Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Statement of Fixed Notes may incorrect

Created: 22 Jan 2013 | 12 comments
SUPPORT-2-SUPPORT's picture

Hi Team,

SEPM:12.1.2

SEP Clients: 12.1.1000.

We reported issue to support that after upgrading to 12.1.2 the notification is not cleared.

 

Issue: Before with 11.x notification displayed only blocked devices but after upgrading to 12.1.2 allow devices also displaying in notification. Support says that it is fixed in RU2 and you have to upgrade ur clients also to RU2 and we checked in fix notes and found in the solution.(Solution: Improved notifications so that they no longer display disabled devices.) is this a right statement or it should say Improved notifications so that they no longer display enabled devices.

 

Notifications & Reports display too many devices
Fix ID: 2801881
Symptom: In Symantec Endpoint Protection 11.0 you could create notifications that only displayed blocked devices. In Symantec Endpoint Protection 12.1 the same notifications display all devices.
Solution: Improved notifications so that they no longer display disabled devices.
 
Regards,
S2S

Comments 12 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

I would suggest you to create a Case with Symantec Technical Support Team.

How to create a new case in MySymantec (formerly MySupport)

http://www.symantec.com/docs/TECH58873

Regional Support Telephone Numbers:

United States: 800-342-0652 (407-357-7600 from outside the United States)

Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)

United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SUPPORT-2-SUPPORT's picture

Already created after which they suggested for upgradation.

Regards,

S2S

 

Please don't forget to mark your thread solved with whatever answer helped you.

SUPPORT-2-SUPPORT's picture

One more thing Mithun, I dont have issue with their suggestion and only wanted to know whether that statement is correct which is mentioned in fixes.

Regards,

S2S

 

Please don't forget to mark your thread solved with whatever answer helped you.

Mithun Sanghavi's picture

Hello,

I would suggest you to Migrate all the Clients to the SEP 12.1 RU2 and check if that resolves the issue.

Migrating just the SEPM would not help.

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SUPPORT-2-SUPPORT's picture

That is not my concern mithun and we are ready to upgrade SEP clients.

My concern on this statement:

Improved notifications so that they no longer display disabled devices. blush

I think it should say Improved notifications so that they no longer display enabled devices.

Regards,

S2S

 

Please don't forget to mark your thread solved with whatever answer helped you.

Mithun Sanghavi's picture

Hello,

I may need to check the same. Let me check..

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Mithun Sanghavi's picture

Hello,

It is correct.

The change that introduced this was a functional requirement in SEP 12.1 RU2 to add a method by which you could log device ID's of allowed devices.

I agree that showing allowed devices in a report called Top Devices _Blocked_ is rather confusing.
 
NOTE:  Pre-RU2 clients will still send device allowed/excluded events to SEPM that will show up in logs and reports along with the blocked events.  Also, the fixes do not correct existing events in the database.  The logs and reports for blocked devices will still show allowed devices if there are device allowed/excluded events from pre-RU2 clients in the database.

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SameerU's picture

Hi Mithun

It will be of great help if get it checked internally.

Regards

 

SUPPORT-2-SUPPORT's picture

Not cleared on your sentence Mithun. As SameerU mentioned please check internally with your team and let me know.

Regards,

S2S

 

Please don't forget to mark your thread solved with whatever answer helped you.

Mithun Sanghavi's picture

Hello,

"Improved notifications so that they no longer display disabled devices." - is correct.

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SMLatCST's picture

I think what they're after is more clarify on what is meant by "Disabled Devices".

Obviously, we're still going to want to know when users attempt to use devices we've administratively blocked, so we still want to be notified about these events.

Does "Disabled Devices" refer to devices that are disabled outside of SEP?  Are "Disabled Devices" additional superflous events that follows/mimic the "Block" event and can therefore be safely left out of notifications?

More information is always appreciated...

SameerU's picture

So, Mithun you mean to say that after upgrading to SEP 12.1.2 it will no longer show blocked and unblocked devices

As per Support-2 Support we are not clear on the statement.

Regards