Endpoint Protection

Greetings,

I'm working with Symantec Endpoint MR4 MP1 and I'm having trouble getting some of the filters I've applied to scheduled reports to come through e-mail correctly.

The reports I am having trouble with are:

1. Network Threat Protection ---> Top Risk Detections Correlation ----> User Name vs. Risk Name
2. Network Threat Protection ---> Blocked Applications Over Time ----> Target:  User Name

When I generate quick reports using the saved custom filters they show up correctly. 

1. With the first report it shows a column graph with the risks detected on the right side of the graph and the user names in the graph legend.  The title on the yellow line of the report is "Correlation of User Name (x) vs. Risk Name (y)"
2. With the second report it shows multiple line graphs (each titled with a user name) and multiple tables (again, each titled by the user name).  The title on the yellow line of the report is "Blocked Applications Over Time by User"

When the scheduled reports are sent to me via e-mail, they do not show up correctly:

1. With the first report it shows a column graph with the risks detected on the right side of the graph (which is the default axis values, and is shown correctly in the e-mail report) and the Client Group is shown in the graph legend (which is the default but should be the users in the e-mail report).  The title on the yellow line of the report is "Correlation of Group (x) vs. Risk Name (y)"
2. With the second report, it shows a single line graph and a single table with no mention of user name.  The title on the yellow line of the report is "Blocked Applications Over Time"

The time frames show up correctly on the reports (weekly, monthly, etc.) but the targets are reverted to defaults.

Does anyone have any idea why e-mailing a report would not apply filter targets correctly?

We are running Windows Server 2003 and Windows XP SP3 (clients).  Java is version 1.6 release 7 on both ends.  If you need any other information let me know and I'll see what I can do.

Can you confirm that the same reports have been configured to send back via E-mail?  We have used E-mails and have not faced any issues around it. If all else fails, then report it to Symantec. COuld be a bug for all you know! 

vikram3500,

Thanks for the reply.  I can confirm that the reports come through e-mail and I receive them, however, they do not have the correct filter applied it seems.

Is there any settings that I should be verifying that might not be apparent?

Thanks,
-MRUti

The same issue is at our end.
Any solutions???

I think it has been designed in this way only. Otherwise it would ahve been different in Home page Top risk detection correlation

Ajitjha, could you please clarify your points?

Then I would be confused as to why you are allowed to specify or create a filter and I would also question the utility of scheduled reports if you could not create a filter that differs from the default settings.

vikram3500,

Just following-up, did you have any other information that you could provide?  I appreciate it.