Endpoint Protection

 View Only
  • 1.  Scheduled report

    Posted Dec 13, 2012 04:51 AM

    Hi Symantec support

    1. Can you please provide me specific steps for how to create schedule report to get SEP client list (name) which is 8 days outdated?

    2. How to create report for client which SEP service is stop or auto protect is disable?

    Many thanks



  • 2.  RE: Scheduled report

    Posted Dec 13, 2012 05:21 AM

    Hi,

    Folloe this steps

    Steps are below

    Open and login to the SEPM
     
    Click Monitors

    Click Notifications

    Click Notification Conditions
     
    Click Add
     
    Select "Virus definitions out-of-date"

    Enter the notification name(eg- old defintion)

    Select condition (eg- 8 Days )

    Add your email id here.

     

    How to create a Scheduled Report in Symantec Endpoint Protection Manager ?

    http://www.symantec.com/business/support/index?page=content&id=TECH96790

    http://www.symantec.com/business/support/index?page=content&id=TECH105865

     

    2. How to create report for client which SEP service is stop or auto protect is disable?

    It's not possible in sepm

    Check this idea

    https://www-secure.symantec.com/connect/ideas/notification-alert-soon-sep-clients-which-were-once-reporting-sepm-goes-offline

     

     



  • 3.  RE: Scheduled report

    Posted Dec 13, 2012 04:24 PM

    Moving to SEP forum for better visibility.



  • 4.  RE: Scheduled report

    Posted Dec 13, 2012 08:12 PM

    Hi Symantec Support

    1. Understood that notification can do this, but notification does not send email on same time everyday, the time interval is 10 hours at the longest.

    2. If SEPM cannot create such report, which computer status or which column in Symantec Log or report indicate that Symantec service is stop or auto protect is diabled ?



  • 5.  RE: Scheduled report

    Posted Dec 13, 2012 10:38 PM

    1. Understood that notification can do this, but notification does not send email on same time everyday, the time interval is 10 hours at the longest.

    The default damper period for notifications is Auto (automatic). If a notification is triggered
    and the trigger condition continues to exist, the notification action that you configured is not
    performed again for 60 minutes. For example, suppose you set a notification so that you are
    emailed when a virus infects five computers within one hour. If a virus continues to infect your
    computers at or above this rate, Symantec Endpoint Protection emails you every hour. The
    emails continue until the rate slows to fewer than five computers per hour

    2. If SEPM cannot create such report, which computer status or which column in Symantec Log or report indicate that Symantec service is stop or auto protect is diabled ?

    Check this thread

    https://www-secure.symantec.com/connect/forums/possibilty-notification