Endpoint Protection

Starting to look at using the Location Awareness feature.

Question, When a profile is selected does the system record what the criteria was that caused the match?

For example say the admin uses the SSID value to determine a location profile.  Corp SSID = 'companyX' and criteria is triggered when the SSID used by the host in not equal to 'companyX'.  Is the admin left to the basic knowledge that since the profile was selected that the user was on some other SSID?  Or, does the system record and report the SSID in use that was not a match?

The side affect to this type of logging would be that now,

1.) the admin can better verify the accuracy of the criteria.

2.) the admin not only knows that the device was not on the 'companyX' wireless but might have an idea of which wireless the device was connected to, or how many disparate wireless networks to which the device routinely connects.  This could be used to give a heighten "risk factor" to particular devices.

It's a generic entry in the System log that says "Location has been changed to x"

You enable logging for auto-location switching:

http://www.symantec.com/docs/TECH102412

But again, requires logging to be on and the info may not be all that useful.

Do you need more assistance with your question?

If you could post an update for followers of this thread that would be most helpful.

Thanks and take care,
Brian