Endpoint Protection

 View Only
Expand all | Collapse all

What is the purpose of Learn the applications that run on the client computers ?

Migration User

Migration UserAug 22, 2012 06:12 AM

  • 1.  What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 12, 2012 10:56 PM

    In the Communications Settings for group name what is the use of "Upload" feature ?

    it says as follows: Learn the applications that run on the client computers



  • 2.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Broadcom Employee
    Posted Aug 12, 2012 11:27 PM

    Application Learning allows Symantec Endpoint Protection (SEP) clients to report information and statistics about the executables that are run on them. This information is provided to the Symantec Endpoint Protection Manager (SEPM) and aggregated into the SEPM database. The purpose of this information is to build a list of known applications in an environment to create Application-based firewall rules, Host Integrity (HI) rules and can be used as a reference for developing Application Control rules and Centralized Exceptions

    check this link

    http://www.symantec.com/business/support/index?page=content&id=TECH134367

    note the DB size increases.

     



  • 3.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 12, 2012 11:40 PM

    Thanks Pete,

    does enabling this option give benefits for reducing the weekly scheduled scan time in my company ?

    or there is no improvement at all justa statistic for the SEPM reporting console ?



  • 4.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Broadcom Employee
    Posted Aug 12, 2012 11:42 PM

    not much benefit for scheduled scan or reportoing as far i know, unless you put central exception.It's helpfule for HI policy, Application based firewall policy.

     

     



  • 5.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 13, 2012 12:04 AM

    Does it also means that I can create a report of what software is installed in my company if I enable this feature ?

    because the security auditor would love to see such feature if available with SEP.



  • 6.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Broadcom Employee
    Posted Aug 13, 2012 12:43 AM

    You can search for an application in the following ways:

    By application.

    You can limit the search to specific applications or application details such as its name, file fingerprint, path, size, version, or last modified time.

    By client or client computer.

    You can search for the applications that either a specific user runs or a specific computer runs. For example, you can search on the computers IP address.

    To search for information about the applications that the computers run
    1 In the console, click Policies.
    2 On the Policies page, under Tasks, click Search for Applications.
    3 In the Search for Applications dialog box, to the right of the Search for  applications in field, click Browse.
    4 In the SelectGrouporLocation dialog box, select a group of clients for which you want to view the applications, and then click OK.
    You can specify only one group at a time.
    5 Make sure that Search subgroups is checked.
    6 Do one of the following actions:
    ■ To search by user or computer information, click Based onclient/computer information.
    ■ To search by application, click Based on applications

    7 Click the empty cell under Search Field, and then select the search criterion

    from the list.

    The Search Field cell displays the criteria for the option that you selected.

    For details about these criteria, click Help.

    8 Click the empty cell under Comparison Operator, and then select one of the

    operators.

    9 Click the empty cell under Value, and then select or type a value.

    The Value cell may provide a format or a value from the drop-down list,

    depending on the criterion you selected in the Search Field cell.

    10 To add an additional search criterion, click the second row, and then enter

    information in the Search Field, Comparison Operator, and Value cells.

    If you enter more than one row of search criteria, the query tries to match

    all conditions.

    11 Click Search.

    12 In the Query Results table, do any of the following tasks:

    Click the scroll arrows to view additional rows and columns.

    Click Previous and Next to see additional screens of information.

    Select a row, and then click View Details to see additional information about the application.

    The results are not saved unless you export them to a file.

    13 To remove the query results, click Clear All.

    14 Click Close.

     

     

     



  • 7.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 13, 2012 12:48 AM


  • 8.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 13, 2012 04:50 AM

    That sounds like pretty much System Center Configuration Manager (SCCM 2007) can do ?



  • 9.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 13, 2012 08:35 AM

    The purpose of application learning is to 'record' all applications executed on computers, so that you can then easily create Centralized Exceptions or other application-based policy (Application and Device Control, Firewall, etc.).

    Be aware however this may have significant impact on database and SEPM console performances on huge environement.

     



  • 10.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 22, 2012 05:44 AM

    Many thanks for the reply John,

    If only the SEPM server affected, then it is fine as I can upgrade the vRAM on the VM and vCPU into 2x vCPU if need be.

    My goal is of course to know what sort of application is executed in the company and also to prevent unauthorized application such as games, Bit Torrent client as well.

    Can this be done ?



  • 11.  RE: What is the purpose of Learn the applications that run on the client computers ?
    Best Answer



  • 12.  RE: What is the purpose of Learn the applications that run on the client computers ?

    Posted Aug 22, 2012 06:12 AM

    Many thanks people for the assistance !