Endpoint Protection

 View Only

  • 1.  SEPM Reporting - Search specific signature ID

    Posted Apr 14, 2014 11:22 AM

    In the Symantec Endpoint Protection Management Console how do I create a report to show specific clients that have a particular risk detected? (Intrusion Prevention detection)

    I can see the total number of detections via one of the default reports however can't find any report that simply gives me the list of machines.

    I'm only interested in an Intrusion Prevention Detection - I can view the log of individual machine but can't seem to run a report that shows me all the machines that have that particular risk detected.

     

    HeartBleedReport.PNG

    If anyone can show me the correct report to use, if there is one let me know.

     

    Thanks,

    Simon



  • 2.  RE: SEPM Reporting - Search specific signature ID
    Best Answer

    Posted Apr 14, 2014 11:28 AM
    Try Monitors tab -- Logs Set log type to network threat protection Set log content to attacks Run this and you can export to CSV and dump into excel


  • 3.  RE: SEPM Reporting - Search specific signature ID

    Posted Apr 14, 2014 12:05 PM

    Works for me. Thanks