Endpoint Protection

Whats time limits set on how long a Clients will show on the Unmanaged Detector Report?  I am seeing Nodes that were removed from the network 600 days ago. 

SEPM 12.1.671.4971 Upgraded Less than 2 Months from 11.0.6200

Server 2008 R2 STD - 4 Nos  Load balancing with Failover configuration

Database SQL 2008, Database configured to save client info for 3 years.

Clients - 2400

Unmanaged detectors over 16 spanned over 8 subnets.

Please advise.

Hello Nisha_netwrk,

As per your comments "Database SQL 2008, Database configured to save client info for 3 years".

It will collect the data and store for Three years as you have configured so.You can reduce the configuraton for Save client setting and update us if it worked.

FYI :- For Symantec Embedded Database keeps the entry for 60 Days by default

The client is a bank. they need to maintain records for 3 years by Rules, not by choice. I know Ashvinny that default value is 60 days.

I think you didnt uderstand my query at all. All I am saying that the Unmanaged detector is pulling very old reports. How do I make it pull report for a certain period ?

Ashvinny  Your answer did not help me hence a Thumbs down for you!

Some articles that may help you to find what you are looking for:-

Best Practices: When to use the "Find Unmanaged Computers" or "U

Hello Nisha_netwrk,

Your  question was Whats time limits set on how long a Clients will show on the Unmanaged Detector Report? 

And i think the tech documents that Simpson Homer has shared would have helped you.

My applogies as i was not able to understood your question at the first place!!!!

Good Morning All,

Solution to the issue : Open the SEPM home page : Under security Attention you have Notifications link. This shows you how many Un-Read notificatiosn you have saved in the SEPM.

Suppose on day 1 I have notification of 10 Unmanaged computers detected. on day 2 I have 15 computers detected. If I mark the 1st day notification as Read, on second day SEPM will send notification for 15 newly client detected only.

If I dont mark the 1st day notification as read, on 2nd day SEPM will send me notification of total 25 clients. Even if the first 10 clients are removed from the Network.

___________________________________________________________

I learned this from one of the Guy in Tech Support. I was disappointed as I had to wait for more than 15 days for an answer from Forum team. After not seeing proper responce from the Forum team, I called Support to get my answer. I had to open a case to get answers to my question.

My questiosn were answered in less than 15 mins. I was surprised as the Forum took 15 days answer a query where as the Tech Support was able to answer the same questiosn so quickly.

Symantec should allow the Tech Support agents to answers queries on Forum. As far as I know Symantec has only handfull people working on furm and have several hundred for Support. But If they have more people dedicatd on forum they can cut down on the Support.

I Wish a Happy Sankranti to all Brothers and Sisters working in Support and Forum Teams.

Nisha.