Endpoint Protection

 View Only
  • 1.  SEP client name leftover cleanup ?

    Posted May 14, 2014 10:32 AM

    Hi people,

    Does anyone here know where in SEPM console can I set the SEP client data/entries cleanup period ?

    I can see from my SEPM client tab console that I got too many orphaned or old data is still lying around, so I need to set it to auto cleanup after 14 days of inactivity.

    But what happened to the workstation which was not connected to the SEPm server after 1 month ? will that workstation ever be managed again by SEPMa and receive the AV definition updates again after the entry is deleted from theSEPM server due to inactivity ?



  • 2.  RE: SEP client name leftover cleanup ?
    Best Answer

    Posted May 14, 2014 10:33 AM

    Yep, it's been moved in 12.1 to the Domains section. See link here:

    http://www.symantec.com/docs/TECH175865

    Once it "checks in" again it will be recognized and managed by SEPM.



  • 3.  RE: SEP client name leftover cleanup ?
    Best Answer

    Posted May 14, 2014 10:38 AM

    Thumbs Up to _Brian yes

    As to your second point, any clients that have been purged will regain management if/when they communicate with the SEPM again, and operate as normal (grab policies and defs, and upload logs etc)



  • 4.  RE: SEP client name leftover cleanup ?

    Posted May 14, 2014 10:50 AM

    Cool, thanks guys.

    So what steps do i need to make sure that the SEP client that is deleted from the SEPM due to long holiday / leave can connect back to the SEPM (indicated with the green dot) ?

     



  • 5.  RE: SEP client name leftover cleanup ?
    Best Answer

    Posted May 14, 2014 10:57 AM

    You just need to decide how long you want clients to be left in there before being removed. Really, I don't see any reason to change from the default of 30 days. But, it's up to you.



  • 6.  RE: SEP client name leftover cleanup ?
    Best Answer

    Posted May 14, 2014 10:58 AM

    Nothing at all, as long as the communications properties of the SEPM dont change, then when the purged client comes back into the office, it will connect out to the SEPM using the settings in its SYLINK file, and successfully connect.

    As far as the SEPM goes, it will note the HWID of the client, and either link it to existing recrds still in its DB, or create a new client record if the logs for this client have exceeded the log retention settings on the DB).



  • 7.  RE: SEP client name leftover cleanup ?

    Posted May 14, 2014 08:28 PM

    Thanks for the information guys.

    The reason I need to do the inactive client cleanup is that to make sure that the Symantec license is not maxed out or over the limit. Does the inactive machine also counted in the license usage ?



  • 8.  RE: SEP client name leftover cleanup ?

    Posted May 14, 2014 08:30 PM

    I've set it to 14 days cleanup. Where in the SEPM console can I verify that the SEP client can "pull" the policy to the SEPM server configured in the Sylink.XML ?



  • 9.  RE: SEP client name leftover cleanup ?
    Best Answer

    Posted May 14, 2014 08:36 PM
    Yes. So deleting inactive clients will free up licenses as well.