Video Screencast Help

Export Exclusion List(s)

Created: 13 Jul 2011 | 8 comments
Bryon's picture
1 Agree
0 Disagree
+1 1 Vote
Login to vote

I'd like the ability to export an AV exclusion list from our SEPM server.  In our environment we have 10k+ clients and I'm often asked to verify that a specific file, directory or extension has been excluded for a specific group in our environment.  In order for me to do this I must edit a group's Centralized Exceptions Policy looking at each exclusion, one by one.  To make this more difficult  the search window is very small and only holds 4 exclusions at a time.  We have a lot of exclusions, which makes this a very time consuming task and I can easily over look the exclusion I'm looking for.

I'd like to either see an Exclusion Search from the SEPM Console or the option to export the list to a CSV file format.

Comments 8 CommentsJump to latest comment

Nick Kelly's picture

Thanks for the request, Bryon! 

Everyone I've talked to says this points to IT Analytics as the cure for this.  Let's chat this week about how to make sure we get this done for you.  Worst case, we can put in a product enhancement request and get it done in a point release. 

 

nK

Nick Kelly

CISSP, STS, SSE+

Sr. Systems Engineer, Symantec Corporation

0
Login to vote
thatdude's picture

IT Analytics will provide this information as well as all other configurations from other types of policies like AV, firewall, IPS, etc.... to date you had to basically manually document these settings in a spreadsheet to compare. I have 40,000 clients, 4 SEP domains, and over 100 different SEP groups. Analytics makes the task of tracking policy configurations easy. Please note that Analytics will be adding many more reports and data cubes in an upcoming release to provide even more information. I'm currently testing Beta/RC code and the new additions are great. The new updates for Analytics were also shown this year at Vision 2011

0
Login to vote
Nick Kelly's picture

Dude,

Do you know where Bryon would go in ITA to create the report he's describing?  Thanks!

 

Nick

Nick Kelly

CISSP, STS, SSE+

Sr. Systems Engineer, Symantec Corporation

0
Login to vote
thatdude's picture

I'm trying to remember what the current release of IT Analytics for SEP offers and I dont remember if Exception policies were available. I'm pretty sure it's not but the upcoming update specifically has a data cube for this information. You can create custom reports based on data cubes or simply create a pivot table or spreadsheet export of the Exclusion policy settings.

0
Login to vote
Ian_C.'s picture

Hi.

Thanks to a colleague, I've discovered that you can select all lines, press

 Ctrl + C  

to copy, and then paste into notepad or whereever you want. This still means you have to open every exclusion policy, but now it'll be easier to search.

Please mark the post that best solves your problem as the answer to this thread.
+1
Login to vote
Bryon's picture

Thanks for the replies concerning the post. Ian’s found a simple way to get what I’m looking for and it works great. I had thought about editing each line and pasting into a spreadsheet not realizing that I could select all at that point and get the data I needed.  I do look forward to being able to pull this information from a data cube in IT Analytics. 

Thanks all

0
Login to vote
EyeofHorus's picture

You can also export the specific policies from the sepm. (depending on how you have it set up this may or may not be beneficial).

SEPM 11 MP3

You can have an exceptions policy and export it by:

Click on Policies button on right of SEPM

Click on the Centralized exceptions under View Policies

Right click the questionable policy on the right

Select Export

0
Login to vote
thatdude's picture

The latest release of IT Analytics for SEP Pack has been released and includes cubes for Exceptions. You can now create excel pivot tables, charts, etc...

0
Login to vote