Endpoint Protection

how to create a scheduled report for learned applications(applications running on client computers)

Hi

click on
monitors - logs - select
client server activity
click on advanced settings
select event type as server received learned application.
create report

or

click on notification
click on add
select forced or commnercial application detected.
put in your emai.
fill the remaining groups / server /computer info

or

for schduled reports
select report type as :System status
select a report : site status report you will get the learned application by second
refer chap 22 from symantec manager help
the information is under
Creating administrator notifications,
let me know if you have any questions.

I use second options. :)
Thank you for third :)

Regards.
Fatih

Hi Rafeeq
What is this damper setting ?

Damper means time frame ,when you want to get those notifications.
auto setting is 1 hour.

https://www-secure.symantec.com/connect/forums/sep-notification-damper-auto-setting

Thanks rafeeq

Hi Rafeeq i tried the 2nd method with notification it is working but it doesn't give the full details like ip address of the computer from where the application is running .

 

can this be done

those info are not included  in the report as of now 

I use second way. yes you rigth there is no ip address but i copy the exe name and search it from "Search for applications" than i can find the user. This is o easy way but i did it like this.
I have 500 clients I can handle them. But I am not sure for more clients

ok i will use the 2nd method.