Endpoint Protection

 View Only
  • 1.  Distinguish Between Standard and Dark Network Clients

    Posted Sep 09, 2017 04:24 PM

    I am trying to find some place that will tell which type of SEP 14 client is installed any given computer.  Every client view displays, at most, the client version and policy serial number.  Similarly, I have not found a report that lists the client type.  The only place I've found the information is an individual client's properties, which is not very useful.

    I have to think I'm missing somethihng; I'd really appreciate someone telling me what it is.

    Thank you!



  • 2.  RE: Distinguish Between Standard and Dark Network Clients

    Posted Sep 09, 2017 05:01 PM

    The only place I've seen is on the client GUI under Help >> Troubleshooting >> Install Settings. It will say which client it is. There may be a reg key though but haven't found it.



  • 3.  RE: Distinguish Between Standard and Dark Network Clients

    Posted Sep 11, 2017 05:40 AM

    you could do a host integrity scan on the follwing registry key:

     

    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Symantec\Symantec Endpoint Protection\CurrentVersion\public-opstate\InstallType == 2

    or

    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\DarkNetwork == 1

     

    those should be dark network clients, you can then export the list in the compliance logs on the manager.

     

    You can also search through the client groups and search for all dark network, vdi, standard cllients like this: Install Type = Dark network

    and export this list.

     

    not really comfortable but should do it.



  • 4.  RE: Distinguish Between Standard and Dark Network Clients

    Posted Sep 11, 2017 08:50 AM

    You can open the Properties of a client in SEPM.

    You will see the Install Type there as well.

    But if you are looking for a list of clients, there no option for that other than to do a search and select Install Type.

     



  • 5.  RE: Distinguish Between Standard and Dark Network Clients

    Posted Nov 20, 2017 01:07 PM

    From the SEP client UI, click the "Help" button on the top right and select "troubleshooting" from the menu that appears. In the window, select "Install Settings" on the left, and you'll see "Client Type" on the right. The example below is a Standard client:

     

    Install Type