria. For example, you can find out the version of Internet Explorer that each client computer uses.

    See Searching for information about the applications that the computers run.

    You can save the results of an application search for review.

    See Saving the results of an application search.

    Note:

    In some countries, it may not be permissible under local law to use the learned applications tool under certain circumstances, such as to gain application use information from a laptop when the employee logs on to your office network from home using a company laptop. Before your use of this tool, please confirm that use is permitted for your purposes in your jurisdiction. If it is not permitted, please follow instructions for disabling the tool

     



  • 3.  RE: Monitoring of user applications

    Trusted Advisor
    Posted Oct 24, 2012 07:09 AM

    Hello,

    Check this Article:

    Monitoring the applications and services that run on client computers

    http://www.symantec.com/docs/HOWTO55218

    You can use a query tool to search for the list of applications that the client computers run. You can search on application-based criteria or computer-based criteria. For example, you can find out the version of Internet Explorer that each client computer uses.

    See Searching for information about the applications that the computers run.

    You can save the results of an application search for review.

    See Saving the results of an application search.

    Also, check these Articles below:

    What format are the learned application logs in SEP? Where could we find it on the computer?

    http://www.symantec.com/connect/forums/what-format-are-learned-application-logs-sep-where-could-we-find-it-computer

    VIDEO: Learned Application : SEP 11

    http://www.symantec.com/connect/videos/learned-application-sep-11

    Hope that helps!!



  • 4.  RE: Monitoring of user applications

    Trusted Advisor
    Posted Oct 24, 2012 10:45 AM

    Hmmm interesting I've been running the learn applications on a specific machine in a group for 24 hours now. When I do a search for applications it returns nothing and I know the machine has definetly been on line within the last 24 hours.

    Could this be that the manager is on RU12 MP1 while the client is on RU6 MP1 could this cause an issue?



  • 5.  RE: Monitoring of user applications

    Trusted Advisor
    Posted Oct 24, 2012 10:56 AM

    Hello,

    I don't think that should matter. Could you try migrating 1 client to the Latest version of SEP 12.1 and check.

    Secondly, also check this Thread: https://www-secure.symantec.com/connect/forums/sep-12-learn-applications-communication-settings

    Hope that helps!!



  • 6.  RE: Monitoring of user applications

    Posted Oct 24, 2012 10:56 AM

    HI,

    I think it will be take time if you don't received any log try to upgrade sep client and check again.



  • 7.  RE: Monitoring of user applications

    Posted Oct 24, 2012 11:00 AM

    See this:

    https://www-secure.symantec.com/connect/forums/search-applications-missing-lot-common-applications



  • 8.  RE: Monitoring of user applications
    Best Answer

    Trusted Advisor
    Posted Oct 25, 2012 08:15 AM

    It's started to work once I upgraded the users machine to RU12 looks like SEPM and client have to be on same version. client version 11 doesn't log on a SEPM version 12.