Video Screencast Help

Can we please have Detection Rules that can just find the type of Server Role and not require a version?

Created: 14 Nov 2013 • Updated: 03 Dec 2013 | 1 comment
QuietLeni's picture
1 Agree
0 Disagree
+1 1 Vote
Login to vote

Dear Symantec,

Using SMP 7.1 SP2. As you can see in this picture, you can create a Detection Rule for an Edition of Windows on its own and you can also elect to detect what the Machine role is as well. However, if you want to detect the Machine role, you also have to select the Major and Minor versions of Windows.

Windows Version_0.png

I am trying to generate a Detection Rule for ALL Windows Domain Controllers of ALL versions and I do not want to have to create a new Detection Rule for each successive version of Windows which would need to be detected and fixed later on once our Windows Server 2015 implementation starts on its way. The UI implies that this is possible, as you can tick the "Check Windows version and/or machine role", i.e. that you can specify the version without the role and that you can just select the role.

So, could we please be able to select the Machine role separately from the version of Windows?

Comments 1 CommentJump to latest comment

SK's picture

I agree that "Check Windows version and/or machine role" implies you can either select just the version, just the role, or both.

If you can only save the rule by selecting both a version and a role, then please open a support case so that development can review the code to see if this is a UI typo or an actual defect.

Connect Etiquette: "Mark as Solution" those posts which resolve your problem, and give a thumbs up to useful comments, articles and downloads.

0
Login to vote