Endpoint Protection

 View Only
  • 1.  SEP 11 Annual Reporting

    Posted Apr 16, 2012 10:07 AM

    Hi Guys

     

    I'm trying to create some form of Annual reporting with SEP for;

    Total amounts of infections

    Total amounts of infections cleaner

    Total amounts of infections repaired

    Total ammounts of quarantined

     

    The problem I'm receiveing is that Reports tab only produces about 60 quarantined, does this means suspected files quarantined or clients that have quarantined?

     

    The numbers appear really low especially for over a year in which we have 6200 Clients.  Are the values below of a indiviual unique name infection? if so is it possible to find totals on the amount of quarantined infections on unique machines? i

     

    Action Viruses Security Risks
    Cleaned 258 0
    Suspicious 0 0
    Blocked 72 2
    Quarantined 28 33
    Deleted 588 183
    Manually Repaired / Repair in progress 22 6

    Above obtained by SEE Admin > Reports > Risk > Detection Action Summary

     

    I also went to view logs via Monitors Logs > Risk and the Quarantined items listed is 65 over a period of a year where as the above report shows 28?

     

    Please help as the reports are definately not making sense...

     

    SEP 11.0.6300.803
     



  • 2.  RE: SEP 11 Annual Reporting

    Posted Apr 16, 2012 10:27 AM

    You are trying to pull a log for the past one year but did you check in SEPM for how many days did you configure?

    Check the below screen shot,

    Depending upon the above configuration you will get the logs. The security log provides the risk report from the clients.

    For example: If you configured for 60 days and if you are trying to get the logs fro the past 1 year then you will get the logs for the past 60 days.



  • 3.  RE: SEP 11 Annual Reporting

    Posted Apr 17, 2012 12:17 AM

    For year means we need to increase the log size and settings..better you can send monthly or weekly reports?



  • 4.  RE: SEP 11 Annual Reporting

    Posted Apr 18, 2012 04:33 AM

    How can we schedule a monthly report to be sent out of the following;

    Total Quarantined in a Month

    Total Cleaned 

    Total Repaired

    Thanks

     



  • 5.  RE: SEP 11 Annual Reporting

    Trusted Advisor
    Posted Apr 18, 2012 04:50 AM

    Hello,

    You can create a email notification or manually fetch reports / Logs from SEPM specifically on Monthly Basis.

    Check this Articles:

    How do I setup email alerts in the Symantec Endpoint Protection Manager (SEPM)?

    http://www.symantec.com/docs/TECH105865

    About log types

    http://www.symantec.com/docs/HOWTO27271

    About Computer Status reports and logs

    http://www.symantec.com/docs/TECH95541

    About the different types of Symantec Endpoint Protection Manager Reports

    http://www.symantec.com/docs/TECH95538

    Hope that answers!!!


  • 6.  RE: SEP 11 Annual Reporting

    Posted Apr 18, 2012 04:50 AM

    I must have changed the values a while back as had a look and am set as 60 days.

     

    As last year was able to run a report for a year and had received huge amounts of numbers.

     

    Thanks Guys