Endpoint Protection

 View Only
  • 1.  endpoint question

    Posted Jan 25, 2010 05:25 AM
    hi! I got a few question to check about endpoint management console

    1) is there anyway that i can see the client log file from the endpoint console just like the older 10.x version?
    2) can i see from the endpoint console if the def file is outdated (eg. pass the 30 days period i set)?
    3) how long will the system update the still infected no. in the main page. Mine doesn't seems to be reducing even the policy is set to delete once detected.

    Thanks.


  • 2.  RE: endpoint question

    Posted Jan 25, 2010 05:35 AM
    Comparing to SAV you will get more repots from SEPM
    In the console go to monitors---->logs ,here you can finout a lot of different types of logs
    In the console go to Reports Here you can create reports
    For more info refer below link
    About the different types of Symantec Endpoint Protection Manager Reports
     -----------------------------------------------------------------------------------------------------------------------

    In the console Go to clients----> <req. group>--->clients Here you select the view as protection technology you can see each clients definition date...
    -----------------------------------------------------------------------------------------------------------------
    For clearing infection status
    How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager


  • 3.  RE: endpoint question
    Best Answer

    Posted Jan 25, 2010 05:39 AM
    1) is there anyway that i can see the client log file from the endpoint console just like the older 10.x version?

    yes

    2) can i see from the endpoint console if the def file is outdated (eg. pass the 30 days period i set)?
     yes

    3) how long will the system update the still infected no. in the main page. Mine doesn't seems to be reducing even the policy is set to delete once detected.


    Title: 'How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager'
    Document ID: 2007111913145448
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2007111913145448?Open&seg=ent


    Title: 'How to create a Scheduled Report in Symantec Endpoint Protection Manager ?'
    Document ID: 2009101503441148
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009101503441148?Open&seg=ent


    Title: 'About the different types of Symantec Endpoint Protection Manager Reports'
    Document ID: 2009081409151448
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009081409151448?Open&seg=ent


  • 4.  RE: endpoint question

    Posted Jan 25, 2010 06:04 AM

    1) is there anyway that i can see the client log file from the endpoint console just like the older 10.x version?

    View client logs.JPG


    2) can i see from the endpoint console if the def file is outdated (eg. pass the 30 days period i set)?

    Virus Definition Dates.JPG


    3) how long will the system update the still infected no. in the main page. Mine doesn't seems to be reducing even the policy is set to delete once detected.

    How to clear an erroneous "Still Infected" status from Reports in the Symantec Endpoint Protection Manager
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111913145448

    Still Infected status not clearing on Symantec Endpoint Protection Manager home page
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009081107064048