Export Exclusion List(s)
Created: 13 Jul 2011 | 8 comments
I'd like the ability to export an AV exclusion list from our SEPM server. In our environment we have 10k+ clients and I'm often asked to verify that a specific file, directory or extension has been excluded for a specific group in our environment. In order for me to do this I must edit a group's Centralized Exceptions Policy looking at each exclusion, one by one. To make this more difficult the search window is very small and only holds 4 exclusions at a time. We have a lot of exclusions, which makes this a very time consuming task and I can easily over look the exclusion I'm looking for.
I'd like to either see an Exclusion Search from the SEPM Console or the option to export the list to a CSV file format.
Group Ownership:
Comments 8 Comments • Jump to latest comment
Thanks for the request, Bryon!
Everyone I've talked to says this points to IT Analytics as the cure for this. Let's chat this week about how to make sure we get this done for you. Worst case, we can put in a product enhancement request and get it done in a point release.
nK
Nick Kelly
CISSP, STS, SSE+
Sr. Systems Engineer, Symantec Corporation
IT Analytics will provide this information as well as all other configurations from other types of policies like AV, firewall, IPS, etc.... to date you had to basically manually document these settings in a spreadsheet to compare. I have 40,000 clients, 4 SEP domains, and over 100 different SEP groups. Analytics makes the task of tracking policy configurations easy. Please note that Analytics will be adding many more reports and data cubes in an upcoming release to provide even more information. I'm currently testing Beta/RC code and the new additions are great. The new updates for Analytics were also shown this year at Vision 2011
Dude,
Do you know where Bryon would go in ITA to create the report he's describing? Thanks!
Nick
Nick Kelly
CISSP, STS, SSE+
Sr. Systems Engineer, Symantec Corporation
I'm trying to remember what the current release of IT Analytics for SEP offers and I dont remember if Exception policies were available. I'm pretty sure it's not but the upcoming update specifically has a data cube for this information. You can create custom reports based on data cubes or simply create a pivot table or spreadsheet export of the Exclusion policy settings.
Hi.
Thanks to a colleague, I've discovered that you can select all lines, press
to copy, and then paste into notepad or whereever you want. This still means you have to open every exclusion policy, but now it'll be easier to search.
Thanks for the replies concerning the post. Ian’s found a simple way to get what I’m looking for and it works great. I had thought about editing each line and pasting into a spreadsheet not realizing that I could select all at that point and get the data I needed. I do look forward to being able to pull this information from a data cube in IT Analytics.
Thanks all
You can also export the specific policies from the sepm. (depending on how you have it set up this may or may not be beneficial).
SEPM 11 MP3
You can have an exceptions policy and export it by:
Click on Policies button on right of SEPM
Click on the Centralized exceptions under View Policies
Right click the questionable policy on the right
Select Export
The latest release of IT Analytics for SEP Pack has been released and includes cubes for Exceptions. You can now create excel pivot tables, charts, etc...
Would you like to reply?
Login or Register to post your comment.