Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Symantec make it available to run a report on where clients get thier virus defintions from

Created: 20 Mar 2012 • Updated: 21 Mar 2012 | 5 comments
EyeofHorus's picture
6 Agree
0 Disagree
+6 6 Votes
Login to vote
Status: Partially Implemented

We use both the SEPM, GUPS, and Live update in different scenario's in our environment. When a machine isn't getting virus defintions yes we can see that in a report yet I believe that we should be able to see where they are getting thier defintions from.

I was told by support we cannot get a visual on where clients are getting thier dats. Which seems that should be available to us for troubleshooting purposes. I can see if a machine has an issue there is an error in the client management logs if it cannot connect to the GUP but the defintions had to be out of date to draw my attention to look at the client logs.

Seems like a feature that the product should record along with updated virus definition and the def version as to where the defintion was acquired from. The clients are set to try the gup and if that fails they have a backup resource rather that be the SEPM in some cases or it be Live update for VPN users.

I'd like to be able to get that data and to be able to run a report on it to see what the gup loads are etc would be ideal.

Comments 5 CommentsJump to latest comment

NRaj's picture

You can use the client activity logs for this purpose. But this works only after RU7.

The log.liveupdate will help you incase of LUA.

+1
Login to vote
Elisha's picture

In SEP 12.1 this is logged in the client System log.  It will log exactly where the client got its updates from.  See attachment for an example.

System Log.png
+1
Login to vote
EyeofHorus's picture

Can I get that information from the manager? Is there a way to run a report on it ? Or do I have to bother a user to see the client side log? Where is that log file stored on the machine?

0
Login to vote
dsmith1954's picture

I agree. We should be able to get that information from the SEPM.

0
Login to vote