Endpoint Protection

Hello Team,

As I configured notification for unmanaged detector which working properly but can we schedule it the same for Weekly or Daily onced. As per the current config we can only set the notification for upto 10 hours.

Please suggest.

Regards,

S2S

You can schedule it for daily/weekly a once to send the notification on email if you require to work on it as daily/weekly base.

It can be upto 10 Hrs but as you said it will also can configure once in 24 Hrs but how?

There is no option to daily/weekly,you can configure max 10 hours.

There are two ways to view unmanaged computers/devices discovered using the Unmanaged Detector feature.

• Configure a notification
  1. Open and login to the Symantec Endpoint Protection Manager
  2. Click on Monitors Tab
  3. Click on Notifications
  4. Click on Notification Conditions
  5. Click on Add
  6. Select Unmanaged computers
• Check Unknown Device Failures in Security Status Details :
  1. Select the Home tab to view the Dashboard page of the Symantec Endpoint Protection Manager
  2. Click on More Details link on the Security Status alert and check for Unknown Device Failures. Any detections of unmanaged devices are listed, with IP and MAC address details

You can raised IDEA for unmanaged detector notification daily/weekly.

https://www-secure.symantec.com/connect/security/ideas

I have create the idea

https://www-secure.symantec.com/connect/ideas/notification-unmanage-detector

Notifications are event-driven and triggered if something happens. It's not possible to schedule them, it's against their functional principle.

The  10 hours you refer to are a so-called damper that shall prevent too many notifications in a defined period of time:

How notifications work

The best practice to work with UDs is to check regularly for unmanaged clients (see James007's post), then make the found clients managed or exclude them:

How do I configure exceptions for the "unmanaged detector" from Symantec Endpoint Protection Manager (SEPM)?

Additionally, it's possible to create a (regularly executed) simple SQL query, see here:

https://www-secure.symantec.com/connect/forums/sql-querys-database#comment-7051181

It not be possible to configure it for 24 hours.

There is one workaround to find the data at any time

https://www-secure.symantec.com/connect/forums/sep-unmanaged-detector-reporting