Endpoint Protection

 View Only
  • 1.  SEPM

    Posted Mar 17, 2014 02:07 PM

    I'm currently trying to do a yearly audit for my companies internal audit department.  They are requesting a report that shows which endpoints have SEP installed and which version.  Is there any easy way to gain this information using SEPM?

    Thanks for any help in advance.



  • 2.  RE: SEPM
    Best Answer

    Posted Mar 17, 2014 02:14 PM

    Monitors - logs -computer status report

    export the report 

    open it in excel

    you will find the computer name column and there is a version column which will give you the version info

     

    About the different types of Symantec Endpoint Protection Manager Reports

      

     


  • 3.  RE: SEPM

    Posted Mar 17, 2014 02:24 PM

    That gives me what I was looking for.  Thank you.

    After running the report I notice the report only shows 463 computers but yet my used license count is around 540.  Any reason for this?



  • 4.  RE: SEPM

    Posted Mar 17, 2014 02:31 PM

    Open SEPM 

    click on Admin

    click on Domain

    edit domain properties, here you will see the option to delete clients if not connected for X days, 

    You license will be counted for machines which are not in the network or not reported for more than X no of days. 

    in that case, just remove the license and import it again.. that would give you the correct count.

     



  • 5.  RE: SEPM

    Posted Mar 17, 2014 08:47 PM

    You can change the filter to go out further than 24 hours (this is the default).

    Is it possible some machines have been off the network longer than 24 hours?



  • 6.  RE: SEPM

    Posted Mar 18, 2014 12:54 AM

    You can delete the duplicate and non active client entry.



  • 7.  RE: SEPM

    Posted Mar 18, 2014 12:55 AM

    Configure SEPM to remove clients which have not connected within a specific number of days.

    1. Open SEPM and select the Admin panel.
    2. Click on Servers
    3. Right click on the Site where your management servers are located and choose Edit Properties
    4. Check "Delete Clients that have not connected for __ Days"
    5. Enter a value for Days.
    6. Click OK.

    In version 12.1 of the SEPM, the location for adjusting the setting to delete clients which have not connected for X number of days has moved:

    1. In the SEPM, go to the Admin page.
    2. Select Domains.
    3. Under Tasks, select Edit Domain Properties.
    4. In the Edit Domain Properties window, on the default General tab, note the option to "Delete clients that have not connected for specified time.

    Check this artical

    https://www-secure.symantec.com/connect/articles/duplicate-sep-clients-appear-symantec-endpoint-protection-manager-console



  • 8.  RE: SEPM

    Posted Mar 18, 2014 01:20 AM

    Hi

    Logon to SEPM console and extract the report of computer status

    Regards

     



  • 9.  RE: SEPM

    Posted Mar 18, 2014 07:37 AM

    Thank you everyone.  I found the filter shortly after extracting the log the first time.  All the numbers match up and this gives me all the information I needed.  

     

    Thank you everyone for all your help.



  • 10.  RE: SEPM

    Posted Mar 18, 2014 07:54 AM

    Good to hear ! Dont forget to close the thread by marking it as "Solved" Thanks for your time good day!